$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft File: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft (raw, json) Hash identifier: oh5/XXPjs6YtjsKzEu8/pnavLlc0ocJfR5xgGpJ7I3I= Subject key identifier: C3:EB:1F:0C:39:3C:17:88:62:16:2E:40:88:F2:E5:09:1D:1B:BF:CE Authority key identifier: 2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E Certificate issuer: /CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Certificate serial: 192F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft Manifest number: 191A Signing time: Sat 18 Oct 2025 16:49:16 +0000 Manifest this update: Sat 18 Oct 2025 16:49:15 +0000 Manifest next update: Sat 25 Oct 2025 16:49:15 +0000 Files and hashes: 1: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl (hash: 2JjkYZn+BepwMCoWlYk6I/iNWfchy1FnMtvNpezV8gA=) 2: 0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa (hash: psURfyPJMxxR2CGBpJlzsnwoEyc78Mv6OwXOUqaExNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6447 (0x192f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9467, serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Validity Not Before: Oct 18 16:49:15 2025 GMT Not After : Oct 25 16:49:15 2025 GMT Subject: CN=68f3c50c-8fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:ca:f2:1e:65:39:c7:df:bd:1e:4c:e8:24: bd:30:3a:aa:cc:73:36:a2:89:d8:94:2d:ef:53:16: bf:a8:d4:28:d6:b0:2c:64:c8:ca:60:b8:e0:e0:0b: d9:48:19:d2:89:6c:d3:b7:ed:e4:d2:64:2b:5a:8e: 54:26:13:af:bd:55:d6:e1:01:74:32:4c:a1:79:c0: 7d:ba:65:8c:ba:df:0a:4b:b5:bb:2b:23:f0:76:4f: b1:c5:fe:cb:8b:a4:f0:f5:5e:3f:fd:b1:78:61:de: 1c:b1:1b:7d:53:d8:5a:a8:81:37:59:2d:99:d0:a6: 2a:e4:fa:0c:7e:44:2d:7a:89:73:43:60:ca:dd:de: 81:d7:fb:26:7c:47:56:c9:3a:bb:5f:7b:8f:90:83: 74:af:37:f8:9f:3c:35:ca:c9:d1:25:ec:27:f7:47: 70:b8:31:f1:3d:ff:4b:9f:17:f3:f3:06:8f:6a:cb: 88:19:d1:48:61:47:40:9d:e2:36:fd:61:7d:0a:c9: 82:12:a0:d0:f2:a4:db:eb:b6:4c:59:d8:7c:98:32: 5e:4e:4a:15:10:be:58:5c:64:19:bd:8b:6d:ff:15: a3:0e:c9:8d:a5:e7:bb:6f:1b:9b:0a:9f:4c:f5:d5: 56:72:3c:85:e2:95:94:d9:79:8b:ec:aa:ec:b5:bd: 5a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EB:1F:0C:39:3C:17:88:62:16:2E:40:88:F2:E5:09:1D:1B:BF:CE X509v3 Authority Key Identifier: keyid:2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:aa:df:8c:95:fc:f5:3e:5e:eb:0b:42:3c:c4:d9:37:fc:6b: 1d:5a:72:9d:90:f7:da:16:ca:cd:46:a5:8f:d1:b8:c4:e2:82: 97:38:63:67:09:bd:7b:86:78:72:47:00:25:c3:75:51:9d:1d: 0e:5d:b8:50:4b:dd:db:5e:a3:ef:da:d4:54:4a:10:34:72:48: d3:ed:db:9e:b7:8a:a3:ff:c5:24:3c:2d:68:67:bf:d7:41:fe: af:87:4e:59:e6:2d:c0:44:ae:fc:85:f3:4b:9c:6f:d6:fe:63: 65:e2:d3:63:48:08:25:75:61:8d:77:8d:7a:82:fb:91:5b:1a: f0:5b:08:0b:c0:e5:62:d4:36:82:7a:65:db:13:23:20:70:75: b8:e2:d8:c8:70:df:f2:d1:71:f5:a0:be:c3:51:0f:60:39:0f: 32:d4:e0:32:87:90:81:63:37:62:0f:ae:bd:58:b5:fe:e0:0c: a4:49:19:3c:c1:be:e0:a4:e4:51:a2:d2:4a:8a:a6:48:61:15: 81:e1:52:99:52:30:5f:a1:98:98:25:de:b5:b0:7a:81:a9:a0: ff:66:13:1e:7f:6d:d4:82:e1:09:b8:a8:ec:24:34:7e:07:5d: 5d:42:98:35:64:59:62:09:6c:2a:eb:98:ae:45:06:65:fc:ac: dc:b0:84:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk0NjcxMTAvBgNVBAUTKDJFMTY0REI0NUI4NDZCQkFFNjhDMjc3RDQzRjg4MkY2 NDA5MjI4MUUwHhcNMjUxMDE4MTY0OTE1WhcNMjUxMDI1MTY0OTE1WjAYMRYwFAYD VQQDEw02OGYzYzUwYy04ZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaDK8h5lOcffvR5M6CS9MDqqzHM2oonYlC3vUxa/qNQo1rAsZMjKYLjg4AvZ SBnSiWzTt+3k0mQrWo5UJhOvvVXW4QF0MkyhecB9umWMut8KS7W7KyPwdk+xxf7L i6Tw9V4//bF4Yd4csRt9U9haqIE3WS2Z0KYq5PoMfkQteolzQ2DK3d6B1/smfEdW yTq7X3uPkIN0rzf4nzw1ysnRJewn90dwuDHxPf9Lnxfz8waPasuIGdFIYUdAneI2 /WF9CsmCEqDQ8qTb67ZMWdh8mDJeTkoVEL5YXGQZvYtt/xWjDsmNpee7bxubCp9M 9dVWcjyF4pWU2XmL7Krstb1aEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPrHww5 PBeIYhYuQIjy5QkdG7/OMB8GA1UdIwQYMBaAFC4WTbRbhGu65ownfUP4gvZAkige MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTQ2Ny85MTVDMDdFNjkx RUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3cm1qQ2Q5UV9pQzlrQ1NL QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xoWk50RnVFYTdybWpDZDlRX2lDOWtDU0tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTQ2Ny85MTVDMDdFNjkxRUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3 cm1qQ2Q5UV9pQzlrQ1NLQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFqt+Mlfz1Pl7rC0I8xNk3/GsdWnKdkPfaFsrNRqWP0bjE4oKXOGNn Cb17hnhyRwAlw3VRnR0OXbhQS93bXqPv2tRUShA0ckjT7duet4qj/8UkPC1oZ7/X Qf6vh05Z5i3ARK78hfNLnG/W/mNl4tNjSAgldWGNd416gvuRWxrwWwgLwOVi1DaC emXbEyMgcHW44tjIcN/y0XH1oL7DUQ9gOQ8y1OAyh5CBYzdiD669WLX+4AykSRk8 wb7gpORRotJKiqZIYRWB4VKZUjBfoZiYJd61sHqBqaD/ZhMef23UguEJuKjsJDR+ B11dQpg1ZFliCWwq65iuRQZl/KzcsIR/ -----END CERTIFICATE-----Generated at Mon Oct 20 10:02:36 2025 by rpki-client