$ rpki-client -vvf rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft File: lCeAdFXYAaHRECh75X8-hPYpDKA.mft (raw, json) Hash identifier: thplrMxL+gQBu4EdDd0kK4NK9gbVXonn/rPk+MzIGZA= Subject key identifier: EC:25:03:C0:BA:6F:93:0E:55:70:41:A5:4A:CE:93:67:13:F5:05:0B Authority key identifier: 94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 Certificate issuer: /CN=A91D585E/serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft Manifest number: 010C Signing time: Wed 05 Nov 2025 05:05:14 +0000 Manifest this update: Wed 05 Nov 2025 05:05:14 +0000 Manifest next update: Wed 12 Nov 2025 05:05:14 +0000 Files and hashes: 1: lCeAdFXYAaHRECh75X8-hPYpDKA.crl (hash: /jMuixcRsRlSAakCwtnzNlXc60yf+9e8jfyb6yM8ZiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D585E, serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Validity Not Before: Nov 5 05:05:14 2025 GMT Not After : Nov 12 05:05:14 2025 GMT Subject: CN=690adb0a-bf19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:c6:06:fa:27:3c:57:3c:b5:da:48:ec:dd: 4d:47:21:cb:ff:8b:c3:8d:ad:2d:28:1e:e9:50:6b: ef:c8:30:75:42:a3:94:c4:cf:86:65:4e:40:1e:c7: 85:d8:9b:0e:94:d2:ce:7f:e7:5d:97:e2:49:0c:58: 25:d5:89:f5:c5:e5:3e:53:b6:fa:9f:67:b0:18:91: f9:82:5c:57:2e:30:ce:6a:97:b7:6c:a0:b4:34:b0: f7:4e:93:75:10:af:78:a9:03:eb:ad:de:c2:1d:88: ba:84:82:94:88:4b:94:c1:80:13:6e:0c:bd:b3:26: 91:ac:2b:5c:ee:22:56:d5:47:d9:89:34:d8:88:0c: 35:6c:08:38:48:b1:c4:0a:a3:36:fd:49:92:02:0a: d5:b7:8e:fe:7b:2e:41:c8:82:7f:ce:d3:ac:87:6a: f5:99:2c:fc:71:91:bf:23:f4:6d:19:f7:67:67:fb: e1:a3:de:18:a4:f7:29:06:8c:e2:b7:3c:02:e8:2d: 35:c7:86:b4:60:b7:dc:97:63:7a:d1:b7:3e:87:b8: 79:3c:00:2a:ca:33:ce:55:1a:01:ef:bd:17:55:94: 70:b6:a7:f4:26:7a:44:b9:cd:ee:68:a6:0b:c7:8d: be:2a:a8:23:44:dc:4a:93:11:bf:49:e8:0d:a9:21: d7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:25:03:C0:BA:6F:93:0E:55:70:41:A5:4A:CE:93:67:13:F5:05:0B X509v3 Authority Key Identifier: keyid:94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:83:cc:dd:27:a4:72:0e:a5:71:2e:71:68:41:ef:30:c1:17: 40:02:4e:f3:5b:86:3e:bd:76:c8:12:42:06:3a:58:37:62:b0: 26:79:4d:5b:83:c0:4b:31:6b:bb:5c:2c:d0:f4:94:89:94:c2: 75:4c:59:16:6b:7a:dc:af:fd:2d:cf:46:bd:db:bf:36:be:52: 55:6d:23:5d:b3:62:bd:7d:0d:a6:1b:22:9a:db:fe:71:8b:da: c2:da:6f:0b:f5:53:10:60:23:84:87:70:86:7d:be:29:e5:0a: 0c:db:fb:b2:80:af:82:36:53:8a:91:43:3b:dd:e7:ab:f1:d7: ad:82:c6:1f:ad:e2:e1:06:51:3f:63:fb:49:93:35:42:e1:73: b9:d4:97:86:41:bc:1b:03:9d:a1:b8:6a:1a:19:a4:3e:b2:bd: 14:67:2a:93:e8:81:bd:00:08:e0:46:a1:54:dd:1b:db:b9:4f: bf:f6:78:68:56:6d:f4:e9:6d:e4:56:cd:6d:0b:b3:f8:0e:4c: 98:e4:62:01:dc:49:b9:90:af:32:15:84:14:86:44:23:a6:74: 78:43:ba:13:4d:8c:00:62:fe:2c:9f:d3:ed:00:30:31:b5:8c: f4:7f:f4:43:7b:37:ef:db:d3:84:e9:c9:0e:6f:dc:f0:75:92: df:7b:b2:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4NUUxMTAvBgNVBAUTKDk0Mjc4MDc0NTVEODAxQTFEMTEwMjg3QkU1N0YzRTg0 RjYyOTBDQTAwHhcNMjUxMTA1MDUwNTE0WhcNMjUxMTEyMDUwNTE0WjAYMRYwFAYD VQQDEw02OTBhZGIwYS1iZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAug7GBvonPFc8tdpI7N1NRyHL/4vDja0tKB7pUGvvyDB1QqOUxM+GZU5AHseF 2JsOlNLOf+ddl+JJDFgl1Yn1xeU+U7b6n2ewGJH5glxXLjDOape3bKC0NLD3TpN1 EK94qQPrrd7CHYi6hIKUiEuUwYATbgy9syaRrCtc7iJW1UfZiTTYiAw1bAg4SLHE CqM2/UmSAgrVt47+ey5ByIJ/ztOsh2r1mSz8cZG/I/RtGfdnZ/vho94YpPcpBozi tzwC6C01x4a0YLfcl2N60bc+h7h5PAAqyjPOVRoB770XVZRwtqf0JnpEuc3uaKYL x42+KqgjRNxKkxG/SegNqSHXKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwlA8C6 b5MOVXBBpUrOk2cT9QULMB8GA1UdIwQYMBaAFJQngHRV2AGh0RAoe+V/PoT2KQyg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTg1RS80QkRBNzQ0NDFF NkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFhSFJFQ2g3NVg4LWhQWXBE S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDZUFkRlhZQWFIUkVDaDc1WDgtaFBZcERLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTg1RS80QkRBNzQ0NDFFNkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFh SFJFQ2g3NVg4LWhQWXBES0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmg8zdJ6RyDqVxLnFoQe8wwRdAAk7zW4Y+vXbIEkIGOlg3YrAmeU1b g8BLMWu7XCzQ9JSJlMJ1TFkWa3rcr/0tz0a92782vlJVbSNds2K9fQ2mGyKa2/5x i9rC2m8L9VMQYCOEh3CGfb4p5QoM2/uygK+CNlOKkUM73eer8detgsYfreLhBlE/ Y/tJkzVC4XO51JeGQbwbA52huGoaGaQ+sr0UZyqT6IG9AAjgRqFU3RvbuU+/9nho Vm306W3kVs1tC7P4DkyY5GIB3Em5kK8yFYQUhkQjpnR4Q7oTTYwAYv4sn9PtADAx tYz0f/RDezfv29OE6ckOb9zwdZLfe7LA -----END CERTIFICATE-----Generated at Wed Nov 5 11:25:56 2025 by rpki-client