$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json) Hash identifier: kjTUJ9tnrbYhwRTkcJKNxOPGEx46HOp1PWo2GtVy7Jk= Subject key identifier: 06:6A:9D:4A:48:25:35:29:E3:5F:C1:85:6A:FE:F2:64:05:B4:31:7D Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft Manifest number: 09E4 Signing time: Tue 04 Nov 2025 19:59:50 +0000 Manifest this update: Tue 04 Nov 2025 19:59:50 +0000 Manifest next update: Tue 11 Nov 2025 19:59:50 +0000 Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: QrVv5iWUJR38kHX4Jzrq/kxr1cajQVGPuPXE7akKpuE=) 2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: i2d36Tq1yNa4fjxLB+ZorR2vyngn7bqMC3Q74Co0C4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Validity Not Before: Nov 4 19:59:50 2025 GMT Not After : Nov 11 19:59:50 2025 GMT Subject: CN=690a5b36-dde6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:f8:d1:ec:67:e7:ba:c8:8a:38:e0:f9:9f: 6f:34:9a:a7:82:17:b1:d5:51:e2:d6:f4:1b:1d:60: d9:b5:42:0f:ac:fb:01:79:39:3b:5a:fc:75:ad:f9: 2f:13:f5:5d:01:5d:0d:f2:01:5d:82:b8:8a:73:eb: 70:74:58:84:d3:e0:68:c9:90:f6:85:0f:e8:1b:cd: c8:4e:5b:ed:1a:50:5e:fd:14:69:bb:aa:06:35:dc: f4:05:0f:7b:48:de:bc:bf:ef:d0:bd:5f:4a:d4:9e: bb:6a:64:4d:07:84:71:e3:53:d0:20:5c:82:89:c1: f5:df:10:1c:09:d2:5c:5d:76:21:d8:6f:69:b5:6c: 36:13:20:ea:4f:40:99:b2:43:bd:28:96:dd:3e:3c: f5:cd:cc:89:c3:37:5e:a7:08:51:30:4d:85:e1:d0: 55:08:a6:e1:69:1b:df:a8:ec:a0:7c:3c:21:0d:51: 80:a1:48:9b:bf:24:32:9b:54:27:92:ab:75:aa:63: 5c:bd:55:52:43:3e:c5:61:c7:00:8a:b4:01:f3:11: 55:b1:cc:ef:7a:65:9e:2e:cf:64:3f:10:11:1c:99: 5d:a5:ec:91:7b:20:31:7a:cd:b2:10:39:82:04:6c: d5:82:7e:0a:ce:29:0a:d1:ca:99:c7:53:e3:ae:ca: c7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6A:9D:4A:48:25:35:29:E3:5F:C1:85:6A:FE:F2:64:05:B4:31:7D X509v3 Authority Key Identifier: keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:cb:99:e3:3d:8f:7f:05:19:b4:60:67:c4:57:5f:44:d2:c0: ba:dc:7f:a5:82:b1:78:7a:42:59:c2:82:08:e9:71:85:73:16: 98:21:2a:98:da:4e:cb:3a:c5:0f:dd:8a:fe:ca:0c:b2:81:8b: 35:62:ce:d3:fa:22:71:33:e8:46:b7:1f:bd:63:be:01:94:e6: 88:31:ff:1e:bc:00:08:99:cb:f9:48:0b:08:77:22:1e:5d:0b: 21:38:e4:11:98:8a:47:d9:2e:e0:12:a1:de:c4:f9:7f:35:14: ff:70:fb:e6:0c:1c:7c:48:1e:3d:a2:1a:28:a6:47:ee:68:21: 49:c7:c3:d6:24:6a:df:41:98:b4:9f:fa:75:74:8c:64:53:02: 17:80:71:8e:9a:17:ec:42:97:3b:ef:f3:85:5a:fd:10:65:28: cc:ca:ee:51:30:1b:a9:67:e4:64:1a:4e:39:ed:a3:26:26:34: d4:84:23:b2:62:28:d2:d8:95:cb:89:0b:95:26:52:b3:5b:cb: d6:0f:ed:5a:30:06:04:9d:8d:e7:54:8a:2d:fc:a6:13:fc:40: f1:4e:b5:cf:a1:ef:bb:a8:fe:64:16:1c:47:f3:b7:a8:75:87: 45:6b:22:aa:26:58:0a:e8:5a:09:73:61:dc:11:46:45:cb:4f: d7:d3:0f:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDNDYxMTAvBgNVBAUTKDJEN0IwRDdBM0Y5RjE1REUwMDcyQTVBNkM0RUQwQTVG OEYyMjFFMDMwHhcNMjUxMTA0MTk1OTUwWhcNMjUxMTExMTk1OTUwWjAYMRYwFAYD VQQDEw02OTBhNWIzNi1kZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLr40exn57rIijjg+Z9vNJqnghex1VHi1vQbHWDZtUIPrPsBeTk7Wvx1rfkv E/VdAV0N8gFdgriKc+twdFiE0+BoyZD2hQ/oG83ITlvtGlBe/RRpu6oGNdz0BQ97 SN68v+/QvV9K1J67amRNB4Rx41PQIFyCicH13xAcCdJcXXYh2G9ptWw2EyDqT0CZ skO9KJbdPjz1zcyJwzdepwhRME2F4dBVCKbhaRvfqOygfDwhDVGAoUibvyQym1Qn kqt1qmNcvVVSQz7FYccAirQB8xFVsczvemWeLs9kPxARHJldpeyReyAxes2yEDmC BGzVgn4KzikK0cqZx1PjrsrHywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZqnUpI JTUp41/BhWr+8mQFtDF9MB8GA1UdIwQYMBaAFC17DXo/nxXeAHKlpsTtCl+PIh4D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUM0Ni81OEY3NTEzRThB OEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZkNEFjcVdteE8wS1g0OGlI Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYc05lai1mRmQ0QWNxV214TzBLWDQ4aUhnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUM0Ni81OEY3NTEzRThBOEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZk NEFjcVdteE8wS1g0OGlIZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVy5njPY9/BRm0YGfEV19E0sC63H+lgrF4ekJZwoII6XGFcxaYISqY 2k7LOsUP3Yr+ygyygYs1Ys7T+iJxM+hGtx+9Y74BlOaIMf8evAAImcv5SAsIdyIe XQshOOQRmIpH2S7gEqHexPl/NRT/cPvmDBx8SB49ohoopkfuaCFJx8PWJGrfQZi0 n/p1dIxkUwIXgHGOmhfsQpc77/OFWv0QZSjMyu5RMBupZ+RkGk457aMmJjTUhCOy YijS2JXLiQuVJlKzW8vWD+1aMAYEnY3nVIot/KYT/EDxTrXPoe+7qP5kFhxH87eo dYdFayKqJlgK6FoJc2HcEUZFy0/X0w8h -----END CERTIFICATE-----Generated at Wed Nov 5 14:41:16 2025 by rpki-client