$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft File: ldQuwvRot-OPlYyPupMYARfcJuA.mft (raw, json) Hash identifier: jGipyOgM2bDUAzc3lZIm04MtmWt50gqHVB7740NDBWE= Subject key identifier: 52:60:89:D5:F2:E7:8F:E8:4B:D1:1C:31:38:53:D1:54:97:5C:2F:8B Authority key identifier: 95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0 Certificate issuer: /CN=A91A7F6A/serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft Manifest number: 75 Signing time: Sun 19 Oct 2025 10:20:10 +0000 Manifest this update: Sun 19 Oct 2025 10:20:09 +0000 Manifest next update: Sun 26 Oct 2025 10:20:09 +0000 Files and hashes: 1: ldQuwvRot-OPlYyPupMYARfcJuA.crl (hash: 5zw9PVH9zFhRg9ab9fytsu2bGeQfRgs9kCvSyDjV5lQ=) 2: 4210D4508CD711F0A2DFAA45C4F9AE02.roa (hash: 2JnfU/Mgp4zZ19X7p0k0eCs4HoUbNZM1uROYF0brrz8=) 3: B3849A9A359311F09B54926FC4F9AE02.roa (hash: Y+aC1xM6nmmoKwU/+TkwylgFTc7TBvkghCXTXAy84ng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F6A, serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0 Validity Not Before: Oct 19 10:20:09 2025 GMT Not After : Oct 26 10:20:09 2025 GMT Subject: CN=68f4bb5a-8628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f9:db:79:16:4f:58:c9:ef:de:0e:c5:94:d6: f7:3e:2a:92:cd:73:40:13:ab:b8:cf:e8:f5:91:47: 2e:6c:dc:42:6e:0b:fa:c9:38:56:3e:5b:29:a9:ab: b0:eb:1e:f8:b0:97:a9:66:c6:b5:48:3a:29:fe:41: 21:cf:3b:3c:9f:5a:33:fc:bf:6b:5f:13:b3:32:e8: 60:22:15:86:dc:e4:2b:e7:8f:4b:ab:6a:68:21:10: ff:0d:fd:95:68:2e:07:4a:1c:e6:ef:81:8a:87:dc: 24:e7:30:b4:78:43:cb:74:1b:fd:54:38:4a:87:55: df:1c:22:87:50:07:26:05:92:db:57:a4:b4:7f:e8: c2:d6:a7:3e:ba:2a:21:9b:2d:de:48:56:a4:cd:32: 6b:92:09:22:fd:dd:8b:96:d2:fe:cf:05:34:02:32: ff:c4:ee:da:fc:6b:10:b3:3e:44:a6:6f:db:e6:83: 0f:d4:18:1f:03:b0:1c:2d:5c:48:d0:91:2f:1b:6c: e1:46:8c:4c:a8:67:de:70:84:68:fa:59:d1:af:16: 2e:9b:aa:5a:73:43:d0:21:b3:4b:38:22:64:4b:d2: 2c:3e:dc:1c:03:79:ac:d7:5e:bd:ca:f7:0c:6c:1c: 52:42:b7:ac:84:3c:a7:6b:a6:6e:c5:c5:66:76:3d: 71:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:60:89:D5:F2:E7:8F:E8:4B:D1:1C:31:38:53:D1:54:97:5C:2F:8B X509v3 Authority Key Identifier: keyid:95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:50:23:8e:9b:83:99:55:b5:03:f0:d0:cc:bc:9d:cf:56:48: c1:8e:1d:7c:63:76:cd:bc:57:30:56:5e:17:bf:4c:c3:34:f6: 