$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft File: ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json) Hash identifier: Lkqobeg4fXDgp5G+tKP1ik28NXHNtMSj8N8TtFsq4hI= Subject key identifier: 64:7E:41:D7:61:8C:99:23:CD:15:2C:AB:08:23:8E:8C:78:96:95:72 Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF Certificate issuer: /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft Manifest number: 01B8 Signing time: Mon 03 Nov 2025 03:04:22 +0000 Manifest this update: Mon 03 Nov 2025 03:04:22 +0000 Manifest next update: Mon 10 Nov 2025 03:04:22 +0000 Files and hashes: 1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: o1QNbGXbLJu+DfEXM8Lx0s92wCvedFM0KriWqT5lPNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Validity Not Before: Nov 3 03:04:22 2025 GMT Not After : Nov 10 03:04:22 2025 GMT Subject: CN=69081bb6-b14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:df:f5:1b:68:60:f5:06:c4:27:40:84:c3: 98:6f:60:35:3c:24:a2:f1:71:34:62:5c:0b:be:11: 12:71:3a:20:57:87:e1:5d:dc:4c:f7:89:49:f4:15: 50:54:b8:eb:89:e4:1a:c0:c2:3e:0b:68:48:c5:ce: 3f:cc:db:c0:83:ea:43:5c:27:03:54:7c:81:3c:32: 1f:4e:9b:67:74:37:ae:9e:35:86:a6:09:f6:52:a1: 27:35:b0:4c:29:18:aa:75:4c:06:bc:38:58:b8:91: f9:cb:6f:d1:f3:06:a0:23:46:39:16:74:72:7a:31: 1c:2e:11:f8:c2:f4:05:22:71:12:7a:7f:9c:e6:c5: df:fd:77:56:29:5a:18:c5:24:bc:34:b0:37:87:c7: 17:31:49:ec:24:2f:14:fd:bb:29:c4:e4:1d:b4:f7: 62:f8:42:62:2d:ae:85:21:7f:e4:c5:ae:50:3a:de: 02:42:31:9f:fa:3f:1d:d0:ff:fc:71:89:9a:c0:3e: cd:dd:f3:4f:a6:fb:e5:f3:01:74:2d:b1:f3:da:49: 2f:49:73:01:1c:48:81:39:11:23:d2:03:9b:10:3c: ad:d1:ab:72:51:91:dc:f6:7d:ba:ed:78:e4:4e:21: bc:62:70:71:f8:3c:b8:8b:bc:d2:93:0d:92:05:05: bb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7E:41:D7:61:8C:99:23:CD:15:2C:AB:08:23:8E:8C:78:96:95:72 X509v3 Authority Key Identifier: keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:31:6d:f7:f5:37:74:bc:d4:b0:a5:af:14:ad:1a:9a:fc:6c: 63:17:d0:84:7f:55:57:61:d8:ad:28:b4:c0:be:fc:e8:2c:f7: 40:87:eb:c3:3d:fa:91:af:9f:35:26:36:f0:51:39:56:a6:62: 65:1b:d8:e9:95:98:0d:e7:36:ca:e8:6f:5d:6b:81:9f:63:e6: 18:f8:94:7e:8b:2b:d3:8c:76:32:58:3c:47:f0:96:fe:e0:91: 25:f1:a1:90:f1:29:db:db:14:35:0e:ed:7b:92:53:77:31:c3: 83:a7:83:2c:3e:d7:de:69:c1:62:0f:f8:d6:9d:ca:94:03:b2: 7e:12:fe:16:0d:b6:63:9b:1f:29:b4:8e:2d:02:a8:47:97:b4: 64:1a:93:7e:3e:be:f7:d7:77:3f:2f:b1:4d:6a:53:fe:96:f3: 15:8e:a5:a8:3b:47:f2:89:2d:d7:df:2d:2d:3c:3e:bf:cc:76: 07:68:cf:16:82:e0:bf:5a:04:36:25:1a:84:16:37:2b:8b:c8: d6:cc:ba:83:c3:ae:01:8b:2b:18:63:e4:4f:0b:3d:d6:56:52: 66:54:d2:c9:81:0c:30:f1:95:cd:a7:5b:ac:8d:8e:12:a3:bf: 08:d2:e0:70:e3:92:f9:6b:c4:82:63:60:a9:7e:f2:03:88:5e: 83:79:76:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwRjgxMTAvBgNVBAUTKDk2MzNGNjJGRkIyMTg2NzZFQkM5M0YxQzM3Njk2NDlD MEM1RDg0REYwHhcNMjUxMTAzMDMwNDIyWhcNMjUxMTEwMDMwNDIyWjAYMRYwFAYD VQQDEw02OTA4MWJiNi1iMTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHrf9RtoYPUGxCdAhMOYb2A1PCSi8XE0YlwLvhEScTogV4fhXdxM94lJ9BVQ VLjrieQawMI+C2hIxc4/zNvAg+pDXCcDVHyBPDIfTptndDeunjWGpgn2UqEnNbBM KRiqdUwGvDhYuJH5y2/R8wagI0Y5FnRyejEcLhH4wvQFInESen+c5sXf/XdWKVoY xSS8NLA3h8cXMUnsJC8U/bspxOQdtPdi+EJiLa6FIX/kxa5QOt4CQjGf+j8d0P/8 cYmawD7N3fNPpvvl8wF0LbHz2kkvSXMBHEiBOREj0gObEDyt0atyUZHc9n267Xjk TiG8YnBx+Dy4i7zSkw2SBQW7owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGR+Qddh jJkjzRUsqwgjjox4lpVyMB8GA1UdIwQYMBaAFJYz9i/7IYZ268k/HDdpZJwMXYTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjBGOC9CMDZGQUUyRTE5 N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhuYnJ5VDhjTjJsa25BeGRo TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xqUDJMX3NoaG5icnlUOGNOMmxrbkF4ZGhOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjBGOC9CMDZGQUUyRTE5N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhu YnJ5VDhjTjJsa25BeGRoTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhMW339Td0vNSwpa8UrRqa/GxjF9CEf1VXYditKLTAvvzoLPdAh+vD PfqRr581JjbwUTlWpmJlG9jplZgN5zbK6G9da4GfY+YY+JR+iyvTjHYyWDxH8Jb+ 4JEl8aGQ8Snb2xQ1Du17klN3McODp4MsPtfeacFiD/jWncqUA7J+Ev4WDbZjmx8p tI4tAqhHl7RkGpN+Pr7313c/L7FNalP+lvMVjqWoO0fyiS3X3y0tPD6/zHYHaM8W guC/WgQ2JRqEFjcri8jWzLqDw64BiysYY+RPCz3WVlJmVNLJgQww8ZXNp1usjY4S o78I0uBw45L5a8SCY2CpfvIDiF6DeXY8 -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:01 2025 by rpki-client