$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft File: Lz71uQE3FOMXTGcArgSCTi8FwjA.mft (raw, json) Hash identifier: ui2vBmDhdKphu8Aqvw5Zge70MB6Sr7JImib0SomiyfE= Subject key identifier: 00:D0:7F:10:0A:E8:A2:71:77:B0:B8:53:E7:B5:27:30:24:AF:B0:BA Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 0381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft Manifest number: 035F Signing time: Sun 19 Oct 2025 03:00:32 +0000 Manifest this update: Sun 19 Oct 2025 03:00:31 +0000 Manifest next update: Sun 26 Oct 2025 03:00:31 +0000 Files and hashes: 1: Lz71uQE3FOMXTGcArgSCTi8FwjA.crl (hash: dpNF6e0Br+16T5aFCLDBvjYhkW+g5kt9Q63rM8+Xy3E=) 2: 19E46D60D0F711EC8673072FC4F9AE02.roa (hash: eS0SkthbbyWxVM1PH+Y2UO1xSi4Vr2C2N13i593TCX4=) 3: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (hash: ugSG0jqem3rs4xTGOWUqAAlzlasFYzS5jXjJfZyh3NM=) 4: 196C52A8D0F711EC8673072FC4F9AE02.roa (hash: 1zywqVEPzRbdKjUH9lfurYX548Q8woU0JCmn0L04HiU=) 5: 6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (hash: QV4TEx4o0H+S1ztXPsRaHI/PqCLYaPoZZrkBgaPymwI=) 6: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (hash: uEFMEysaJCpfT6acgeEaH657dOYiucYQFMSducsR5+M=) 7: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (hash: RP0USEP4cmm5/rPyavYfSImz5bM19LFBMACm4cna7sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: Oct 19 03:00:31 2025 GMT Not After : Oct 26 03:00:31 2025 GMT Subject: CN=68f4544f-4f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c5:e2:8e:bf:50:4d:99:d3:a4:43:39:38:4e: e8:75:e1:86:58:23:1c:ac:83:b7:99:ab:57:61:76: 0f:0e:23:ec:bd:ce:21:73:e8:b0:4f:10:a8:34:21: 92:a1:d6:55:16:aa:2a:55:12:66:0f:2e:2b:47:64: f5:35:e7:0d:78:48:e6:cb:e1:e9:67:b4:91:93:f8: 3d:ed:c3:6d:bc:59:52:64:dc:71:38:24:36:df:fa: 4c:eb:98:ba:2b:b9:cc:59:17:93:99:e2:dc:ab:00: 54:0e:66:2c:80:62:3b:f6:19:50:75:13:98:b2:6a: 22:c6:6a:66:33:59:ed:e0:70:84:cd:66:c1:62:f2: d3:f9:01:d3:81:f4:9a:4f:72:a6:d7:99:78:91:08: e6:25:f0:3d:08:9d:f0:dd:1f:9d:2a:ca:ae:cd:f1: 00:8a:57:13:90:c9:35:5e:da:3a:e0:0a:be:9c:c5: 1c:66:f7:18:1f:af:85:8b:05:1a:14:62:70:10:ce: 69:e3:d3:30:ba:10:9b:71:9e:b9:de:ca:40:87:45: f0:33:fb:7a:6f:22:f5:98:7f:41:0f:93:97:90:ad: 69:05:e7:6a:89:eb:2d:91:01:60:51:c1:f9:a2:88: 52:e8:04:db:13:a1:7d:6e:1a:12:2f:07:47:7d:8b: 2f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D0:7F:10:0A:E8:A2:71:77:B0:B8:53:E7:B5:27:30:24:AF:B0:BA X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:10:cf:c2:1c:01:0d:6e:97:55:a7:3d:16:d8:da:a8:e4:de: 3b:b8:79:e3:9d:3d:04:a7:7a:d8:4d:d7:2f:ba:9e:fe:34:ab: 00:e1:c2:f0:25:d5:c5:36:8f:67:c2:43:43:5e:24:92:7b:37: 3e:66:fc:07:53:0f:c0:31:3d:c3:2c:9c:2a:f7:b4:02:c0:52: 4e:fb:ae:e9:40:26:9d:bf:c5:dc:0a:97:fd:b5:d7:e6:10:e9: 95:da:e0:3b:6f:86:a7:ee:5c:4b:ca:c5:95:19:46:28:16:6f: da:5b:0f:b1:99:74:40:41:7a:db:2b:88:d2:dc:30:06:b1:d6: fb:51:91:f6:af:c2:56:22:36:6c:b4:29:20:19:74:7c:8a:4e: b7:fb:b7:56:73:d8:ee:f7:d1:24:76:3d:a3:00:96:d5:a6:94: 02:e1:61:52:e6:cf:cb:36:35:25:be:2d:3b:4b:3a:5d:2a:c8: 04:0b:0c:c0:bd:ac:d8:4a:9a:5c:fc:87:61:f2:67:17:8f:36: 98:2d:3f:78:49:ea:c6:62:68:33:ec:44:3b:ca:b6:0f:b4:e3: ee:3c:b5:c6:de:7d:59:06:ae:fc:d4:63:2b:5f:60:b2:9a:19: fd:8f:3e:ec:c3:9e:46:0b:68:6b:01:31:42:b7:b5:07:54:72: b8:04:84:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjUxMDE5MDMwMDMxWhcNMjUxMDI2MDMwMDMxWjAYMRYwFAYD VQQDEw02OGY0NTQ0Zi00ZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MXijr9QTZnTpEM5OE7odeGGWCMcrIO3matXYXYPDiPsvc4hc+iwTxCoNCGS odZVFqoqVRJmDy4rR2T1NecNeEjmy+HpZ7SRk/g97cNtvFlSZNxxOCQ23/pM65i6 K7nMWReTmeLcqwBUDmYsgGI79hlQdROYsmoixmpmM1nt4HCEzWbBYvLT+QHTgfSa T3Km15l4kQjmJfA9CJ3w3R+dKsquzfEAilcTkMk1Xto64Aq+nMUcZvcYH6+FiwUa FGJwEM5p49MwuhCbcZ653spAh0XwM/t6byL1mH9BD5OXkK1pBedqiestkQFgUcH5 oohS6ATbE6F9bhoSLwdHfYsvKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADQfxAK 6KJxd7C4U+e1JzAkr7C6MB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDZCMS85QTBFQ0UxMEQwRjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZP TVhUR2NBcmdTQ1RpOEZ3akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZEM/CHAENbpdVpz0W2Nqo5N47uHnjnT0Ep3rYTdcvup7+NKsA4cLw JdXFNo9nwkNDXiSSezc+ZvwHUw/AMT3DLJwq97QCwFJO+67pQCadv8XcCpf9tdfm EOmV2uA7b4an7lxLysWVGUYoFm/aWw+xmXRAQXrbK4jS3DAGsdb7UZH2r8JWIjZs tCkgGXR8ik63+7dWc9ju99Ekdj2jAJbVppQC4WFS5s/LNjUlvi07SzpdKsgECwzA vazYSppc/Idh8mcXjzaYLT94SerGYmgz7EQ7yrYPtOPuPLXG3n1ZBq781GMrX2Cy mhn9jz7sw55GC2hrATFCt7UHVHK4BIT0 -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:37 2025 by rpki-client