$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft File: aLP_FmWJyEQaRP3KYfQrOmOuESk.mft (raw, json) Hash identifier: vdgVe6FFfK27jSvoeCIZAP3fNfSqJu8eAZ9HgjCOdzE= Subject key identifier: 4F:73:31:D0:5A:CF:AA:06:54:68:63:42:C5:38:B4:18:6E:67:F0:FD Authority key identifier: 68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29 Certificate issuer: /CN=A91A2C5D/serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft Manifest number: 01A0 Signing time: Sun 19 Oct 2025 06:44:14 +0000 Manifest this update: Sun 19 Oct 2025 06:44:14 +0000 Manifest next update: Sun 26 Oct 2025 06:44:14 +0000 Files and hashes: 1: aLP_FmWJyEQaRP3KYfQrOmOuESk.crl (hash: BA/zeiMVdFxLqtK2MSWofU8C/PIWpfKYxnya6HO038w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129 Validity Not Before: Oct 19 06:44:14 2025 GMT Not After : Oct 26 06:44:14 2025 GMT Subject: CN=68f488be-b12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ba:c1:83:ba:2b:eb:a5:bd:20:a8:66:7c:fa: ac:04:57:80:d6:33:54:7e:e5:ce:62:73:55:8c:b4: 94:c4:fc:b5:37:9e:39:1a:d3:b2:a9:53:05:43:d6: 57:e0:ca:3a:29:3a:9a:eb:c9:a8:3f:5f:09:b6:36: fd:a9:3c:29:39:da:6e:a1:75:f1:ba:78:43:d4:be: 2f:6f:4b:5a:6f:57:40:b4:29:b3:d6:38:cc:52:5a: 21:6e:ff:cf:af:f4:d1:eb:c6:96:0a:a9:6e:eb:ca: 7e:14:14:9b:63:7c:64:4b:36:4c:39:19:61:ec:62: 62:23:f7:91:3c:5a:db:90:f3:af:e6:79:be:3c:ae: 1f:f9:bb:bd:83:c4:cd:00:70:4f:a1:8c:a3:68:15: 22:05:80:2e:c9:36:c0:94:02:f5:16:ae:07:92:40: df:fc:99:29:00:51:a2:13:57:e6:c0:06:67:de:9f: d0:de:7f:29:fa:29:52:60:98:a3:b4:02:b8:62:cd: 6c:21:4c:ce:1b:c5:3d:7a:74:e7:69:5c:22:48:59: 30:03:91:ac:9d:7c:4e:0e:92:1c:93:be:60:24:3b: f9:1a:b9:f5:aa:a6:f9:11:1b:ed:ef:15:22:25:ec: 41:cd:37:e3:d4:c3:bc:8f:c6:c0:32:93:eb:8c:3b: d7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:73:31:D0:5A:CF:AA:06:54:68:63:42:C5:38:B4:18:6E:67:F0:FD X509v3 Authority Key Identifier: keyid:68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:88:50:8b:6e:09:58:1e:e0:17:79:1e:cb:df:1a:6d:de:62: 94:fe:da:dd:d0:c4:a6:79:ed:22:8e:39:cb:07:79:27:12:4c: 31:aa:37:44:c6:c1:79:d0:3d:c0:ba:62:ab:05:11:0b:0d:9a: 76:97:f3:1e:82:d8:26:86:2e:b1:30:59:54:c2:74:62:99:37: 21:b2:11:21:4a:7a:06:98:f8:4e:0a:e7:a8:91:aa:e6:d5:cd: c5:a7:f1:db:82:b1:58:a4:70:fc:01:5a:cc:ca:c9:0a:d9:57: 27:8f:32:3c:6a:75:c6:f8:d5:54:c7:59:1b:95:08:3b:8e:7e: 53:c2:6f:ea:6d:31:d7:ad:e0:52:ea:ce:05:ea:62:8e:00:da: 80:0c:62:13:65:79:68:10:a6:32:2b:b8:b6:32:8a:30:c4:cf: ad:bf:5f:df:fc:1d:d6:51:54:e8:c3:ca:26:80:58:f3:e8:92: ab:25:a6:a9:78:9d:00:81:d7:03:6b:30:2c:6f:c5:16:a2:75: 18:45:fb:c4:64:8b:d3:74:99:80:3c:ff:41:24:bb:b7:1c:a3: 36:47:3f:4b:16:28:8f:07:8d:4e:f1:21:61:0b:ef:91:67:5e: 97:d0:d8:42:3e:15:e1:86:a5:a4:ee:b8:94:d3:83:95:c3:37: 28:80:3f:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUQxMTAvBgNVBAUTKDY4QjNGRjE2NjU4OUM4NDQxQTQ0RkRDQTYxRjQyQjNB NjNBRTExMjkwHhcNMjUxMDE5MDY0NDE0WhcNMjUxMDI2MDY0NDE0WjAYMRYwFAYD VQQDEw02OGY0ODhiZS1iMTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LrBg7or66W9IKhmfPqsBFeA1jNUfuXOYnNVjLSUxPy1N545GtOyqVMFQ9ZX 4Mo6KTqa68moP18Jtjb9qTwpOdpuoXXxunhD1L4vb0tab1dAtCmz1jjMUlohbv/P r/TR68aWCqlu68p+FBSbY3xkSzZMORlh7GJiI/eRPFrbkPOv5nm+PK4f+bu9g8TN AHBPoYyjaBUiBYAuyTbAlAL1Fq4HkkDf/JkpAFGiE1fmwAZn3p/Q3n8p+ilSYJij tAK4Ys1sIUzOG8U9enTnaVwiSFkwA5GsnXxODpIck75gJDv5Grn1qqb5ERvt7xUi JexBzTfj1MO8j8bAMpPrjDvXXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9zMdBa z6oGVGhjQsU4tBhuZ/D9MB8GA1UdIwQYMBaAFGiz/xZlichEGkT9ymH0KzpjrhEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1RC8zQjlERDQxMDky QzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9hTFBfRm1XSnlFUWFSUDNLWWZRck9tT3VF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FMUF9GbVdKeUVRYVJQM0tZZlFyT21PdUVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1RC8zQjlERDQxMDkyQzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9hTFBfRm1XSnlF UWFSUDNLWWZRck9tT3VFU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3iFCLbglYHuAXeR7L3xpt3mKU/trd0MSmee0ijjnLB3knEkwxqjdE xsF50D3AumKrBRELDZp2l/Megtgmhi6xMFlUwnRimTchshEhSnoGmPhOCueokarm 1c3Fp/HbgrFYpHD8AVrMyskK2VcnjzI8anXG+NVUx1kblQg7jn5Twm/qbTHXreBS 6s4F6mKOANqADGITZXloEKYyK7i2MoowxM+tv1/f/B3WUVTow8omgFjz6JKrJaap eJ0AgdcDazAsb8UWonUYRfvEZIvTdJmAPP9BJLu3HKM2Rz9LFiiPB41O8SFhC++R Z16X0NhCPhXhhqWk7riU04OVwzcogD+V -----END CERTIFICATE-----Generated at Mon Oct 20 23:36:18 2025 by rpki-client