$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft File: LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft (raw, json) Hash identifier: ZJZGdz1aRuOX58JGfriLA6y/xuL6BgZ5wdq/dhZ8at0= Subject key identifier: 28:80:74:CF:35:0E:5C:FF:96:CE:F4:F0:F2:4D:98:06:04:76:24:80 Authority key identifier: 2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 Certificate issuer: /CN=A91FF94F/serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft Manifest number: 0158 Signing time: Mon 03 Nov 2025 04:07:23 +0000 Manifest this update: Mon 03 Nov 2025 04:07:22 +0000 Manifest next update: Mon 10 Nov 2025 04:07:22 +0000 Files and hashes: 1: LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl (hash: aGmUz2F/S8wzLJpf2anSEqOLpvKoKnbGIFtSKRX1sW4=) 2: F41E4608AD1511EE8FBA3458C4F9AE02.roa (hash: njsFK1qFbRu1CveVfyk+stg89vXjnCGuvbUS6fMSxUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF94F, serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Validity Not Before: Nov 3 04:07:22 2025 GMT Not After : Nov 10 04:07:22 2025 GMT Subject: CN=69082a7a-3488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:22:df:c6:16:d1:07:ab:17:3b:69:62:84:c9: 49:86:d1:c5:d6:2d:55:45:c6:73:ac:6f:7a:b9:fc: 26:65:5e:60:fc:db:32:55:aa:3a:20:7e:7c:92:d1: af:25:1d:da:92:50:b4:76:72:2c:28:4e:0f:39:a0: ad:f0:6b:cf:e0:43:15:73:4f:6f:cd:f2:ef:5c:b8: c8:98:eb:c7:38:47:4d:c2:86:9e:22:c1:5c:ce:7d: ee:12:d2:b0:cf:c5:fc:d7:e8:03:37:53:d9:a1:e8: 14:34:7e:d2:7a:49:33:2a:29:dc:0e:cb:98:70:ce: 84:fb:aa:c1:f8:ce:c4:b4:25:bd:83:8a:d0:b6:2c: 52:2e:b1:50:bc:91:97:11:6d:81:c2:7b:29:9d:16: 75:95:31:77:78:40:1f:cf:e0:57:7c:dd:d5:3b:ea: 17:57:19:0d:ab:8f:e1:b4:cd:fa:43:e9:06:c0:c1: dd:0c:a1:dd:e7:6c:88:6d:41:6e:7d:3e:05:af:49: be:cc:97:2a:32:2a:6e:9a:f7:76:f5:0d:0d:88:c8: fe:5b:da:35:49:f5:36:df:97:0f:30:59:7f:e9:d1: 19:91:64:d1:ee:78:1c:be:cc:4d:26:70:e5:dd:00: de:b0:6c:19:34:5c:76:d5:b2:1b:95:75:18:18:42: 60:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:80:74:CF:35:0E:5C:FF:96:CE:F4:F0:F2:4D:98:06:04:76:24:80 X509v3 Authority Key Identifier: keyid:2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:28:2d:e2:cf:bf:91:13:2b:b7:3e:7a:24:e2:8f:0d:a5:50: db:d6:22:ae:83:80:ea:05:09:a5:6e:96:5a:9c:3a:4a:9a:75: 42:f8:37:47:28:ad:57:51:53:cb:c0:1a:ee:cc:16:65:5c:2a: 59:97:80:4e:ee:be:43:ce:2b:08:20:3e:4d:13:aa:a8:39:20: 72:c1:7c:a3:bd:03:da:f2:83:81:06:fd:40:31:cb:3f:dc:b3: 0d:05:a1:bf:43:63:5a:42:5e:cf:05:f9:6d:fd:70:4e:e8:55: 3a:c8:db:e2:bd:a0:79:95:5f:81:a4:3a:ce:be:79:23:8c:a8: e5:e8:21:c1:60:db:63:3e:ae:02:26:05:cd:01:5e:83:1f:30: 40:2c:a3:b2:8e:6c:69:c8:b6:c4:4e:0c:c9:5a:53:88:aa:3e: 7e:af:ac:60:5d:ed:86:53:19:e2:72:aa:ba:f3:e3:a0:4a:92: be:34:0d:b3:d8:e1:06:25:62:6d:64:2d:15:f2:71:46:29:24: 96:18:41:50:2b:8d:4e:45:f8:2a:cd:76:83:17:fd:a9:f2:a6: f6:8a:1a:9a:4c:6f:9e:9a:a6:64:b0:68:da:87:dd:71:9e:59: 2b:c2:83:35:f8:60:47:0d:45:18:a7:b7:e5:c2:91:a7:54:80: 42:ca:42:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY5NEYxMTAvBgNVBAUTKDJFQTYyOEFCNTVEMTgxNzQzRUYyOTBFRjgyNDk5ODBE NjI5OUFGQTIwHhcNMjUxMTAzMDQwNzIyWhcNMjUxMTEwMDQwNzIyWjAYMRYwFAYD VQQDEw02OTA4MmE3YS0zNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SLfxhbRB6sXO2lihMlJhtHF1i1VRcZzrG96ufwmZV5g/NsyVao6IH58ktGv JR3aklC0dnIsKE4POaCt8GvP4EMVc09vzfLvXLjImOvHOEdNwoaeIsFczn3uEtKw z8X81+gDN1PZoegUNH7SekkzKincDsuYcM6E+6rB+M7EtCW9g4rQtixSLrFQvJGX EW2BwnspnRZ1lTF3eEAfz+BXfN3VO+oXVxkNq4/htM36Q+kGwMHdDKHd52yIbUFu fT4Fr0m+zJcqMipumvd29Q0NiMj+W9o1SfU235cPMFl/6dEZkWTR7ngcvsxNJnDl 3QDesGwZNFx21bIblXUYGEJgTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiAdM81 Dlz/ls708PJNmAYEdiSAMB8GA1UdIwQYMBaAFC6mKKtV0YF0PvKQ74JJmA1ima+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjk0Ri9EMzQ4RjJEMEFE MTQxMUVFQjBCODExMzlDNEY5QUUwMi9McVlvcTFYUmdYUS04cER2Z2ttWURXS1py NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxWW9xMVhSZ1hRLThwRHZna21ZRFdLWnI2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjk0Ri9EMzQ4RjJEMEFEMTQxMUVFQjBCODExMzlDNEY5QUUwMi9McVlvcTFYUmdY US04cER2Z2ttWURXS1pyNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxKC3iz7+REyu3Pnok4o8NpVDb1iKug4DqBQmlbpZanDpKmnVC+DdH KK1XUVPLwBruzBZlXCpZl4BO7r5DzisIID5NE6qoOSBywXyjvQPa8oOBBv1AMcs/ 3LMNBaG/Q2NaQl7PBflt/XBO6FU6yNvivaB5lV+BpDrOvnkjjKjl6CHBYNtjPq4C JgXNAV6DHzBALKOyjmxpyLbETgzJWlOIqj5+r6xgXe2GUxnicqq68+OgSpK+NA2z 2OEGJWJtZC0V8nFGKSSWGEFQK41ORfgqzXaDF/2p8qb2ihqaTG+emqZksGjah91x nlkrwoM1+GBHDUUYp7flwpGnVIBCykKy -----END CERTIFICATE-----Generated at Tue Nov 4 08:11:33 2025 by rpki-client