$ rpki-client -vvf rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft File: lx1PfDIP2Y7P374A1z4CiBX-I_E.mft (raw, json) Hash identifier: hHoNYRsUJXGYVxE/+n89+pqbEvIpL8UQkQPAJEx5uGI= Subject key identifier: 3A:9A:4F:D1:EC:35:B9:88:DE:1D:72:1F:91:0C:15:BD:CD:94:1F:70 Authority key identifier: 97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 Certificate issuer: /CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Certificate serial: 25C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft Manifest number: 25B0 Signing time: Tue 04 Nov 2025 15:48:30 +0000 Manifest this update: Tue 04 Nov 2025 15:48:29 +0000 Manifest next update: Tue 11 Nov 2025 15:48:29 +0000 Files and hashes: 1: lx1PfDIP2Y7P374A1z4CiBX-I_E.crl (hash: RO64eJa2b1Nu26RlLGF1PLT/s7BD4QwxpFsIZAT8RMk=) 2: 77139F3054EF11E783C5A42EC4F9AE02.roa (hash: WW7ULLrrOIB9GGHcDB9wM2m87d2vUNfw8IK2SkFOaB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9664 (0x25c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916588E, serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Validity Not Before: Nov 4 15:48:29 2025 GMT Not After : Nov 11 15:48:29 2025 GMT Subject: CN=690a204e-652b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:e5:be:f8:d3:ac:b3:6c:1d:13:51:9e:0d: fb:29:ae:6e:87:33:df:8b:c8:df:b3:b9:cb:d7:d2: d5:5e:4c:45:39:9b:9b:8a:23:63:23:36:35:bd:2a: 1f:71:b9:31:f7:25:4d:5b:a5:7d:05:31:b5:42:ad: c8:d5:a9:4e:bf:c3:89:6b:81:a3:ad:1c:a5:4e:8f: 7b:63:5b:9e:30:24:63:6b:b9:f6:c4:3c:a6:a2:68: 45:82:f7:bd:13:f8:92:b5:5f:ec:38:14:01:28:d4: f0:5b:96:c4:18:80:db:c2:48:c7:ac:27:57:6c:bd: ed:c3:ed:51:fd:3a:6f:2a:3d:65:0d:e3:c6:18:56: 00:22:7c:c3:34:22:99:f1:12:56:d2:89:62:9b:30: 22:a5:ab:5e:ef:56:29:d9:1f:4a:5f:bb:03:e2:85: 67:0c:85:58:64:c0:9f:ba:ad:bc:fa:b8:bf:28:d1: 03:53:9d:0e:9a:4f:4b:a7:28:67:33:d1:7d:95:9d: d0:c1:c9:4d:7f:3c:65:bc:45:52:d2:3a:5f:c3:5d: 9a:1b:6d:73:57:61:4f:91:26:39:a4:e1:10:66:ba: 2a:a7:d2:4f:a5:90:73:1f:36:25:53:b6:16:bb:e3: 74:d1:a4:21:ba:cc:cf:73:cc:a3:46:84:12:41:99: c7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9A:4F:D1:EC:35:B9:88:DE:1D:72:1F:91:0C:15:BD:CD:94:1F:70 X509v3 Authority Key Identifier: keyid:97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:52:d1:9d:a5:f6:68:83:45:0e:29:b4:41:60:56:c5:c9:29: 9a:3f:32:05:9f:c5:57:e2:b5:32:56:0d:b3:d1:ce:b7:d7:82: e1:a4:6e:e5:91:db:8e:90:76:a5:90:86:ef:c0:d6:92:3a:3a: 34:04:be:01:6a:31:e9:d2:9b:1e:6f:e9:9d:06:f0:64:c4:3d: 4b:ef:d3:70:12:c6:e3:d4:cc:80:d2:6b:e1:2b:ff:ae:37:1e: 35:b4:d0:b2:9e:0a:93:f0:5e:0a:0f:31:f8:a4:76:c7:05:fb: b3:2f:02:6a:16:ee:aa:14:8b:f8:25:2a:e1:c9:1f:39:c2:fe: e7:15:8f:8c:68:97:da:fa:a1:c0:c5:a5:1a:bd:26:3f:94:6f: 87:0f:8b:21:c8:c1:35:90:ba:f9:22:1d:4d:91:93:47:86:93: bf:c6:01:1b:8e:b0:9e:6a:dd:94:80:17:fe:b9:c2:16:21:37: f0:4a:ff:ab:fc:46:11:75:c4:1a:93:af:20:e3:06:66:e0:30: 3d:8a:9a:d7:1d:73:a6:74:4a:37:15:53:10:25:46:5f:bd:c5: 0f:c4:c1:0b:fe:83:2f:94:a7:c0:0e:da:d9:03:bf:12:98:4a: 56:30:49:17:bf:de:eb:d0:0d:c8:11:d7:1d:07:b9:20:f7:a5: 4a:41:33:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4OEUxMTAvBgNVBAUTKDk3MUQ0RjdDMzIwRkQ5OEVDRkRGQkUwMEQ3M0UwMjg4 MTVGRTIzRjEwHhcNMjUxMTA0MTU0ODI5WhcNMjUxMTExMTU0ODI5WjAYMRYwFAYD VQQDEw02OTBhMjA0ZS02NTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4DlvvjTrLNsHRNRng37Ka5uhzPfi8jfs7nL19LVXkxFOZubiiNjIzY1vSof cbkx9yVNW6V9BTG1Qq3I1alOv8OJa4GjrRylTo97Y1ueMCRja7n2xDymomhFgve9 E/iStV/sOBQBKNTwW5bEGIDbwkjHrCdXbL3tw+1R/TpvKj1lDePGGFYAInzDNCKZ 8RJW0olimzAipate71Yp2R9KX7sD4oVnDIVYZMCfuq28+ri/KNEDU50Omk9Lpyhn M9F9lZ3QwclNfzxlvEVS0jpfw12aG21zV2FPkSY5pOEQZroqp9JPpZBzHzYlU7YW u+N00aQhuszPc8yjRoQSQZnHHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqaT9Hs NbmI3h1yH5EMFb3NlB9wMB8GA1UdIwQYMBaAFJcdT3wyD9mOz9++ANc+AogV/iPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTg4RS9EQTgwMzFCMjFB MjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZN1AzNzRBMXo0Q2lCWC1J X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x4MVBmRElQMlk3UDM3NEExejRDaUJYLUlfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTg4RS9EQTgwMzFCMjFBMjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZ N1AzNzRBMXo0Q2lCWC1JX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHUtGdpfZog0UOKbRBYFbFySmaPzIFn8VX4rUyVg2z0c6314LhpG7l kduOkHalkIbvwNaSOjo0BL4BajHp0pseb+mdBvBkxD1L79NwEsbj1MyA0mvhK/+u Nx41tNCyngqT8F4KDzH4pHbHBfuzLwJqFu6qFIv4JSrhyR85wv7nFY+MaJfa+qHA xaUavSY/lG+HD4shyME1kLr5Ih1NkZNHhpO/xgEbjrCeat2UgBf+ucIWITfwSv+r /EYRdcQak68g4wZm4DA9iprXHXOmdEo3FVMQJUZfvcUPxMEL/oMvlKfADtrZA78S mEpWMEkXv97r0A3IEdcdB7kg96VKQTNZ -----END CERTIFICATE-----Generated at Tue Nov 4 18:54:17 2025 by rpki-client