$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft File: LQx0fe_201Ecz11T86dlcA8cgqA.mft (raw, json) Hash identifier: Gp26sLLlo8B79KV9pqk2uGlHMOHCR5Pu2JQYP5MoIVg= Subject key identifier: 7B:44:1B:B6:98:48:34:3F:13:97:90:9B:53:47:A8:04:9B:DB:1E:B1 Authority key identifier: 2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 Certificate issuer: /CN=A9170975/serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft Manifest number: 4C Signing time: Sun 19 Oct 2025 10:44:38 +0000 Manifest this update: Sun 19 Oct 2025 10:44:37 +0000 Manifest next update: Sun 26 Oct 2025 10:44:37 +0000 Files and hashes: 1: LQx0fe_201Ecz11T86dlcA8cgqA.crl (hash: VATkNYXNQifH4KWX5gcKaFEM2plljUI2UBa4DgbNl60=) 2: B0B8FBDA3A2A11F09E37DB48C4F9AE02.roa (hash: Gk5HrV+ASLgWFwT9SMxMpFzIA+vBFJ75IOUj++Jvz6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170975, serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Validity Not Before: Oct 19 10:44:37 2025 GMT Not After : Oct 26 10:44:37 2025 GMT Subject: CN=68f4c116-438f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:83:fc:59:30:88:f3:f9:36:fc:f9:57:5a:ce: f2:69:00:16:83:60:b2:00:cb:f1:71:af:e8:7b:30: 89:61:88:3a:1f:a6:1c:32:76:11:bb:05:3d:d7:a6: e1:11:46:17:c1:df:f3:ae:f8:84:a8:2f:6e:51:26: 7e:97:ba:f8:fd:58:ff:bb:d2:d9:e9:e3:66:c2:e0: 76:cc:6e:58:f4:9d:bc:43:c1:6a:f2:4b:e5:f0:d0: ce:7f:94:df:3d:61:7c:ce:f4:37:d0:cb:87:a7:99: 78:8b:5f:f6:bd:37:8f:66:71:a4:c9:34:76:70:83: 40:8a:2e:32:8f:36:13:60:48:7b:a7:36:f9:30:4a: d6:eb:e4:bf:68:86:f2:a4:b3:d4:9e:66:e7:f9:4d: de:85:ba:9c:a9:f7:5a:91:ad:08:b1:a6:ce:ef:18: 78:19:d7:f9:f5:06:df:0e:61:c3:a7:e7:bd:10:6c: a5:35:8a:2f:e2:8b:fc:68:ed:bd:b5:a3:22:73:3d: 65:10:8f:7e:fc:77:41:ac:90:85:eb:1d:70:de:4c: a7:fc:0d:9f:62:26:b2:e2:9a:6b:ab:b9:d6:86:04: ea:13:63:f3:7d:dd:dd:09:62:30:0a:f2:fc:75:9f: 17:81:cf:7f:3f:3e:55:cf:2e:63:e6:40:f4:07:98: 25:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:44:1B:B6:98:48:34:3F:13:97:90:9B:53:47:A8:04:9B:DB:1E:B1 X509v3 Authority Key Identifier: keyid:2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:22:0f:00:b5:74:a3:d6:f9:5d:4f:80:b6:88:59:19:ac:cc: 59:19:46:2e:cf:54:81:88:2d:a9:b6:6b:b7:1a:d2:fe:f6:a1: 40:93:20:d6:5e:33:16:42:52:5f:ba:69:ba:92:56:79:3c:19: e5:cf:58:d7:3c:87:d8:01:a8:69:33:28:ef:aa:23:3c:dc:da: 22:f2:5b:41:0c:0a:78:5b:e9:00:44:53:06:1a:6c:ee:f9:34: c0:bd:8e:3f:bd:12:a3:32:48:76:4e:20:45:29:80:e6:f5:db: 09:2b:45:6b:b9:0e:8e:b7:5a:5c:ea:86:e9:61:47:a0:70:7b: bd:0d:99:f6:7a:c6:cc:b1:41:f6:29:6f:1d:2b:9f:ed:3d:8e: a7:ce:02:d7:58:56:02:fd:33:e4:14:81:3e:bd:b2:40:14:a4: 31:62:c4:a0:aa:89:c0:5a:d9:99:d8:02:ed:64:b8:a4:e4:44: 82:69:ce:2a:c8:c2:ab:dd:4b:5e:9b:ea:53:8b:50:aa:b6:e3: 5d:c2:59:90:57:f9:f4:9f:31:2c:a9:45:60:8c:74:28:b1:dd: 82:21:28:3f:34:9d:2f:60:2f:63:75:4c:35:09:5c:89:b6:a5: ed:e2:18:04:07:10:9d:e0:9e:db:3d:d8:29:41:ca:f8:6e:13: 5a:68:81:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDk3NTExMC8GA1UEBRMoMkQwQzc0N0RFRkY2RDM1MTFDQ0Y1RDUzRjNBNzY1NzAw RjFDODJBMDAeFw0yNTEwMTkxMDQ0MzdaFw0yNTEwMjYxMDQ0MzdaMBgxFjAUBgNV BAMTDTY4ZjRjMTE2LTQzOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeg/xZMIjz+Tb8+VdazvJpABaDYLIAy/Fxr+h7MIlhiDofphwydhG7BT3XpuER RhfB3/Ou+ISoL25RJn6Xuvj9WP+70tnp42bC4HbMblj0nbxDwWryS+Xw0M5/lN89 YXzO9DfQy4enmXiLX/a9N49mcaTJNHZwg0CKLjKPNhNgSHunNvkwStbr5L9ohvKk s9SeZuf5Td6Fupyp91qRrQixps7vGHgZ1/n1Bt8OYcOn570QbKU1ii/ii/xo7b21 oyJzPWUQj378d0GskIXrHXDeTKf8DZ9iJrLimmurudaGBOoTY/N93d0JYjAK8vx1 nxeBz38/PlXPLmPmQPQHmCX3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUe0QbtphI ND8Tl5CbU0eoBJvbHrEwHwYDVR0jBBgwFoAULQx0fe/201Ecz11T86dlcA8cgqAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTc1LzVGOTAzNUY2M0Ey NjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFFY3oxMVQ4NmRsY0E4Y2dx QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFF4MGZlXzIwMUVjejExVDg2ZGxjQThjZ3FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTc1LzVGOTAzNUY2M0EyNjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFF Y3oxMVQ4NmRsY0E4Y2dxQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIoiDwC1dKPW+V1PgLaIWRmszFkZRi7PVIGILam2a7ca0v72oUCTINZe MxZCUl+6abqSVnk8GeXPWNc8h9gBqGkzKO+qIzzc2iLyW0EMCnhb6QBEUwYabO75 NMC9jj+9EqMySHZOIEUpgOb12wkrRWu5Do63WlzqhulhR6Bwe70NmfZ6xsyxQfYp bx0rn+09jqfOAtdYVgL9M+QUgT69skAUpDFixKCqicBa2ZnYAu1kuKTkRIJpzirI wqvdS16b6lOLUKq2413CWZBX+fSfMSypRWCMdCix3YIhKD80nS9gL2N1TDUJXIm2 pe3iGAQHEJ3gnts92ClByvhuE1pogUI= -----END CERTIFICATE-----Generated at Tue Oct 21 00:03:52 2025 by rpki-client