$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft File: LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json) Hash identifier: s50Pp89WNEelMU1skFY5QzFGMZ8BiFqHbdptiNY7z3I= Subject key identifier: 2C:A4:6E:28:8C:F2:54:08:B3:04:1C:51:4C:0C:74:6A:BE:96:C8:9C Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft Manifest number: 0105 Signing time: Wed 05 Nov 2025 05:13:36 +0000 Manifest this update: Wed 05 Nov 2025 05:13:36 +0000 Manifest next update: Wed 12 Nov 2025 05:13:36 +0000 Files and hashes: 1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: uQOZiCiEynHJIBhDaWQWYouQMhNYjCCTwcSGe8wc6+c=) 2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: tqUNG1S/rsB6bW3LBm3IsjWdqGyc7l/8ScuxBxWoVEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Validity Not Before: Nov 5 05:13:36 2025 GMT Not After : Nov 12 05:13:36 2025 GMT Subject: CN=690add00-d0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:29:e4:01:12:b0:b4:ec:d1:2b:7f:f9:e3:bc: aa:95:59:42:31:74:cc:f3:2e:a6:4f:7c:52:da:19: 23:cc:d6:88:cf:e0:9b:7e:39:b9:28:fa:70:71:0f: ac:ad:ab:11:67:a9:cb:49:f8:50:38:c4:15:f5:66: 2f:b7:83:bf:38:cf:de:aa:93:70:b6:69:cf:37:9a: 24:a4:3e:c1:ff:2c:53:fc:ea:48:05:d5:87:c5:93: 72:bc:76:c7:82:85:82:5a:f4:de:0c:1d:ad:bb:53: e5:34:a9:76:f5:54:9f:c3:35:99:05:35:bc:46:63: 08:9d:19:7b:58:15:da:15:3e:bf:99:68:22:dd:61: 7f:3b:c1:e7:69:a1:32:43:10:f2:ca:31:2d:9f:0f: 80:2c:ce:e4:f3:c5:b5:8d:1f:fb:a0:f2:54:7d:73: 75:4f:cc:bd:4e:6d:35:10:77:e4:3b:a5:74:8f:7d: 9f:27:0b:ba:ec:ca:81:2f:45:57:4b:88:dc:3e:4e: 00:8d:7e:3c:82:d7:34:58:6a:48:6c:0c:7a:54:89: f5:44:e8:05:58:43:96:3b:ba:32:7b:1a:95:38:a6: 39:95:2a:8d:94:13:16:41:b9:e4:8a:50:70:38:32: 59:ae:a7:b9:0e:bc:5e:96:46:50:9f:86:e0:eb:ec: e1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A4:6E:28:8C:F2:54:08:B3:04:1C:51:4C:0C:74:6A:BE:96:C8:9C X509v3 Authority Key Identifier: keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:b4:0d:22:b5:ec:54:fb:9c:76:00:ea:b6:44:bb:25:f8:66: 3a:5d:7f:19:44:0d:f9:ba:47:8d:22:12:3d:cb:2d:ea:ee:40: 85:17:b6:29:67:72:a7:e0:ee:3a:5d:87:41:66:6e:62:14:f0: c0:bb:69:2b:c4:8b:fd:2e:33:0a:d8:47:fc:e5:ec:11:0e:ca: 6c:93:de:fc:ee:9a:e8:39:fd:93:33:4a:b5:46:6c:3c:92:47: 5f:1b:15:4d:0d:6e:9d:8e:00:a8:67:68:3b:a1:d9:f9:ed:78: 56:4a:cb:ba:98:25:c4:18:53:07:17:04:c0:0b:89:e8:67:6f: c5:43:d8:1d:5e:a1:21:ca:ef:77:21:58:e3:39:11:1c:f5:32: e7:15:6d:8b:48:77:90:89:18:51:96:7e:8a:f6:31:87:3a:e7: 9f:ea:e3:51:03:de:7e:e3:73:8c:fe:3d:7c:2e:c1:8a:ad:38: 39:a6:e9:d9:70:a9:b4:56:ec:1d:1b:aa:46:94:22:d7:40:91: 31:fb:fd:89:4f:0e:bc:1a:8b:3a:a0:ba:54:3e:49:f3:41:9e: ba:db:76:77:89:90:25:21:02:4d:3e:32:01:86:f7:c8:e9:a4: 81:f4:65:4a:9b:9b:e1:23:5c:e3:69:5c:0f:ce:3a:1d:18:a4: 10:6e:43:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM5REExMTAvBgNVBAUTKDJEMUUwRUE3N0FDQTNGRTU5N0RFRjMxOTYyMUVGNDBE MTJENEMxREMwHhcNMjUxMTA1MDUxMzM2WhcNMjUxMTEyMDUxMzM2WjAYMRYwFAYD VQQDEw02OTBhZGQwMC1kMGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSnkARKwtOzRK3/547yqlVlCMXTM8y6mT3xS2hkjzNaIz+Cbfjm5KPpwcQ+s rasRZ6nLSfhQOMQV9WYvt4O/OM/eqpNwtmnPN5okpD7B/yxT/OpIBdWHxZNyvHbH goWCWvTeDB2tu1PlNKl29VSfwzWZBTW8RmMInRl7WBXaFT6/mWgi3WF/O8HnaaEy QxDyyjEtnw+ALM7k88W1jR/7oPJUfXN1T8y9Tm01EHfkO6V0j32fJwu67MqBL0VX S4jcPk4AjX48gtc0WGpIbAx6VIn1ROgFWEOWO7oyexqVOKY5lSqNlBMWQbnkilBw ODJZrqe5DrxelkZQn4bg6+zhpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCykbiiM 8lQIswQcUUwMdGq+lsicMB8GA1UdIwQYMBaAFC0eDqd6yj/ll97zGWIe9A0S1MHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzlEQS82Q0I5RDBBNjJG QUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1AtV1gzdk1aWWg3MERSTFV3 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xSNE9wM3JLUC1XWDN2TVpZaDcwRFJMVXdkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzlEQS82Q0I5RDBBNjJGQUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1At V1gzdk1aWWg3MERSTFV3ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEtA0itexU+5x2AOq2RLsl+GY6XX8ZRA35ukeNIhI9yy3q7kCFF7Yp Z3Kn4O46XYdBZm5iFPDAu2krxIv9LjMK2Ef85ewRDspsk9787proOf2TM0q1Rmw8 kkdfGxVNDW6djgCoZ2g7odn57XhWSsu6mCXEGFMHFwTAC4noZ2/FQ9gdXqEhyu93 IVjjOREc9TLnFW2LSHeQiRhRln6K9jGHOuef6uNRA95+43OM/j18LsGKrTg5punZ cKm0VuwdG6pGlCLXQJEx+/2JTw68Gos6oLpUPknzQZ6623Z3iZAlIQJNPjIBhvfI 6aSB9GVKm5vhI1zjaVwPzjodGKQQbkNW -----END CERTIFICATE-----Generated at Wed Nov 5 07:54:39 2025 by rpki-client