$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft File: lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json) Hash identifier: NRZSCfR/oTBVqVTY23S98owafUf8un9ePqqB7ELnrU0= Subject key identifier: 1C:EE:43:2C:F6:67:09:65:6C:A3:25:F6:6D:09:A7:3F:39:3B:56:57 Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22 Certificate issuer: /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft Manifest number: 74 Signing time: Sun 19 Oct 2025 10:21:53 +0000 Manifest this update: Sun 19 Oct 2025 10:21:52 +0000 Manifest next update: Sun 26 Oct 2025 10:21:52 +0000 Files and hashes: 1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: 33aLIcJ6nYuwEcNFAA1gYYK+aXfBQ3WBEq8yjQnWldA=) 2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: Hq759PuHcjxrqDO6XDqBKqYrfjX30gMufng1UMG6yPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922 Validity Not Before: Oct 19 10:21:52 2025 GMT Not After : Oct 26 10:21:52 2025 GMT Subject: CN=68f4bbc0-3701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:67:cb:29:4d:08:17:95:55:cb:7c:10:41: f3:4d:93:bf:09:3a:7d:e8:83:67:26:4d:7e:8c:1b: 8b:f8:28:a6:9c:e7:b1:68:4e:7e:b8:35:5c:37:01: 8d:8b:d8:2f:c1:b4:d1:40:15:e7:93:4f:5f:78:db: 0d:25:c3:f7:75:82:90:ec:10:0f:62:6d:02:df:62: 54:d3:af:5b:5c:cd:95:c2:e5:20:03:6d:e4:40:d9: d7:fd:91:8a:37:e3:7c:43:b2:d4:81:30:a5:2d:1c: 13:78:4f:71:27:a8:7b:ee:5a:a8:86:d5:c9:86:99: ff:4f:52:6c:5c:0c:c2:ce:6d:31:c4:c2:81:8c:c6: 3c:20:29:a4:4a:c1:ce:18:b0:a2:97:42:56:ab:8b: 68:9f:d4:0a:e9:a6:ac:13:e4:d2:dd:ff:e2:84:36: f0:a8:da:a9:8c:d9:50:7a:59:0d:f4:ca:b0:1a:87: c2:24:57:09:33:93:ce:63:f1:c2:5c:0c:aa:06:1d: 59:c5:08:4e:56:f8:7d:47:aa:c3:25:24:5f:f3:87: 0f:fc:e4:b1:d4:12:8f:41:cd:6c:88:79:83:26:d0: 0f:d1:f1:36:2f:2b:26:05:4d:59:0e:39:9b:ac:f4: 4a:f8:71:6d:6c:6c:f2:fb:f1:47:f7:d4:f0:40:82: ff:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EE:43:2C:F6:67:09:65:6C:A3:25:F6:6D:09:A7:3F:39:3B:56:57 X509v3 Authority Key Identifier: keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:6b:b7:f4:21:ab:5b:fc:ce:07:1a:78:72:10:e2:58:e1:cf: 53:33:61:ca:ac:01:f3:74:44:b5:5f:a9:64:5c:03:7d:ec:66: b0:4a:84:76:24:2a:fe:0a:af:11:cb:f4:cf:08:c7:47:84:f7: ea:10:c8:ad:25:f8:77:fd:c9:8d:3e:9f:37:a2:c0:0b:8c:fb: 8b:08:72:e4:b1:1f:95:54:2a:ff:54:f0:b8:b4:cb:ba:a7:f5: 3d:53:6d:5f:57:94:5c:1b:6e:f9:12:0c:38:33:44:b8:07:a8: 08:69:6c:c1:85:9e:ba:13:2f:41:93:c5:fe:b7:f3:95:76:ec: a1:17:5a:33:a7:1c:71:62:e9:25:bc:cd:a4:6b:41:b2:ca:3f: 77:5f:e6:60:36:9d:1d:ba:12:31:1d:93:74:84:eb:d5:ee:70: c1:7c:7a:c5:e3:f0:0f:94:27:f4:b5:dd:d5:e4:52:bf:bc:76: db:14:84:ca:2a:85:a8:5e:92:a2:40:29:e3:7e:10:0c:46:69: 63:f3:a2:77:35:fb:3f:f4:e8:9c:25:cb:b1:dd:88:80:97:0e: b2:a3:c4:8c:71:6f:0c:40:65:e6:0b:79:9a:89:23:65:83:2d: 0e:16:a7:34:a4:14:f9:5d:16:91:96:38:95:7a:94:da:5a:28: 63:69:cc:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NDRDOTExMC8GA1UEBRMoOTU3NDUyOTNDODhBMjcyNkUxMEE1N0Q1OEY0MkNDMzE2 OUI3QzkyMjAeFw0yNTEwMTkxMDIxNTJaFw0yNTEwMjYxMDIxNTJaMBgxFjAUBgNV BAMTDTY4ZjRiYmMwLTM3MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr82fLKU0IF5VVy3wQQfNNk78JOn3og2cmTX6MG4v4KKac57FoTn64NVw3AY2L 2C/BtNFAFeeTT1942w0lw/d1gpDsEA9ibQLfYlTTr1tczZXC5SADbeRA2df9kYo3 43xDstSBMKUtHBN4T3EnqHvuWqiG1cmGmf9PUmxcDMLObTHEwoGMxjwgKaRKwc4Y sKKXQlari2if1ArppqwT5NLd/+KENvCo2qmM2VB6WQ30yrAah8IkVwkzk85j8cJc DKoGHVnFCE5W+H1HqsMlJF/zhw/85LHUEo9BzWyIeYMm0A/R8TYvKyYFTVkOOZus 9Er4cW1sbPL78Uf31PBAgv8jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHO5DLPZn CWVsoyX2bQmnPzk7VlcwHwYDVR0jBBgwFoAUlXRSk8iKJybhClfVj0LMMWm3ySIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0NEM5Lzg0MkY5ODk0MEVD OTExRjBBMjZGRjE0NEM0RjlBRTAyL2xYUlNrOGlLSnliaENsZlZqMExNTVdtM3lT SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFhSU2s4aUtKeWJoQ2xmVmowTE1NV20zeVNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 NEM5Lzg0MkY5ODk0MEVDOTExRjBBMjZGRjE0NEM0RjlBRTAyL2xYUlNrOGlLSnli aENsZlZqMExNTVdtM3lTSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHJrt/Qhq1v8zgcaeHIQ4ljhz1MzYcqsAfN0RLVfqWRcA33sZrBKhHYk Kv4KrxHL9M8Ix0eE9+oQyK0l+Hf9yY0+nzeiwAuM+4sIcuSxH5VUKv9U8Li0y7qn 9T1TbV9XlFwbbvkSDDgzRLgHqAhpbMGFnroTL0GTxf6385V27KEXWjOnHHFi6SW8 zaRrQbLKP3df5mA2nR26EjEdk3SE69XucMF8esXj8A+UJ/S13dXkUr+8dtsUhMoq hahekqJAKeN+EAxGaWPzonc1+z/06Jwly7HdiICXDrKjxIxxbwxAZeYLeZqJI2WD LQ4WpzSkFPldFpGWOJV6lNpaKGNpzJo= -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:22 2025 by rpki-client