$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft File: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft (raw, json) Hash identifier: LmarcIz9P4T3oqvdZfqQ9lCviKdWgnsaNiExAhuWHc4= Subject key identifier: ED:98:97:B7:CD:21:0C:8A:DF:DC:F4:CE:81:52:E3:3B:2E:EB:25:82 Authority key identifier: 2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 Certificate issuer: /CN=A91F0CF4/serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Certificate serial: 0C03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft Manifest number: 1460 Signing time: Sun 02 Nov 2025 18:46:03 +0000 Manifest this update: Sun 02 Nov 2025 18:46:03 +0000 Manifest next update: Sun 09 Nov 2025 18:46:03 +0000 Files and hashes: 1: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl (hash: fAcA7069XGfbSz27PiXtCXswB00zmkuwfndY87OwznU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3075 (0xc03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CF4, serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Validity Not Before: Nov 2 18:46:03 2025 GMT Not After : Nov 9 18:46:03 2025 GMT Subject: CN=6907a6eb-116b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:c8:50:4f:6e:c2:2a:14:01:d9:02:4e:cb: c1:58:c4:26:17:c5:7e:d8:6a:66:da:04:e2:d2:bf: 9f:05:a0:5a:7f:b9:5d:b0:7b:f6:ac:03:da:1d:1f: 6b:a6:4a:5a:40:dd:44:0e:d2:4a:fa:30:7a:8b:56: 6a:5b:98:97:19:32:0b:e8:b4:80:de:1c:3f:7e:03: 70:1e:11:a7:08:64:8d:13:df:c6:ad:35:e3:54:98: fe:70:50:4b:33:36:ff:75:86:d5:e0:b6:94:ed:dd: bd:c1:e6:c9:f7:38:a1:f5:81:5e:a5:e2:45:e3:87: 3c:3e:a5:e2:71:db:0b:2c:8d:f4:3d:88:39:0d:79: ff:3b:d5:b9:ca:fe:e0:8c:77:ee:2d:de:bc:68:de: 17:26:71:e0:7a:b8:cb:5e:27:3d:d1:02:4f:bf:f7: b4:10:e0:5c:a7:e2:5d:c0:8d:97:7e:82:65:3e:1a: 6d:d8:72:22:f2:50:00:fd:20:93:81:22:26:0e:6f: 9b:11:0a:66:11:22:f4:c7:b9:4f:10:97:af:96:6b: 8a:f9:1d:de:99:ca:a4:75:6a:e4:3f:5e:1e:85:ae: 6b:b5:a5:7f:a9:ac:45:52:a0:d3:48:03:cf:ff:7d: 47:86:03:6d:0c:85:7e:b7:7f:7e:30:a5:7c:a9:60: c8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:98:97:B7:CD:21:0C:8A:DF:DC:F4:CE:81:52:E3:3B:2E:EB:25:82 X509v3 Authority Key Identifier: keyid:2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:22:d6:71:24:25:e8:96:21:8e:9c:ac:f8:65:71:97:4a:9c: 17:35:f6:2a:6b:11:0b:f8:04:e3:22:98:29:81:4e:c9:77:47: a9:fe:ac:d9:ee:23:f6:d0:fa:e0:49:72:b6:88:d8:b0:3c:48: 45:e4:1e:ac:32:0a:2a:4f:0a:86:07:9e:2b:08:83:07:89:b0: 1e:ce:0f:de:8d:2d:3f:4f:26:16:66:6e:87:98:41:fc:cd:bb: 2b:ec:6c:e0:71:b4:c1:21:c9:78:de:a9:7f:57:6a:14:fc:36: 9d:18:f4:90:b0:3b:d1:31:5e:18:6d:a7:f9:75:4a:0d:fe:2e: 20:63:15:5b:04:dd:ca:61:2a:ec:41:00:4d:1e:7d:b9:38:5c: 3c:b5:3e:e6:22:5a:b7:63:e0:ca:be:ea:2e:f7:73:18:99:c1: 6b:a3:1d:32:c7:58:69:2e:8b:5f:24:27:bc:9e:e9:fb:6c:35: b5:99:b5:90:2c:af:19:a4:6f:22:89:e2:d6:f3:7b:8f:57:9c: 61:3c:f7:ff:56:db:03:fc:71:fb:41:85:c5:f4:07:08:6e:c8: e7:b8:77:e5:39:0b:27:a8:ed:ae:19:90:19:66:d1:ea:1c:d3: 09:fc:d1:d9:5a:c1:15:44:b5:44:f2:44:1b:a9:9b:74:f4:62: 7f:f3:8f:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDRjQxMTAvBgNVBAUTKDJFQTA2MDJFMEVFNjAxNkI1MEZBRTQwRDkzNjUzQkEz QzE4ODgwNDMwHhcNMjUxMTAyMTg0NjAzWhcNMjUxMTA5MTg0NjAzWjAYMRYwFAYD VQQDEw02OTA3YTZlYi0xMTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtT3IUE9uwioUAdkCTsvBWMQmF8V+2Gpm2gTi0r+fBaBaf7ldsHv2rAPaHR9r pkpaQN1EDtJK+jB6i1ZqW5iXGTIL6LSA3hw/fgNwHhGnCGSNE9/GrTXjVJj+cFBL Mzb/dYbV4LaU7d29webJ9zih9YFepeJF44c8PqXicdsLLI30PYg5DXn/O9W5yv7g jHfuLd68aN4XJnHgerjLXic90QJPv/e0EOBcp+JdwI2XfoJlPhpt2HIi8lAA/SCT gSImDm+bEQpmESL0x7lPEJevlmuK+R3emcqkdWrkP14eha5rtaV/qaxFUqDTSAPP /31HhgNtDIV+t39+MKV8qWDIsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2Yl7fN IQyK39z0zoFS4zsu6yWCMB8GA1UdIwQYMBaAFC6gYC4O5gFrUPrkDZNlO6PBiIBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENGNC85QUU5QTkxMjFG QTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFXdFEtdVFOazJVN284R0ln RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxQmdMZzdtQVd0US11UU5rMlU3bzhHSWdFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MENGNC85QUU5QTkxMjFGQTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFX dFEtdVFOazJVN284R0lnRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaItZxJCXoliGOnKz4ZXGXSpwXNfYqaxEL+ATjIpgpgU7Jd0ep/qzZ 7iP20PrgSXK2iNiwPEhF5B6sMgoqTwqGB54rCIMHibAezg/ejS0/TyYWZm6HmEH8 zbsr7GzgcbTBIcl43ql/V2oU/DadGPSQsDvRMV4Ybaf5dUoN/i4gYxVbBN3KYSrs QQBNHn25OFw8tT7mIlq3Y+DKvuou93MYmcFrox0yx1hpLotfJCe8nun7bDW1mbWQ LK8ZpG8iieLW83uPV5xhPPf/VtsD/HH7QYXF9AcIbsjnuHflOQsnqO2uGZAZZtHq HNMJ/NHZWsEVRLVE8kQbqZt09GJ/84+P -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:22 2025 by rpki-client