$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft File: lGqi80z6-eS9bjRboJqd6bnC0U0.mft (raw, json) Hash identifier: PxX2CciEvsnoUrltd7x26BhDdcVldVWFiqOfaSNfGqw= Subject key identifier: 1D:72:AB:F0:EF:69:4C:F1:F9:44:6D:92:C8:86:0F:D8:4D:0E:64:4F Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D Certificate issuer: /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Certificate serial: 0EA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft Manifest number: 0E94 Signing time: Sat 18 Oct 2025 18:19:58 +0000 Manifest this update: Sat 18 Oct 2025 18:19:57 +0000 Manifest next update: Sat 25 Oct 2025 18:19:57 +0000 Files and hashes: 1: lGqi80z6-eS9bjRboJqd6bnC0U0.crl (hash: 8UWuoxORLwvDA7STaOctjn+CKYaAcjamANpGFFNaQHs=) 2: 1FAB60EE9EB111E99ED10D84C4F9AE02.roa (hash: J9DgdD9cL2JfNJGX2KpEbeL9xCo98zH1CjpWmw6WEyg=) 3: DECBB040985611ECBE7ED328C4F9AE02.roa (hash: fVjIBFUgnQxd9qxxnDI3HntLIaXeeQgbbHy+hbpb2zg=) 4: DF5D49F6985611ECBE7ED328C4F9AE02.roa (hash: oySlLPz0K/UmHCqFTFPFIY5DaigueFo/oV/JPUia/uU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3749 (0xea5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA69, serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Validity Not Before: Oct 18 18:19:57 2025 GMT Not After : Oct 25 18:19:57 2025 GMT Subject: CN=68f3da4d-629c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:54:cd:7e:df:59:28:69:02:73:d5:9b:6d: 70:99:26:14:ff:c3:37:6e:0a:53:8b:e4:d4:a1:32: 53:e1:93:5e:8a:58:7c:21:24:df:d6:18:c0:26:0a: 70:c4:88:fa:f0:ce:44:15:13:2c:1a:1b:0f:48:32: bd:a4:a2:6a:54:b0:35:89:01:da:e5:65:ee:67:df: 01:8c:dc:1f:06:b0:d0:d9:d9:e8:bf:14:f6:82:8f: 3e:f8:8c:d0:12:d1:54:8d:ee:9b:46:02:a4:cd:2d: c9:a3:b3:c6:63:b0:6b:46:e1:c5:69:1a:87:b7:6c: fc:1d:73:40:fa:b1:07:33:84:9c:2f:89:b9:b8:96: 02:23:9d:2e:0f:a5:dd:be:28:21:b9:af:63:9c:0e: db:b3:33:f1:36:c9:58:a2:8a:aa:24:60:0e:be:bc: 41:b3:4d:0d:e8:2c:4f:0b:85:64:0c:73:49:d0:b5: 3f:af:bd:d5:9c:62:b6:e2:6b:09:77:34:48:3d:43: 7a:6b:7c:c9:7d:5a:86:0e:81:0f:72:b8:23:0d:3d: e5:8c:69:f5:37:f9:06:91:0a:4d:c1:56:18:a4:0a: f4:cb:74:b7:44:47:61:aa:a0:51:4e:f6:aa:bc:c7: af:9f:cc:43:f1:d6:1a:ba:fe:94:57:b4:25:62:4d: 13:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:72:AB:F0:EF:69:4C:F1:F9:44:6D:92:C8:86:0F:D8:4D:0E:64:4F X509v3 Authority Key Identifier: keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:52:ca:3a:c9:63:68:72:3c:16:b4:7f:8b:5e:aa:94:11:0f: 40:46:2f:2d:00:41:d1:68:8e:2e:48:88:62:9d:d7:8a:ce:0f: 58:4b:8a:39:bc:96:06:56:0e:b2:bf:b4:ec:4b:e1:99:94:57: b8:f9:1a:cf:a6:23:de:f0:89:a5:3f:59:e6:a9:09:6d:60:38: 6f:ef:7d:53:8c:20:5a:be:ba:35:94:b5:c7:a7:ab:5d:be:8b: 54:49:ca:1b:cd:af:f4:70:c9:32:d4:9b:b7:dd:7e:4f:40:7b: ac:a8:0e:c8:3a:7a:1f:96:ea:ca:b4:da:2f:08:2d:53:76:c1: fc:cf:61:d9:80:27:b9:02:82:f3:3f:c6:60:af:9b:dc:b7:3d: b0:18:83:1a:21:1f:0d:26:d5:5f:b0:63:0e:e3:22:30:66:95: a8:c3:3a:1a:a7:d0:e1:b8:40:2e:39:52:ff:5a:06:95:5f:db: 5c:95:45:15:90:2d:a8:1c:b6:26:8c:c2:68:c3:fb:e6:8c:3c: c0:a4:d6:59:9b:05:d6:ba:b1:3a:dd:6a:37:6e:33:9d:e6:f7: 8f:eb:23:f3:97:f0:e2:ce:56:cd:4b:7d:ff:0b:0d:a9:bf:18: 44:6f:fe:6d:c5:f2:0d:e2:5b:b6:8f:fd:c1:cc:ec:24:70:f4: 51:d2:d5:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNjkxMTAvBgNVBAUTKDk0NkFBMkYzNENGQUY5RTRCRDZFMzQ1QkEwOUE5REU5 QjlDMkQxNEQwHhcNMjUxMDE4MTgxOTU3WhcNMjUxMDI1MTgxOTU3WjAYMRYwFAYD VQQDEw02OGYzZGE0ZC02MjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcRUzX7fWShpAnPVm21wmSYU/8M3bgpTi+TUoTJT4ZNeilh8ISTf1hjAJgpw xIj68M5EFRMsGhsPSDK9pKJqVLA1iQHa5WXuZ98BjNwfBrDQ2dnovxT2go8++IzQ EtFUje6bRgKkzS3Jo7PGY7BrRuHFaRqHt2z8HXNA+rEHM4ScL4m5uJYCI50uD6Xd vighua9jnA7bszPxNslYooqqJGAOvrxBs00N6CxPC4VkDHNJ0LU/r73VnGK24msJ dzRIPUN6a3zJfVqGDoEPcrgjDT3ljGn1N/kGkQpNwVYYpAr0y3S3REdhqqBRTvaq vMevn8xD8dYauv6UV7QlYk0TvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1yq/Dv aUzx+URtksiGD9hNDmRPMB8GA1UdIwQYMBaAFJRqovNM+vnkvW40W6Canem5wtFN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE2OS80MEUxRkM5QzlF QjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1lUzlialJib0pxZDZibkMw VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xHcWk4MHo2LWVTOWJqUmJvSnFkNmJuQzBVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE2OS80MEUxRkM5QzlFQjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1l UzlialJib0pxZDZibkMwVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeUso6yWNocjwWtH+LXqqUEQ9ARi8tAEHRaI4uSIhindeKzg9YS4o5 vJYGVg6yv7TsS+GZlFe4+RrPpiPe8ImlP1nmqQltYDhv731TjCBavro1lLXHp6td votUScobza/0cMky1Ju33X5PQHusqA7IOnoflurKtNovCC1TdsH8z2HZgCe5AoLz P8Zgr5vctz2wGIMaIR8NJtVfsGMO4yIwZpWowzoap9DhuEAuOVL/WgaVX9tclUUV kC2oHLYmjMJow/vmjDzApNZZmwXWurE63Wo3bjOd5veP6yPzl/DizlbNS33/Cw2p vxhEb/5txfIN4lu2j/3BzOwkcPRR0tUL -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:27 2025 by rpki-client