$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft File: LQx0fe_201Ecz11T86dlcA8cgqA.mft (raw, json) Hash identifier: NTzmy9fhSGkzi2GXbESyyJqHrGpuWp6MYShJiVQ0d6I= Subject key identifier: 00:FA:5E:33:BF:4A:FD:89:70:9D:2C:B0:74:F8:B4:B5:97:AE:5D:9F Authority key identifier: 2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 Certificate issuer: /CN=A9170975/serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft Manifest number: 53 Signing time: Mon 03 Nov 2025 07:13:40 +0000 Manifest this update: Mon 03 Nov 2025 07:13:40 +0000 Manifest next update: Mon 10 Nov 2025 07:13:40 +0000 Files and hashes: 1: LQx0fe_201Ecz11T86dlcA8cgqA.crl (hash: AahR7ZX1RlOZPwT8KuoBOijtm2QxDdhldymNf3uc7Q8=) 2: B0B8FBDA3A2A11F09E37DB48C4F9AE02.roa (hash: Gk5HrV+ASLgWFwT9SMxMpFzIA+vBFJ75IOUj++Jvz6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170975, serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Validity Not Before: Nov 3 07:13:40 2025 GMT Not After : Nov 10 07:13:40 2025 GMT Subject: CN=69085624-286d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:51:00:1e:6d:9f:6f:ed:f4:e1:85:69:b2:d7: 04:57:73:da:13:22:b8:7c:3b:6d:63:ac:24:98:c3: e9:e2:a0:27:2f:dd:ad:b0:e1:8e:f5:58:a7:0b:ea: 2f:0c:16:f3:f9:7f:f0:88:63:30:12:26:13:07:77: b1:d5:96:98:8a:81:dd:a8:08:3e:51:66:53:e4:85: ed:b0:2b:b7:1d:b8:7e:45:c1:88:29:08:dd:8e:79: b7:94:81:da:b9:f4:88:90:41:f8:a4:a9:69:08:9c: a1:ca:fa:a4:b6:ea:4e:39:36:40:ea:3c:5f:a8:b0: 37:08:c3:5f:76:ab:48:e6:1d:99:7c:a7:cb:e2:3d: 43:11:4e:11:e0:20:52:9b:a2:f9:1b:df:bc:89:15: 17:04:b7:bb:f2:81:b5:f9:c2:1a:f9:8d:e0:10:38: 00:b5:87:9a:e9:5c:eb:e6:6d:d0:c6:a6:6e:a0:16: 0a:b4:87:2f:b5:6f:2e:48:09:72:d3:7f:03:e2:c2: 16:69:06:ff:3f:80:66:d3:de:1c:e0:63:d9:5c:38: 6d:68:77:d3:f7:d7:7c:41:8e:3e:51:5e:fe:d8:53: e1:97:cc:42:57:1d:fc:0c:d7:df:71:4e:85:8b:0e: 2f:27:01:e1:65:cd:c0:11:d7:05:f2:c7:be:f5:1a: bd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FA:5E:33:BF:4A:FD:89:70:9D:2C:B0:74:F8:B4:B5:97:AE:5D:9F X509v3 Authority Key Identifier: keyid:2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:8e:ee:8f:a8:bf:ed:f6:57:d7:aa:ed:e1:b4:3e:02:9b:b3: 42:db:ac:85:9b:23:39:7b:95:ea:45:68:fb:f0:60:3e:dc:e7: c1:2c:82:31:3d:0d:d6:b0:bf:86:98:1f:6a:14:28:1b:b5:e2: 98:91:e9:a4:f9:a7:86:a3:ba:ab:2b:27:37:80:4e:a2:ca:08: 6f:a1:e9:9c:63:08:71:25:a7:35:52:39:3d:c1:f5:6a:c9:66: 55:28:84:bd:02:ba:d5:a4:bf:57:b6:0a:f8:2d:ef:97:ae:12: b4:08:bf:22:71:ed:b8:49:23:e7:96:2f:14:fb:59:4f:a4:02: c7:40:a2:7d:a5:5f:85:be:00:16:68:58:27:4a:66:87:93:a1: c1:7f:34:b3:26:9e:b1:82:d4:64:80:96:35:e4:bf:50:14:4e: d3:8f:ab:8f:b7:4f:64:5e:c2:df:d1:38:90:a1:bf:fd:14:db: 04:1e:91:58:ae:e3:a6:d8:29:c7:f8:0d:d8:a2:26:40:47:69: 79:89:63:22:9d:f8:fe:90:e1:dd:a1:05:56:f5:cd:4d:b3:22: 79:df:ac:e0:da:7d:8d:69:cc:5e:e4:5d:9a:37:4c:81:cc:03: 33:ae:ad:f1:6e:f3:dd:e1:d2:15:92:af:fc:9d:9a:c1:dc:ed: 56:56:6f:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDk3NTExMC8GA1UEBRMoMkQwQzc0N0RFRkY2RDM1MTFDQ0Y1RDUzRjNBNzY1NzAw RjFDODJBMDAeFw0yNTExMDMwNzEzNDBaFw0yNTExMTAwNzEzNDBaMBgxFjAUBgNV BAMTDTY5MDg1NjI0LTI4NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSUQAebZ9v7fThhWmy1wRXc9oTIrh8O21jrCSYw+nioCcv3a2w4Y71WKcL6i8M FvP5f/CIYzASJhMHd7HVlpiKgd2oCD5RZlPkhe2wK7cduH5FwYgpCN2OebeUgdq5 9IiQQfikqWkInKHK+qS26k45NkDqPF+osDcIw192q0jmHZl8p8viPUMRThHgIFKb ovkb37yJFRcEt7vygbX5whr5jeAQOAC1h5rpXOvmbdDGpm6gFgq0hy+1by5ICXLT fwPiwhZpBv8/gGbT3hzgY9lcOG1od9P313xBjj5RXv7YU+GXzEJXHfwM199xToWL Di8nAeFlzcAR1wXyx771Gr3TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAPpeM79K /YlwnSywdPi0tZeuXZ8wHwYDVR0jBBgwFoAULQx0fe/201Ecz11T86dlcA8cgqAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTc1LzVGOTAzNUY2M0Ey NjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFFY3oxMVQ4NmRsY0E4Y2dx QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFF4MGZlXzIwMUVjejExVDg2ZGxjQThjZ3FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTc1LzVGOTAzNUY2M0EyNjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFF Y3oxMVQ4NmRsY0E4Y2dxQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEiO7o+ov+32V9eq7eG0PgKbs0LbrIWbIzl7lepFaPvwYD7c58EsgjE9 Ddawv4aYH2oUKBu14piR6aT5p4ajuqsrJzeATqLKCG+h6ZxjCHElpzVSOT3B9WrJ ZlUohL0CutWkv1e2Cvgt75euErQIvyJx7bhJI+eWLxT7WU+kAsdAon2lX4W+ABZo WCdKZoeTocF/NLMmnrGC1GSAljXkv1AUTtOPq4+3T2Rewt/ROJChv/0U2wQekViu 46bYKcf4DdiiJkBHaXmJYyKd+P6Q4d2hBVb1zU2zInnfrODafY1pzF7kXZo3TIHM AzOurfFu893h0hWSr/ydmsHc7VZWb94= -----END CERTIFICATE-----Generated at Wed Nov 5 07:52:46 2025 by rpki-client