$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: ZxuBggSPLY8Lxt9bvi7rMhpjhyBYDoHOgGCWQBalcEg= Subject key identifier: 51:47:99:59:11:E7:CE:17:8F:5C:65:51:2C:AB:D5:E4:C4:B8:56:1E Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: FB Signing time: Mon 03 Nov 2025 05:08:03 +0000 Manifest this update: Mon 03 Nov 2025 05:08:02 +0000 Manifest next update: Mon 10 Nov 2025 05:08:02 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: 2Zq2lHECfgORrfX7+Z1giwrBdR9mlOQqyjjtIOqTGWE=) 2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: XWY3Z0PrjeVbgUGRkkonKlE66Ol3xZjgkZ/1G2BNmmU=) 3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: clF6JNb3xxwZ4+TvE/qZQW2JPLeVEQfwTMXzv7FMnBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Nov 3 05:08:02 2025 GMT Not After : Nov 10 05:08:02 2025 GMT Subject: CN=690838b3-ac21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:45:a4:8f:ac:9e:ff:30:29:ff:99:c3:8a:21: 59:9d:b0:0c:85:ee:62:35:29:93:59:b3:b8:84:36: be:bb:9d:f8:1c:d8:fd:17:f5:ef:51:7b:54:6f:db: b5:0c:96:14:0a:08:ac:9e:0f:99:08:b2:48:f3:10: 98:a0:64:a5:a7:52:63:66:a4:0f:88:9a:a3:67:26: cc:04:c5:39:6d:32:7b:bc:c2:4f:85:a5:d5:56:e8: dc:ef:92:a2:4b:cb:50:55:b4:48:53:6a:5e:a9:a2: 55:45:c8:40:a2:5a:e0:3a:34:4e:48:46:cb:2f:46: 45:fb:3d:29:34:e6:ae:ff:9d:95:29:36:d2:32:3e: 70:24:c9:46:46:f5:58:be:be:4e:b1:a9:fa:81:80: b6:de:f7:8a:21:d4:c1:d8:fb:71:53:12:65:03:1a: ce:cf:9a:19:04:95:89:70:1f:ef:24:66:0c:c1:92: 91:89:3b:6c:3f:29:e9:59:9c:d1:27:68:a3:4d:57: c4:1a:6b:35:d5:37:f5:02:a5:2c:ce:ad:a5:dc:52: 4f:da:b3:4c:49:57:b6:8f:bc:da:ca:c6:bb:20:8b: aa:63:21:79:91:96:aa:6b:79:11:45:82:b6:8a:f5: 69:bb:6c:8a:6c:2c:78:57:e6:46:af:da:be:f0:71: f6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:47:99:59:11:E7:CE:17:8F:5C:65:51:2C:AB:D5:E4:C4:B8:56:1E X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:8e:07:f6:a7:e3:e2:72:73:28:52:73:63:76:73:8b:2a:7d: e3:97:ca:89:83:dc:ff:00:f8:47:50:cd:8f:cb:68:16:3e:e6: 43:86:9d:76:43:42:c7:98:4b:ab:cd:fc:66:52:96:5d:5c:b9: 23:44:75:da:a4:aa:bc:01:13:38:71:2d:69:40:e5:56:41:fe: dc:f6:e3:d6:a5:62:c4:e1:b8:c2:ef:bf:c8:92:bc:5f:ab:28: 74:a6:be:30:76:43:ae:47:84:48:6c:e6:03:d1:15:6a:c7:10: ca:5b:be:9a:1a:02:54:eb:89:a8:6e:d6:76:58:08:60:15:ae: 48:60:c9:9a:2b:ae:63:49:ad:55:97:0a:4d:c4:e9:6b:7c:e8: 79:09:f2:c0:f2:e8:d8:b9:9c:0e:58:db:32:64:12:96:ca:33: e7:85:7b:0d:95:10:7b:54:aa:b3:cd:91:3d:86:1e:c8:e3:f5: fa:06:a0:fa:0a:7d:33:61:66:13:c9:99:9c:5c:69:1a:3c:40: 4f:b2:66:07:3c:e9:dd:b9:69:ae:e9:03:9c:7c:24:b0:e2:f9: 59:10:a4:2b:2a:d5:39:0a:2a:fb:5e:64:30:d5:aa:7c:da:b0: fa:99:16:13:87:45:68:b8:c1:0b:c5:37:d2:c9:41:0c:93:6c: 42:d1:54:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjUxMTAzMDUwODAyWhcNMjUxMTEwMDUwODAyWjAYMRYwFAYD VQQDEw02OTA4MzhiMy1hYzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EWkj6ye/zAp/5nDiiFZnbAMhe5iNSmTWbO4hDa+u534HNj9F/XvUXtUb9u1 DJYUCgisng+ZCLJI8xCYoGSlp1JjZqQPiJqjZybMBMU5bTJ7vMJPhaXVVujc75Ki S8tQVbRIU2peqaJVRchAolrgOjROSEbLL0ZF+z0pNOau/52VKTbSMj5wJMlGRvVY vr5Osan6gYC23veKIdTB2PtxUxJlAxrOz5oZBJWJcB/vJGYMwZKRiTtsPynpWZzR J2ijTVfEGms11Tf1AqUszq2l3FJP2rNMSVe2j7zaysa7IIuqYyF5kZaqa3kRRYK2 ivVpu2yKbCx4V+ZGr9q+8HH2lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFHmVkR 584Xj1xlUSyr1eTEuFYeMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzjgf2p+PicnMoUnNjdnOLKn3jl8qJg9z/APhHUM2Py2gWPuZDhp12 Q0LHmEurzfxmUpZdXLkjRHXapKq8ARM4cS1pQOVWQf7c9uPWpWLE4bjC77/Ikrxf qyh0pr4wdkOuR4RIbOYD0RVqxxDKW76aGgJU64mobtZ2WAhgFa5IYMmaK65jSa1V lwpNxOlrfOh5CfLA8ujYuZwOWNsyZBKWyjPnhXsNlRB7VKqzzZE9hh7I4/X6BqD6 Cn0zYWYTyZmcXGkaPEBPsmYHPOnduWmu6QOcfCSw4vlZEKQrKtU5Cir7XmQw1ap8 2rD6mRYTh0VouMELxTfSyUEMk2xC0VRm -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:17 2025 by rpki-client