$ rpki-client -vvf rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft File: LURD4dwv1QJlAbu5nX1p2vpgvxc.mft (raw, json) Hash identifier: 2ob24mYllRUMXGpl7a7KSi4KK+76PIHxxoiwhW0oIaY= Subject key identifier: BC:23:61:82:88:87:B3:18:4F:80:37:39:CB:1B:0B:C3:B2:FE:29:7F Authority key identifier: 2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 Certificate issuer: /CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft Manifest number: 01C0 Signing time: Mon 03 Nov 2025 02:55:56 +0000 Manifest this update: Mon 03 Nov 2025 02:55:56 +0000 Manifest next update: Mon 10 Nov 2025 02:55:56 +0000 Files and hashes: 1: LURD4dwv1QJlAbu5nX1p2vpgvxc.crl (hash: 5vZVRlZHs5OceYWpY9BFXsJjc2njIIDRE+6X3NJTtcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91361B4, serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Validity Not Before: Nov 3 02:55:56 2025 GMT Not After : Nov 10 02:55:56 2025 GMT Subject: CN=690819bc-5f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d1:a2:d3:46:7b:d1:48:23:79:d4:03:df:c0: ec:fa:0a:45:94:d1:cd:49:4a:90:c9:ee:ce:ed:3e: ad:ca:fd:fb:d4:b6:f8:37:94:40:8a:09:f5:39:97: 98:86:74:b0:e6:e2:9b:a5:f5:88:5d:87:09:23:00: 98:7c:31:7f:00:40:f7:e9:bf:e0:90:69:f1:db:02: 43:5f:cc:61:94:f5:d3:bc:0e:87:9a:b6:27:91:1a: ea:90:eb:8e:dc:84:c9:30:d2:cb:c2:32:ff:0f:a4: ae:29:82:db:33:5e:0b:42:a8:31:12:38:56:3a:e2: ac:1b:95:66:5c:a9:14:9f:a3:a7:68:33:5b:83:52: f8:df:06:ec:42:87:90:31:78:ef:47:3d:91:68:8d: b3:15:17:f7:65:1e:f7:d4:e7:ba:04:c9:50:6e:96: 9c:78:b0:07:61:07:0f:9e:f0:82:22:f8:3f:b3:a1: 9b:97:fa:a6:5b:88:b0:5a:83:75:a9:33:8e:b4:f2: 06:ba:6b:2f:7d:cb:b9:c1:40:59:01:5d:89:be:d2: 98:5a:62:b3:e5:ad:6a:4d:49:8c:92:fa:9d:27:58: c1:88:bd:50:b6:3d:67:65:48:fa:ec:48:28:19:36: d1:96:79:f6:03:13:63:3f:76:b4:c7:20:b0:3a:a6: f1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:23:61:82:88:87:B3:18:4F:80:37:39:CB:1B:0B:C3:B2:FE:29:7F X509v3 Authority Key Identifier: keyid:2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:85:61:b2:a5:98:97:f3:e8:b8:db:0b:e6:5f:06:20:aa:b7: 0d:1e:1a:66:ec:33:c6:6e:60:81:51:d3:b7:9e:5c:e2:db:dc: 5a:16:1d:65:da:71:24:42:53:0d:8a:67:f2:71:39:46:5e:1f: 69:eb:70:03:b4:41:f8:20:0b:b5:8d:0a:9a:eb:1a:c5:a5:2b: d9:8a:15:3e:9d:cc:65:85:47:7b:50:81:bd:21:ea:f9:52:a9: d0:0a:0f:1b:0e:f0:05:e2:d2:68:f5:e8:4b:06:7b:a6:3c:d5: 27:7a:97:16:3f:51:df:5d:af:7b:b3:43:16:2c:7e:93:e9:3d: 92:b8:ac:08:26:4f:a3:0a:8c:74:6c:eb:01:57:50:63:4b:59: 90:5e:73:ab:8c:5e:20:00:19:bd:58:ab:05:16:4c:ed:d7:63: e1:5c:11:8a:ae:a9:aa:2e:61:b2:78:e6:7a:7c:36:8d:06:ec: 4a:2a:08:0c:64:6e:a2:45:f1:1f:20:ad:52:80:a2:93:a4:d8: 8c:8a:52:a1:49:0d:45:0f:a3:a4:e8:64:eb:20:74:fe:5b:af: 91:da:10:11:36:27:3e:7e:3e:35:87:6c:1f:dc:f9:4e:7b:d1: cb:0f:9f:a5:00:f7:1f:56:a0:e4:25:73:59:73:1f:05:c1:21: 3b:e3:92:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxQjQxMTAvBgNVBAUTKDJENDQ0M0UxREMyRkQ1MDI2NTAxQkJCOTlEN0Q2OURB RkE2MEJGMTcwHhcNMjUxMTAzMDI1NTU2WhcNMjUxMTEwMDI1NTU2WjAYMRYwFAYD VQQDEw02OTA4MTliYy01ZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dGi00Z70UgjedQD38Ds+gpFlNHNSUqQye7O7T6tyv371Lb4N5RAign1OZeY hnSw5uKbpfWIXYcJIwCYfDF/AED36b/gkGnx2wJDX8xhlPXTvA6HmrYnkRrqkOuO 3ITJMNLLwjL/D6SuKYLbM14LQqgxEjhWOuKsG5VmXKkUn6OnaDNbg1L43wbsQoeQ MXjvRz2RaI2zFRf3ZR731Oe6BMlQbpaceLAHYQcPnvCCIvg/s6Gbl/qmW4iwWoN1 qTOOtPIGumsvfcu5wUBZAV2JvtKYWmKz5a1qTUmMkvqdJ1jBiL1Qtj1nZUj67Ego GTbRlnn2AxNjP3a0xyCwOqbx/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwjYYKI h7MYT4A3OcsbC8Oy/il/MB8GA1UdIwQYMBaAFC1EQ+HcL9UCZQG7uZ19adr6YL8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjFCNC83Q0QxMUZBMjA1 RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFRSmxBYnU1blgxcDJ2cGd2 eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVUkQ0ZHd2MVFKbEFidTVuWDFwMnZwZ3Z4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjFCNC83Q0QxMUZBMjA1RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFR SmxBYnU1blgxcDJ2cGd2eGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMhWGypZiX8+i42wvmXwYgqrcNHhpm7DPGbmCBUdO3nlzi29xaFh1l 2nEkQlMNimfycTlGXh9p63ADtEH4IAu1jQqa6xrFpSvZihU+ncxlhUd7UIG9Ier5 UqnQCg8bDvAF4tJo9ehLBnumPNUnepcWP1HfXa97s0MWLH6T6T2SuKwIJk+jCox0 bOsBV1BjS1mQXnOrjF4gABm9WKsFFkzt12PhXBGKrqmqLmGyeOZ6fDaNBuxKKggM ZG6iRfEfIK1SgKKTpNiMilKhSQ1FD6Ok6GTrIHT+W6+R2hARNic+fj41h2wf3PlO e9HLD5+lAPcfVqDkJXNZcx8FwSE745Li -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:18 2025 by rpki-client