$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft File: LsRLn8Flw7yChYEsMTzHgBmI_zE.mft (raw, json) Hash identifier: 2yYlUdaTIBECDxH0Rn61mrzX/+tRihH/zyIP5aA9o9c= Subject key identifier: 2F:B1:1F:40:0B:19:48:4A:92:F6:85:94:EB:6A:52:7C:79:60:02:91 Authority key identifier: 2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 Certificate issuer: /CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Certificate serial: 1244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft Manifest number: 1223 Signing time: Tue 04 Nov 2025 17:14:33 +0000 Manifest this update: Tue 04 Nov 2025 17:14:33 +0000 Manifest next update: Tue 11 Nov 2025 17:14:33 +0000 Files and hashes: 1: LsRLn8Flw7yChYEsMTzHgBmI_zE.crl (hash: eMp/R1T606vdaklm/5nYfn+P/VPniubW8dRvLTY6miM=) 2: 96D571D41FEB11F0A2AEE444C4F9AE02.roa (hash: nRERsNzlprKA9xVdUB5MTKCV5NYn4X6gB4JWqfSoRiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4676 (0x1244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA164, serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Validity Not Before: Nov 4 17:14:33 2025 GMT Not After : Nov 11 17:14:33 2025 GMT Subject: CN=690a3479-cf7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e3:bc:12:35:91:13:e9:25:9e:45:33:2f:1c: 4c:4e:5b:fe:de:51:8f:ae:fa:31:6a:53:87:8c:7d: 3c:b9:a2:3f:d3:4f:c0:be:37:9a:ec:21:c2:a6:67: f9:ac:6b:a6:54:5c:be:9c:21:e2:f8:fa:12:46:21: 36:09:fe:7e:03:51:15:86:69:14:e3:b1:96:5b:bd: 51:86:00:dd:42:3d:d5:68:80:53:08:1c:37:d7:9c: 4f:b2:bc:ca:c6:be:08:8c:fd:d2:bf:f4:7f:32:14: 67:82:d5:0d:ed:0b:98:0d:77:8e:b9:09:cc:1a:0f: fa:6d:3c:5e:3d:bf:e1:1b:2f:ac:ae:af:8f:bd:15: 07:ac:4f:d6:0e:79:48:cb:6b:d5:49:ce:88:52:e5: 53:a0:8d:54:cf:e5:bd:c2:f2:ac:21:7b:29:36:e7: 54:96:a9:86:3f:59:71:9a:33:33:40:b8:06:8a:d3: e3:1a:7d:02:8e:63:e3:de:91:b0:a1:8f:48:41:bd: bf:af:69:61:b9:03:4f:f2:c1:19:26:51:38:e7:7e: 54:b2:fd:48:50:fa:98:ad:a5:cd:47:1f:eb:02:52: 50:02:f8:fc:1b:5a:7b:df:0f:90:34:97:f7:52:05: be:9b:07:87:60:5c:b2:ca:15:65:e4:1e:cb:6d:7c: bd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B1:1F:40:0B:19:48:4A:92:F6:85:94:EB:6A:52:7C:79:60:02:91 X509v3 Authority Key Identifier: keyid:2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:43:43:ba:e0:b7:f3:cf:98:ba:21:fa:67:24:2b:3a:16:64: d7:45:c2:52:00:ec:d1:51:bd:a8:b0:6d:f5:9e:2a:7d:fa:19: 1b:d0:fe:71:a7:32:82:ee:0a:52:48:f0:c6:03:1e:44:cd:32: bb:c4:d1:49:05:7b:7c:6b:42:7e:3c:30:68:24:45:83:53:84: ec:18:0e:b1:c7:6f:06:1e:fd:52:d8:c6:f0:0f:1c:30:12:89: f7:27:18:5c:5c:9f:50:3a:d6:9f:d8:4a:fe:8e:15:be:c2:97: 19:ce:b9:a2:fb:97:f3:03:17:4d:0a:b7:53:fe:7a:06:ab:46: 67:e4:45:ae:fc:c5:63:04:0c:ce:9a:ba:20:2d:d5:08:37:b6: be:e8:08:47:65:ee:c3:10:9f:f6:d9:a0:b6:e0:e1:44:41:58: 1f:d5:cb:d3:75:b4:76:0c:a8:43:3c:9c:dc:2c:40:74:30:1b: 1d:f8:b6:80:bf:35:10:a3:70:55:b0:7a:3f:09:c2:b7:a7:72: c5:25:8d:5d:b6:40:5a:66:4a:00:fd:69:4f:5e:d5:d3:d8:b8: d0:bf:12:b0:39:14:7b:2b:bf:9e:17:3d:df:cb:08:3a:68:8e: 83:6e:c9:25:15:8d:be:b0:23:6f:78:30:86:b2:0a:1f:89:45: e5:11:27:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExNjQxMTAvBgNVBAUTKDJFQzQ0QjlGQzE2NUMzQkM4Mjg1ODEyQzMxM0NDNzgw MTk4OEZGMzEwHhcNMjUxMTA0MTcxNDMzWhcNMjUxMTExMTcxNDMzWjAYMRYwFAYD VQQDEw02OTBhMzQ3OS1jZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5OO8EjWRE+klnkUzLxxMTlv+3lGPrvoxalOHjH08uaI/00/Avjea7CHCpmf5 rGumVFy+nCHi+PoSRiE2Cf5+A1EVhmkU47GWW71RhgDdQj3VaIBTCBw315xPsrzK xr4IjP3Sv/R/MhRngtUN7QuYDXeOuQnMGg/6bTxePb/hGy+srq+PvRUHrE/WDnlI y2vVSc6IUuVToI1Uz+W9wvKsIXspNudUlqmGP1lxmjMzQLgGitPjGn0CjmPj3pGw oY9IQb2/r2lhuQNP8sEZJlE4535Usv1IUPqYraXNRx/rAlJQAvj8G1p73w+QNJf3 UgW+mweHYFyyyhVl5B7LbXy9cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+xH0AL GUhKkvaFlOtqUnx5YAKRMB8GA1UdIwQYMBaAFC7ES5/BZcO8goWBLDE8x4AZiP8x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTE2NC9BRkM1OTJFQ0Yz MUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3eUNoWUVzTVR6SGdCbUlf ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzUkxuOEZsdzd5Q2hZRXNNVHpIZ0JtSV96RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTE2NC9BRkM1OTJFQ0YzMUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3 eUNoWUVzTVR6SGdCbUlfekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIQ0O64Lfzz5i6IfpnJCs6FmTXRcJSAOzRUb2osG31nip9+hkb0P5x pzKC7gpSSPDGAx5EzTK7xNFJBXt8a0J+PDBoJEWDU4TsGA6xx28GHv1S2MbwDxww Eon3JxhcXJ9QOtaf2Er+jhW+wpcZzrmi+5fzAxdNCrdT/noGq0Zn5EWu/MVjBAzO mrogLdUIN7a+6AhHZe7DEJ/22aC24OFEQVgf1cvTdbR2DKhDPJzcLEB0MBsd+LaA vzUQo3BVsHo/CcK3p3LFJY1dtkBaZkoA/WlPXtXT2LjQvxKwORR7K7+eFz3fywg6 aI6DbsklFY2+sCNveDCGsgofiUXlESeh -----END CERTIFICATE-----Generated at Wed Nov 5 19:17:12 2025 by rpki-client