$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft File: lddEZYkqyDm6JHn6BHVqXjBfJjw.mft (raw, json) Hash identifier: wCsnPkuXrhjmQKzCLx/mwqm9mfIUxsgTEuARo5PvpbY= Subject key identifier: 9E:29:B6:67:16:25:EF:23:9B:5F:27:A6:8F:57:00:80:39:F1:CD:78 Authority key identifier: 95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C Certificate issuer: /CN=A91557F2/serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft Manifest number: 01A5 Signing time: Sun 02 Nov 2025 21:43:52 +0000 Manifest this update: Sun 02 Nov 2025 21:43:52 +0000 Manifest next update: Sun 09 Nov 2025 21:43:52 +0000 Files and hashes: 1: lddEZYkqyDm6JHn6BHVqXjBfJjw.crl (hash: f/2dpGTJHmxO2zsIeC93JQXPK9CY2gDBNCKRQJatTUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F2, serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Validity Not Before: Nov 2 21:43:52 2025 GMT Not After : Nov 9 21:43:52 2025 GMT Subject: CN=6907d098-1383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1c:0b:d6:81:00:73:37:4f:b6:2d:84:93:89: dc:6c:54:b9:68:bd:8d:4c:04:a2:b5:04:e2:81:2d: 83:9e:b3:4d:0a:46:1a:0f:66:f2:2d:d9:5a:dd:a9: 64:ef:ed:c6:8f:b8:34:ac:11:cb:63:b2:ae:e5:81: 57:bb:a9:10:24:db:db:e9:74:82:fc:40:d2:25:ec: cb:7e:df:71:77:04:dc:cf:b7:bf:56:b9:c0:e6:cb: 7f:b4:9c:d1:32:69:7c:e8:a9:9e:00:14:f2:b6:1e: 6c:ed:8c:0e:0a:28:50:c7:14:96:a8:37:b9:3d:cf: 94:4b:a3:cc:34:ac:ff:8d:99:c4:d8:34:27:a6:86: c3:e1:8d:b9:ef:f1:e5:3b:f5:3b:da:fc:d8:06:1e: bd:cd:b7:ff:7c:9d:e5:76:75:c2:35:19:d1:0f:28: b1:f2:b9:14:e8:d9:13:7e:ea:53:b7:a0:0e:b6:b9: d1:c2:65:5a:27:0e:39:7d:ba:54:3c:a5:03:3a:bb: 33:04:ab:57:d7:f2:97:aa:07:c8:33:32:fa:46:7b: 91:40:9e:91:1c:26:f0:49:04:6e:cb:1c:8f:fd:ea: 98:26:4d:0f:46:f6:45:26:fd:11:12:86:bd:3c:be: 93:1f:34:b6:05:ad:01:5a:c8:58:90:71:76:96:3b: 00:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:29:B6:67:16:25:EF:23:9B:5F:27:A6:8F:57:00:80:39:F1:CD:78 X509v3 Authority Key Identifier: keyid:95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:d1:04:65:e7:f1:8f:59:42:a9:04:60:fd:f8:60:f8:93:e3: 50:24:79:9f:e0:ad:70:85:0a:22:4b:d4:c0:b6:8b:01:7a:b3: 7c:8a:3e:a1:bd:f6:af:f0:36:09:db:d6:66:60:54:3d:8d:e9: 98:87:2a:dc:a5:16:05:e8:e7:02:07:d9:cc:12:85:0c:db:f7: 17:2b:14:5f:45:41:6b:35:46:03:6d:e9:34:8b:00:89:e2:76: b1:b7:b3:f6:0a:b4:6f:d2:5e:95:c9:dd:55:8a:69:06:d6:54: ef:39:94:e0:4c:18:d2:a6:d0:47:b1:13:ab:36:fd:e3:57:83: c9:76:c2:b1:7a:6a:17:6f:ee:d8:f3:84:03:61:ed:ff:4c:a6: c1:db:52:28:be:66:f6:9a:53:68:32:f4:4c:94:f0:6c:ec:15: 54:66:1f:96:02:0b:f8:16:4e:cc:61:fb:d4:3a:48:d8:cd:aa: 27:a8:fd:22:29:fd:c5:9c:55:b4:e2:c7:e7:f3:c2:9f:c1:9a: dc:6e:c3:45:aa:d5:c2:fe:86:13:40:f3:d8:b6:49:d2:7c:2d: 35:13:c1:94:30:af:d9:bc:34:81:52:ff:20:f3:8d:cf:18:18: 24:fe:46:2c:48:66:6f:0d:5a:57:fc:f0:53:e5:51:9d:60:b0: 8d:4a:24:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjIxMTAvBgNVBAUTKDk1RDc0NDY1ODkyQUM4MzlCQTI0NzlGQTA0NzU2QTVF MzA1RjI2M0MwHhcNMjUxMTAyMjE0MzUyWhcNMjUxMTA5MjE0MzUyWjAYMRYwFAYD VQQDEw02OTA3ZDA5OC0xMzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhwL1oEAczdPti2Ek4ncbFS5aL2NTASitQTigS2DnrNNCkYaD2byLdla3alk 7+3Gj7g0rBHLY7Ku5YFXu6kQJNvb6XSC/EDSJezLft9xdwTcz7e/VrnA5st/tJzR Mml86KmeABTyth5s7YwOCihQxxSWqDe5Pc+US6PMNKz/jZnE2DQnpobD4Y257/Hl O/U72vzYBh69zbf/fJ3ldnXCNRnRDyix8rkU6NkTfupTt6AOtrnRwmVaJw45fbpU PKUDOrszBKtX1/KXqgfIMzL6RnuRQJ6RHCbwSQRuyxyP/eqYJk0PRvZFJv0REoa9 PL6THzS2Ba0BWshYkHF2ljsAhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4ptmcW Je8jm18npo9XAIA58c14MB8GA1UdIwQYMBaAFJXXRGWJKsg5uiR5+gR1al4wXyY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi9CRjI3RkQ0NjQy RTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlEbTZKSG42QkhWcVhqQmZK ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xkZEVaWWtxeURtNkpIbjZCSFZxWGpCZkpqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGMi9CRjI3RkQ0NjQyRTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlE bTZKSG42QkhWcVhqQmZKancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh0QRl5/GPWUKpBGD9+GD4k+NQJHmf4K1whQoiS9TAtosBerN8ij6h vfav8DYJ29ZmYFQ9jemYhyrcpRYF6OcCB9nMEoUM2/cXKxRfRUFrNUYDbek0iwCJ 4naxt7P2CrRv0l6Vyd1VimkG1lTvOZTgTBjSptBHsROrNv3jV4PJdsKxemoXb+7Y 84QDYe3/TKbB21Iovmb2mlNoMvRMlPBs7BVUZh+WAgv4Fk7MYfvUOkjYzaonqP0i Kf3FnFW04sfn88KfwZrcbsNFqtXC/oYTQPPYtknSfC01E8GUMK/ZvDSBUv8g843P GBgk/kYsSGZvDVpX/PBT5VGdYLCNSiSE -----END CERTIFICATE-----Generated at Tue Nov 4 19:01:39 2025 by rpki-client