$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft File: aLP_FmWJyEQaRP3KYfQrOmOuESk.mft (raw, json) Hash identifier: ZPPTGJ1Am5R6HuujvqpEvNRsw7xi2App9KS9JHLUwMw= Subject key identifier: 3C:BC:5D:04:DA:84:E7:EC:3F:75:9A:A5:63:2F:9D:40:52:7B:41:4C Authority key identifier: 68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29 Certificate issuer: /CN=A91A2C5D/serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129 Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft Manifest number: 01B0 Signing time: Wed 05 Nov 2025 04:06:21 +0000 Manifest this update: Wed 05 Nov 2025 04:06:21 +0000 Manifest next update: Wed 12 Nov 2025 04:06:21 +0000 Files and hashes: 1: aLP_FmWJyEQaRP3KYfQrOmOuESk.crl (hash: 0IipIfEq64fHogmPoPAD2kdnJYEW8g8+1W5BoMows3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129 Validity Not Before: Nov 5 04:06:21 2025 GMT Not After : Nov 12 04:06:21 2025 GMT Subject: CN=690acd3d-a112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:55:d6:c8:b8:9b:91:be:5c:46:27:36:1c:18: 9c:b9:88:22:d0:97:80:1c:ba:7d:90:86:bd:df:c2: 3f:69:32:c2:b0:e7:42:c8:0c:04:2a:3b:4c:0a:d7: d8:7a:14:71:30:d5:de:06:11:aa:32:17:63:6b:ac: 16:a8:0c:13:ef:d7:de:58:65:00:33:74:45:0b:25: 5c:f0:ac:c8:4d:b7:19:c0:0d:0b:9e:e1:f9:f1:ae: 63:5a:53:23:5c:95:14:8d:29:93:f2:85:37:2f:20: 00:1c:cf:10:2f:07:74:0c:cb:54:a2:65:ec:f6:ca: 96:06:d7:07:ba:ad:80:49:a5:af:a2:7a:aa:e4:b1: 90:c8:a2:88:12:27:b4:52:ac:5f:62:f0:b5:ca:4d: cb:1f:15:10:2c:f7:0a:d8:74:da:d1:39:85:a5:c3: 81:a7:5c:6d:7f:80:4d:ba:a6:67:f4:80:f1:e7:1a: 62:ab:c3:0d:7b:5a:6c:2b:13:1f:e5:dd:b7:27:94: b4:10:58:e8:aa:dc:99:ed:00:45:ba:a6:ee:20:67: 46:db:68:83:c6:1e:c1:b7:49:20:e6:7e:fc:a4:20: 2c:dd:f4:ed:50:ed:71:4a:c5:1b:4d:db:e7:56:5a: 6a:f8:ce:c1:20:ce:87:e5:e6:81:dc:8c:6c:a0:8c: bd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BC:5D:04:DA:84:E7:EC:3F:75:9A:A5:63:2F:9D:40:52:7B:41:4C X509v3 Authority Key Identifier: keyid:68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:85:70:c2:fd:19:ee:c9:84:c0:19:0c:02:cb:1b:c4:a9:31: 47:df:22:34:6e:06:8d:7b:56:d3:34:e7:d6:4d:41:14:a0:17: 3d:dc:40:42:e5:3c:ad:31:62:c9:26:56:af:be:02:4d:96:b4: 9d:11:bd:2f:91:90:62:11:1c:c5:aa:63:83:de:d4:00:2e:9d: 8d:bc:e7:97:3f:f1:9e:d5:18:e8:a6:91:2a:ce:64:69:55:35: b3:6d:d0:09:31:c2:8f:5d:fc:6b:1b:9b:67:51:c7:da:99:e5: 2e:47:a7:40:af:e0:80:e2:56:bb:46:38:e6:19:16:e6:d5:44: ad:ef:24:09:71:d2:c7:e6:6e:bb:6d:46:30:d5:2a:fe:8c:06: 79:19:da:f7:50:e9:63:13:29:85:82:0c:7e:c9:e8:1f:a5:f5: e1:09:aa:92:4c:fc:ae:6c:03:f6:3f:42:39:31:0c:2c:0f:32: b7:e4:ba:8e:29:52:93:b7:ca:bb:a0:38:2c:8d:44:51:6b:76: 71:c2:51:07:3f:fe:64:ea:0d:8e:bc:98:f6:fc:02:d3:20:bf: 51:3d:b5:6d:aa:c7:36:5d:46:53:76:64:08:ea:f1:41:ef:40: e9:7b:88:dc:5c:b5:52:05:21:9b:57:fe:48:71:e7:af:7e:c1: 73:a3:46:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUQxMTAvBgNVBAUTKDY4QjNGRjE2NjU4OUM4NDQxQTQ0RkRDQTYxRjQyQjNB NjNBRTExMjkwHhcNMjUxMTA1MDQwNjIxWhcNMjUxMTEyMDQwNjIxWjAYMRYwFAYD VQQDEw02OTBhY2QzZC1hMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7FXWyLibkb5cRic2HBicuYgi0JeAHLp9kIa938I/aTLCsOdCyAwEKjtMCtfY ehRxMNXeBhGqMhdja6wWqAwT79feWGUAM3RFCyVc8KzITbcZwA0LnuH58a5jWlMj XJUUjSmT8oU3LyAAHM8QLwd0DMtUomXs9sqWBtcHuq2ASaWvonqq5LGQyKKIEie0 UqxfYvC1yk3LHxUQLPcK2HTa0TmFpcOBp1xtf4BNuqZn9IDx5xpiq8MNe1psKxMf 5d23J5S0EFjoqtyZ7QBFuqbuIGdG22iDxh7Bt0kg5n78pCAs3fTtUO1xSsUbTdvn Vlpq+M7BIM6H5eaB3IxsoIy9DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDy8XQTa hOfsP3WapWMvnUBSe0FMMB8GA1UdIwQYMBaAFGiz/xZlichEGkT9ymH0KzpjrhEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1RC8zQjlERDQxMDky QzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9hTFBfRm1XSnlFUWFSUDNLWWZRck9tT3VF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FMUF9GbVdKeUVRYVJQM0tZZlFyT21PdUVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1RC8zQjlERDQxMDkyQzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9hTFBfRm1XSnlF UWFSUDNLWWZRck9tT3VFU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKhXDC/RnuyYTAGQwCyxvEqTFH3yI0bgaNe1bTNOfWTUEUoBc93EBC 5TytMWLJJlavvgJNlrSdEb0vkZBiERzFqmOD3tQALp2NvOeXP/Ge1RjoppEqzmRp VTWzbdAJMcKPXfxrG5tnUcfameUuR6dAr+CA4la7RjjmGRbm1USt7yQJcdLH5m67 bUYw1Sr+jAZ5Gdr3UOljEymFggx+yegfpfXhCaqSTPyubAP2P0I5MQwsDzK35LqO KVKTt8q7oDgsjURRa3ZxwlEHP/5k6g2OvJj2/ALTIL9RPbVtqsc2XUZTdmQI6vFB 70Dpe4jcXLVSBSGbV/5IceevfsFzo0bt -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:15 2025 by rpki-client