82:d4:8b:54:60:dd:f5:31:22:19:79:62:5b:f5:9e:c0:8f:2c: 66:9a:85:aa:84:7a:33:6a:d7:da:04:09:fa:49:53:dc:1f:63: 75:f4:fb:34:af:d1:66:89:f4:cc:ef:a6:27:24:73:b4:09:a6: d7:96:d1:62:b1:5b:8d:9e:df:8c:ac:bf:48:3c:63:91:d2:ae: 5c:5f:06:fd:0f:dc:f0:98:50:5b:50:41:3e:53:f8:35:d4:a5: b4:31:a3:e1:48:55:10:e5:6d:29:f3:82:6d:67:90:e5:b1:97: 94:4e:e3:da:53:95:8d:ef:3b:66:00:24:4b:fa:12:b6:26:d6: 9d:88:8b:e9:16:73:79:10:ac:17:03:b1:28:e6:09:e0:c7:81: bf:c3:de:bf:bd:19:fa:ed:48:17:e4:2b:e3:5d:5e:64:4e:c0: 30:02:51:62:ca:8d:8e:6d:b4:03:b7:af:20:0d:5e:70:71:74: 78:7b:16:9e:c6:44:58:be:6c:37:e0:e5:3a:02:7a:1c:41:3a: 10:d7:35:23:9b:05:e2:84:70:27:27:9c:72:d5:f2:c3:ba:a7: b4:e3:e8:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0Y2QTExMC8GA1UEBRMoOTVENDJFQzJGNDY4QjdFMzhGOTU4QzhGQkE5MzE4MDEx N0RDMjZFMDAeFw0yNTEwMTkxMDIwMDlaFw0yNTEwMjYxMDIwMDlaMBgxFjAUBgNV BAMTDTY4ZjRiYjVhLTg2MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc+dt5Fk9Yye/eDsWU1vc+KpLNc0ATq7jP6PWRRy5s3EJuC/rJOFY+Wympq7Dr Hviwl6lmxrVIOin+QSHPOzyfWjP8v2tfE7My6GAiFYbc5Cvnj0uramghEP8N/ZVo LgdKHObvgYqH3CTnMLR4Q8t0G/1UOEqHVd8cIodQByYFkttXpLR/6MLWpz66KiGb Ld5IVqTNMmuSCSL93YuW0v7PBTQCMv/E7tr8axCzPkSmb9vmgw/UGB8DsBwtXEjQ kS8bbOFGjEyoZ95whGj6WdGvFi6bqlpzQ9Ahs0s4ImRL0iw+3BwDeazXXr3K9wxs HFJCt6yEPKdrpm7FxWZ2PXEZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUmCJ1fLn j+hL0RwxOFPRVJdcL4swHwYDVR0jBBgwFoAUldQuwvRot+OPlYyPupMYARfcJuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3RjZBLzdBNTI5ODc2MEFG MDExRjA4NTMxRDQzQ0M0RjlBRTAyL2xkUXV3dlJvdC1PUGxZeVB1cE1ZQVJmY0p1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbGRRdXd2Um90LU9QbFl5UHVwTVlBUmZjSnVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 RjZBLzdBNTI5ODc2MEFGMDExRjA4NTMxRDQzQ0M0RjlBRTAyL2xkUXV3dlJvdC1P UGxZeVB1cE1ZQVJmY0p1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANJQI46bg5lVtQPw0My8nc9WSMGOHXxjds28VzBWXhe/TMM09oLUi1Rg 3fUxIhl5Ylv1nsCPLGaahaqEejNq19oECfpJU9wfY3X0+zSv0WaJ9Mzvpickc7QJ pteW0WKxW42e34ysv0g8Y5HSrlxfBv0P3PCYUFtQQT5T+DXUpbQxo+FIVRDlbSnz gm1nkOWxl5RO49pTlY3vO2YAJEv6ErYm1p2Ii+kWc3kQrBcDsSjmCeDHgb/D3r+9 GfrtSBfkK+NdXmROwDACUWLKjY5ttAO3ryANXnBxdHh7Fp7GRFi+bDfg5ToCehxB OhDXNSObBeKEcCcnnHLV8sO6p7Tj6EI= -----END CERTIFICATE-----Generated at Mon Oct 20 10:34:05 2025 by rpki-client