$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft File: LhWWOMt5D3lFFyLlKs602oBfi5c.mft (raw, json) Hash identifier: hfjzIkMeqBwybAfA/Vw2r/TNwyNN46B9odU6/igF4MQ= Subject key identifier: C2:7C:AD:62:01:56:C8:3F:91:2A:67:2C:2E:C3:FC:7C:E9:09:47:89 Authority key identifier: 2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97 Certificate issuer: /CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97 Certificate serial: 06A3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft Manifest number: 06A2 Signing time: Tue 04 Nov 2025 22:21:56 +0000 Manifest this update: Tue 04 Nov 2025 22:21:55 +0000 Manifest next update: Tue 11 Nov 2025 22:21:55 +0000 Files and hashes: 1: LhWWOMt5D3lFFyLlKs602oBfi5c.crl (hash: ki49oYLcM9LLdQ3ooLnh9iS3TBwJorRIeqx82b7CVXQ=) 2: 6981A2B8879A11F0A06BE519C4F9AE02.roa (hash: 7R6c3P6vpeH4DdhQAPICMa8Q+S+CZI2f3bujefwXy6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1699 (0x6a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E13, serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97 Validity Not Before: Nov 4 22:21:55 2025 GMT Not After : Nov 11 22:21:55 2025 GMT Subject: CN=690a7c84-3e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:67:6e:1e:8b:e6:be:8f:ba:03:3d:5f:a4:e2: 71:b6:42:22:09:c5:52:51:f6:0f:4f:70:dc:e2:bd: 19:46:2f:88:8f:7b:54:a7:db:49:d7:6f:46:ee:a2: b2:b4:61:a8:d0:65:c1:29:38:0b:0b:40:3f:80:a2: 00:d7:06:60:d2:a6:5f:77:f0:85:b2:c3:56:3b:c0: 45:fa:3e:c2:af:8b:9a:de:27:09:7f:63:dd:9b:a6: 05:59:66:ee:b4:eb:ef:f9:88:65:28:33:02:d1:3b: 87:a2:11:44:df:5b:58:8b:19:bf:bd:8a:a6:55:09: 51:5a:fb:98:85:b8:63:2b:68:c1:48:c6:c4:61:bd: 9f:2a:f8:f8:c2:35:be:a8:65:bf:dd:2f:be:3e:ba: b7:f3:cc:59:84:b1:6b:1d:00:7e:66:4d:76:24:4e: 8f:fc:cc:02:68:76:44:45:c3:86:36:bd:25:b7:54: 0a:60:78:ec:f3:0b:5c:bb:eb:a1:3d:e1:15:78:b5: 12:df:41:c5:ae:94:c6:50:3d:10:3b:ad:81:5b:2a: 53:3f:28:fb:63:59:56:9d:63:31:3c:be:6a:49:e5: 71:2b:14:c4:4a:40:8a:bb:a0:36:bb:b1:ed:de:1f: 11:38:39:aa:4f:95:b2:29:f6:aa:1e:92:66:fb:97: 6f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7C:AD:62:01:56:C8:3F:91:2A:67:2C:2E:C3:FC:7C:E9:09:47:89 X509v3 Authority Key Identifier: keyid:2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:23:51:d1:cc:a1:d0:a1:ff:86:e2:fd:55:a0:c7:a6:d9:31: 43:45:19:83:c0:35:69:48:2f:43:be:4f:26:23:36:01:d3:b9: 89:ad:a3:65:26:c7:c5:39:82:b3:f3:60:e4:ee:73:43:65:fe: 4a:0a:de:43:93:ad:86:84:a5:0a:8e:53:3f:cc:a3:b3:87:62: 27:db:b3:aa:3c:4d:ed:86:87:0a:7b:68:3b:55:64:ba:9d:60: 7a:59:77:6f:23:2d:5d:ae:df:d4:c6:10:9e:50:ff:e4:9b:53: b3:0b:c7:d5:83:8e:c3:23:42:1d:a3:26:60:b0:3d:b4:8e:f1: 2c:d4:af:39:4d:30:91:e0:6c:ba:89:5f:8f:7b:de:df:6e:d9: 01:d5:37:9e:38:a5:cf:b8:3f:cb:84:af:56:13:e1:24:dc:f0: cb:ac:78:48:3d:08:c2:97:98:52:a8:08:e0:f0:82:87:5a:50: 70:85:48:1c:37:aa:cf:f9:5a:f4:a3:06:6e:5c:10:aa:7a:6a: 80:68:62:24:c7:aa:8c:e7:fe:81:64:8b:88:0b:63:2c:c5:44: d8:64:b5:b4:1b:6b:11:82:5a:6a:16:a1:3e:5c:65:10:00:56: 6d:45:ca:b5:98:e8:d4:23:91:92:8d:c1:e5:96:5d:fa:c3:49: 04:f6:7d:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFMTMxMTAvBgNVBAUTKDJFMTU5NjM4Q0I3OTBGNzk0NTE3MjJFNTJBQ0VCNERB ODA1RjhCOTcwHhcNMjUxMTA0MjIyMTU1WhcNMjUxMTExMjIyMTU1WjAYMRYwFAYD VQQDEw02OTBhN2M4NC0zZThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02duHovmvo+6Az1fpOJxtkIiCcVSUfYPT3Dc4r0ZRi+Ij3tUp9tJ129G7qKy tGGo0GXBKTgLC0A/gKIA1wZg0qZfd/CFssNWO8BF+j7Cr4ua3icJf2Pdm6YFWWbu tOvv+YhlKDMC0TuHohFE31tYixm/vYqmVQlRWvuYhbhjK2jBSMbEYb2fKvj4wjW+ qGW/3S++Prq388xZhLFrHQB+Zk12JE6P/MwCaHZERcOGNr0lt1QKYHjs8wtcu+uh PeEVeLUS30HFrpTGUD0QO62BWypTPyj7Y1lWnWMxPL5qSeVxKxTESkCKu6A2u7Ht 3h8RODmqT5WyKfaqHpJm+5dv6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJ8rWIB Vsg/kSpnLC7D/HzpCUeJMB8GA1UdIwQYMBaAFC4VljjLeQ95RRci5SrOtNqAX4uX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUUxMy8wRkE1RjBEMDg2 NkIxMUVCOUJGRDRGMzJDNEY5QUUwMi9MaFdXT010NUQzbEZGeUxsS3M2MDJvQmZp NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0xoV1dPTXQ1RDNsRkZ5TGxLczYwMm9CZmk1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUUxMy8wRkE1RjBEMDg2NkIxMUVCOUJGRDRGMzJDNEY5QUUwMi9MaFdXT010NUQz bEZGeUxsS3M2MDJvQmZpNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5I1HRzKHQof+G4v1VoMem2TFDRRmDwDVpSC9Dvk8mIzYB07mJraNl JsfFOYKz82Dk7nNDZf5KCt5Dk62GhKUKjlM/zKOzh2In27OqPE3thocKe2g7VWS6 nWB6WXdvIy1drt/UxhCeUP/km1OzC8fVg47DI0IdoyZgsD20jvEs1K85TTCR4Gy6 iV+Pe97fbtkB1TeeOKXPuD/LhK9WE+Ek3PDLrHhIPQjCl5hSqAjg8IKHWlBwhUgc N6rP+Vr0owZuXBCqemqAaGIkx6qM5/6BZIuIC2MsxUTYZLW0G2sRglpqFqE+XGUQ AFZtRcq1mOjUI5GSjcHlll36w0kE9n3u -----END CERTIFICATE-----Generated at Wed Nov 5 11:48:54 2025 by rpki-client