$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: JmU0HtlEOveoxTD0B8mssAAMa1hDL2xXJb82Ys75a4c= Subject key identifier: FD:BF:60:A1:2D:18:90:5D:0E:65:25:47:81:A6:51:B2:82:C3:69:A5 Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 3570 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 3508 Signing time: Sun 02 Nov 2025 14:24:15 +0000 Manifest this update: Sun 02 Nov 2025 14:24:14 +0000 Manifest next update: Sun 09 Nov 2025 14:24:14 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: 6MrpF5iyfVM4Xb1c6VaPAchrH/u49DLZGk6LG0DlibA=) 2: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: IhLv/pNjKD3PinOrK86Sl1K1DLr48lFEyVWbMF9DO7E=) 3: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: P+6IlyX7VPwDe0x7wL0hnumsPRthTqu2byNn+pYjd1M=) 4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: JORxewwx6epIIvoPj1HNMB15dSN3/on46q8DR6+zkdE=) 5: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: 09BDBOytkmEsvq3chH7xH+oSFPASpWtzKwiSSf1dkjk=) 6: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: 6fMWG8p+t3jXmQNCgytCBBdQRqCMMDHwzJOzM4imWAI=) 7: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: eRgieV4wC53bW4ulApr2XQpnijZHP7/22lsGRcHPpKc=) 8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: WS7qE/pmTb3s7efjgZ9MQ/XN8lRAGnQgtcmGI2f/wOc=) 9: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: YWkTzReKkMMdzbtmiqQAlufg4yqGT8wGaWwSjyH8UQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13680 (0x3570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: Nov 2 14:24:14 2025 GMT Not After : Nov 9 14:24:14 2025 GMT Subject: CN=6907698f-bced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:c4:43:02:41:14:2a:22:11:e6:27:b0:b2: 44:3e:0a:1e:0f:3c:c2:60:57:c0:15:14:2f:aa:d9: 8e:7e:c1:2a:68:47:68:7a:51:80:7a:a3:9c:66:65: fd:9c:45:2e:0c:0f:2f:19:a0:1d:3c:f3:dd:70:83: 8f:40:fe:26:58:d5:3b:8b:ee:12:29:be:7f:c2:d9: cc:4b:b8:f8:62:ac:18:f7:e5:ca:4a:92:e3:bb:6a: 0d:2b:3d:c3:52:8a:e8:7a:e3:cb:e5:ca:69:c4:23: f4:9e:9e:c6:71:54:60:5b:22:40:10:0c:0a:ec:ef: e9:53:70:19:27:25:2f:4b:91:28:d9:39:b3:42:03: a1:71:2a:d0:1b:25:03:42:84:1f:b8:1b:70:3d:38: a0:9c:0f:67:31:fe:57:67:3e:18:cc:36:db:15:79: c1:b5:3f:89:c7:9a:d0:59:7d:bd:12:54:c1:51:51: ba:e2:98:42:7a:ba:b5:72:ba:90:59:c4:ae:a6:c0: de:32:d0:b0:86:db:42:76:5b:1e:fd:8a:1b:a7:11: 8e:ea:cb:91:65:a7:1e:fe:34:4b:01:b7:53:33:4a: 35:42:b3:22:88:1e:a5:f0:25:73:83:d8:71:29:7a: 88:7b:c8:75:b5:fd:70:42:c5:57:22:c7:ce:c4:12: a8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BF:60:A1:2D:18:90:5D:0E:65:25:47:81:A6:51:B2:82:C3:69:A5 X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:5a:2c:6e:9c:f3:02:4e:1b:34:b5:23:76:06:2e:da:03:44: 51:0c:cf:67:5d:86:08:fc:26:41:33:33:eb:d7:db:ba:b9:fd: c7:d0:69:ba:f8:b6:fa:70:43:7e:67:a8:2b:ce:c2:8a:bf:d6: 03:a6:a3:4f:7d:c0:8a:8b:e6:2c:f2:23:83:42:4c:52:93:95: 10:45:64:19:32:d6:12:d2:35:21:2f:bc:ee:f8:80:a2:58:10: 15:47:93:20:b9:5c:f8:0f:bf:8f:ba:a2:ef:69:b6:14:66:65: d5:b2:17:e5:3d:d1:75:7a:f1:87:69:84:d1:dc:25:b4:d3:b5: 17:45:71:4d:31:95:8c:d4:96:12:f2:28:34:1a:ea:e3:55:09: 1e:3b:17:3f:51:3a:64:ae:b2:47:d8:9f:d4:c5:56:6b:a1:1a: f4:21:fb:03:21:a2:e2:8f:8f:36:33:fc:89:8d:a0:9f:4c:a4: 8f:f9:04:33:80:4b:ae:e5:ef:92:15:f5:89:fc:9b:4a:bc:21: 8c:3e:90:bf:95:9f:da:9f:0d:d9:6d:60:a5:26:50:da:21:20: 3e:68:c5:7e:75:4b:21:26:56:0a:21:79:96:44:12:b3:39:a6: 10:5f:17:10:fb:9d:3a:d0:30:aa:36:f2:4d:b9:85:1f:42:19: d7:be:3d:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjUxMTAyMTQyNDE0WhcNMjUxMTA5MTQyNDE0WjAYMRYwFAYD VQQDEw02OTA3Njk4Zi1iY2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUDEQwJBFCoiEeYnsLJEPgoeDzzCYFfAFRQvqtmOfsEqaEdoelGAeqOcZmX9 nEUuDA8vGaAdPPPdcIOPQP4mWNU7i+4SKb5/wtnMS7j4YqwY9+XKSpLju2oNKz3D UoroeuPL5cppxCP0np7GcVRgWyJAEAwK7O/pU3AZJyUvS5Eo2TmzQgOhcSrQGyUD QoQfuBtwPTignA9nMf5XZz4YzDbbFXnBtT+Jx5rQWX29ElTBUVG64phCerq1crqQ WcSupsDeMtCwhttCdlse/YobpxGO6suRZace/jRLAbdTM0o1QrMiiB6l8CVzg9hx KXqIe8h1tf1wQsVXIsfOxBKo5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2/YKEt GJBdDmUlR4GmUbKCw2mlMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAWixunPMCThs0tSN2Bi7aA0RRDM9nXYYI/CZBMzPr19u6uf3H0Gm6 +Lb6cEN+Z6grzsKKv9YDpqNPfcCKi+Ys8iODQkxSk5UQRWQZMtYS0jUhL7zu+ICi WBAVR5MguVz4D7+PuqLvabYUZmXVshflPdF1evGHaYTR3CW007UXRXFNMZWM1JYS 8ig0GurjVQkeOxc/UTpkrrJH2J/UxVZroRr0IfsDIaLij482M/yJjaCfTKSP+QQz gEuu5e+SFfWJ/JtKvCGMPpC/lZ/anw3ZbWClJlDaISA+aMV+dUshJlYKIXmWRBKz OaYQXxcQ+5060DCqNvJNuYUfQhnXvj27 -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:12 2025 by rpki-client