$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: Ceh2EV+Ftc/jTflw6ZrBdIlikYxSI8EO2RNahT9faBQ= Subject key identifier: 03:9E:BB:6B:37:41:52:F4:AC:2B:88:FC:6F:C5:76:31:F5:3A:7B:21 Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 354F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 34EF Signing time: Thu 18 Sep 2025 14:24:48 +0000 Manifest this update: Thu 18 Sep 2025 14:24:47 +0000 Manifest next update: Thu 25 Sep 2025 14:24:47 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: LATMlbU4/fyg2PdO1SdVY5GK0i/KbjUPbhTh9Agu7U8=) 2: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: AfCIFlmq8DuQBiRlDgGTHO+ifcfq/EWKe3MQ5sPJrSg=) 3: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: JniQZfUYA1R0heYuAv/OBIAjLQkkLelRqYJ3s0r+AnI=) 4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: YQYm5l+2t2Nmgpk7xKTDog8BjmEeY7pPx/VepC3HU8k=) 5: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: MZwzt1KtC8nUCCf9jDFpHhF1FQYrec+FieTfJgBkwqU=) 6: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: 7rICild2zUXD1qHa3D416FQuR+VFPGMzGrMC0CKPt7o=) 7: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: O5annF3q7eF0Em+q1cCkApIbKkUSjCoh1Enl1W8K8qE=) 8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: fNjSL8CG5TWS/PviRMUud5QxtmkoOiCNSoqXXgesJHA=) 9: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: wgn3I9VAEqSPOBoXO+Nw/n2dWXsh0I7dIpPDoFXfS9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 14:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13647 (0x354f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: Sep 18 14:24:47 2025 GMT Not After : Sep 25 14:24:47 2025 GMT Subject: CN=68cc162f-e3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:93:85:26:42:af:05:18:f3:1b:45:4f:51: 1d:4b:47:49:79:73:7e:02:61:df:a1:32:88:44:42: 68:0b:16:6c:9a:95:dd:c6:b6:e7:4f:f5:28:d4:b1: 28:0a:ce:c4:7e:d5:c7:88:be:40:18:a8:de:ba:ad: 66:70:5d:82:7b:82:fc:41:a1:72:53:be:b1:31:c5: 53:4c:86:9b:bb:80:96:89:5e:7b:b5:a3:80:57:54: 7c:06:fe:fa:89:ef:ba:bd:4f:9b:af:3e:2b:f4:b4: 6a:0a:3e:54:37:cb:ff:1f:a8:a6:62:4d:ec:57:2b: 74:5a:1d:a3:d8:a4:9d:76:5a:10:fc:1c:2b:47:1b: 9f:fc:06:2e:73:1c:73:65:fb:e1:eb:25:bc:98:f1: 0a:f3:8c:b4:c2:88:ca:bb:25:ad:5a:bf:37:ba:cd: 70:3c:90:1b:5b:bd:ed:42:dd:5f:36:26:6d:85:6e: 65:39:d2:16:e6:b7:b7:66:6d:39:2d:67:ec:8e:31: ec:a1:40:1b:33:b2:63:83:41:ce:68:fc:10:5e:dc: d7:8d:22:8f:9c:6c:69:cf:2d:78:24:10:a0:a0:9b: 22:42:f1:4a:a9:b3:e8:80:d1:72:d2:82:1b:b6:e1: 90:4e:01:62:b5:7e:d3:cc:dc:1c:56:e5:de:cb:15: c1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9E:BB:6B:37:41:52:F4:AC:2B:88:FC:6F:C5:76:31:F5:3A:7B:21 X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:3f:f2:49:eb:4d:63:a1:6f:24:f9:27:26:7f:05:4a:f3:14: 67:57:4d:0b:7f:9d:0e:08:47:52:34:86:2a:cf:59:f1:5b:37: 04:82:c3:ec:d2:fb:a1:9a:79:fa:a4:6f:65:f8:1a:8f:78:e4: f9:4b:07:f0:ca:cd:30:73:10:4f:00:47:a8:d5:93:88:27:a9: 61:f6:d5:9b:12:1a:af:65:95:39:e3:88:b2:66:9f:7e:59:1b: f4:61:0a:64:a5:df:b3:64:ec:13:82:c5:88:44:bb:7c:4b:73: 42:83:dc:ac:5e:4f:74:16:dd:ad:a6:bd:5e:f1:90:61:55:eb: 2f:7a:11:83:69:a9:4f:75:a0:21:42:11:f6:89:90:32:fb:39: 30:58:fc:b7:f0:a2:f5:8b:18:be:d0:4f:15:1a:78:1a:f5:61: 93:29:28:5b:f7:c9:4d:8e:72:64:f8:cf:1d:6e:1d:ef:71:ce: 71:3e:be:94:f0:6b:5b:dd:7d:10:6c:67:89:66:8f:a1:07:aa: a1:55:47:10:3a:6b:72:ed:d7:da:8e:93:68:32:4b:aa:47:89: 0c:8d:38:2d:d2:69:29:e9:6e:5a:56:10:69:ee:1b:c0:4d:12: 50:cf:6d:7b:26:68:41:9b:c7:64:1b:59:19:30:98:99:87:04: 32:8c:29:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjUwOTE4MTQyNDQ3WhcNMjUwOTI1MTQyNDQ3WjAYMRYwFAYD VQQDEw02OGNjMTYyZi1lM2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuyThSZCrwUY8xtFT1EdS0dJeXN+AmHfoTKIREJoCxZsmpXdxrbnT/Uo1LEo Cs7EftXHiL5AGKjeuq1mcF2Ce4L8QaFyU76xMcVTTIabu4CWiV57taOAV1R8Bv76 ie+6vU+brz4r9LRqCj5UN8v/H6imYk3sVyt0Wh2j2KSddloQ/BwrRxuf/AYucxxz Zfvh6yW8mPEK84y0wojKuyWtWr83us1wPJAbW73tQt1fNiZthW5lOdIW5re3Zm05 LWfsjjHsoUAbM7Jjg0HOaPwQXtzXjSKPnGxpzy14JBCgoJsiQvFKqbPogNFy0oIb tuGQTgFitX7TzNwcVuXeyxXBnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOeu2s3 QVL0rCuI/G/FdjH1OnshMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjP/JJ601joW8k+ScmfwVK8xRnV00Lf50OCEdSNIYqz1nxWzcEgsPs 0vuhmnn6pG9l+BqPeOT5Swfwys0wcxBPAEeo1ZOIJ6lh9tWbEhqvZZU544iyZp9+ WRv0YQpkpd+zZOwTgsWIRLt8S3NCg9ysXk90Ft2tpr1e8ZBhVesvehGDaalPdaAh QhH2iZAy+zkwWPy38KL1ixi+0E8VGnga9WGTKShb98lNjnJk+M8dbh3vcc5xPr6U 8Gtb3X0QbGeJZo+hB6qhVUcQOmty7dfajpNoMkuqR4kMjTgt0mkp6W5aVhBp7hvA TRJQz217JmhBm8dkG1kZMJiZhwQyjCnP -----END CERTIFICATE-----Generated at Fri Sep 19 02:59:03 2025 by rpki-client