$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json) Hash identifier: Xji+anqvBXKxlqPS3hs5fKMQIYiK3anDZgslEFDuGLw= Subject key identifier: 35:CB:B7:B7:3D:8B:B5:CE:E3:B4:91:79:92:26:68:78:DB:01:AC:CE Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Certificate serial: 028D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft Manifest number: 0285 Signing time: Wed 05 Nov 2025 01:43:14 +0000 Manifest this update: Wed 05 Nov 2025 01:43:14 +0000 Manifest next update: Wed 12 Nov 2025 01:43:14 +0000 Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: 0JTiufIPXMw9c3nObZdUHU4HlNDiEw2AQAEjosleUNg=) 2: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: /QZn6eJNp1QkpQ2tx9f8l2ROi+aoRJ31N2B9Wc759hU=) 3: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: S7ZRwjfMRdXYDsbLwG2JwWob+OsTSSbwbMXmMEzGwj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Validity Not Before: Nov 5 01:43:14 2025 GMT Not After : Nov 12 01:43:14 2025 GMT Subject: CN=690aabb2-30c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:c4:2f:ab:d5:a3:06:0c:6d:84:b6:b5:a2: ce:d4:5b:cb:69:dc:f7:33:fb:a1:14:e2:c4:6a:8b: 40:bf:ed:44:df:70:86:ba:28:92:b7:0a:fa:1d:c8: da:ec:70:9d:5d:61:94:65:17:f8:aa:d4:97:c0:65: 74:3b:76:ec:fd:e4:0e:38:5e:96:05:fb:6b:7c:ae: d4:a7:fd:d0:f1:83:08:e0:df:6b:1d:89:51:8c:af: b4:6f:1f:2a:09:be:26:0c:92:35:ba:07:99:f2:ee: aa:b6:c0:b3:2c:70:e3:c8:0b:d5:e6:3d:7b:26:83: b0:b7:2c:8c:b9:d0:f6:be:73:c3:fe:e7:4b:df:f3: df:78:9a:7c:bb:57:60:ca:68:6c:9d:75:20:ba:70: 04:94:12:f1:36:e6:44:7f:54:6b:fe:fd:37:c5:6c: b2:54:06:1e:f3:53:66:0e:38:cf:1d:e3:58:ee:5b: 00:0c:8a:ca:0b:1e:7f:00:43:ab:89:9c:ce:03:ac: 12:eb:3a:47:98:66:0f:52:ee:b7:40:9b:35:ce:e0: f3:9e:ce:03:2f:51:1d:da:38:ea:5c:25:d8:33:11: 63:71:e2:93:50:e2:03:42:ab:6d:e9:30:1c:b7:5b: dd:13:66:ee:b7:b0:65:d6:ce:26:1c:05:ed:38:cd: 76:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CB:B7:B7:3D:8B:B5:CE:E3:B4:91:79:92:26:68:78:DB:01:AC:CE X509v3 Authority Key Identifier: keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:2b:db:4e:b4:11:fd:f3:56:ba:50:9f:2b:d6:37:7a:bb:08: e9:e7:bd:82:32:d0:25:f6:c9:18:c0:7a:8c:e2:9e:a3:34:74: e4:34:ee:52:2d:db:e4:83:47:43:c5:a4:89:09:f1:df:23:77: 78:10:82:dc:6d:a2:b1:2f:e7:98:ba:e3:01:b5:bd:61:00:4a: 7a:61:17:68:2a:60:2f:96:80:43:4d:d6:80:4d:f3:7f:e2:a1: e0:a3:8e:de:f3:25:39:6b:25:63:27:e1:bf:1f:ec:1b:df:73: 23:4b:4e:d6:5d:c7:fa:12:63:4e:8c:dd:63:ea:93:de:9f:d6: 5b:79:16:f8:55:cf:a2:9c:61:4c:a0:52:04:cc:31:43:ed:78: b7:7d:38:62:63:f6:14:d1:9c:01:62:ed:2d:25:7d:17:da:99: 31:2e:28:e6:3b:0e:06:e3:50:f2:a0:4f:d2:fb:5b:a0:4b:1b: 8b:3c:db:49:8e:66:d8:15:8f:bf:51:a9:cd:98:7b:01:6d:63: c9:35:cf:c4:76:18:23:b6:98:ac:25:aa:be:3e:22:88:eb:b0: fd:5d:2f:ac:c2:c4:2d:9e:ce:d6:8f:17:3b:d8:03:3c:13:01: 4b:82:17:8e:55:31:e0:04:48:28:4a:39:d2:7e:8e:d9:87:aa: 1e:05:d7:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2 QThDMEE5NUEwHhcNMjUxMTA1MDE0MzE0WhcNMjUxMTEyMDE0MzE0WjAYMRYwFAYD VQQDEw02OTBhYWJiMi0zMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlvEL6vVowYMbYS2taLO1FvLadz3M/uhFOLEaotAv+1E33CGuiiStwr6Hcja 7HCdXWGUZRf4qtSXwGV0O3bs/eQOOF6WBftrfK7Up/3Q8YMI4N9rHYlRjK+0bx8q Cb4mDJI1ugeZ8u6qtsCzLHDjyAvV5j17JoOwtyyMudD2vnPD/udL3/PfeJp8u1dg ymhsnXUgunAElBLxNuZEf1Rr/v03xWyyVAYe81NmDjjPHeNY7lsADIrKCx5/AEOr iZzOA6wS6zpHmGYPUu63QJs1zuDzns4DL1Ed2jjqXCXYMxFjceKTUOIDQqtt6TAc t1vdE2but7Bl1s4mHAXtOM12nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXLt7c9 i7XO47SReZImaHjbAazOMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4 NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MThFMS8xMTMxNjYyQzI4NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xw Tm0xYW1WLXliMlpxakFxVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/K9tOtBH981a6UJ8r1jd6uwjp572CMtAl9skYwHqM4p6jNHTkNO5S Ldvkg0dDxaSJCfHfI3d4EILcbaKxL+eYuuMBtb1hAEp6YRdoKmAvloBDTdaATfN/ 4qHgo47e8yU5ayVjJ+G/H+wb33MjS07WXcf6EmNOjN1j6pPen9ZbeRb4Vc+inGFM oFIEzDFD7Xi3fThiY/YU0ZwBYu0tJX0X2pkxLijmOw4G41DyoE/S+1ugSxuLPNtJ jmbYFY+/UanNmHsBbWPJNc/EdhgjtpisJaq+PiKI67D9XS+swsQtns7Wjxc72AM8 EwFLgheOVTHgBEgoSjnSfo7Zh6oeBddl -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:12 2025 by rpki-client