$ rpki-client -vvf rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft File: lRaRgJV2AETnT6qlSX0GcwraXzI.mft (raw, json) Hash identifier: RG+992dywpLKw/AL4MhkFjpa1lATKRDPa82C4vBJ2y4= Subject key identifier: ED:3E:3A:19:85:C0:DB:EC:32:1F:AB:F4:95:EE:71:2A:91:18:40:D7 Authority key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 Certificate issuer: /CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Certificate serial: 06A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft Manifest number: 06A0 Signing time: Sat 18 Oct 2025 23:46:43 +0000 Manifest this update: Sat 18 Oct 2025 23:46:43 +0000 Manifest next update: Sat 25 Oct 2025 23:46:43 +0000 Files and hashes: 1: lRaRgJV2AETnT6qlSX0GcwraXzI.crl (hash: QpLdQIGOqUtWxQIOPvO/KgWvhyqbTSHJ4m0anjdqvhI=) 2: 589FBEDC860311EBAFE18309C4F9AE02.roa (hash: QPlmMaSOgFDznMyc1xMqSWCG5G0RLk70r7GmVWThnas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1703 (0x6a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B334D, serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Validity Not Before: Oct 18 23:46:43 2025 GMT Not After : Oct 25 23:46:43 2025 GMT Subject: CN=68f426e3-3e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:98:1e:d7:69:e4:00:5b:c0:16:b0:70:2f:4e: 4d:5d:87:9a:e4:27:7a:36:3b:89:15:3c:fd:2b:17: e7:cc:42:0e:e7:06:4a:f2:e9:64:ec:91:c5:bf:14: 35:24:df:b8:69:ab:69:aa:83:1d:2b:69:3d:39:42: ec:ae:c4:c7:fb:d2:9f:da:a9:11:41:71:16:a2:d8: 5f:10:88:7a:80:04:60:61:2b:08:8b:ff:cd:e8:ec: fe:6b:61:ab:52:e4:2b:e1:c9:7d:bb:25:2e:30:a1: 1a:48:09:2f:46:19:80:da:2b:1f:25:01:1d:54:26: 29:1f:17:b5:17:cf:02:65:a3:ce:4b:51:ec:47:ed: 88:5e:e5:45:3e:71:53:60:56:0e:ae:61:63:39:94: 10:ce:6e:23:8e:f6:63:08:94:77:20:ae:0c:95:f0: d3:91:54:7b:87:b6:ca:cb:a0:90:80:db:a2:0c:f1: 74:3a:f2:37:c2:ee:fa:10:e4:cd:d0:01:91:be:56: 4e:e3:61:a1:4f:97:d0:ad:40:63:03:96:2b:2a:87: bb:7a:bb:f4:32:a7:d8:01:26:09:3a:42:f6:08:99: 4c:7c:f8:1f:91:b0:e9:1e:3b:0f:96:0b:71:dc:1c: af:f6:0a:35:7e:2b:10:41:2f:4f:c9:34:36:cf:d3: 12:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3E:3A:19:85:C0:DB:EC:32:1F:AB:F4:95:EE:71:2A:91:18:40:D7 X509v3 Authority Key Identifier: keyid:95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:df:05:58:3e:cd:7c:77:e8:77:89:ef:32:49:f7:02:d4:8a: 80:13:2c:89:dd:ab:82:05:42:28:bf:fe:7b:d2:48:7a:91:3d: bb:01:d6:5b:a5:72:b9:02:5c:9a:94:7c:b5:19:64:a8:3c:aa: 9c:ca:06:aa:c1:f0:4d:af:f9:ed:25:f1:15:e4:7f:e2:2e:f5: 12:66:20:bc:2c:8c:47:18:60:44:7d:a3:2c:6b:6a:89:0a:f8: 1d:2d:c1:79:7a:58:a7:b3:d5:df:0a:21:56:18:b7:46:a9:1d: 9b:bf:bc:66:f9:2d:ad:bd:f9:0f:0f:76:c8:d7:71:8a:1f:8e: d7:25:79:e9:9a:3d:f7:7e:bf:00:39:ba:f8:15:8e:23:42:87: 18:d2:9b:ce:8a:20:45:5c:47:40:8d:db:49:47:de:9d:00:dc: 04:80:1b:fc:40:ac:4e:5d:a1:1c:37:4f:2e:68:10:21:e4:1d: f3:f7:4f:31:14:5e:8f:57:c1:d0:d5:79:51:3e:d3:f6:8f:3a: 15:82:5a:d0:45:8b:25:e3:b7:b6:6d:e0:ea:1c:cf:14:24:ff: 0f:c9:39:0a:0a:80:6c:62:82:88:e9:35:42:64:37:8a:c8:1a: 21:2c:8e:84:5a:ec:8c:3c:eb:78:10:b2:45:e0:28:be:e7:92: 65:bd:d8:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMzNEQxMTAvBgNVBAUTKDk1MTY5MTgwOTU3NjAwNDRFNzRGQUFBNTQ5N0QwNjcz MEFEQTVGMzIwHhcNMjUxMDE4MjM0NjQzWhcNMjUxMDI1MjM0NjQzWjAYMRYwFAYD VQQDEw02OGY0MjZlMy0zZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pge12nkAFvAFrBwL05NXYea5Cd6NjuJFTz9KxfnzEIO5wZK8ulk7JHFvxQ1 JN+4aatpqoMdK2k9OULsrsTH+9Kf2qkRQXEWothfEIh6gARgYSsIi//N6Oz+a2Gr UuQr4cl9uyUuMKEaSAkvRhmA2isfJQEdVCYpHxe1F88CZaPOS1HsR+2IXuVFPnFT YFYOrmFjOZQQzm4jjvZjCJR3IK4MlfDTkVR7h7bKy6CQgNuiDPF0OvI3wu76EOTN 0AGRvlZO42GhT5fQrUBjA5YrKoe7erv0MqfYASYJOkL2CJlMfPgfkbDpHjsPlgtx 3Byv9go1fisQQS9PyTQ2z9MS4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0+OhmF wNvsMh+r9JXucSqRGEDXMB8GA1UdIwQYMBaAFJUWkYCVdgBE50+qpUl9BnMK2l8y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzM0RC8yN0U4NjFEODg1 RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFFVG5UNnFsU1gwR2N3cmFY ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSYVJnSlYyQUVUblQ2cWxTWDBHY3dyYVh6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzM0RC8yN0U4NjFEODg1RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFF VG5UNnFsU1gwR2N3cmFYekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj3wVYPs18d+h3ie8ySfcC1IqAEyyJ3auCBUIov/570kh6kT27AdZb pXK5AlyalHy1GWSoPKqcygaqwfBNr/ntJfEV5H/iLvUSZiC8LIxHGGBEfaMsa2qJ CvgdLcF5elins9XfCiFWGLdGqR2bv7xm+S2tvfkPD3bI13GKH47XJXnpmj33fr8A Obr4FY4jQocY0pvOiiBFXEdAjdtJR96dANwEgBv8QKxOXaEcN08uaBAh5B3z908x FF6PV8HQ1XlRPtP2jzoVglrQRYsl47e2beDqHM8UJP8PyTkKCoBsYoKI6TVCZDeK yBohLI6EWuyMPOt4ELJF4Ci+55JlvdiD -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:39 2025 by rpki-client