$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft File: LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json) Hash identifier: 0Tab6pQ+18sgb1L0RAWct2GargDhb58aeduioYvbh7M= Subject key identifier: C5:F7:CC:E4:45:C9:D2:EE:61:A5:5E:05:63:32:B0:83:49:57:C5:5D Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft Manifest number: FC Signing time: Sun 19 Oct 2025 08:05:27 +0000 Manifest this update: Sun 19 Oct 2025 08:05:27 +0000 Manifest next update: Sun 26 Oct 2025 08:05:27 +0000 Files and hashes: 1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: V/sD/KoigG2Izjs2mCCFxpcM9tnu+O0EhKlWyaay6LY=) 2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: tqUNG1S/rsB6bW3LBm3IsjWdqGyc7l/8ScuxBxWoVEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Validity Not Before: Oct 19 08:05:27 2025 GMT Not After : Oct 26 08:05:27 2025 GMT Subject: CN=68f49bc7-d148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d9:66:16:77:18:ca:ca:ea:96:f2:b6:d8:2b: c2:3b:ca:d1:53:d2:d7:b5:26:17:33:af:8f:24:46: 2c:cc:64:53:70:a4:65:6f:55:0a:a9:2c:f0:bb:82: e4:5f:ed:f4:6d:ce:0a:71:ee:fe:f6:e2:89:b0:5f: 64:de:2b:bc:ca:19:ce:74:95:e0:26:74:6e:fb:f1: 08:0d:e7:19:13:7e:18:de:5e:f5:d4:71:87:5b:50: 8f:c8:8f:34:50:81:39:44:23:f6:cd:7d:97:86:d8: ac:57:ce:15:df:66:ee:e3:6d:12:4a:40:84:e0:c2: 59:52:e3:b2:64:b3:74:78:08:4d:70:6c:97:0e:1d: fc:c8:d7:88:4d:bf:29:3c:2d:de:78:2b:ff:cb:4b: 8e:cf:c8:73:5e:9b:b3:29:ce:22:f4:ba:3c:93:40: 89:93:af:50:d0:9d:88:26:30:d0:98:fe:27:16:b9: 5a:0a:b5:62:54:ad:6a:f3:96:53:9b:cc:23:ac:d8: b3:d9:02:49:5e:c9:53:a4:a7:2d:a4:04:c9:e2:e4: be:0f:57:f2:af:d8:6c:c3:e7:15:2e:d6:7e:9d:a9: 72:29:d7:30:e8:85:db:4b:b2:9e:cc:81:15:32:45: ac:63:c1:50:12:01:3a:3f:da:84:ed:a0:0a:eb:c9: 30:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F7:CC:E4:45:C9:D2:EE:61:A5:5E:05:63:32:B0:83:49:57:C5:5D X509v3 Authority Key Identifier: keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:4c:bf:77:44:f8:9a:9c:c6:4c:33:e0:b4:82:69:9e:6a:db: 1d:74:4a:ee:8b:59:ac:f9:f9:28:65:b1:48:89:9b:21:ac:e4: 80:88:a9:6e:8a:6d:61:b2:b6:26:9b:93:84:97:d4:bb:b8:1d: 8d:d3:0c:5e:88:d1:68:d4:0a:63:84:f6:91:0b:ac:a8:b6:0e: 7f:11:ba:b0:06:3d:b8:6e:bc:97:3b:ee:9e:93:53:e8:2a:eb: 73:a0:72:47:3a:72:71:ac:59:15:37:c6:72:87:e7:bf:f3:a6: 1e:ab:d3:bc:6e:4b:c6:c7:83:12:0e:15:76:ae:b1:37:e5:5e: 01:40:bd:d6:da:cf:58:b1:20:29:81:c6:a8:87:f6:e8:b7:2c: 4d:28:6d:2e:71:a7:19:eb:33:6a:5f:39:f6:55:2f:e8:52:b3: f4:9c:c1:2d:c0:d0:0e:bc:bd:a1:fe:3a:c4:3a:7f:f0:fc:0e: fd:6c:31:53:13:33:f5:f7:bf:ee:64:15:3b:6c:f0:b6:8f:57: 51:5b:6e:18:c5:66:9d:de:a0:75:8e:4a:55:65:3e:2c:0c:58: de:45:34:a3:5d:8d:60:00:c6:99:33:43:aa:43:4e:4d:b6:b1: a2:d2:e0:0d:8c:40:11:19:46:c0:e2:5b:43:64:6e:53:ae:11: 86:bc:62:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM5REExMTAvBgNVBAUTKDJEMUUwRUE3N0FDQTNGRTU5N0RFRjMxOTYyMUVGNDBE MTJENEMxREMwHhcNMjUxMDE5MDgwNTI3WhcNMjUxMDI2MDgwNTI3WjAYMRYwFAYD VQQDEw02OGY0OWJjNy1kMTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NlmFncYysrqlvK22CvCO8rRU9LXtSYXM6+PJEYszGRTcKRlb1UKqSzwu4Lk X+30bc4Kce7+9uKJsF9k3iu8yhnOdJXgJnRu+/EIDecZE34Y3l711HGHW1CPyI80 UIE5RCP2zX2XhtisV84V32bu420SSkCE4MJZUuOyZLN0eAhNcGyXDh38yNeITb8p PC3eeCv/y0uOz8hzXpuzKc4i9Lo8k0CJk69Q0J2IJjDQmP4nFrlaCrViVK1q85ZT m8wjrNiz2QJJXslTpKctpATJ4uS+D1fyr9hsw+cVLtZ+nalyKdcw6IXbS7KezIEV MkWsY8FQEgE6P9qE7aAK68kwQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMX3zORF ydLuYaVeBWMysINJV8VdMB8GA1UdIwQYMBaAFC0eDqd6yj/ll97zGWIe9A0S1MHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzlEQS82Q0I5RDBBNjJG QUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1AtV1gzdk1aWWg3MERSTFV3 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xSNE9wM3JLUC1XWDN2TVpZaDcwRFJMVXdkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzlEQS82Q0I5RDBBNjJGQUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1At V1gzdk1aWWg3MERSTFV3ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmTL93RPianMZMM+C0gmmeatsddErui1ms+fkoZbFIiZshrOSAiKlu im1hsrYmm5OEl9S7uB2N0wxeiNFo1ApjhPaRC6yotg5/EbqwBj24bryXO+6ek1Po KutzoHJHOnJxrFkVN8Zyh+e/86Yeq9O8bkvGx4MSDhV2rrE35V4BQL3W2s9YsSAp gcaoh/botyxNKG0ucacZ6zNqXzn2VS/oUrP0nMEtwNAOvL2h/jrEOn/w/A79bDFT EzP197/uZBU7bPC2j1dRW24YxWad3qB1jkpVZT4sDFjeRTSjXY1gAMaZM0OqQ05N trGi0uANjEARGUbA4ltDZG5TrhGGvGLw -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:12 2025 by rpki-client