$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft File: ljwgt9OATbgByuJXTDHXYNU9M0Q.mft (raw, json) Hash identifier: /gmcfAH3AejnFZwpvhWv/lWN3qvTVnZerkiXBBtw3+s= Subject key identifier: 15:30:61:CE:B3:84:78:8A:18:6E:B3:64:37:D7:3A:6E:0D:5B:D8:37 Authority key identifier: 96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44 Certificate issuer: /CN=A91C6744/serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344 Certificate serial: 085B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft Manifest number: 0854 Signing time: Sat 18 Oct 2025 21:50:41 +0000 Manifest this update: Sat 18 Oct 2025 21:50:40 +0000 Manifest next update: Sat 25 Oct 2025 21:50:40 +0000 Files and hashes: 1: ljwgt9OATbgByuJXTDHXYNU9M0Q.crl (hash: 9hcITFVpeJNM0dNl+qCjFTRNVUknZEpcnSpNaYWrt2Q=) 2: E088B4E8E41B11ED8B0EFC0DC4F9AE02.roa (hash: o6F0EuKwlTrnUOxPf4ItfWLnrfcMDydYUClJAnjBios=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2139 (0x85b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6744, serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344 Validity Not Before: Oct 18 21:50:40 2025 GMT Not After : Oct 25 21:50:40 2025 GMT Subject: CN=68f40bb0-c862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:f4:b1:71:7a:ec:d6:57:d1:b3:e4:19:5f: 69:75:58:a9:e1:02:82:ba:b0:55:b8:4d:cd:b1:16: 27:31:a3:35:a2:08:a0:f1:5d:90:90:2b:28:8f:e6: c4:62:d7:2c:5a:e8:e8:85:e0:f3:67:7c:14:32:34: 0e:13:62:2b:8e:36:af:e5:81:1e:b6:7d:50:a0:a8: 20:4e:47:24:c9:11:5a:00:3a:89:f5:55:a4:c3:4e: 3f:08:ff:90:07:e9:ec:ea:46:2a:52:73:dd:8e:79: ad:31:f0:14:76:d0:1e:dc:7a:21:3e:3a:86:b0:2d: ad:43:18:8e:8b:a8:44:a7:b3:3f:74:0c:b3:f6:7d: 43:50:14:2c:50:80:8e:9a:de:2c:3e:eb:02:ec:7a: 57:9c:58:a8:0d:9d:9c:3e:49:73:df:65:63:ac:0a: 81:f1:1d:0a:d4:5e:6f:05:6b:5e:3e:b7:97:0e:d7: 19:31:15:55:71:00:85:fb:b4:7a:57:55:59:4c:02: ac:26:88:c9:bb:dc:ec:97:ae:d7:87:e9:9e:68:28: 4f:b7:c9:b9:ed:70:9c:2e:6a:3e:65:88:a5:97:53: b8:fc:88:d3:6a:5e:f7:06:e8:b9:b9:fe:eb:7f:c0: ef:25:59:62:65:ba:a0:7b:6d:64:21:f3:89:6c:d5: 6c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:30:61:CE:B3:84:78:8A:18:6E:B3:64:37:D7:3A:6E:0D:5B:D8:37 X509v3 Authority Key Identifier: keyid:96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:f3:30:ae:67:54:5f:3b:84:a7:31:fa:dd:4d:46:5d:dd:b5: 3c:16:d9:82:7a:62:1c:fb:25:ba:14:c9:04:c3:95:21:a0:d8: 59:2c:38:9a:19:a8:79:cc:e3:5a:7a:91:37:8f:18:b9:44:4e: 88:3a:ab:68:66:a1:e3:42:60:cf:3c:3a:fc:1d:60:b7:d7:6f: d7:26:36:6d:0d:e5:4a:1f:4d:f4:56:1c:e7:f0:7b:77:da:19: 4f:51:14:c8:20:ab:7f:cd:99:d2:dd:71:2c:a9:ea:60:1d:5a: 68:67:ab:2b:7b:00:a3:14:f6:f2:fc:a2:df:19:2a:e9:49:88: 8d:b7:76:68:87:06:24:ac:04:87:29:71:76:57:40:78:fb:05: 06:6e:2d:a0:54:33:69:29:da:91:89:cd:66:35:db:86:65:08: 49:67:4e:b0:21:2a:3c:c6:bf:80:a5:c0:b2:55:ef:d7:4d:a5: c6:8d:5e:4d:b7:89:b6:7a:bd:7e:49:6e:51:2e:46:59:5a:49: 41:2f:5c:04:b5:86:c4:84:f7:5f:15:24:41:9b:e2:19:0e:b1: 6a:ce:f1:c7:36:a0:5c:79:fe:1a:e7:2d:95:36:29:6b:1b:7b: 93:52:7a:fc:e4:d7:c4:8b:bf:ce:77:21:12:55:d7:68:79:b4: 1f:0c:ac:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY3NDQxMTAvBgNVBAUTKDk2M0MyMEI3RDM4MDREQjgwMUNBRTI1NzRDMzFENzYw RDUzRDMzNDQwHhcNMjUxMDE4MjE1MDQwWhcNMjUxMDI1MjE1MDQwWjAYMRYwFAYD VQQDEw02OGY0MGJiMC1jODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxL0sXF67NZX0bPkGV9pdVip4QKCurBVuE3NsRYnMaM1ogig8V2QkCsoj+bE YtcsWujoheDzZ3wUMjQOE2Irjjav5YEetn1QoKggTkckyRFaADqJ9VWkw04/CP+Q B+ns6kYqUnPdjnmtMfAUdtAe3HohPjqGsC2tQxiOi6hEp7M/dAyz9n1DUBQsUICO mt4sPusC7HpXnFioDZ2cPklz32VjrAqB8R0K1F5vBWtePreXDtcZMRVVcQCF+7R6 V1VZTAKsJojJu9zsl67Xh+meaChPt8m57XCcLmo+ZYill1O4/IjTal73Bui5uf7r f8DvJVliZbqge21kIfOJbNVsrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUwYc6z hHiKGG6zZDfXOm4NW9g3MB8GA1UdIwQYMBaAFJY8ILfTgE24AcriV0wx12DVPTNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjc0NC8zM0U3OEZBQ0RC QUUxMUVBQUQ5NjY3MjNDNEY5QUUwMi9sandndDlPQVRiZ0J5dUpYVERIWFlOVTlN MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xqd2d0OU9BVGJnQnl1SlhUREhYWU5VOU0wUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Njc0NC8zM0U3OEZBQ0RCQUUxMUVBQUQ5NjY3MjNDNEY5QUUwMi9sandndDlPQVRi Z0J5dUpYVERIWFlOVTlNMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl8zCuZ1RfO4SnMfrdTUZd3bU8FtmCemIc+yW6FMkEw5UhoNhZLDia Gah5zONaepE3jxi5RE6IOqtoZqHjQmDPPDr8HWC312/XJjZtDeVKH030Vhzn8Ht3 2hlPURTIIKt/zZnS3XEsqepgHVpoZ6srewCjFPby/KLfGSrpSYiNt3ZohwYkrASH KXF2V0B4+wUGbi2gVDNpKdqRic1mNduGZQhJZ06wISo8xr+ApcCyVe/XTaXGjV5N t4m2er1+SW5RLkZZWklBL1wEtYbEhPdfFSRBm+IZDrFqzvHHNqBcef4a5y2VNilr G3uTUnr85NfEi7/OdyESVddoebQfDKwz -----END CERTIFICATE-----Generated at Mon Oct 20 17:05:07 2025 by rpki-client