$ rpki-client -vvf rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft File: LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft (raw, json) Hash identifier: AfS66peiUh2cooC6dmwdHL+GIwynNdmdawjnlR5eUVc= Subject key identifier: AF:2F:A4:CF:2C:B4:FD:2F:3A:A0:0E:4F:CC:9A:35:18:7B:7F:2E:E0 Authority key identifier: 2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F Certificate issuer: /CN=A91B50D2/serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F Certificate serial: 0640 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft Manifest number: 0640 Signing time: Sun 19 Oct 2025 00:14:30 +0000 Manifest this update: Sun 19 Oct 2025 00:14:29 +0000 Manifest next update: Sun 26 Oct 2025 00:14:29 +0000 Files and hashes: 1: LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl (hash: fqwcz9PMM4bkGXTjW6hK/AW+ybdry8P2/GgX6Tx0jKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B50D2, serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F Validity Not Before: Oct 19 00:14:29 2025 GMT Not After : Oct 26 00:14:29 2025 GMT Subject: CN=68f42d65-8b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:17:d3:1d:bd:ce:c1:45:c5:6f:92:aa:ba:82: fb:b7:71:f8:a2:3b:4c:2a:37:9d:8f:9d:1d:c9:e0: ff:7a:90:ca:dc:8c:0e:c6:b6:7b:8d:f5:ad:cf:67: e2:d3:ee:8b:01:c0:9a:f5:4e:eb:a5:c0:16:d1:8e: b7:0d:a8:53:ee:26:95:6b:ba:98:ba:37:48:bd:6e: c3:39:c4:61:ba:ed:35:c1:03:a2:8b:21:9f:69:ee: 8e:37:22:74:ea:39:f2:d1:06:55:86:fb:f7:fc:32: 11:27:b8:bf:7b:93:72:2f:be:42:4e:c6:ec:e2:29: c5:8a:3f:84:c2:66:7f:a5:4c:f7:ad:04:ca:8c:80: 4e:5e:32:45:12:16:9a:87:ab:9a:e9:14:c6:18:bf: 23:96:46:37:3b:bd:b6:9b:c1:c9:c1:de:b8:26:b3: e9:0f:ef:32:a2:4b:5e:38:f8:43:a5:f7:34:d2:b5: aa:6e:b3:01:38:e6:20:c8:fe:7d:1e:a0:ab:0a:dd: 1e:c0:70:e9:5b:f3:f8:3f:8c:04:d4:cc:e2:e1:ed: 50:80:b9:4a:ea:3f:da:53:61:50:47:ce:04:ec:42: af:98:30:b0:2c:1a:d1:ae:c8:d1:86:83:b4:c7:e6: b6:46:58:cf:20:ba:38:01:46:55:fe:51:42:d5:f0: fb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2F:A4:CF:2C:B4:FD:2F:3A:A0:0E:4F:CC:9A:35:18:7B:7F:2E:E0 X509v3 Authority Key Identifier: keyid:2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:83:8e:cb:22:78:36:0e:92:fc:ca:69:d6:31:00:47:da:dd: 49:e9:21:8c:3b:b4:8f:8f:80:88:9d:52:15:e5:52:43:5c:92: 95:50:1a:53:bc:c5:3d:77:87:1a:d0:39:85:93:78:92:d8:8e: d0:43:d5:4d:bd:f2:3a:16:8e:54:ad:c9:48:59:fe:ee:2c:a1: 7a:c9:58:bf:ea:9a:c9:9c:5a:1b:de:c4:4b:30:bf:c4:38:61: 00:ed:3c:8d:75:f4:05:02:f6:6e:2e:83:6b:29:25:d7:ca:c8: dc:49:cc:db:43:a3:69:90:31:d5:7d:e0:a1:0a:19:22:11:20: ef:e2:d0:b3:7f:9c:ce:ce:33:2a:cc:2d:80:da:47:00:40:9a: 84:ab:f2:13:95:5e:6c:72:32:a5:e9:74:5b:3d:70:f8:13:ad: a7:9f:05:5e:37:91:da:5f:6b:7e:77:08:b9:3e:19:42:c5:06: 65:ac:9d:fe:ea:77:81:e5:7f:48:3e:55:63:99:56:56:6e:a7: ac:e5:2e:7b:5c:89:27:05:a4:b9:e0:63:2b:8d:0b:6f:56:53: 51:2f:a1:57:9e:6a:41:2f:5d:9f:31:3f:9c:b4:19:03:10:dc: dd:11:46:01:aa:00:27:d2:de:8f:e8:72:6f:0a:d7:f7:25:de: dc:92:d9:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwRDIxMTAvBgNVBAUTKDJFODI1Q0RGMjQ4QUMyMEEzOUMwNThFMjM4RkE5MjYx NDkyNEZBMEYwHhcNMjUxMDE5MDAxNDI5WhcNMjUxMDI2MDAxNDI5WjAYMRYwFAYD VQQDEw02OGY0MmQ2NS04Yjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhfTHb3OwUXFb5KquoL7t3H4ojtMKjedj50dyeD/epDK3IwOxrZ7jfWtz2fi 0+6LAcCa9U7rpcAW0Y63DahT7iaVa7qYujdIvW7DOcRhuu01wQOiiyGfae6ONyJ0 6jny0QZVhvv3/DIRJ7i/e5NyL75CTsbs4inFij+EwmZ/pUz3rQTKjIBOXjJFEhaa h6ua6RTGGL8jlkY3O722m8HJwd64JrPpD+8yokteOPhDpfc00rWqbrMBOOYgyP59 HqCrCt0ewHDpW/P4P4wE1Mzi4e1QgLlK6j/aU2FQR84E7EKvmDCwLBrRrsjRhoO0 x+a2RljPILo4AUZV/lFC1fD73wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8vpM8s tP0vOqAOT8yaNRh7fy7gMB8GA1UdIwQYMBaAFC6CXN8kisIKOcBY4jj6kmFJJPoP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTBEMi82RkExMjFBQUE5 QUExMUVCODU0MDc5NDNDNEY5QUUwMi9Mb0pjM3lTS3dnbzV3RmppT1BxU1lVa2st ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xvSmMzeVNLd2dvNXdGamlPUHFTWVVray1nOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTBEMi82RkExMjFBQUE5QUExMUVCODU0MDc5NDNDNEY5QUUwMi9Mb0pjM3lTS3dn bzV3RmppT1BxU1lVa2stZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyg47LIng2DpL8ymnWMQBH2t1J6SGMO7SPj4CInVIV5VJDXJKVUBpT vMU9d4ca0DmFk3iS2I7QQ9VNvfI6Fo5UrclIWf7uLKF6yVi/6prJnFob3sRLML/E OGEA7TyNdfQFAvZuLoNrKSXXysjcSczbQ6NpkDHVfeChChkiESDv4tCzf5zOzjMq zC2A2kcAQJqEq/ITlV5scjKl6XRbPXD4E62nnwVeN5HaX2t+dwi5PhlCxQZlrJ3+ 6neB5X9IPlVjmVZWbqes5S57XIknBaS54GMrjQtvVlNRL6FXnmpBL12fMT+ctBkD ENzdEUYBqgAn0t6P6HJvCtf3Jd7cktlC -----END CERTIFICATE-----Generated at Tue Oct 21 00:09:22 2025 by rpki-client