$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft File: LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json) Hash identifier: YK0bTdZPMBRgi3TCZD6k7NpXrN5n8t2MISIa5G4FsCM= Subject key identifier: 1D:C1:06:13:8D:4C:FF:C3:7F:FD:F0:6C:F4:D3:19:A4:84:EB:44:BD Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C Certificate serial: 0695 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft Manifest number: 0686 Signing time: Sun 02 Nov 2025 22:27:31 +0000 Manifest this update: Sun 02 Nov 2025 22:27:30 +0000 Manifest next update: Sun 09 Nov 2025 22:27:30 +0000 Files and hashes: 1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: /VBY91TwkVZd2xpDYuF3B1kc5uXuBgp4HfpzpkuZzr4=) 2: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: vh0GgYCDzl5MpyGfL9qB9BZe6rjSGvbzU8V9PATHokg=) 3: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: GBfQ8G2LgiRk7mNMod65ctHAM+9Xqf2dlYgMPWmItHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1685 (0x695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C Validity Not Before: Nov 2 22:27:30 2025 GMT Not After : Nov 9 22:27:30 2025 GMT Subject: CN=6907dad3-d7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:ca:05:1b:a4:85:d8:85:39:ae:87:5c:70: f8:93:02:bb:1b:17:d4:51:47:c0:e2:12:3b:dd:e1: ad:4e:68:3d:c1:ee:bd:e7:57:d4:f5:ea:c5:28:3a: eb:68:db:46:8d:09:c3:46:be:a1:9b:f9:3b:6e:31: f2:1e:f6:23:06:a9:1e:34:a2:e8:2d:68:fa:d9:56: be:12:83:62:c2:10:fb:b4:f7:be:9b:b1:ce:f4:71: 59:28:12:fc:e7:fb:0c:fe:61:76:14:f9:05:56:77: 08:b3:48:18:3a:aa:1f:8a:68:06:b8:9e:48:92:92: 7d:36:61:b3:92:59:27:50:e8:71:9f:33:97:d1:24: df:c4:61:6b:72:2d:4b:ce:41:c6:76:7b:0f:be:21: 29:ca:bc:0a:57:67:70:99:da:e0:a1:34:39:35:56: 35:e0:c2:65:89:12:ce:be:e2:7e:bc:43:62:b9:07: 86:8a:1f:ba:55:09:7e:80:a7:2c:fd:46:d4:ad:9f: 23:88:48:14:00:c6:f1:dc:99:46:7e:8f:3f:6a:0f: 46:21:3a:18:5d:a9:4c:5d:9c:9b:0a:46:ca:0b:b3: f5:13:30:6b:13:9d:b9:ee:f7:97:4b:cc:05:6f:29: b3:81:e4:d0:a5:c0:80:eb:65:79:ca:2f:f4:ed:20: f0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C1:06:13:8D:4C:FF:C3:7F:FD:F0:6C:F4:D3:19:A4:84:EB:44:BD X509v3 Authority Key Identifier: keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ce:e8:00:a7:9c:29:68:0f:bf:60:89:af:4f:b0:53:c3:0b: 19:eb:4b:f1:63:f0:57:de:e7:a6:36:e9:50:c1:7b:5a:94:88: da:df:3c:75:b6:98:60:b9:30:8e:22:ae:8f:69:36:b3:67:81: a4:90:1d:8d:af:3f:91:16:04:72:85:ab:64:68:59:2d:ce:97: 7d:33:e9:6c:c2:5d:df:fc:0a:ee:84:db:ed:a0:40:13:68:c2: cb:29:18:2a:6f:09:e0:0a:68:16:61:ce:7f:f5:b9:7c:e2:84: fb:c3:a6:cc:73:81:7a:87:d0:ed:ad:e8:de:e4:ae:24:79:76: ce:bc:50:71:8b:5c:0f:94:4b:f0:44:a6:39:58:61:84:bc:42: 0d:15:9c:d7:54:89:f9:0d:18:dc:e7:a0:e8:fc:d3:17:da:0c: 8f:7a:85:53:ae:9d:fb:a5:a7:89:c2:d8:32:4b:3b:7a:dc:96: 6f:2e:49:de:60:d4:1b:13:0e:3f:86:f9:ff:f7:e4:b1:89:5c: a4:6e:57:8b:ae:f8:e0:5a:8c:40:0b:d4:7c:b4:f7:50:23:03: 62:bb:00:bb:46:ae:bd:76:e6:cc:a1:da:5b:5d:20:6e:1e:8a: cb:05:8f:07:75:75:db:3b:36:2b:7b:eb:c9:82:90:61:5e:18: 4b:f2:96:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx QjEwOURBM0MwHhcNMjUxMTAyMjIyNzMwWhcNMjUxMTA5MjIyNzMwWjAYMRYwFAYD VQQDEw02OTA3ZGFkMy1kN2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvrKBRukhdiFOa6HXHD4kwK7GxfUUUfA4hI73eGtTmg9we6951fU9erFKDrr aNtGjQnDRr6hm/k7bjHyHvYjBqkeNKLoLWj62Va+EoNiwhD7tPe+m7HO9HFZKBL8 5/sM/mF2FPkFVncIs0gYOqofimgGuJ5IkpJ9NmGzklknUOhxnzOX0STfxGFrci1L zkHGdnsPviEpyrwKV2dwmdrgoTQ5NVY14MJliRLOvuJ+vENiuQeGih+6VQl+gKcs /UbUrZ8jiEgUAMbx3JlGfo8/ag9GIToYXalMXZybCkbKC7P1EzBrE5257veXS8wF bymzgeTQpcCA62V5yi/07SDwJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3BBhON TP/Df/3wbPTTGaSE60S9MB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3 NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNFQi9GMzYyMkU3NDk3NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3 bEpKb2tLaFJKT0liRUoyancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8zugAp5wpaA+/YImvT7BTwwsZ60vxY/BX3uemNulQwXtalIja3zx1 tphguTCOIq6PaTazZ4GkkB2Nrz+RFgRyhatkaFktzpd9M+lswl3f/AruhNvtoEAT aMLLKRgqbwngCmgWYc5/9bl84oT7w6bMc4F6h9Dtreje5K4keXbOvFBxi1wPlEvw RKY5WGGEvEINFZzXVIn5DRjc56Do/NMX2gyPeoVTrp37paeJwtgySzt63JZvLkne YNQbEw4/hvn/9+SxiVykbleLrvjgWoxAC9R8tPdQIwNiuwC7Rq69dubModpbXSBu HorLBY8HdXXbOzYre+vJgpBhXhhL8pbn -----END CERTIFICATE-----Generated at Tue Nov 4 08:20:00 2025 by rpki-client