$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json) Hash identifier: /ltYI8ZlmsrUrI4JEc1uohXgVB3w9ZMC8SC4+wVFpBk= Subject key identifier: 21:E6:EA:2A:05:D5:D9:68:22:33:5D:13:AD:E3:9C:E0:52:20:9C:AE Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Certificate serial: 09AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft Manifest number: 0980 Signing time: Tue 04 Nov 2025 20:15:15 +0000 Manifest this update: Tue 04 Nov 2025 20:15:15 +0000 Manifest next update: Tue 11 Nov 2025 20:15:15 +0000 Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: vaNxWVoIfYdeuGyjSEscqM/ikcCj527Rk86hsv58FGQ=) 2: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: VB8lXHaRWCgJbChk21N3X1tByJzueb4oQFsyi3R2FSI=) 3: 570B25FA305111F0BED81784C4F9AE02.roa (hash: HRghPtYyJF7KhObZGzOSLoHVq6GqZy5jEHbcGyo6zuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2477 (0x9ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Validity Not Before: Nov 4 20:15:15 2025 GMT Not After : Nov 11 20:15:15 2025 GMT Subject: CN=690a5ed3-404a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a4:35:c4:38:b3:9d:d3:47:f2:f7:af:76:d2: 42:4a:6e:10:91:08:4a:f9:6b:c9:e2:5b:ae:1f:4d: 1b:ae:00:db:4a:b5:74:f2:78:ca:7d:ed:5a:61:14: 16:56:41:9a:61:71:0e:df:2b:df:b6:ef:29:ec:c7: f5:e3:ba:37:a1:f6:c9:98:19:12:6a:d8:cf:02:55: e6:80:90:ac:db:2d:e8:1a:b5:d3:5c:3d:dd:3c:e6: e6:80:52:6d:25:9d:d5:ee:24:94:f3:c0:9b:60:f5: 5a:f4:7e:ee:b3:53:b1:b6:39:16:3a:16:f5:0b:18: 29:6c:b9:21:ef:65:07:4c:90:93:ba:8a:1b:2d:c0: 56:e9:4c:a1:bb:7b:73:a5:66:53:94:e5:b2:6e:97: b7:cc:27:fe:2e:ef:f9:9b:c6:21:9d:29:f8:12:e9: 39:72:de:4d:e5:a6:40:12:e6:cc:0d:15:63:a1:c5: 31:4f:ec:e9:2c:b2:d3:5e:fb:1b:de:ae:17:a6:70: 47:ae:aa:12:ab:09:fc:c9:21:5e:b4:12:1b:b2:e6: 8f:3f:7b:a7:c8:aa:7b:62:59:d0:82:6c:c4:b6:52: e7:6d:35:36:c2:cb:a5:5b:0b:72:e7:33:fa:b5:f9: 55:84:72:d0:5f:b2:38:7e:7a:ec:fe:1b:8a:cf:98: 83:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E6:EA:2A:05:D5:D9:68:22:33:5D:13:AD:E3:9C:E0:52:20:9C:AE X509v3 Authority Key Identifier: keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:25:8a:bf:2c:7b:06:f7:96:55:c0:2b:57:d1:fc:dd:24:e6: 85:13:9d:5e:11:fc:91:7d:89:b4:93:90:43:33:fd:a6:92:ad: 8d:30:06:13:79:96:4a:c8:aa:c8:52:ba:eb:b0:cc:59:7c:6d: f9:4d:a6:be:a9:cb:23:fd:59:a5:35:33:37:08:68:45:4d:2e: 69:4a:a3:80:09:37:06:48:79:d1:5d:51:f8:94:a5:35:a8:a6: 5d:68:cd:73:60:f3:38:42:9b:01:a4:4b:c3:2b:01:e0:b9:bb: fb:09:fb:ba:1e:b8:a0:ca:5f:af:4c:10:c8:00:73:bb:40:82: 4f:89:9c:dd:c2:c0:c1:14:e1:fa:74:40:25:81:54:48:ce:d7: b5:a8:1e:27:3f:97:a2:5f:32:df:7f:ff:53:c1:18:2f:18:34: 53:bc:50:bb:04:e9:dd:2f:94:2a:1e:6e:4f:ad:a0:50:f1:c5: 03:1d:82:6f:00:7d:ce:e9:09:a5:2d:e3:e2:f8:0f:2b:0a:99: ad:cc:1f:b0:92:23:44:50:87:2c:4c:35:3e:98:7f:83:a8:8a: 18:3c:7f:0f:75:b7:34:43:cd:78:bf:0e:e8:2b:48:7f:be:02: 99:15:a4:79:32:c7:fb:73:52:ef:db:df:68:ba:11:15:1e:d9: cc:03:62:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz NDg0MjVCMTcwHhcNMjUxMTA0MjAxNTE1WhcNMjUxMTExMjAxNTE1WjAYMRYwFAYD VQQDEw02OTBhNWVkMy00MDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46Q1xDizndNH8vevdtJCSm4QkQhK+WvJ4luuH00brgDbSrV08njKfe1aYRQW VkGaYXEO3yvftu8p7Mf147o3ofbJmBkSatjPAlXmgJCs2y3oGrXTXD3dPObmgFJt JZ3V7iSU88CbYPVa9H7us1OxtjkWOhb1CxgpbLkh72UHTJCTuoobLcBW6Uyhu3tz pWZTlOWybpe3zCf+Lu/5m8YhnSn4Euk5ct5N5aZAEubMDRVjocUxT+zpLLLTXvsb 3q4XpnBHrqoSqwn8ySFetBIbsuaPP3unyKp7YlnQgmzEtlLnbTU2wsulWwty5zP6 tflVhHLQX7I4fnrs/huKz5iDiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHm6ioF 1dloIjNdE63jnOBSIJyuMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5 ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQ4Ni84NTZBMjQ5Q0E5ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5a MTlNNG8tb0M5OFUwaENXeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuJYq/LHsG95ZVwCtX0fzdJOaFE51eEfyRfYm0k5BDM/2mkq2NMAYT eZZKyKrIUrrrsMxZfG35Taa+qcsj/VmlNTM3CGhFTS5pSqOACTcGSHnRXVH4lKU1 qKZdaM1zYPM4QpsBpEvDKwHgubv7Cfu6Hrigyl+vTBDIAHO7QIJPiZzdwsDBFOH6 dEAlgVRIzte1qB4nP5eiXzLff/9TwRgvGDRTvFC7BOndL5QqHm5PraBQ8cUDHYJv AH3O6QmlLePi+A8rCpmtzB+wkiNEUIcsTDU+mH+DqIoYPH8Pdbc0Q814vw7oK0h/ vgKZFaR5Msf7c1Lv299ouhEVHtnMA2Jc -----END CERTIFICATE-----Generated at Wed Nov 5 22:26:34 2025 by rpki-client