$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft File: lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json) Hash identifier: Wt4JbMWlAC8QenSh16W0g57Zh82mkzKvH1l7m/QsFCI= Subject key identifier: 96:F1:85:AD:52:EA:A4:45:BE:B2:33:0E:C9:FA:7A:23:AB:9C:62:EC Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22 Certificate issuer: /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft Manifest number: 7E Signing time: Wed 05 Nov 2025 07:06:41 +0000 Manifest this update: Wed 05 Nov 2025 07:06:40 +0000 Manifest next update: Wed 12 Nov 2025 07:06:40 +0000 Files and hashes: 1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: oeQf1jQ8ajuVN2V7Wo9pnXa9tBNfQKnCS/vSKqKogAI=) 2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: wfDreRJEGF1JW5W3fjwvAomrv9lvr6AoS+ZjgINTuCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922 Validity Not Before: Nov 5 07:06:40 2025 GMT Not After : Nov 12 07:06:40 2025 GMT Subject: CN=690af780-d701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:68:77:67:c0:08:3a:05:3c:ac:5e:d5:09: be:52:d0:14:3d:13:cc:dd:8e:6c:65:0f:8d:e4:11: 75:aa:b6:1b:2b:0b:fa:a4:c4:21:ec:e2:e0:bf:c8: e6:62:35:63:d6:4a:87:c9:07:b3:c8:82:3c:20:a8: 2d:13:49:c1:7d:c9:39:85:19:75:82:d9:35:3e:16: 79:bb:64:b0:5c:7a:9d:a1:b2:d7:dd:51:a3:18:f8: c3:30:f9:64:53:b2:48:18:eb:0a:91:6e:9e:36:08: d6:5f:c5:5e:da:0a:72:ec:25:a4:75:26:6d:8b:1b: 5c:3b:26:cc:84:ce:c9:cc:cb:19:3d:b6:43:f8:9a: 7c:41:75:78:16:ab:02:3b:82:3a:25:bb:2d:08:8f: 2e:12:08:79:37:f8:d3:83:4f:7d:79:dc:af:66:db: 9a:0b:df:fe:60:e3:e3:ac:b0:fd:03:5c:39:f5:b8: 55:13:04:f5:92:ce:b4:47:10:8f:c1:1b:e9:61:d1: 4e:e5:61:12:1b:77:c7:81:a5:83:7d:dc:e9:ba:d4: 51:4e:96:60:3e:87:da:ca:66:cd:a5:d0:28:da:07: eb:9d:b7:72:64:f9:9f:99:01:5d:7d:03:f8:25:7c: c4:06:24:87:b3:23:a4:1d:d4:fb:98:72:79:59:43: a3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F1:85:AD:52:EA:A4:45:BE:B2:33:0E:C9:FA:7A:23:AB:9C:62:EC X509v3 Authority Key Identifier: keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:fc:a2:d9:67:f3:fb:2e:79:91:b9:bc:41:e1:a0:be:1b:ed: 25:59:90:5f:98:af:ae:38:96:a4:2f:c6:2d:ac:77:c6:1d:91: 01:3e:13:2e:a4:4a:53:01:99:12:03:41:15:6b:4a:cb:73:c0: b6:97:79:eb:05:32:06:4f:df:0a:4e:00:72:19:45:3d:a0:88: 17:31:fb:1b:1f:bd:2f:0e:02:8b:81:88:fc:36:09:88:6e:1c: 54:5a:67:90:f5:a4:c8:a1:3e:97:8a:8c:84:37:25:70:48:40: 34:78:83:87:98:82:3a:1c:b6:7a:ec:01:35:06:9c:18:7c:a4: 2b:80:fb:87:e6:b2:0b:fe:81:fd:cd:fc:be:d8:40:d6:11:65: 33:a7:49:87:6c:5f:bd:b6:9b:ea:b7:70:46:70:b3:93:9e:3a: 79:8c:7d:c3:e9:06:39:ed:78:b1:bf:e6:36:71:28:dc:07:72: 77:55:a1:52:fa:f0:bd:58:38:f9:ab:12:0d:7c:05:c9:06:fe: f9:9f:d9:81:95:73:c3:61:86:c0:e9:60:9b:dc:44:02:14:fd: 60:bf:14:3d:4d:bd:d4:a0:21:40:65:2f:35:65:6d:a3:b6:d8: 94:99:b9:1c:87:52:ef:be:73:13:0c:98:f9:57:ec:ad:dd:2c: 4d:09:21:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QzkxMTAvBgNVBAUTKDk1NzQ1MjkzQzg4QTI3MjZFMTBBNTdENThGNDJDQzMx NjlCN0M5MjIwHhcNMjUxMTA1MDcwNjQwWhcNMjUxMTEyMDcwNjQwWjAYMRYwFAYD VQQDEw02OTBhZjc4MC1kNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsA9od2fACDoFPKxe1Qm+UtAUPRPM3Y5sZQ+N5BF1qrYbKwv6pMQh7OLgv8jm YjVj1kqHyQezyII8IKgtE0nBfck5hRl1gtk1PhZ5u2SwXHqdobLX3VGjGPjDMPlk U7JIGOsKkW6eNgjWX8Ve2gpy7CWkdSZtixtcOybMhM7JzMsZPbZD+Jp8QXV4FqsC O4I6JbstCI8uEgh5N/jTg099edyvZtuaC9/+YOPjrLD9A1w59bhVEwT1ks60RxCP wRvpYdFO5WESG3fHgaWDfdzputRRTpZgPofaymbNpdAo2gfrnbdyZPmfmQFdfQP4 JXzEBiSHsyOkHdT7mHJ5WUOjgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbxha1S 6qRFvrIzDsn6eiOrnGLsMB8GA1UdIwQYMBaAFJV0UpPIiicm4QpX1Y9CzDFpt8ki MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRDOS84NDJGOTg5NDBF QzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9sWFJTazhpS0p5YmhDbGZWajBMTU1XbTN5 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xYUlNrOGlLSnliaENsZlZqMExNTVdtM3lTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRDOS84NDJGOTg5NDBFQzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9sWFJTazhpS0p5 YmhDbGZWajBMTU1XbTN5U0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX/KLZZ/P7LnmRubxB4aC+G+0lWZBfmK+uOJakL8YtrHfGHZEBPhMu pEpTAZkSA0EVa0rLc8C2l3nrBTIGT98KTgByGUU9oIgXMfsbH70vDgKLgYj8NgmI bhxUWmeQ9aTIoT6XioyENyVwSEA0eIOHmII6HLZ67AE1BpwYfKQrgPuH5rIL/oH9 zfy+2EDWEWUzp0mHbF+9tpvqt3BGcLOTnjp5jH3D6QY57Xixv+Y2cSjcB3J3VaFS +vC9WDj5qxINfAXJBv75n9mBlXPDYYbA6WCb3EQCFP1gvxQ9Tb3UoCFAZS81ZW2j ttiUmbkch1LvvnMTDJj5V+yt3SxNCSHr -----END CERTIFICATE-----Generated at Wed Nov 5 20:05:36 2025 by rpki-client