$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft File: lfCdXluLzW9LTWm1yTbJEvd9LP0.mft (raw, json) Hash identifier: hl30NEpo0bEMVu6Y5ngIOw2JrK/v6uaeVwMuNvXz6yU= Subject key identifier: EF:88:98:57:82:3D:D0:DF:D4:32:CB:DC:A9:45:57:0F:E8:4E:B1:51 Authority key identifier: 95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD Certificate issuer: /CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft Manifest number: E6 Signing time: Wed 05 Nov 2025 05:42:49 +0000 Manifest this update: Wed 05 Nov 2025 05:42:49 +0000 Manifest next update: Wed 12 Nov 2025 05:42:49 +0000 Files and hashes: 1: lfCdXluLzW9LTWm1yTbJEvd9LP0.crl (hash: BsDstMb3oxRK9wklLuH6yrpdajCCuADIwyPwwP9Lkq8=) 2: B23569E2756511EFB018F20DC4F9AE02.roa (hash: 5VNZ8rNXbQQKdKelf/v7rMupqWLx2zXfYFtsUljtzac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE, serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Validity Not Before: Nov 5 05:42:49 2025 GMT Not After : Nov 12 05:42:49 2025 GMT Subject: CN=690ae3d9-487e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:6e:9b:35:d2:f4:9a:70:4d:c5:10:01:2e: 64:2b:4b:31:23:65:54:1d:98:1f:a1:13:b9:67:06: 9b:04:7d:20:36:c1:17:73:c7:45:ec:eb:4f:80:e1: e2:60:bf:27:cc:d5:d9:79:52:ab:12:70:86:ae:aa: 82:5a:f6:e2:d8:38:41:df:0c:f4:4c:6d:a5:64:a9: 4d:e9:1f:c1:11:fe:22:ad:1d:81:47:c2:24:b9:b4: 72:96:21:3f:83:89:0f:2a:0f:63:a8:3a:88:1b:be: 2d:db:56:24:5a:55:d8:ef:ae:b4:b9:7f:41:10:a6: 40:88:3c:5c:b5:a1:22:fa:de:23:39:8b:0a:18:f0: ad:b5:c5:99:58:4a:9c:eb:d7:76:95:50:c9:ba:ac: e8:ed:0b:1f:4e:94:a9:97:21:a4:a5:63:0f:12:b4: 1f:51:7f:1f:b9:31:47:4c:6d:b7:c8:8a:7c:74:b0: 40:a5:72:80:61:61:9c:c7:b4:80:51:f4:03:cd:f1: db:01:57:1e:a4:6e:73:f5:2f:72:a1:e7:8d:93:7e: 01:c0:13:c5:bd:02:aa:c1:28:b8:bc:43:2b:f2:91: 8f:31:3a:82:f3:fb:59:7c:f7:5b:34:b3:45:5b:23: f9:3b:c2:4f:4e:5d:ea:b3:96:b5:66:1d:ba:6f:1f: c1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:88:98:57:82:3D:D0:DF:D4:32:CB:DC:A9:45:57:0F:E8:4E:B1:51 X509v3 Authority Key Identifier: keyid:95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:90:18:c5:7e:b9:7e:27:eb:3b:b4:27:cd:8c:72:b0:0f:5e: b8:76:de:19:c2:3d:6f:7c:f3:6b:71:05:bd:df:d6:ff:ba:ca: dd:7a:a7:f5:63:ea:87:e0:cf:7c:d7:f5:c2:e3:31:67:c7:27: 49:3e:21:60:08:ef:79:26:d5:c7:26:be:c4:19:b7:89:36:49: e4:25:19:ea:3e:b5:8c:77:2c:c2:7c:02:8b:45:d1:49:37:c5: 19:2d:16:9d:d0:dc:6a:b7:2a:17:0e:de:a7:f8:c0:8d:b8:52: f3:4f:40:40:d9:0c:4a:aa:e0:94:5d:ad:b7:d0:ab:38:d4:52: 34:d6:0d:63:b0:b2:f1:17:68:ff:65:10:de:d9:14:7d:af:b4: b7:a8:bc:d7:9c:58:66:cd:f5:5e:fb:04:c7:80:6d:83:61:90: ca:27:29:d6:5f:9f:d9:61:b4:60:fb:d1:9e:f9:8b:62:35:95: d8:a1:81:9d:65:6d:25:0b:6c:4d:5d:85:ea:d6:01:26:94:8a: b0:51:1e:47:fc:e5:84:90:b2:33:d4:f1:00:59:f3:e0:0a:2a: 10:ce:d3:4b:1c:6a:b1:ce:30:dd:57:9c:97:5e:36:d1:79:4c: e8:66:5d:08:5c:af:0c:78:6e:40:f4:03:b3:91:02:9f:15:f0: 3a:5e:46:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0QkUxMTAvBgNVBAUTKDk1RjA5RDVFNUI4QkNENkY0QjRENjlCNUM5MzZDOTEy Rjc3RDJDRkQwHhcNMjUxMTA1MDU0MjQ5WhcNMjUxMTEyMDU0MjQ5WjAYMRYwFAYD VQQDEw02OTBhZTNkOS00ODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtX9umzXS9JpwTcUQAS5kK0sxI2VUHZgfoRO5ZwabBH0gNsEXc8dF7OtPgOHi YL8nzNXZeVKrEnCGrqqCWvbi2DhB3wz0TG2lZKlN6R/BEf4irR2BR8IkubRyliE/ g4kPKg9jqDqIG74t21YkWlXY7660uX9BEKZAiDxctaEi+t4jOYsKGPCttcWZWEqc 69d2lVDJuqzo7QsfTpSplyGkpWMPErQfUX8fuTFHTG23yIp8dLBApXKAYWGcx7SA UfQDzfHbAVcepG5z9S9yoeeNk34BwBPFvQKqwSi4vEMr8pGPMTqC8/tZfPdbNLNF WyP5O8JPTl3qs5a1Zh26bx/BmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+ImFeC PdDf1DLL3KlFVw/oTrFRMB8GA1UdIwQYMBaAFJXwnV5bi81vS01ptck2yRL3fSz9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDRCRS8wMjhBQkU0MjY5 MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpXOUxUV20xeVRiSkV2ZDlM UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmQ2RYbHVMelc5TFRXbTF5VGJKRXZkOUxQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDRCRS8wMjhBQkU0MjY5MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpX OUxUV20xeVRiSkV2ZDlMUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQkBjFfrl+J+s7tCfNjHKwD164dt4Zwj1vfPNrcQW939b/usrdeqf1 Y+qH4M981/XC4zFnxydJPiFgCO95JtXHJr7EGbeJNknkJRnqPrWMdyzCfAKLRdFJ N8UZLRad0NxqtyoXDt6n+MCNuFLzT0BA2QxKquCUXa230Ks41FI01g1jsLLxF2j/ ZRDe2RR9r7S3qLzXnFhmzfVe+wTHgG2DYZDKJynWX5/ZYbRg+9Ge+YtiNZXYoYGd ZW0lC2xNXYXq1gEmlIqwUR5H/OWEkLIz1PEAWfPgCioQztNLHGqxzjDdV5yXXjbR eUzoZl0IXK8MeG5A9AOzkQKfFfA6Xkaq -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:32 2025 by rpki-client