$ rpki-client -vvf rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft File: LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft (raw, json) Hash identifier: LEl9tv0exe9FkKC4Bg3EkUj0obG7iAG7l6noyN4lAc8= Subject key identifier: 4D:14:4B:C3:49:D0:10:22:92:A1:CF:A1:2A:FE:E1:81:B0:A1:F4:9F Authority key identifier: 2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C Certificate issuer: /CN=A91552E3/serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Certificate serial: 0685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft Manifest number: 0674 Signing time: Tue 04 Nov 2025 22:40:17 +0000 Manifest this update: Tue 04 Nov 2025 22:40:16 +0000 Manifest next update: Tue 11 Nov 2025 22:40:16 +0000 Files and hashes: 1: LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl (hash: wIvCq83fL9k4XIgyNK3BqbJ0/JW4piUw+Y9iBZDW9Fs=) 2: E0A9637E41FA11ECB2D7F760C4F9AE02.roa (hash: syoIEmBkPUbXHyU102SwHVQfhD/obq6DIZMw3IYU94w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91552E3, serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Validity Not Before: Nov 4 22:40:16 2025 GMT Not After : Nov 11 22:40:16 2025 GMT Subject: CN=690a80d0-e877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:07:67:26:15:da:18:de:3d:b9:42:75:5d:d4: 10:86:69:0c:63:4a:b4:93:6e:77:c5:6e:e5:cd:19: d2:6a:34:5c:8f:f3:78:e9:2c:99:45:ae:71:59:ae: 0c:93:c2:23:e7:23:d6:bd:91:9d:80:97:ef:8f:30: 36:7f:c0:d6:f2:d1:60:71:ea:db:a8:c8:ff:f3:5d: f7:b1:cd:2e:ac:29:99:b9:85:3d:9d:95:69:27:06: ef:35:d5:ec:6d:77:2e:9a:f0:f0:dc:f6:b9:c8:bc: 17:37:c2:15:e7:63:46:93:13:3c:7b:0f:97:6d:53: f8:29:12:2a:fb:02:3b:fd:43:10:b0:b4:1e:54:99: ae:a0:dc:5b:e3:6d:bf:f4:43:bc:5a:bd:7e:db:2b: ff:d3:c6:f9:5c:c2:bb:72:f0:06:11:80:6a:bc:17: b6:1e:8a:0d:1a:50:96:9d:62:d4:96:05:d1:f3:5b: da:d0:53:5f:c2:5b:f2:89:b3:f9:e1:e6:ec:88:a3: 97:bc:9e:f8:49:74:49:be:33:f1:9c:18:70:c4:aa: 52:a4:9f:e3:f0:98:69:36:dc:34:c8:8c:7a:01:13: ee:b1:b0:86:bb:e7:f7:ed:3e:19:80:82:85:48:a6: c8:cb:ac:2c:2e:2a:a9:c2:ab:22:08:ed:35:00:64: 39:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:14:4B:C3:49:D0:10:22:92:A1:CF:A1:2A:FE:E1:81:B0:A1:F4:9F X509v3 Authority Key Identifier: keyid:2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:47:c3:58:2e:22:9d:43:0b:98:51:da:e7:14:fe:87:16:3b: f7:d1:e1:99:48:80:35:b4:fb:11:2a:93:fd:32:8e:52:14:16: 60:97:37:41:15:a9:a6:8e:02:e7:33:2a:f4:82:f8:5a:e5:9b: 22:51:aa:a3:4b:ca:94:7b:ed:46:29:bb:e0:4c:42:d5:83:89: 0f:8d:e0:51:cd:e2:b3:0a:ba:38:fe:4d:87:c8:3a:c5:95:6b: 63:f3:56:ff:4d:2a:1a:58:5c:82:f9:8c:2e:ff:e3:7d:c9:32: 9e:d0:56:8f:57:2b:88:7c:29:50:a1:8e:29:7b:d5:96:45:4f: da:11:77:a6:89:86:7a:4d:a7:9b:14:5b:3c:01:d5:a0:ba:67: 12:98:aa:72:95:b8:39:9b:4e:c2:95:ef:c9:44:71:19:4f:76: 92:c0:64:d0:1a:66:97:1b:47:1b:96:7f:36:c9:ea:2f:c7:49: e0:8b:34:fc:17:c5:c7:74:e2:ac:ef:e4:94:e1:b5:dc:31:99: f6:6c:2a:dc:bb:9b:d2:39:96:c6:d1:9c:63:03:a5:ec:a9:b8: 56:ee:df:be:4d:5b:54:db:28:ea:b9:88:ad:01:6c:96:dd:cc: f2:de:38:f3:ad:e3:79:11:ee:e8:2d:eb:77:02:cf:94:66:0d: 6c:73:d3:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUyRTMxMTAvBgNVBAUTKDJDRkE0RDhGNDQxMEE5NTFBQTE2NEU1NTRDNjU4MDVE OENGODg5NUMwHhcNMjUxMTA0MjI0MDE2WhcNMjUxMTExMjI0MDE2WjAYMRYwFAYD VQQDEw02OTBhODBkMC1lODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AdnJhXaGN49uUJ1XdQQhmkMY0q0k253xW7lzRnSajRcj/N46SyZRa5xWa4M k8Ij5yPWvZGdgJfvjzA2f8DW8tFgcerbqMj/8133sc0urCmZuYU9nZVpJwbvNdXs bXcumvDw3Pa5yLwXN8IV52NGkxM8ew+XbVP4KRIq+wI7/UMQsLQeVJmuoNxb422/ 9EO8Wr1+2yv/08b5XMK7cvAGEYBqvBe2HooNGlCWnWLUlgXR81va0FNfwlvyibP5 4ebsiKOXvJ74SXRJvjPxnBhwxKpSpJ/j8JhpNtw0yIx6ARPusbCGu+f37T4ZgIKF SKbIy6wsLiqpwqsiCO01AGQ57QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0US8NJ 0BAikqHPoSr+4YGwofSfMB8GA1UdIwQYMBaAFCz6TY9EEKlRqhZOVUxlgF2M+Ilc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTJFMy8yOTQ1M0I3NEEw NzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFWR3FGazVWVEdXQVhZejRp VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQcE5qMFFRcVZHcUZrNVZUR1dBWFl6NGlWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTJFMy8yOTQ1M0I3NEEwNzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFW R3FGazVWVEdXQVhZejRpVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqR8NYLiKdQwuYUdrnFP6HFjv30eGZSIA1tPsRKpP9Mo5SFBZglzdB FammjgLnMyr0gvha5ZsiUaqjS8qUe+1GKbvgTELVg4kPjeBRzeKzCro4/k2HyDrF lWtj81b/TSoaWFyC+Ywu/+N9yTKe0FaPVyuIfClQoY4pe9WWRU/aEXemiYZ6Taeb FFs8AdWgumcSmKpylbg5m07Cle/JRHEZT3aSwGTQGmaXG0cbln82yeovx0ngizT8 F8XHdOKs7+SU4bXcMZn2bCrcu5vSOZbG0ZxjA6XsqbhW7t++TVtU2yjquYitAWyW 3czy3jjzreN5Ee7oLet3As+UZg1sc9P/ -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:34 2025 by rpki-client