$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft File: LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json) Hash identifier: c1Qigg+PcK8ArhkAsGZiv4Ob7XYvjEcwTfBCtvzNHj0= Subject key identifier: A7:6C:BA:EF:BE:87:72:8A:AF:0C:52:39:FB:71:1B:B1:7F:6C:B3:B8 Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39 Certificate issuer: /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft Manifest number: 73 Signing time: Sat 25 Oct 2025 10:50:32 +0000 Manifest this update: Sat 25 Oct 2025 10:50:31 +0000 Manifest next update: Sat 01 Nov 2025 10:50:31 +0000 Files and hashes: 1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: 9NGsN6sjs/ZjnV9m5GZtTMcOD/TFxcTt6LoyIsS2s0U=) 2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: rAyLEuhdwnMPn+ymXVwfBwimmdxQ/627KOj67XHuGHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 10:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039 Validity Not Before: Oct 25 10:50:31 2025 GMT Not After : Nov 1 10:50:31 2025 GMT Subject: CN=68fcab77-3f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:f2:73:b6:3e:7f:44:87:1a:26:20:ab:d6: 1e:40:46:15:f8:e1:6e:79:7e:37:9d:e0:47:1d:0f: bc:11:33:fc:b3:2a:9e:80:4a:0a:20:25:4e:c8:93: 2c:47:6c:cb:02:7a:f0:6b:ac:7d:10:c3:21:53:37: 5d:41:52:7d:88:df:1b:bf:d4:11:20:e5:30:bd:eb: b1:a0:5b:a5:27:d0:91:1f:a8:3c:49:1d:51:da:b7: 1d:2f:b6:cc:57:53:04:e0:a2:ba:56:94:3f:26:6a: 20:00:82:76:a6:70:11:ae:65:d8:79:33:f9:2d:a1: c7:59:60:3d:fd:94:6f:a9:08:9a:02:b4:80:a7:c7: 06:38:42:6c:2c:f6:01:b2:0f:bf:e0:6e:83:4b:a7: 12:b9:53:36:3d:8b:f0:38:d8:11:85:18:04:71:db: e4:ee:25:36:f0:f3:61:82:b4:6d:05:85:ad:8a:9b: 9e:4d:56:9f:83:6c:4b:19:73:c7:12:2b:0a:12:a6: 08:60:46:03:ae:e5:d4:5f:34:2b:d9:5d:e1:cb:58: e1:dd:74:44:f2:b4:60:30:4d:31:49:a8:1c:b5:47: 50:1f:94:21:10:e5:f5:e2:58:6d:2f:06:e9:4d:30: e1:ec:30:3a:82:c9:2f:71:00:ef:54:9e:4b:53:fd: 17:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6C:BA:EF:BE:87:72:8A:AF:0C:52:39:FB:71:1B:B1:7F:6C:B3:B8 X509v3 Authority Key Identifier: keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:f0:5f:89:8a:f1:80:d2:54:7d:71:21:1b:75:45:0b:93:64: 29:c6:bc:80:9d:d9:0f:41:08:fc:bc:d1:9a:19:7b:e0:c1:29: a6:b8:48:b0:7d:6b:e7:9e:cc:b4:7c:1c:b7:88:91:42:db:65: 3a:56:d0:42:50:2d:28:4a:89:30:5b:fb:14:3b:2c:e3:06:86: 8b:da:97:07:cb:2f:cd:fd:9f:7c:a5:c0:59:49:f1:f3:e3:47: 51:99:6e:46:58:c5:48:a1:71:87:7e:c3:50:60:5f:66:d9:b0: 67:9b:26:09:2b:a0:ed:c1:ed:08:46:f7:11:f8:55:0a:2e:1f: aa:64:31:ab:81:f1:df:f9:30:92:7f:20:5f:ec:29:7c:5d:21: d8:5a:d7:29:87:98:60:69:cf:45:89:55:2d:41:d5:ff:ed:b1: 9c:21:ee:00:61:b2:40:33:42:7d:e2:85:2d:3c:6b:9d:69:5f: 24:ac:e5:0b:e5:71:23:33:f3:e1:86:c5:53:7e:6a:27:a6:c5: 17:69:8a:2a:24:4a:20:f1:85:a4:bc:e1:5f:2f:e2:62:94:c1: 32:85:0a:16:6c:6f:c9:dc:2d:09:c1:42:b4:7e:a6:37:d8:ec: 75:b3:1a:2a:50:d4:2d:6b:94:cf:c7:1e:35:94:7b:60:d6:71: 54:48:fd:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NjI4NTExMC8GA1UEBRMoMkUwMzdGMjIxQzlBOEQ1RkRDQzg4QzQzQ0E4QjI1RDQ0 MzZCQjAzOTAeFw0yNTEwMjUxMDUwMzFaFw0yNTExMDExMDUwMzFaMBgxFjAUBgNV BAMTDTY4ZmNhYjc3LTNmOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEWvJztj5/RIcaJiCr1h5ARhX44W55fjed4EcdD7wRM/yzKp6ASgogJU7IkyxH bMsCevBrrH0QwyFTN11BUn2I3xu/1BEg5TC967GgW6Un0JEfqDxJHVHatx0vtsxX UwTgorpWlD8maiAAgnamcBGuZdh5M/ktocdZYD39lG+pCJoCtICnxwY4Qmws9gGy D7/gboNLpxK5UzY9i/A42BGFGARx2+TuJTbw82GCtG0Fha2Km55NVp+DbEsZc8cS KwoSpghgRgOu5dRfNCvZXeHLWOHddETytGAwTTFJqBy1R1AflCEQ5fXiWG0vBulN MOHsMDqCyS9xAO9UnktT/RdPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp2y6776H coqvDFI5+3EbsX9ss7gwHwYDVR0jBBgwFoAULgN/IhyajV/cyIxDyosl1ENrsDkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2Mjg1LzhDMjU4QjEyMDI3 QjExRjBBOTQ2RUQzNEM0RjlBRTAyL0xnTl9JaHlhalZfY3lJeER5b3NsMUVOcnNE ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTGdOX0loeWFqVl9jeUl4RHlvc2wxRU5yc0RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 Mjg1LzhDMjU4QjEyMDI3QjExRjBBOTQ2RUQzNEM0RjlBRTAyL0xnTl9JaHlhalZf Y3lJeER5b3NsMUVOcnNEay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHTwX4mK8YDSVH1xIRt1RQuTZCnGvICd2Q9BCPy80ZoZe+DBKaa4SLB9 a+eezLR8HLeIkULbZTpW0EJQLShKiTBb+xQ7LOMGhovalwfLL839n3ylwFlJ8fPj R1GZbkZYxUihcYd+w1BgX2bZsGebJgkroO3B7QhG9xH4VQouH6pkMauB8d/5MJJ/ IF/sKXxdIdha1ymHmGBpz0WJVS1B1f/tsZwh7gBhskAzQn3ihS08a51pXySs5Qvl cSMz8+GGxVN+aiemxRdpiiokSiDxhaS84V8v4mKUwTKFChZsb8ncLQnBQrR+pjfY 7HWzGipQ1C1rlM/HHjWUe2DWcVRI/TU= -----END CERTIFICATE-----Generated at Sun Oct 26 01:38:06 2025 by rpki-client