$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json) Hash identifier: mEZyO+AWlnuNS85zlmHT1MvffroSuvjrWx5SafryXNA= Subject key identifier: 60:8D:96:F1:61:26:D0:97:11:8C:B3:31:C3:D6:7A:F2:D9:D2:33:C6 Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft Manifest number: 0147 Signing time: Mon 03 Nov 2025 04:18:07 +0000 Manifest this update: Mon 03 Nov 2025 04:18:06 +0000 Manifest next update: Mon 10 Nov 2025 04:18:06 +0000 Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: s8uklbqxWPSNU5J3uycI8WqOJ7MCKYPqtfHadm/3LFc=) 2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: 9aD9MOI/POVIQ6uNZALTtWvg8bFsGYj1bzTi/aW5HI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Validity Not Before: Nov 3 04:18:06 2025 GMT Not After : Nov 10 04:18:06 2025 GMT Subject: CN=69082cfe-a248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:50:aa:8c:1d:84:62:d5:83:a8:db:a7:9e: ef:26:b5:f2:2b:59:dd:7f:bb:96:8a:5e:cd:40:36: 0d:7a:4d:0c:de:21:7c:aa:f3:2e:b6:76:d6:2b:ec: 7a:27:16:9f:ff:7e:2c:22:b0:8b:ab:06:99:7a:12: 59:c8:2a:81:a5:be:e1:9f:65:49:06:79:9b:15:b8: 62:95:6a:6b:7a:67:0b:29:b6:ed:c2:4d:db:9f:e6: b7:f3:d0:a8:0b:30:81:8a:36:25:be:9c:9f:32:2b: 33:2c:ed:70:82:54:07:e2:b0:74:5b:10:7a:0b:ea: 54:20:4a:93:dc:00:f5:0f:b6:a4:b7:f1:81:c4:be: 9f:37:1a:5e:3c:0d:1a:27:e5:59:3f:9f:ec:29:95: fc:78:fb:43:a2:6d:5c:24:c8:df:dc:e1:25:95:dc: a2:2a:d8:0a:81:eb:1b:52:6f:36:e5:33:78:cd:c7: e6:89:19:3f:c0:63:8a:09:8e:9c:d5:19:eb:72:52: 13:d7:2d:c9:90:56:d6:7a:da:b0:9f:af:4b:2c:13: c2:7f:d0:4a:5e:c6:f5:18:a3:6c:18:49:5a:1e:9a: 79:b5:eb:41:2e:e4:8d:13:0e:47:01:2d:80:93:c5: 0b:a4:0a:5c:b0:2b:af:57:37:ec:ec:75:0b:06:3c: 35:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8D:96:F1:61:26:D0:97:11:8C:B3:31:C3:D6:7A:F2:D9:D2:33:C6 X509v3 Authority Key Identifier: keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:59:2c:f8:0e:e0:f6:5d:df:c4:28:fd:9e:66:a3:20:27:20: 02:c1:43:43:22:e5:84:45:70:b2:48:bd:b0:8c:6b:86:fc:18: fc:89:b8:1c:5b:93:44:5b:31:69:b2:87:de:e1:8f:fe:8e:f0: 51:88:5a:fc:a6:87:f2:46:73:2e:67:ef:54:cf:d6:68:1d:49: 27:92:d4:86:98:e8:ab:76:6f:3b:f3:fe:67:8b:d1:d4:f6:ab: 05:a0:57:ef:e9:6a:37:ea:ed:58:f9:9b:ad:cc:8a:0f:ca:45: a7:7f:84:4c:d4:7e:4d:01:41:fb:e1:2c:d5:8b:b5:cb:c9:82: 8b:98:19:2b:73:16:81:0a:0d:fd:70:99:bb:87:40:e5:82:3e: b2:f5:4f:1c:d1:09:e7:dc:2c:9f:3f:57:2f:60:eb:e3:b9:a7: aa:56:5e:45:98:c4:07:a2:6e:e7:6b:09:cd:5d:93:8d:29:d6: 23:0b:99:48:0a:c1:de:57:bb:11:ab:20:5f:e4:30:6f:bf:a4: 36:c1:78:85:5c:7d:d0:1f:05:fa:13:e2:f3:ec:7a:12:4e:5f: 86:36:f5:48:5e:59:69:3e:7e:33:78:fa:6e:91:83:a6:45:b8: 1e:21:05:94:b4:65:d5:db:b2:bf:a9:74:e2:54:0c:a6:9b:3c: 9c:f8:81:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDJDNkI4QzdGOEI2MTBFODkxQ0I5Q0JGNkNEQkQ5OTk4 QUE5Mzg2MEIwHhcNMjUxMTAzMDQxODA2WhcNMjUxMTEwMDQxODA2WjAYMRYwFAYD VQQDEw02OTA4MmNmZS1hMjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvptQqowdhGLVg6jbp57vJrXyK1ndf7uWil7NQDYNek0M3iF8qvMutnbWK+x6 Jxaf/34sIrCLqwaZehJZyCqBpb7hn2VJBnmbFbhilWpremcLKbbtwk3bn+a389Co CzCBijYlvpyfMiszLO1wglQH4rB0WxB6C+pUIEqT3AD1D7akt/GBxL6fNxpePA0a J+VZP5/sKZX8ePtDom1cJMjf3OElldyiKtgKgesbUm825TN4zcfmiRk/wGOKCY6c 1RnrclIT1y3JkFbWetqwn69LLBPCf9BKXsb1GKNsGElaHpp5tetBLuSNEw5HAS2A k8ULpApcsCuvVzfs7HULBjw1yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCNlvFh JtCXEYyzMcPWevLZ0jPGMB8GA1UdIwQYMBaAFCxrjH+LYQ6JHLnL9s29mZiqk4YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EMjA1NTlGRUMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERva2N1Y3YyemIyWm1LcVRo Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xHdU1mNHRoRG9rY3VjdjJ6YjJabUtxVGhncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EMjA1NTlGRUMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERv a2N1Y3YyemIyWm1LcVRoZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4WSz4DuD2Xd/EKP2eZqMgJyACwUNDIuWERXCySL2wjGuG/Bj8ibgc W5NEWzFpsofe4Y/+jvBRiFr8pofyRnMuZ+9Uz9ZoHUknktSGmOirdm878/5ni9HU 9qsFoFfv6Wo36u1Y+ZutzIoPykWnf4RM1H5NAUH74SzVi7XLyYKLmBkrcxaBCg39 cJm7h0Dlgj6y9U8c0Qnn3CyfP1cvYOvjuaeqVl5FmMQHom7nawnNXZONKdYjC5lI CsHeV7sRqyBf5DBvv6Q2wXiFXH3QHwX6E+Lz7HoSTl+GNvVIXllpPn4zePpukYOm RbgeIQWUtGXV27K/qXTiVAymmzyc+IGL -----END CERTIFICATE-----Generated at Wed Nov 5 05:07:26 2025 by rpki-client