$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft File: LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json) Hash identifier: zGr8MizCYwl54sbRD3YnvCu/fvQ7jH9PHOis8NQL5Ds= Subject key identifier: E0:FB:4C:D8:53:03:48:A2:E0:77:9F:CE:12:5A:C0:EE:80:8A:B9:0A Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25 Certificate issuer: /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft Manifest number: 59 Signing time: Mon 03 Nov 2025 07:10:30 +0000 Manifest this update: Mon 03 Nov 2025 07:10:30 +0000 Manifest next update: Mon 10 Nov 2025 07:10:30 +0000 Files and hashes: 1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: NJGOZza8PrzGAGaclAdJn174eo70AeNfHcP1FuMzLzI=) 2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: 2CjDcwjgwp6gOmqeOjKh58gY5ezLWgyuFkjz5k3OnLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525 Validity Not Before: Nov 3 07:10:30 2025 GMT Not After : Nov 10 07:10:30 2025 GMT Subject: CN=69085566-f0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:24:e4:7d:e2:5c:c1:2d:ed:3b:c3:f7:48:8f: d0:c1:1b:a1:7c:84:31:00:9e:ed:dc:94:49:79:84: 78:c2:85:43:b6:ac:92:69:58:23:5f:b2:1b:5a:8e: 31:43:f5:86:d9:50:4d:50:d0:40:82:03:c5:fb:bd: 77:73:d1:0a:a9:f1:94:ad:11:8d:a4:73:55:4d:a9: 1d:6c:95:e6:4a:54:88:cb:74:9b:88:7f:f0:88:3c: 40:ff:a2:13:6d:41:6a:7a:88:2b:6d:c3:f7:e0:b6: 4a:a9:1e:33:0c:2d:35:6c:6e:35:e4:fb:6c:61:36: 17:3c:cf:89:2f:6d:1e:ff:b4:c8:15:32:75:f0:bd: 2d:76:64:f3:a7:7d:f2:81:19:fa:14:0d:5a:37:39: 69:45:e2:bd:2e:b7:ce:a2:3d:9d:da:0b:b1:7f:f3: b1:b5:13:15:f0:0a:f2:2c:93:69:83:6f:0a:19:3d: 99:f2:1a:4a:3c:97:81:7a:14:d9:37:53:28:5f:e4: 1b:dd:76:8e:24:36:81:0a:22:e6:e0:38:cb:ee:21: db:53:8a:ef:2c:e1:a0:58:63:fb:e3:17:a7:07:00: 1a:8e:04:1d:20:24:0e:df:ac:21:05:9a:27:47:4b: 51:c0:3c:e5:df:c2:18:f5:e2:8f:0b:12:af:17:ae: 72:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FB:4C:D8:53:03:48:A2:E0:77:9F:CE:12:5A:C0:EE:80:8A:B9:0A X509v3 Authority Key Identifier: keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6f:f6:d8:da:b2:e7:dd:3f:9a:bb:c7:f0:6f:b7:a4:7e:73: b8:dc:e7:92:91:19:7b:4d:7e:59:1e:17:2d:d8:e6:63:07:be: 55:2b:71:77:fe:88:f4:53:23:27:b8:b2:b2:d9:16:4d:43:f1: e2:32:60:b9:a0:6b:ec:7d:e0:f9:be:c0:0d:1f:42:44:8f:4f: ad:14:1d:41:2a:95:31:29:49:93:67:32:0e:c1:de:13:13:89: 47:86:b4:ef:2f:9f:e2:2b:3b:65:e5:96:22:39:b7:33:0c:d9: c9:8c:3a:12:41:70:f3:3c:0b:a2:ab:9f:78:4c:b6:7b:67:5a: 1f:91:dc:7e:c4:f3:03:f2:1c:df:92:09:25:80:88:09:c2:26: ce:7c:40:ab:08:22:ab:c4:04:78:9e:a5:e9:c8:49:2f:c0:33: e7:a1:fa:e0:a9:7f:45:4c:2e:11:69:73:5e:d7:da:7e:84:c0: ff:f0:59:47:7a:e4:d8:67:dc:03:62:01:38:22:fa:50:72:3c: 9a:01:af:86:96:ee:4c:e5:29:76:4a:b2:63:3c:79:a1:23:1d: 05:7a:ee:e9:b8:b9:9b:8a:27:e0:58:d0:f5:6c:b6:5d:16:6b: e2:82:60:a4:ba:9f:fb:77:54:fd:4b:a0:20:19:25:4d:44:6c: 97:cd:78:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjQ2MjExMC8GA1UEBRMoMkQ3RDVDNUY3NkNBM0E2OEY2NDk4MDJDOUQ4QjY2QTdG MjZGNjUyNTAeFw0yNTExMDMwNzEwMzBaFw0yNTExMTAwNzEwMzBaMBgxFjAUBgNV BAMTDTY5MDg1NTY2LWYwZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiJOR94lzBLe07w/dIj9DBG6F8hDEAnu3clEl5hHjChUO2rJJpWCNfshtajjFD 9YbZUE1Q0ECCA8X7vXdz0Qqp8ZStEY2kc1VNqR1sleZKVIjLdJuIf/CIPED/ohNt QWp6iCttw/fgtkqpHjMMLTVsbjXk+2xhNhc8z4kvbR7/tMgVMnXwvS12ZPOnffKB GfoUDVo3OWlF4r0ut86iPZ3aC7F/87G1ExXwCvIsk2mDbwoZPZnyGko8l4F6FNk3 Uyhf5Bvddo4kNoEKIubgOMvuIdtTiu8s4aBYY/vjF6cHABqOBB0gJA7frCEFmidH S1HAPOXfwhj14o8LEq8XrnLfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4PtM2FMD SKLgd5/OElrA7oCKuQowHwYDVR0jBBgwFoAULX1cX3bKOmj2SYAsnYtmp/JvZSUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDYyL0EyN0NDM0U0MzJG RjExRjA4NTlCNUEyREM0RjlBRTAyL0xYMWNYM2JLT21qMlNZQXNuWXRtcF9KdlpT VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFgxY1gzYktPbWoyU1lBc25ZdG1wX0p2WlNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC NDYyL0EyN0NDM0U0MzJGRjExRjA4NTlCNUEyREM0RjlBRTAyL0xYMWNYM2JLT21q MlNZQXNuWXRtcF9KdlpTVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAExv9tjasufdP5q7x/Bvt6R+c7jc55KRGXtNflkeFy3Y5mMHvlUrcXf+ iPRTIye4srLZFk1D8eIyYLmga+x94Pm+wA0fQkSPT60UHUEqlTEpSZNnMg7B3hMT iUeGtO8vn+IrO2XlliI5tzMM2cmMOhJBcPM8C6Krn3hMtntnWh+R3H7E8wPyHN+S CSWAiAnCJs58QKsIIqvEBHiepenISS/AM+eh+uCpf0VMLhFpc17X2n6EwP/wWUd6 5Nhn3ANiATgi+lByPJoBr4aW7kzlKXZKsmM8eaEjHQV67um4uZuKJ+BY0PVstl0W a+KCYKS6n/t3VP1LoCAZJU1EbJfNeHs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:22:51 2025 by rpki-client