$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft File: lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json) Hash identifier: p9foln2ntCot0EGG9HvTz3jHqLWcYEFu2ynxXR2LqHw= Subject key identifier: 94:AB:E5:CF:AE:7C:EA:92:DB:82:30:13:3D:55:BF:68:33:FC:A8:1C Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3 Certificate serial: 06E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft Manifest number: 1220 Signing time: Tue 04 Nov 2025 17:12:26 +0000 Manifest this update: Tue 04 Nov 2025 17:12:25 +0000 Manifest next update: Tue 11 Nov 2025 17:12:25 +0000 Files and hashes: 1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: ZsF4/6P811KnDwpVtvGlTIXjV6FAFvHELIGipg8yKCA=) 2: 9CA45412A6AB11F0AA6B453DC4F9AE02.roa (hash: I6yaNkZqYAt8Jpa9Std2h3sbw7vhedMgDPqUNgmop20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1765 (0x6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5A9F, serialNumber=95025628F14341046146AC20BA324614461A9CC3 Validity Not Before: Nov 4 17:12:25 2025 GMT Not After : Nov 11 17:12:25 2025 GMT Subject: CN=690a33f9-be60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6e:ba:4a:d6:65:32:fc:9b:ce:b7:a7:37:ba: f6:ea:37:e6:41:f9:b0:e3:e8:8a:f3:89:01:76:aa: a0:36:63:4d:f9:a1:5d:63:03:43:08:cc:52:e9:78: 8d:b1:01:12:5b:bf:02:8d:3d:ee:0f:80:d0:76:27: 1d:71:e7:be:3c:78:bc:53:ff:f2:3f:25:c5:78:83: 22:e2:16:9c:09:c2:8c:21:b7:e6:7b:d5:ef:00:95: 42:14:27:b0:9e:ac:06:2a:21:07:18:dc:52:5e:6c: da:d9:c2:8b:48:0d:bd:c2:21:4c:6b:de:85:3e:f4: 25:97:1b:92:f0:32:a0:b8:17:48:16:8d:38:16:92: 1f:19:c7:58:81:ab:42:81:bb:bb:d5:eb:12:4e:be: 87:93:d0:cd:a1:67:0c:8b:b3:91:47:f7:04:b1:00: 9f:ad:99:34:ef:94:85:ab:29:a7:93:0c:22:83:d9: 58:7d:f1:71:f2:14:09:03:25:e3:7d:e2:5b:fb:df: 68:68:9f:71:39:9f:58:45:f2:b9:87:a0:ea:22:69: cf:ae:ce:d5:0c:99:39:82:f7:b1:16:ff:af:03:4c: 30:79:6e:a1:6f:24:5d:1a:89:75:99:28:e4:09:06: c3:ce:15:62:e7:81:17:e7:7b:12:11:ab:d7:96:a2: fa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AB:E5:CF:AE:7C:EA:92:DB:82:30:13:3D:55:BF:68:33:FC:A8:1C X509v3 Authority Key Identifier: keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:fb:26:e3:0d:0d:01:37:dd:99:e1:79:67:6a:5c:c7:24:44: c8:32:58:a4:d5:ac:25:5b:5a:b1:51:a1:38:b2:71:84:bb:b5: 17:02:03:72:fa:17:7b:62:49:40:de:43:c1:1f:73:7f:9a:4f: 00:16:ce:b6:4b:7b:c0:42:72:95:12:0a:fb:da:88:2e:8a:71: 2b:84:d3:43:0c:ac:e2:c5:d2:e3:23:43:6e:7f:9d:36:0c:d4: 21:0b:3e:6c:a4:d3:4f:d8:ec:0e:9a:66:5c:0b:f0:d5:82:56: a7:a6:97:04:38:a7:fa:58:50:e1:a0:0f:03:b8:61:3d:8e:5c: 7b:ed:17:ce:22:f2:c8:dd:e4:58:3c:9c:9e:09:b7:31:6a:0d: 5f:13:68:3b:cf:8d:3d:cc:f6:d4:40:d0:a6:33:0d:39:2c:cd: d3:49:21:c1:62:f0:47:58:1f:33:e1:fe:74:15:dd:f9:82:e3: 97:73:d6:0e:d2:9a:5e:9b:b4:55:a2:fd:6b:74:da:74:c5:24: 6e:2d:c7:d0:82:03:de:0f:ab:91:04:70:f8:f0:ec:4f:61:46: 94:b4:78:50:ae:c0:f7:84:d5:08:e2:2f:a2:36:79:ea:20:72: 0b:db:87:0c:eb:2b:bc:5f:c9:98:6b:69:65:18:c9:66:d3:e4: e9:e1:1e:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVBOUYxMTAvBgNVBAUTKDk1MDI1NjI4RjE0MzQxMDQ2MTQ2QUMyMEJBMzI0NjE0 NDYxQTlDQzMwHhcNMjUxMTA0MTcxMjI1WhcNMjUxMTExMTcxMjI1WjAYMRYwFAYD VQQDEw02OTBhMzNmOS1iZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0W66StZlMvybzrenN7r26jfmQfmw4+iK84kBdqqgNmNN+aFdYwNDCMxS6XiN sQESW78CjT3uD4DQdicdcee+PHi8U//yPyXFeIMi4hacCcKMIbfme9XvAJVCFCew nqwGKiEHGNxSXmza2cKLSA29wiFMa96FPvQllxuS8DKguBdIFo04FpIfGcdYgatC gbu71esSTr6Hk9DNoWcMi7ORR/cEsQCfrZk075SFqymnkwwig9lYffFx8hQJAyXj feJb+99oaJ9xOZ9YRfK5h6DqImnPrs7VDJk5gvexFv+vA0wweW6hbyRdGol1mSjk CQbDzhVi54EX53sSEavXlqL6YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSr5c+u fOqS24IwEz1Vv2gz/KgcMB8GA1UdIwQYMBaAFJUCVijxQ0EEYUasILoyRhRGGpzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUE5Ri82NzM2RjMzNEUz M0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFRUmhScXdndWpKR0ZFWWFu TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xRSldLUEZEUVFSaFJxd2d1akpHRkVZYW5NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUE5Ri82NzM2RjMzNEUzM0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFR UmhScXdndWpKR0ZFWWFuTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB+ybjDQ0BN92Z4XlnalzHJETIMlik1awlW1qxUaE4snGEu7UXAgNy +hd7YklA3kPBH3N/mk8AFs62S3vAQnKVEgr72oguinErhNNDDKzixdLjI0Nuf502 DNQhCz5spNNP2OwOmmZcC/DVglanppcEOKf6WFDhoA8DuGE9jlx77RfOIvLI3eRY PJyeCbcxag1fE2g7z409zPbUQNCmMw05LM3TSSHBYvBHWB8z4f50Fd35guOXc9YO 0ppem7RVov1rdNp0xSRuLcfQggPeD6uRBHD48OxPYUaUtHhQrsD3hNUI4i+iNnnq IHIL24cM6yu8X8mYa2llGMlm0+Tp4R5L -----END CERTIFICATE-----Generated at Wed Nov 5 22:38:48 2025 by rpki-client