$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft File: LnNx4gZThK0R1DN9DS7NH2bSGco.mft (raw, json) Hash identifier: 24NnTdRzCn1BpCQUvK6/yCavVOLwI3HNqyFg5PJvzcQ= Subject key identifier: 8A:62:7E:9D:90:AF:2C:9C:E4:13:CC:C9:72:82:07:D7:A9:26:25:41 Authority key identifier: 2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA Certificate issuer: /CN=A91F5753/serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft Manifest number: 02A4 Signing time: Mon 03 Nov 2025 01:29:20 +0000 Manifest this update: Mon 03 Nov 2025 01:29:19 +0000 Manifest next update: Mon 10 Nov 2025 01:29:19 +0000 Files and hashes: 1: LnNx4gZThK0R1DN9DS7NH2bSGco.crl (hash: cCsvan/ER35cNeEGb40NRNCfoY6DECg8EKshW+dARV4=) 2: 68C425FC1BBF11ED9F87C083C4F9AE02.roa (hash: x9csIWd6s8afCMS1YmHZZTrl70IFmSCSA9MRca7TL7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5753, serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA Validity Not Before: Nov 3 01:29:19 2025 GMT Not After : Nov 10 01:29:19 2025 GMT Subject: CN=69080570-f748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:cd:9b:11:fe:04:30:2d:84:7b:aa:88:1f: 6e:08:08:37:ae:1e:be:00:33:0e:e4:d8:b7:f7:e7: 14:91:30:a0:64:40:10:ca:19:e8:73:3b:34:c8:77: af:8f:d4:8f:2c:7b:67:a7:70:1c:b4:ce:9f:66:0e: b0:bc:7d:0f:03:c3:8f:cb:c7:3c:70:3e:dd:de:cb: 93:00:b8:ee:4c:92:1d:1c:21:d9:4b:f1:15:cc:8a: 0e:e5:9d:5d:8f:d9:84:cd:2f:ef:3c:37:75:87:31: b8:67:d2:b3:1b:3a:75:8a:a8:93:25:94:c2:9f:16: 80:25:5e:de:f3:52:a9:b7:f4:61:3c:09:56:b4:a8: 48:71:d6:a2:19:98:fa:f4:08:08:d5:00:9d:7a:68: c6:d5:2f:2b:9c:bf:0a:c8:c6:35:79:fd:99:3b:90: 4c:ad:37:04:dd:fb:97:62:43:fa:05:5e:49:de:6e: c6:2a:01:8f:4a:a2:01:76:3c:f8:dd:d5:cd:c2:75: 9e:c8:13:39:2a:90:2d:68:63:52:48:2b:7f:1f:68: 7f:74:ed:0d:76:f4:ae:9d:76:06:52:42:7c:7f:db: ac:9b:a5:6e:5f:8d:ac:88:58:b3:b2:88:40:70:a2: 1f:a3:06:66:58:02:3b:63:f7:23:02:74:b5:7f:fe: 78:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:62:7E:9D:90:AF:2C:9C:E4:13:CC:C9:72:82:07:D7:A9:26:25:41 X509v3 Authority Key Identifier: keyid:2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5a:c4:a2:da:2e:ba:3a:fe:db:cb:29:64:c5:50:e7:5f:21: df:74:d3:ab:b9:09:42:40:c3:99:5f:ae:9f:a2:e0:4d:8c:10: 95:41:45:df:0c:51:c4:e1:64:ed:95:0e:c0:43:da:48:8a:6c: 78:3c:50:91:7c:72:d7:5b:9f:e8:97:91:4b:78:fd:b2:c1:4f: f4:2f:38:64:50:00:18:36:e3:08:67:ba:b4:cb:a7:89:03:79: 13:9a:06:7f:df:0c:ca:91:74:b5:38:c1:a9:5d:2e:aa:6e:8b: 2d:bc:03:ab:8c:91:db:fa:7d:3a:af:07:76:b2:94:1f:33:9e: c9:fe:42:df:37:eb:7a:da:3d:5c:96:38:ee:5f:90:fd:d4:04: eb:79:c3:82:9c:33:3b:64:fd:48:ae:ed:65:6d:a5:81:98:40: ae:e1:c3:d2:e8:52:4a:52:5a:d8:2f:63:fe:4b:0d:8e:5b:d7: f5:ce:4b:29:5a:c2:ee:10:57:49:fe:f5:e0:bd:72:68:4b:22: 8e:59:dc:87:40:15:cd:57:e3:57:11:aa:d1:61:80:45:08:a8: 3c:77:01:3b:24:1b:9a:62:0f:15:de:0e:91:1d:b6:c2:66:ab: 86:41:82:7b:fb:fe:01:aa:3f:f8:a6:e1:b0:b0:87:ca:ab:0d: 1f:1c:fb:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3NTMxMTAvBgNVBAUTKDJFNzM3MUUyMDY1Mzg0QUQxMUQ0MzM3RDBEMkVDRDFG NjZEMjE5Q0EwHhcNMjUxMTAzMDEyOTE5WhcNMjUxMTEwMDEyOTE5WjAYMRYwFAYD VQQDEw02OTA4MDU3MC1mNzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuw7NmxH+BDAthHuqiB9uCAg3rh6+ADMO5Ni39+cUkTCgZEAQyhnoczs0yHev j9SPLHtnp3ActM6fZg6wvH0PA8OPy8c8cD7d3suTALjuTJIdHCHZS/EVzIoO5Z1d j9mEzS/vPDd1hzG4Z9KzGzp1iqiTJZTCnxaAJV7e81Kpt/RhPAlWtKhIcdaiGZj6 9AgI1QCdemjG1S8rnL8KyMY1ef2ZO5BMrTcE3fuXYkP6BV5J3m7GKgGPSqIBdjz4 3dXNwnWeyBM5KpAtaGNSSCt/H2h/dO0NdvSunXYGUkJ8f9usm6VuX42siFizsohA cKIfowZmWAI7Y/cjAnS1f/547QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpifp2Q ryyc5BPMyXKCB9epJiVBMB8GA1UdIwQYMBaAFC5zceIGU4StEdQzfQ0uzR9m0hnK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTc1My83QjU2MjQ0NDFC QkIxMUVEQTg3RjZFNjdDNEY5QUUwMi9Mbk54NGdaVGhLMFIxRE45RFM3TkgyYlNH Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuTng0Z1pUaEswUjFETjlEUzdOSDJiU0djby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTc1My83QjU2MjQ0NDFCQkIxMUVEQTg3RjZFNjdDNEY5QUUwMi9Mbk54NGdaVGhL MFIxRE45RFM3TkgyYlNHY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdWsSi2i66Ov7byylkxVDnXyHfdNOruQlCQMOZX66fouBNjBCVQUXf DFHE4WTtlQ7AQ9pIimx4PFCRfHLXW5/ol5FLeP2ywU/0LzhkUAAYNuMIZ7q0y6eJ A3kTmgZ/3wzKkXS1OMGpXS6qbostvAOrjJHb+n06rwd2spQfM57J/kLfN+t62j1c ljjuX5D91ATrecOCnDM7ZP1Iru1lbaWBmECu4cPS6FJKUlrYL2P+Sw2OW9f1zksp WsLuEFdJ/vXgvXJoSyKOWdyHQBXNV+NXEarRYYBFCKg8dwE7JBuaYg8V3g6RHbbC ZquGQYJ7+/4Bqj/4puGwsIfKqw0fHPti -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:12 2025 by rpki-client