$ rpki-client -vvf rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft File: lAjp17bOuDTKkJAeRXhgEMBpwys.mft (raw, json) Hash identifier: O3+78/RIEpZSyZ6N55gaVqVodvux0Nlj1z4FKzg/isg= Subject key identifier: 38:C5:BA:3E:C4:BC:98:14:43:08:A4:6F:AF:0D:4A:51:D1:09:29:F4 Authority key identifier: 94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B Certificate issuer: /CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft Manifest number: 0181 Signing time: Sun 19 Oct 2025 06:16:38 +0000 Manifest this update: Sun 19 Oct 2025 06:16:37 +0000 Manifest next update: Sun 26 Oct 2025 06:16:37 +0000 Files and hashes: 1: lAjp17bOuDTKkJAeRXhgEMBpwys.crl (hash: GK6RUCLfOEpkrl54QyX/tlYv7rd3oh7wbFT6nSLHUNw=) 2: 6015E82861B411EEBAA6AD59C4F9AE02.roa (hash: LwGVKFP/xTdHf/wYi8eVp6yJDAuRI5jefu1jxHK93RU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A394B, serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Validity Not Before: Oct 19 06:16:37 2025 GMT Not After : Oct 26 06:16:37 2025 GMT Subject: CN=68f48245-1535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a7:7a:6a:4c:11:e1:39:62:18:1e:3b:cd:73: 23:e0:e2:0e:3b:c5:f5:a2:c0:b0:60:a4:f6:39:df: d3:39:24:16:7c:35:a9:f2:cb:30:32:20:bc:3f:4b: 1a:16:ff:38:67:b2:d3:dc:3e:46:fb:b8:f2:1f:82: 11:7c:17:25:d0:13:21:56:29:b8:c1:d5:65:75:b8: 97:43:c9:ce:bf:18:1a:c6:fb:e0:e9:18:55:c3:96: dc:b5:1f:81:b9:dd:f8:5b:46:77:36:45:cb:90:11: e0:71:21:6d:05:24:af:a9:82:0c:e1:9c:71:41:d2: 0d:91:dc:6c:e5:8f:e7:8e:fe:f1:65:61:c4:29:0d: 4a:4d:97:4f:49:d3:fa:e5:3f:01:62:b6:98:5a:b7: c6:40:6d:1c:d4:45:91:b4:db:b6:85:c9:d3:c1:16: 4c:6d:9c:eb:52:d2:75:51:7b:77:3c:6b:ac:d8:1c: 39:5f:a4:2e:1b:a4:61:3a:59:be:e3:24:62:66:1c: a5:c8:10:cb:e6:3b:db:bb:d2:39:ec:48:da:1c:52: 19:e9:b8:df:d4:be:65:03:fc:6b:47:4d:81:91:52: a8:ab:85:44:d3:76:0b:81:2b:57:47:20:18:6a:9c: 87:8d:d6:c4:ab:78:f2:e9:0e:7c:84:c7:dd:d7:f2: 1d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C5:BA:3E:C4:BC:98:14:43:08:A4:6F:AF:0D:4A:51:D1:09:29:F4 X509v3 Authority Key Identifier: keyid:94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:28:87:f7:9c:5e:c4:4d:57:d1:c7:ad:ee:9f:b4:f3:15:7b: 85:ed:c9:08:e7:ae:c4:21:af:6f:69:16:74:f1:a6:96:28:b9: f1:2a:a8:68:64:58:71:db:36:96:96:5f:ad:42:bc:00:78:1d: 02:e4:01:45:9a:0e:27:46:08:6e:be:0a:71:3b:95:95:7c:fc: 74:e4:57:f2:fd:13:33:9f:cf:aa:0d:92:84:cb:49:7e:13:cb: c0:8f:c9:98:7b:00:58:1e:ee:9f:ad:c0:eb:27:58:97:f0:a0: 74:67:8e:2e:54:b6:9a:8a:54:81:18:09:49:c8:d5:1c:c9:91: a4:bd:50:1e:aa:5a:ef:d0:da:b8:46:fd:9b:da:d5:40:f9:07: 49:59:ea:a0:c4:de:6f:f3:f1:da:25:1c:08:5b:cb:dc:b2:44: 0a:ee:28:35:06:d6:f6:30:5a:4e:1a:43:15:b2:42:0b:85:7b: ff:b5:08:43:d0:b0:54:55:56:f6:76:7d:f4:bf:22:f1:74:56: 62:6d:ed:24:f0:47:21:ec:eb:22:ec:6e:14:9e:a3:61:1e:ef: 0b:b9:78:60:d8:b2:da:b3:77:5e:df:03:ac:0e:45:ef:db:dc: 51:31:12:39:b7:9a:60:72:b6:69:10:58:71:c8:5f:d1:a7:d8: 0e:f7:9d:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NEIxMTAvBgNVBAUTKDk0MDhFOUQ3QjZDRUI4MzRDQTkwOTAxRTQ1Nzg2MDEw QzA2OUMzMkIwHhcNMjUxMDE5MDYxNjM3WhcNMjUxMDI2MDYxNjM3WjAYMRYwFAYD VQQDEw02OGY0ODI0NS0xNTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qd6akwR4TliGB47zXMj4OIOO8X1osCwYKT2Od/TOSQWfDWp8sswMiC8P0sa Fv84Z7LT3D5G+7jyH4IRfBcl0BMhVim4wdVldbiXQ8nOvxgaxvvg6RhVw5bctR+B ud34W0Z3NkXLkBHgcSFtBSSvqYIM4ZxxQdINkdxs5Y/njv7xZWHEKQ1KTZdPSdP6 5T8BYraYWrfGQG0c1EWRtNu2hcnTwRZMbZzrUtJ1UXt3PGus2Bw5X6QuG6RhOlm+ 4yRiZhylyBDL5jvbu9I57EjaHFIZ6bjf1L5lA/xrR02BkVKoq4VE03YLgStXRyAY apyHjdbEq3jy6Q58hMfd1/IdCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjFuj7E vJgUQwikb68NSlHRCSn0MB8GA1UdIwQYMBaAFJQI6de2zrg0ypCQHkV4YBDAacMr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk0Qi8xMEFDQUIwQTYx QjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VEVEtrSkFlUlhoZ0VNQnB3 eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBanAxN2JPdURUS2tKQWVSWGhnRU1CcHd5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzk0Qi8xMEFDQUIwQTYxQjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VE VEtrSkFlUlhoZ0VNQnB3eXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHKIf3nF7ETVfRx63un7TzFXuF7ckI567EIa9vaRZ08aaWKLnxKqho ZFhx2zaWll+tQrwAeB0C5AFFmg4nRghuvgpxO5WVfPx05Ffy/RMzn8+qDZKEy0l+ E8vAj8mYewBYHu6frcDrJ1iX8KB0Z44uVLaailSBGAlJyNUcyZGkvVAeqlrv0Nq4 Rv2b2tVA+QdJWeqgxN5v8/HaJRwIW8vcskQK7ig1Btb2MFpOGkMVskILhXv/tQhD 0LBUVVb2dn30vyLxdFZibe0k8Ech7Osi7G4UnqNhHu8LuXhg2LLas3de3wOsDkXv 29xRMRI5t5pgcrZpEFhxyF/Rp9gO952G -----END CERTIFICATE-----Generated at Mon Oct 20 07:46:29 2025 by rpki-client