$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: GY8qTs1khwfzNbCaWWYkeuCAmhYYqnRAW7QbyYM+PCY= Subject key identifier: A4:6B:4C:06:1A:C6:5D:7B:D8:83:7E:CC:56:F0:B7:56:AD:FB:DA:2F Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0B87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0B6D Signing time: Sun 02 Nov 2025 19:06:50 +0000 Manifest this update: Sun 02 Nov 2025 19:06:49 +0000 Manifest next update: Sun 09 Nov 2025 19:06:49 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: 4mbBgrbTHZdEyC4wPmj8MZTO+752X7szogWrUdhvwBg=) 2: A2055C2E57D911F0BD42DB6DC4F9AE02.roa (hash: TqYpv2WwUkuRYuB5QyDoQVNiTgsmONzJzREbUEtpPrE=) 3: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: vpWpUnXP3M0kRZXRJe9IPBkx6ZqY5gGfHE6hnKUPIZE=) 4: 6DEA717805F811F0833EAC2FC4F9AE02.roa (hash: CCycuwjR/zG8JMtLvZuunOXdbHVwvFPn+/QALmHYm1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2951 (0xb87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Nov 2 19:06:49 2025 GMT Not After : Nov 9 19:06:49 2025 GMT Subject: CN=6907abca-39bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:81:94:9c:ad:16:de:08:d0:84:ef:4c:e5:aa: f7:08:fa:22:e5:ca:e2:27:8e:d3:de:25:c8:65:ff: d4:a4:17:38:a7:97:26:3f:4d:c9:de:ba:88:75:98: d5:67:74:d3:e2:4b:10:54:a6:61:04:76:b0:e9:39: 68:68:fe:d1:a4:ac:36:be:33:26:42:3a:3d:8f:c2: 91:4a:27:49:71:4f:15:25:74:57:2d:ca:fe:80:f0: 3c:fc:6b:72:ea:cb:e2:12:f2:39:3b:d3:ee:db:6f: 4c:3a:bf:03:bd:6f:d5:cd:c6:e1:1d:b4:c5:9c:c4: 15:ff:7c:ef:f3:c5:f6:b9:0a:62:01:e4:8e:bc:94: d1:61:1c:7c:1a:73:dd:58:a9:b3:7c:1a:dd:79:cf: 33:dc:52:95:5a:9e:d4:8d:a1:e0:ef:31:bb:f5:a0: 2f:e9:22:69:52:1b:78:7a:1d:7d:f9:5c:ce:3e:67: 57:62:04:16:61:7a:12:f5:0f:22:66:68:44:65:88: b9:a8:19:e1:8d:53:df:8c:d9:19:c2:40:db:9e:58: ff:e8:ca:75:52:e3:f0:78:6c:ae:40:4f:66:a2:0f: ed:51:fd:f7:11:3f:9f:2d:72:08:98:7e:b8:c6:61: f0:ee:fb:6b:bb:49:57:09:bc:77:25:0e:ed:1c:ad: 66:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6B:4C:06:1A:C6:5D:7B:D8:83:7E:CC:56:F0:B7:56:AD:FB:DA:2F X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c4:42:5e:90:5a:21:8b:f7:2d:47:eb:f9:e4:d7:64:c7:f6: 29:4c:9f:9a:c4:bb:3b:d7:32:41:fc:f8:23:7c:de:11:85:48: ee:36:09:c0:2e:fc:89:54:1e:b7:90:10:c2:b3:8b:ae:ec:33: 81:89:6d:6c:3e:31:cb:f6:5c:9d:1f:bd:c0:1b:51:42:39:1b: 7e:7c:81:60:a1:da:e5:23:e1:e3:b1:b5:80:84:20:26:e6:91: e9:45:af:ab:9d:2e:d3:1c:c4:7b:3e:4c:27:64:63:16:9b:1b: 2c:37:b6:23:90:55:23:b8:9f:1e:5f:38:15:ad:96:91:14:f8: 34:a3:7e:5b:76:1b:77:d2:10:82:33:c6:1d:38:bf:ae:1f:ae: 04:4d:59:74:ab:ad:17:19:04:74:e1:39:e9:ec:c7:0d:30:d4: fb:86:34:f9:b5:89:bb:cb:fd:ab:a8:2d:88:33:ee:97:5c:e5: e8:4a:a9:59:5c:fa:e2:2d:29:18:2d:fe:7a:5c:20:4c:e9:59: 9b:2c:da:20:46:b2:80:7c:c7:d5:33:e7:85:5c:8a:ea:73:f8: 0f:32:24:01:87:6b:86:82:79:e6:b4:2f:ca:f3:37:9c:6d:d8: ea:b2:42:79:53:59:2d:99:e3:5f:7b:16:f9:05:84:31:5b:76: ed:34:60:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjUxMTAyMTkwNjQ5WhcNMjUxMTA5MTkwNjQ5WjAYMRYwFAYD VQQDEw02OTA3YWJjYS0zOWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYGUnK0W3gjQhO9M5ar3CPoi5criJ47T3iXIZf/UpBc4p5cmP03J3rqIdZjV Z3TT4ksQVKZhBHaw6TloaP7RpKw2vjMmQjo9j8KRSidJcU8VJXRXLcr+gPA8/Gty 6sviEvI5O9Pu229MOr8DvW/VzcbhHbTFnMQV/3zv88X2uQpiAeSOvJTRYRx8GnPd WKmzfBrdec8z3FKVWp7UjaHg7zG79aAv6SJpUht4eh19+VzOPmdXYgQWYXoS9Q8i ZmhEZYi5qBnhjVPfjNkZwkDbnlj/6Mp1UuPweGyuQE9mog/tUf33ET+fLXIImH64 xmHw7vtru0lXCbx3JQ7tHK1m9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRrTAYa xl172IN+zFbwt1at+9ovMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPxEJekFohi/ctR+v55Ndkx/YpTJ+axLs71zJB/PgjfN4RhUjuNgnA LvyJVB63kBDCs4uu7DOBiW1sPjHL9lydH73AG1FCORt+fIFgodrlI+HjsbWAhCAm 5pHpRa+rnS7THMR7PkwnZGMWmxssN7YjkFUjuJ8eXzgVrZaRFPg0o35bdht30hCC M8YdOL+uH64ETVl0q60XGQR04Tnp7McNMNT7hjT5tYm7y/2rqC2IM+6XXOXoSqlZ XPriLSkYLf56XCBM6VmbLNogRrKAfMfVM+eFXIrqc/gPMiQBh2uGgnnmtC/K8zec bdjqskJ5U1ktmeNfexb5BYQxW3btNGDq -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:23 2025 by rpki-client