$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json) Hash identifier: 2DsxEvHm9zi2qH7B20KJ9SvQx14MSPruYkwjgMvKCF0= Subject key identifier: FE:10:B1:81:77:93:91:BB:68:7B:EF:F4:DD:41:B8:35:89:7B:AD:0B Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft Manifest number: 018C Signing time: Mon 03 Nov 2025 03:31:53 +0000 Manifest this update: Mon 03 Nov 2025 03:31:52 +0000 Manifest next update: Mon 10 Nov 2025 03:31:52 +0000 Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: rqNpiX8BacBWaDX+MR3UwspopBMlCNgBWPzEsVITydI=) 2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: PHAPD39R0/+5V+WCmlH3xcXfFFqLnGp5Euy8i5sqtnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Validity Not Before: Nov 3 03:31:52 2025 GMT Not After : Nov 10 03:31:52 2025 GMT Subject: CN=69082228-b800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:53:3d:5b:0d:6c:40:42:2e:43:f2:99:81:c4: ff:7d:98:bf:2e:0c:2a:3d:0b:83:44:32:a7:6f:67: ed:0d:55:66:6c:33:2f:f0:97:ea:b5:59:8f:07:28: 2a:d6:70:1b:c0:36:8a:95:b8:10:33:55:68:8e:3a: 58:0f:a5:2e:3d:70:51:11:2f:8d:b9:e7:9d:89:ca: 79:7b:67:98:62:0a:fd:65:79:21:9a:df:48:99:9d: 50:16:66:9a:06:51:4a:4e:7d:74:fc:82:59:ed:62: b1:da:b8:d0:96:58:c5:b9:00:d6:ee:e1:c1:b2:d7: c2:e5:ed:97:96:e9:6c:e2:1e:5c:d2:4c:af:23:e1: 9d:44:b4:d4:0a:5f:f0:2b:73:77:3a:31:a9:5b:07: c0:75:de:52:82:b9:e9:50:6f:14:69:7c:59:1a:f0: 6d:98:91:38:65:46:78:2f:8b:98:fe:cf:8c:9c:f0: b7:56:d1:78:98:a6:0b:48:d1:f4:9a:d3:0d:c6:13: a8:2d:6e:1f:62:07:a5:61:bc:2a:25:23:a0:d5:3f: 2b:8a:dd:15:1f:8a:97:a0:ec:80:c0:c4:bb:64:53: 8b:3a:1c:da:1c:ad:0c:83:48:02:0d:4c:96:36:86: 07:ba:43:15:5d:24:cf:57:3d:02:00:95:6c:e6:1e: 73:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:10:B1:81:77:93:91:BB:68:7B:EF:F4:DD:41:B8:35:89:7B:AD:0B X509v3 Authority Key Identifier: keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:cd:d2:ba:d1:98:d6:d2:81:ad:ac:e4:1b:03:3d:10:30:04: a1:7b:d6:0a:fb:0d:bc:e6:0b:ec:00:58:9e:e9:b8:8e:d2:44: 09:cd:bd:1d:6d:e5:8a:45:c6:90:da:82:d2:63:d0:07:f5:6c: 54:4b:84:63:0e:b1:19:71:3e:a3:86:eb:45:46:0f:09:f1:86: 73:3b:15:f3:94:df:48:53:c2:8a:dd:a0:04:08:7c:1e:37:d8: 32:22:7c:34:cd:ba:33:9d:c9:cc:d4:9a:b9:87:8c:f4:e2:6d: f9:bb:33:51:27:1a:bf:43:6f:0e:ef:a1:0f:b0:85:1c:aa:5c: 30:bc:8e:37:c1:4a:17:0f:7d:a7:97:1c:cc:af:24:2b:c9:4d: c1:b6:1d:9a:b8:7d:c6:c8:c2:54:49:a0:94:10:ed:a5:a2:67: be:a2:71:00:00:ed:e9:ed:76:b5:1d:06:cd:f4:e0:73:7a:47: 1b:d3:56:e6:a2:ff:4a:6b:56:9b:27:45:43:a7:b8:ec:0e:4f: 12:54:0b:c2:a5:f3:77:c2:7a:91:25:70:29:2a:7b:2a:4b:3c: 22:1a:2a:ad:fd:13:88:5f:c4:6f:3f:7c:e9:d7:35:41:83:b8: 28:8d:ce:40:b7:5a:7b:b1:38:d3:75:b8:0c:b8:a3:69:a5:0c: 38:06:76:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc0QkIxMTAvBgNVBAUTKEIzMTJDMjJGM0QwQjk3QkFBRjMyNzNFNUM2NkI4RjE0 MDIwM0UyRjkwHhcNMjUxMTAzMDMzMTUyWhcNMjUxMTEwMDMzMTUyWjAYMRYwFAYD VQQDEw02OTA4MjIyOC1iODAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFM9Ww1sQEIuQ/KZgcT/fZi/LgwqPQuDRDKnb2ftDVVmbDMv8JfqtVmPBygq 1nAbwDaKlbgQM1VojjpYD6UuPXBRES+Nueedicp5e2eYYgr9ZXkhmt9ImZ1QFmaa BlFKTn10/IJZ7WKx2rjQlljFuQDW7uHBstfC5e2Xluls4h5c0kyvI+GdRLTUCl/w K3N3OjGpWwfAdd5SgrnpUG8UaXxZGvBtmJE4ZUZ4L4uY/s+MnPC3VtF4mKYLSNH0 mtMNxhOoLW4fYgelYbwqJSOg1T8rit0VH4qXoOyAwMS7ZFOLOhzaHK0Mg0gCDUyW NoYHukMVXSTPVz0CAJVs5h5z8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4QsYF3 k5G7aHvv9N1BuDWJe60LMB8GA1UdIwQYMBaAFLMSwi89C5e6rzJz5cZrjxQCA+L5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzRCQi82NDg1NDJDODVC NkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3cXZNblBseG11UEZBSUQ0 dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4TENMejBMbDdxdk1uUGx4bXVQRkFJRDR2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzRCQi82NDg1NDJDODVCNkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3 cXZNblBseG11UEZBSUQ0dmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHzdK60ZjW0oGtrOQbAz0QMAShe9YK+w285gvsAFie6biO0kQJzb0d beWKRcaQ2oLSY9AH9WxUS4RjDrEZcT6jhutFRg8J8YZzOxXzlN9IU8KK3aAECHwe N9gyInw0zbozncnM1Jq5h4z04m35uzNRJxq/Q28O76EPsIUcqlwwvI43wUoXD32n lxzMryQryU3Bth2auH3GyMJUSaCUEO2lome+onEAAO3p7Xa1HQbN9OBzekcb01bm ov9Ka1abJ0VDp7jsDk8SVAvCpfN3wnqRJXApKnsqSzwiGiqt/ROIX8RvP3zp1zVB g7gojc5At1p7sTjTdbgMuKNppQw4Bnbm -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:02 2025 by rpki-client