$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft File: ak_LGM3Y70HSMyE57mLo_Sc7b98.mft (raw, json) Hash identifier: lX6WIdSVlyp6Fv/CkguWJ/LKuPbVVyDWVGpAITg98m8= Subject key identifier: EF:FA:8F:1B:50:BF:16:E7:01:72:F9:D8:D9:DD:23:7E:E1:A7:43:F3 Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF Certificate issuer: /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF Certificate serial: 0300 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft Manifest number: 02FC Signing time: Wed 05 Nov 2025 01:17:14 +0000 Manifest this update: Wed 05 Nov 2025 01:17:13 +0000 Manifest next update: Wed 12 Nov 2025 01:17:13 +0000 Files and hashes: 1: ak_LGM3Y70HSMyE57mLo_Sc7b98.crl (hash: f8snxTS886ek0z8sRmp/W6K2EmoABMJvtba14OMQvsk=) 2: EF1B381EF93911ECBD1E663DC4F9AE02.roa (hash: LqMQ8S/3IECVVRLn50FlnyT89fd2Q+6nyvw3xYa+ytU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 768 (0x300) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF Validity Not Before: Nov 5 01:17:13 2025 GMT Not After : Nov 12 01:17:13 2025 GMT Subject: CN=690aa59a-052a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:31:27:29:15:71:b1:84:3a:43:c7:00:51: 32:c0:f8:1f:ca:d9:87:1d:1c:4e:24:b2:59:e5:88: 7c:8d:5b:5d:36:44:b0:19:c4:09:f9:a1:07:41:bb: 3e:78:cf:80:2b:8b:b1:0c:25:24:dc:be:0d:a2:cd: 32:70:f0:81:aa:3a:b8:e3:fc:ce:47:92:c2:d8:d0: 19:17:c0:14:d1:6a:43:f7:5b:e1:a5:cd:43:88:85: 36:12:89:b1:30:d4:4e:4d:ce:62:77:d2:e3:12:29: dc:bd:58:6b:b8:b8:2b:bc:6d:1e:78:41:ed:cb:d0: 0c:3e:57:d3:18:85:68:3e:65:51:78:32:cc:72:ef: 60:ea:05:67:e5:47:81:e2:07:ff:f4:ed:4e:c1:1d: 37:f6:90:a7:c7:bf:72:fa:67:35:84:56:d0:7c:9e: 63:e7:fa:54:32:8b:5d:8b:31:c9:a2:5f:ab:70:4d: 87:db:68:fc:9a:e4:25:8a:d2:c1:fc:70:cd:1a:d1: b9:a8:7a:02:06:c9:fc:4e:0c:11:e7:a1:f2:b0:3b: 49:0d:69:94:97:94:3a:03:3a:ef:05:81:06:8b:7d: 2b:cd:fa:d6:ca:87:fd:0b:b5:a1:f5:56:7e:db:e3: c8:ee:7b:fc:9e:4c:d9:9c:83:27:b1:76:5a:7d:42: 3f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FA:8F:1B:50:BF:16:E7:01:72:F9:D8:D9:DD:23:7E:E1:A7:43:F3 X509v3 Authority Key Identifier: keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:3e:18:02:e7:39:21:79:ec:c9:61:38:f5:f9:51:bb:f2:36: 5b:ec:27:00:20:09:10:1d:5d:5d:6a:b7:c7:9f:46:b0:78:a8: 50:63:da:d0:f2:dc:6a:9b:01:e5:92:12:40:80:ec:27:72:fb: b3:65:97:70:1f:d2:54:a7:92:a4:7f:1a:e8:7f:48:ee:f1:90: 13:c5:76:75:19:d4:47:ff:34:66:25:fc:a7:8e:22:9c:e7:ed: 28:9e:5d:00:71:2a:79:d8:a2:ad:9c:c1:96:f0:62:9b:81:89: e9:ef:18:02:0f:f4:1b:d7:88:63:87:7a:60:a3:ae:3c:b2:e5: 3b:b1:6b:99:34:17:a3:ec:e4:65:e4:0b:ba:30:b2:b9:08:04: 35:b5:11:a0:ba:a7:8a:17:de:30:b2:55:b0:2c:3f:01:52:5d: a5:f2:56:38:db:9e:5f:0d:cd:7a:d8:7c:48:ce:e0:58:cd:b7: c9:a8:4b:4a:d7:d3:eb:a8:c8:40:1e:af:d7:2e:97:15:58:29: 00:9f:52:fd:87:a5:26:e8:c0:9c:bd:c2:9f:af:32:25:31:05: e2:3e:e0:b8:bf:5e:4e:aa:59:e0:78:a4:d1:d8:cf:c5:2e:b5: fc:3f:67:d8:32:3f:b6:dc:d8:6d:4e:01:76:d0:87:45:82:da: de:f5:67:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDZBNEZDQjE4Q0REOEVGNDFEMjMzMjEzOUVFNjJFOEZE MjczQjZGREYwHhcNMjUxMTA1MDExNzEzWhcNMjUxMTEyMDExNzEzWjAYMRYwFAYD VQQDEw02OTBhYTU5YS0wNTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPgxJykVcbGEOkPHAFEywPgfytmHHRxOJLJZ5Yh8jVtdNkSwGcQJ+aEHQbs+ eM+AK4uxDCUk3L4Nos0ycPCBqjq44/zOR5LC2NAZF8AU0WpD91vhpc1DiIU2Eomx MNROTc5id9LjEincvVhruLgrvG0eeEHty9AMPlfTGIVoPmVReDLMcu9g6gVn5UeB 4gf/9O1OwR039pCnx79y+mc1hFbQfJ5j5/pUMotdizHJol+rcE2H22j8muQlitLB /HDNGtG5qHoCBsn8TgwR56HysDtJDWmUl5Q6AzrvBYEGi30rzfrWyof9C7Wh9VZ+ 2+PI7nv8nkzZnIMnsXZafUI/QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/6jxtQ vxbnAXL52NndI37hp0PzMB8GA1UdIwQYMBaAFGpPyxjN2O9B0jMhOe5i6P0nO2/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS9DMjRDNzIwQ0Y5 MzUxMUVDOTMxRkRCODJDNEY5QUUwMi9ha19MR00zWTcwSFNNeUU1N21Mb19TYzdi OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrX0xHTTNZNzBIU015RTU3bUxvX1NjN2I5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS9DMjRDNzIwQ0Y5MzUxMUVDOTMxRkRCODJDNEY5QUUwMi9ha19MR00zWTcw SFNNeUU1N21Mb19TYzdiOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1PhgC5zkheezJYTj1+VG78jZb7CcAIAkQHV1darfHn0aweKhQY9rQ 8txqmwHlkhJAgOwncvuzZZdwH9JUp5Kkfxrof0ju8ZATxXZ1GdRH/zRmJfynjiKc 5+0onl0AcSp52KKtnMGW8GKbgYnp7xgCD/Qb14hjh3pgo648suU7sWuZNBej7ORl 5Au6MLK5CAQ1tRGguqeKF94wslWwLD8BUl2l8lY4255fDc162HxIzuBYzbfJqEtK 19PrqMhAHq/XLpcVWCkAn1L9h6Um6MCcvcKfrzIlMQXiPuC4v15OqlngeKTR2M/F LrX8P2fYMj+23NhtTgF20IdFgtre9Wfk -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:36 2025 by rpki-client