$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft File: lTUaGSeo8Q660c48bEpaxGUVynA.mft (raw, json) Hash identifier: CJYYBGmq5ebUSxt57jGPPQf+8zAV67rpcvAnkqVMmmE= Subject key identifier: AA:A8:A7:B3:88:1F:CD:60:74:AA:08:7A:B4:39:C8:ED:30:1B:74:C1 Authority key identifier: 95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 Certificate issuer: /CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft Manifest number: 01D2 Signing time: Wed 05 Nov 2025 02:56:58 +0000 Manifest this update: Wed 05 Nov 2025 02:56:58 +0000 Manifest next update: Wed 12 Nov 2025 02:56:58 +0000 Files and hashes: 1: lTUaGSeo8Q660c48bEpaxGUVynA.crl (hash: dwC7XR5W1/k8J30TqjDeWpV1ISqnP2tdpE1smAkKUNs=) 2: 90F09734F1B311EDA789BB57C4F9AE02.roa (hash: nQOUg9YX4u69ZrVdmC/H632YznQdnlGcTOZN3JI/5dE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E15, serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Validity Not Before: Nov 5 02:56:58 2025 GMT Not After : Nov 12 02:56:58 2025 GMT Subject: CN=690abcfa-ff62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:08:8d:c4:85:8d:3b:b6:36:e1:9a:ea:48: 95:74:b7:d5:64:b9:0f:bd:00:d7:51:39:d2:42:7c: a0:8b:d0:c5:aa:70:4f:4c:8d:22:27:9e:1a:4e:da: 5d:1c:46:2e:38:16:25:44:b5:c8:c8:e4:b3:2d:fc: a5:13:c9:dd:ba:15:2b:b2:fc:be:7e:b5:d7:40:8e: c5:b4:e3:a6:7a:55:3b:3d:85:0c:96:6c:13:3d:20: 3a:46:85:c6:af:91:0b:02:28:7d:a1:de:84:57:ee: 7a:0e:37:89:ca:78:92:ce:55:7f:f8:41:87:6f:62: ac:5a:d4:3b:2a:0d:f5:da:54:c7:0d:ae:cb:18:3e: 97:6a:52:f6:31:5c:13:ad:81:57:6c:e6:47:55:e2: 37:b1:fc:7d:e4:97:c0:c1:b1:e1:3b:75:da:79:dc: 8c:88:78:e5:c8:63:00:52:47:70:c7:98:f1:bb:f3: ca:86:fd:45:f1:eb:47:bd:57:50:50:15:4c:d6:13: a5:3a:82:8b:c9:80:76:d2:9b:1e:51:d6:6d:d4:fc: e6:8a:e6:46:57:36:19:fe:1f:97:1a:6a:33:0b:9f: 77:ed:cd:d5:4a:a2:f3:b6:8f:f7:e2:57:d4:80:ca: 2f:81:81:e4:1b:55:6a:d2:39:11:1c:1a:b7:7d:e6: 82:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A8:A7:B3:88:1F:CD:60:74:AA:08:7A:B4:39:C8:ED:30:1B:74:C1 X509v3 Authority Key Identifier: keyid:95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1b:42:c8:02:c4:d8:24:24:95:0b:f7:92:c6:64:db:fa:08: 16:17:0d:00:07:a3:a2:5d:fd:96:97:a7:43:78:27:64:f2:41: 4a:3d:e4:2b:1d:fe:44:6b:95:c8:44:6a:b7:2e:2e:40:ac:f3: 92:b0:a4:2d:1c:42:5d:fd:0e:ce:66:27:e6:5c:43:6b:d5:bc: ad:40:11:df:f1:12:29:fa:c6:79:1f:b1:3f:4b:61:b6:e4:e8: cc:45:a0:32:48:80:d9:7a:10:53:b0:16:5a:9e:d6:e7:54:db: 43:09:fc:cd:f6:9e:50:5a:16:c2:4c:9d:c9:6a:26:04:c1:ee: e3:04:e9:37:62:66:9d:43:73:a2:cd:d9:59:bc:37:63:ad:d6: 10:68:54:d1:64:65:34:e0:34:d3:d7:09:37:da:bd:0b:4c:7e: c9:3a:09:af:f3:5c:ea:66:40:91:2d:15:e7:89:00:02:7b:fd: 64:98:df:6c:64:50:ba:c2:0e:63:68:8e:a4:c8:31:ce:29:6b: 3b:33:ec:8d:cd:c8:de:46:26:12:57:ec:1c:27:90:b7:57:57: 4e:7e:69:37:27:1a:b4:eb:e3:24:53:03:6d:d3:31:91:a4:a7: b0:3b:73:7c:1b:90:26:8e:6b:3f:62:03:f2:b2:2d:b1:c3:ce: 71:65:67:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFMTUxMTAvBgNVBAUTKDk1MzUxQTE5MjdBOEYxMEVCQUQxQ0UzQzZDNEE1QUM0 NjUxNUNBNzAwHhcNMjUxMTA1MDI1NjU4WhcNMjUxMTEyMDI1NjU4WjAYMRYwFAYD VQQDEw02OTBhYmNmYS1mZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskQIjcSFjTu2NuGa6kiVdLfVZLkPvQDXUTnSQnygi9DFqnBPTI0iJ54aTtpd HEYuOBYlRLXIyOSzLfylE8nduhUrsvy+frXXQI7FtOOmelU7PYUMlmwTPSA6RoXG r5ELAih9od6EV+56DjeJyniSzlV/+EGHb2KsWtQ7Kg312lTHDa7LGD6XalL2MVwT rYFXbOZHVeI3sfx95JfAwbHhO3XaedyMiHjlyGMAUkdwx5jxu/PKhv1F8etHvVdQ UBVM1hOlOoKLyYB20pseUdZt1PzmiuZGVzYZ/h+XGmozC5937c3VSqLzto/34lfU gMovgYHkG1Vq0jkRHBq3feaCJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqop7OI H81gdKoIerQ5yO0wG3TBMB8GA1UdIwQYMBaAFJU1GhknqPEOutHOPGxKWsRlFcpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEUxNS81RERCNDQ0MEYx QUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhRNjYwYzQ4YkVwYXhHVVZ5 bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUVWFHU2VvOFE2NjBjNDhiRXBheEdVVnluQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEUxNS81RERCNDQ0MEYxQUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhR NjYwYzQ4YkVwYXhHVVZ5bkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsG0LIAsTYJCSVC/eSxmTb+ggWFw0AB6OiXf2Wl6dDeCdk8kFKPeQr Hf5Ea5XIRGq3Li5ArPOSsKQtHEJd/Q7OZifmXENr1bytQBHf8RIp+sZ5H7E/S2G2 5OjMRaAySIDZehBTsBZantbnVNtDCfzN9p5QWhbCTJ3JaiYEwe7jBOk3YmadQ3Oi zdlZvDdjrdYQaFTRZGU04DTT1wk32r0LTH7JOgmv81zqZkCRLRXniQACe/1kmN9s ZFC6wg5jaI6kyDHOKWs7M+yNzcjeRiYSV+wcJ5C3V1dOfmk3Jxq06+MkUwNt0zGR pKewO3N8G5Amjms/YgPysi2xw85xZWdV -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:02 2025 by rpki-client