$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft File: Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json) Hash identifier: kUl+QcJz71zqolz7f3aLx6cbOy+KVGfozOcSBArZncw= Subject key identifier: C6:F7:83:94:9B:08:B2:09:94:52:E4:7A:9D:01:09:6E:AC:43:27:73 Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2 Certificate issuer: /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2 Certificate serial: 0737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft Manifest number: 0727 Signing time: Sat 18 Oct 2025 23:15:23 +0000 Manifest this update: Sat 18 Oct 2025 23:15:22 +0000 Manifest next update: Sat 25 Oct 2025 23:15:22 +0000 Files and hashes: 1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: ZYiq8P61WRoWCX6Zt4viF1sP7d0lr5fXkjs2sbsw3io=) 2: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: bT1Rk+hMyaHE50wfZv9GsZYDS5zMvSQ3DNQUIYRD7j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2 Validity Not Before: Oct 18 23:15:22 2025 GMT Not After : Oct 25 23:15:22 2025 GMT Subject: CN=68f41f8a-78ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fa:92:71:f4:e3:5b:b8:92:4f:63:09:41:5b: 63:35:9b:d2:28:6b:88:d7:91:ab:1b:02:9f:8c:2d: 71:48:64:67:de:bf:bc:b4:20:e1:2c:08:ff:c0:9d: 83:8f:66:28:87:83:e7:b1:f2:db:20:40:98:2e:37: c6:3d:66:5d:39:ce:94:00:99:55:10:b5:0e:7c:02: bf:1e:cf:60:39:63:1e:18:85:f6:03:20:ad:6d:61: 56:9f:9e:3e:1a:7d:e5:87:7a:d0:ed:ed:33:ce:48: 31:4a:1c:b4:84:fb:35:0b:e5:48:85:ba:e7:5b:d6: 17:d8:9a:39:31:18:02:01:cd:11:ed:73:9a:bf:b4: d9:a1:a7:e4:07:35:a0:52:a4:4e:05:e8:85:32:12: 19:ef:5b:ca:7c:ac:69:2b:24:c3:a5:13:eb:8e:1e: f0:42:0a:93:fc:61:a7:58:06:9a:5f:5f:ab:b8:fd: 36:9e:71:2d:fb:0e:d6:90:0c:53:81:99:32:15:a1: 33:27:bc:dd:bf:38:31:56:6c:c7:20:08:3a:17:7a: 5a:4e:e7:20:37:ce:08:1f:42:8c:0e:e8:08:0b:71: 3f:91:f6:18:dd:3e:b1:6c:af:5d:fd:66:49:fe:3b: 75:ff:21:06:c6:2e:70:b3:4e:0c:5a:cd:b3:13:08: 22:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F7:83:94:9B:08:B2:09:94:52:E4:7A:9D:01:09:6E:AC:43:27:73 X509v3 Authority Key Identifier: keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:7d:3f:12:e0:ac:3a:a4:f7:3f:65:b7:ad:61:41:b4:e3:7f: 4a:67:3b:75:c0:f7:ce:10:35:e8:6e:e3:6f:a8:11:73:8b:f9: 40:9d:c3:18:c6:4a:0d:ea:3a:10:6b:6a:f9:13:93:f1:5e:3c: a2:7a:60:58:b8:2b:71:2f:ea:67:e0:15:08:a6:d5:2d:60:32: a9:f0:79:8a:f6:da:78:e5:d8:1c:d1:3b:54:99:7d:97:99:e0: 82:84:02:15:7f:59:f0:1d:4d:a2:01:d2:88:22:52:97:d1:3b: 43:8c:da:b3:e6:94:c2:9e:63:c8:f5:3a:d9:18:20:6f:83:ac: 0c:12:91:60:7a:12:23:52:8c:0a:1a:d8:11:13:bb:05:6a:c9: 73:c5:b5:0f:5e:47:5b:7b:62:f7:52:59:5e:0b:7f:8b:41:a0: 54:ee:4b:42:82:7b:43:0d:0b:6e:32:57:cc:dc:70:99:66:95: b1:88:72:aa:da:e0:4c:59:82:bb:85:45:10:fe:52:87:c6:d4: 8a:af:c9:65:b7:1a:df:ec:1f:c8:6e:19:34:e0:8f:a2:7a:6d: bb:a4:9d:d8:80:80:f7:d4:e8:5d:e7:50:fc:16:36:16:1d:92: 43:f1:9c:77:72:90:bd:62:53:59:08:0b:a8:08:7e:e4:e3:6a: 01:56:c5:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBODUxMTAvBgNVBAUTKDJFQUY2MDA5NTMzNEU3RjBCQUEwNjVBOTJGNjUzRjVD NzQ0ODk1QzIwHhcNMjUxMDE4MjMxNTIyWhcNMjUxMDI1MjMxNTIyWjAYMRYwFAYD VQQDEw02OGY0MWY4YS03OGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfqScfTjW7iST2MJQVtjNZvSKGuI15GrGwKfjC1xSGRn3r+8tCDhLAj/wJ2D j2Yoh4PnsfLbIECYLjfGPWZdOc6UAJlVELUOfAK/Hs9gOWMeGIX2AyCtbWFWn54+ Gn3lh3rQ7e0zzkgxShy0hPs1C+VIhbrnW9YX2Jo5MRgCAc0R7XOav7TZoafkBzWg UqROBeiFMhIZ71vKfKxpKyTDpRPrjh7wQgqT/GGnWAaaX1+ruP02nnEt+w7WkAxT gZkyFaEzJ7zdvzgxVmzHIAg6F3paTucgN84IH0KMDugIC3E/kfYY3T6xbK9d/WZJ /jt1/yEGxi5ws04MWs2zEwgiwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMb3g5Sb CLIJlFLkep0BCW6sQydzMB8GA1UdIwQYMBaAFC6vYAlTNOfwuqBlqS9lP1x0SJXC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE4NS81NzM3OTJDQTU2 MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVfQzZvR1dwTDJVX1hIUkls Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxOWdDVk0wNV9DNm9HV3BMMlVfWEhSSWxjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE4NS81NzM3OTJDQTU2MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVf QzZvR1dwTDJVX1hIUklsY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxfT8S4Kw6pPc/ZbetYUG0439KZzt1wPfOEDXobuNvqBFzi/lAncMY xkoN6joQa2r5E5PxXjyiemBYuCtxL+pn4BUIptUtYDKp8HmK9tp45dgc0TtUmX2X meCChAIVf1nwHU2iAdKIIlKX0TtDjNqz5pTCnmPI9TrZGCBvg6wMEpFgehIjUowK GtgRE7sFaslzxbUPXkdbe2L3UlleC3+LQaBU7ktCgntDDQtuMlfM3HCZZpWxiHKq 2uBMWYK7hUUQ/lKHxtSKr8lltxrf7B/Ibhk04I+iem27pJ3YgID31Ohd51D8FjYW HZJD8Zx3cpC9YlNZCAuoCH7k42oBVsVB -----END CERTIFICATE-----Generated at Mon Oct 20 09:41:21 2025 by rpki-client