$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft File: L3LcETktqlBahWLidjiGBgPNvr8.mft (raw, json) Hash identifier: iREtCCh2r3Ts86gcp7H1pycJVkQRc1sTLa0nW6PnkVE= Subject key identifier: 10:2C:29:7B:6B:D8:50:91:9B:FB:38:3F:19:34:E9:0C:D2:CA:C9:ED Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF Certificate issuer: /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft Manifest number: 57 Signing time: Wed 05 Nov 2025 07:22:16 +0000 Manifest this update: Wed 05 Nov 2025 07:22:16 +0000 Manifest next update: Wed 12 Nov 2025 07:22:16 +0000 Files and hashes: 1: L3LcETktqlBahWLidjiGBgPNvr8.crl (hash: To/z29ewZ6FymCtPR27NLIKEh8/atz3uoM8G7oKn8zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Validity Not Before: Nov 5 07:22:16 2025 GMT Not After : Nov 12 07:22:16 2025 GMT Subject: CN=690afb28-bf24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ed:b1:6c:b5:52:c3:8f:c7:ca:01:ec:89:f6: c5:c0:97:65:9b:c5:07:95:d1:b9:e9:83:79:27:19: 55:d4:5e:df:ca:03:41:07:06:9b:55:04:00:92:49: 4f:d2:85:ea:cb:a2:08:ba:e4:73:5d:fa:a9:f0:7e: db:0a:7a:a3:7d:39:1a:5a:58:bc:6a:60:4a:5e:01: a5:1c:04:61:b0:e7:d3:0c:aa:26:94:be:5d:15:cd: 0d:61:2d:e8:aa:cc:d7:0d:b1:4c:d7:06:bd:aa:91: 9d:e9:13:45:ca:12:03:c4:f0:54:b7:e1:d2:c3:bc: d4:8c:12:ca:99:9d:30:d7:bc:6f:ca:47:57:77:05: 3d:1d:9a:2f:67:11:3a:e5:53:ca:fb:7a:32:b9:97: 8b:e6:a9:de:7a:47:7f:db:1c:ea:18:54:1c:46:54: 2a:78:3c:c8:c2:c6:c2:f6:44:16:b4:95:06:5c:3c: 15:0f:6f:82:be:ca:f8:70:2d:fc:4f:ea:5f:e1:86: 14:bb:40:ce:e6:10:80:57:0b:f7:6c:06:9d:34:12: ae:1c:c5:5d:ca:80:a8:36:50:0e:69:4d:90:99:9c: bd:b1:0d:99:fd:07:0c:93:f6:21:13:2a:ab:fe:de: 08:04:63:a7:f7:f1:a4:71:7c:01:19:e7:a9:67:1e: de:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2C:29:7B:6B:D8:50:91:9B:FB:38:3F:19:34:E9:0C:D2:CA:C9:ED X509v3 Authority Key Identifier: keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:6e:cf:08:79:b4:25:c4:51:2c:5a:66:9b:89:9e:3c:2f:fd: d9:42:a1:c6:30:9d:2a:8b:2e:cb:ee:37:d3:c5:60:ed:78:84: 7f:09:f1:e9:3c:21:fe:02:53:48:1a:14:06:a6:46:9b:33:3e: e3:b4:bb:63:fc:86:4d:d4:52:18:25:be:b5:1b:52:a4:36:db: 61:dc:82:4b:75:8c:ef:cf:fe:37:10:59:f0:a8:ab:d1:66:32: 65:06:77:76:e7:c1:62:5a:1f:db:3e:74:b6:7c:b6:16:76:11: c2:21:e1:15:47:3e:b9:74:77:9f:33:cb:f4:d5:9e:2c:34:16: 85:c5:30:1e:05:b9:86:23:06:b9:de:a6:00:65:f3:a1:1a:03: 39:51:f7:65:64:22:4e:1f:d4:27:ce:a9:09:05:d4:86:c6:75: 7d:d1:b7:6e:95:87:0e:52:1e:1f:2f:47:1a:da:a0:51:f1:b1: 67:f9:85:4c:d6:a5:eb:c9:10:cb:88:a5:7c:9d:b2:10:17:93: 57:b1:35:63:10:fc:10:ee:fc:50:be:a0:c9:20:73:03:a8:b4: a5:45:9b:e5:88:89:41:fc:c4:e1:43:75:b5:16:78:51:d3:ec: b2:d2:e3:cb:9d:de:73:97:5d:73:e2:2b:35:07:f5:c3:c0:f0: c1:62:49:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDU5RjExMC8GA1UEBRMoMkY3MkRDMTEzOTJEQUE1MDVBODU2MkUyNzYzODg2MDYw M0NEQkVCRjAeFw0yNTExMDUwNzIyMTZaFw0yNTExMTIwNzIyMTZaMBgxFjAUBgNV BAMTDTY5MGFmYjI4LWJmMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd7bFstVLDj8fKAeyJ9sXAl2WbxQeV0bnpg3knGVXUXt/KA0EHBptVBACSSU/S herLogi65HNd+qnwftsKeqN9ORpaWLxqYEpeAaUcBGGw59MMqiaUvl0VzQ1hLeiq zNcNsUzXBr2qkZ3pE0XKEgPE8FS34dLDvNSMEsqZnTDXvG/KR1d3BT0dmi9nETrl U8r7ejK5l4vmqd56R3/bHOoYVBxGVCp4PMjCxsL2RBa0lQZcPBUPb4K+yvhwLfxP 6l/hhhS7QM7mEIBXC/dsBp00Eq4cxV3KgKg2UA5pTZCZnL2xDZn9BwyT9iETKqv+ 3ggEY6f38aRxfAEZ56lnHt5DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUECwpe2vY UJGb+zg/GTTpDNLKye0wHwYDVR0jBBgwFoAUL3LcETktqlBahWLidjiGBgPNvr8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENTlGLzAxOTA0M0YwMzNG NjExRjA5Q0UzOEU0MUM0RjlBRTAyL0wzTGNFVGt0cWxCYWhXTGlkamlHQmdQTnZy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDNMY0VUa3RxbEJhaFdMaWRqaUdCZ1BOdnI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE NTlGLzAxOTA0M0YwMzNGNjExRjA5Q0UzOEU0MUM0RjlBRTAyL0wzTGNFVGt0cWxC YWhXTGlkamlHQmdQTnZyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABRuzwh5tCXEUSxaZpuJnjwv/dlCocYwnSqLLsvuN9PFYO14hH8J8ek8 If4CU0gaFAamRpszPuO0u2P8hk3UUhglvrUbUqQ222Hcgkt1jO/P/jcQWfCoq9Fm MmUGd3bnwWJaH9s+dLZ8thZ2EcIh4RVHPrl0d58zy/TVniw0FoXFMB4FuYYjBrne pgBl86EaAzlR92VkIk4f1CfOqQkF1IbGdX3Rt26Vhw5SHh8vRxraoFHxsWf5hUzW pevJEMuIpXydshAXk1exNWMQ/BDu/FC+oMkgcwOotKVFm+WIiUH8xOFDdbUWeFHT 7LLS48ud3nOXXXPiKzUH9cPA8MFiSbY= -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:08 2025 by rpki-client