$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft File: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json) Hash identifier: Mbnne8Sdze9JtuVSbsr4QhNrEtzwWofhR+Yz6l9WOuE= Subject key identifier: D4:89:64:B4:0E:19:B2:5E:E5:0C:4D:DD:4C:C9:15:D5:E4:BD:C4:9A Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 Certificate issuer: /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft Manifest number: A0 Signing time: Mon 03 Nov 2025 06:18:01 +0000 Manifest this update: Mon 03 Nov 2025 06:18:00 +0000 Manifest next update: Mon 10 Nov 2025 06:18:00 +0000 Files and hashes: 1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: QSs2QfkTk2YeudQksvOhJqKXCIqjREku+WRaeA79IyM=) 2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: kwAnzY8sy28GuHuTAHp4dfauwLru447J5nFlWPhA168=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Validity Not Before: Nov 3 06:18:00 2025 GMT Not After : Nov 10 06:18:00 2025 GMT Subject: CN=69084919-67a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e1:bf:62:0d:75:7f:71:06:47:fe:4b:62:be: 96:53:4e:cd:aa:07:13:26:c8:8b:fd:7a:14:0c:ae: 60:8c:64:02:2a:ca:45:f4:64:dc:9c:5f:2b:c3:77: e9:cb:32:c3:69:5b:11:0c:6d:1c:c0:50:7b:01:a9: 9c:4b:9f:36:6e:01:ba:7f:89:79:35:1d:e4:ef:dc: 23:29:d2:67:7a:c6:b7:e0:23:fb:c0:2c:37:d2:11: d5:68:ba:b7:ac:5f:b3:0f:45:04:20:36:a9:fe:a4: 9a:cb:09:13:61:8b:67:bf:8b:91:3e:8a:c0:14:90: ca:10:b7:74:12:b0:61:a7:62:a1:69:e9:9e:7b:9a: cb:6b:16:be:d1:db:27:80:7a:40:87:b3:24:77:4c: de:fb:fe:bb:bf:7d:5d:90:f1:03:b3:17:ce:5d:32: fb:1d:00:dd:cf:c7:4c:43:ee:7b:fb:7f:b9:72:8f: 8d:f8:54:a9:f2:27:b1:43:60:c2:a7:92:00:95:a3: c6:40:dd:39:40:5e:80:83:bf:6a:44:49:14:91:c6: 58:f3:28:bf:88:3f:44:56:a4:fa:b6:29:d5:22:b5: c9:b2:78:12:48:c1:02:12:ad:f5:31:48:e9:d0:d3: 79:b5:d2:7f:d8:cb:38:51:68:b5:8d:25:da:ef:6b: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:89:64:B4:0E:19:B2:5E:E5:0C:4D:DD:4C:C9:15:D5:E4:BD:C4:9A X509v3 Authority Key Identifier: keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:30:96:b1:d9:31:2e:2d:44:01:89:79:32:14:80:a2:ba:f1: bf:f9:23:06:ed:20:b9:fb:40:3c:c3:02:32:f6:04:78:ef:30: b1:62:fc:f1:9f:92:df:fe:31:0c:1c:37:d6:9e:7d:e3:7b:01: ed:77:10:f1:36:99:0a:a7:de:87:71:09:6f:f6:a3:d3:e6:0d: 70:e2:bb:8b:1b:75:06:d6:66:be:6c:1a:68:3b:4c:1c:3a:85: 20:d7:2f:c6:3e:46:2f:46:a5:64:2d:9a:8b:ef:44:6d:fa:1f: 4b:b5:a9:a2:73:d8:ba:c9:0a:4b:2f:30:43:4a:45:b3:46:17: b8:01:cb:53:95:34:19:38:74:8e:99:50:e4:1e:76:6d:5d:c9: f4:6b:38:ed:e2:dc:99:7f:9f:76:5a:76:5d:00:de:fb:e4:55: 10:02:36:78:e7:a8:e3:26:ce:08:4c:45:02:d4:61:63:2a:b1: d3:15:38:ed:59:30:e8:1e:7d:ba:b7:5d:e9:c2:67:40:d6:9c: 9b:d7:18:f4:de:af:b7:ad:e9:7f:d8:85:e5:73:26:4e:96:14: ab:b6:c6:60:a6:d5:0c:40:17:2b:ce:ce:d7:c5:3d:8f:5e:45: 1c:73:29:4c:7f:c4:6e:7d:ac:1e:70:92:3f:f5:41:2f:a6:ab: 59:8f:a6:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyMDcxMTAvBgNVBAUTKDJEMjIzQjU2RUQ0RDE3QTgxNzhGRTlGQzYzRTM4MDFB OTNCNUExRDMwHhcNMjUxMTAzMDYxODAwWhcNMjUxMTEwMDYxODAwWjAYMRYwFAYD VQQDEw02OTA4NDkxOS02N2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6eG/Yg11f3EGR/5LYr6WU07NqgcTJsiL/XoUDK5gjGQCKspF9GTcnF8rw3fp yzLDaVsRDG0cwFB7AamcS582bgG6f4l5NR3k79wjKdJnesa34CP7wCw30hHVaLq3 rF+zD0UEIDap/qSaywkTYYtnv4uRPorAFJDKELd0ErBhp2Khaemee5rLaxa+0dsn gHpAh7Mkd0ze+/67v31dkPEDsxfOXTL7HQDdz8dMQ+57+3+5co+N+FSp8iexQ2DC p5IAlaPGQN05QF6Ag79qREkUkcZY8yi/iD9EVqT6tinVIrXJsngSSMECEq31MUjp 0NN5tdJ/2Ms4UWi1jSXa72trTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSJZLQO GbJe5QxN3UzJFdXkvcSaMB8GA1UdIwQYMBaAFC0iO1btTReoF4/p/GPjgBqTtaHT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjIwNy9BQ0IwNjg1RUMy MjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2Z1hqLW44WS1PQUdwTzFv ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9kTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjIwNy9BQ0IwNjg1RUMyMjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2 Z1hqLW44WS1PQUdwTzFvZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjMJax2TEuLUQBiXkyFICiuvG/+SMG7SC5+0A8wwIy9gR47zCxYvzx n5Lf/jEMHDfWnn3jewHtdxDxNpkKp96HcQlv9qPT5g1w4ruLG3UG1ma+bBpoO0wc OoUg1y/GPkYvRqVkLZqL70Rt+h9Ltamic9i6yQpLLzBDSkWzRhe4ActTlTQZOHSO mVDkHnZtXcn0azjt4tyZf592WnZdAN775FUQAjZ456jjJs4ITEUC1GFjKrHTFTjt WTDoHn26t13pwmdA1pyb1xj03q+3rel/2IXlcyZOlhSrtsZgptUMQBcrzs7XxT2P XkUccylMf8RufawecJI/9UEvpqtZj6aP -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:11 2025 by rpki-client