$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: cqqEmPxXo0ohKYuk3iAETscwc2QhkX6Zg1M7lzC/mFo= Subject key identifier: 02:46:C0:B0:6A:92:5A:C2:28:04:2B:2E:29:36:A2:15:23:23:82:22 Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: F4 Signing time: Sun 19 Oct 2025 08:11:01 +0000 Manifest this update: Sun 19 Oct 2025 08:11:01 +0000 Manifest next update: Sun 26 Oct 2025 08:11:01 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: RE6shyM4OrkDAa5xpOpuDK4mxj4HmMr0b3f2fR43qtA=) 2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: XWY3Z0PrjeVbgUGRkkonKlE66Ol3xZjgkZ/1G2BNmmU=) 3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: clF6JNb3xxwZ4+TvE/qZQW2JPLeVEQfwTMXzv7FMnBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Oct 19 08:11:01 2025 GMT Not After : Oct 26 08:11:01 2025 GMT Subject: CN=68f49d15-36ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e4:6c:88:70:2c:e6:6a:5f:eb:a2:9b:c4:6d: 9d:13:fc:98:fb:a9:e6:ac:ae:6a:56:68:86:e2:d2: 7a:32:eb:25:1f:f6:ce:07:45:29:51:c8:5d:54:dd: 98:0c:c0:a6:48:68:90:ac:d4:82:cd:e5:f9:91:bf: ba:d0:29:23:2f:7f:fb:b6:1a:f7:d9:8d:20:3b:4b: 40:89:9f:7d:5b:00:13:9d:96:a6:f8:92:4a:b0:05: ea:36:40:fd:7e:43:72:db:24:4b:91:4f:3e:a4:e2: 9d:6e:fa:d4:fb:83:4b:99:0b:5f:aa:19:37:ec:d9: 34:6e:c1:41:72:c9:27:a9:3d:09:5d:20:bb:1d:38: ca:49:1f:e1:69:fc:3c:9f:51:df:4a:bf:59:70:1b: 26:63:6b:8c:40:d7:60:6b:75:5c:7a:17:a0:58:c3: c2:a5:be:16:3e:c3:46:83:f5:41:18:f0:b4:00:27: 1d:a5:d4:04:08:ca:c9:2f:92:57:4f:50:4e:2a:42: 20:78:16:07:cc:11:ad:05:7d:a3:d6:25:42:ea:ba: 83:a6:36:9c:f0:ba:a9:e7:39:13:ee:cd:7d:bb:20: 91:46:ff:6c:a5:11:28:fb:40:4e:e8:c4:30:b4:a9: 02:c5:9c:b9:f3:b6:1f:2c:07:a5:5d:fe:fa:70:ca: af:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:46:C0:B0:6A:92:5A:C2:28:04:2B:2E:29:36:A2:15:23:23:82:22 X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e0:7d:d6:70:b1:d8:49:90:fd:ac:46:3e:b5:4f:4b:22:c0: 23:36:3f:0a:49:8e:11:2e:06:8d:a0:5e:07:6d:f2:d5:49:e8: c9:f4:20:90:e2:6d:33:a2:58:3d:2d:74:1c:0c:f6:98:92:28: f3:ac:a7:bc:62:f5:81:7f:27:72:c5:e8:42:30:26:74:92:f9: cd:39:e3:61:1a:a2:4c:bd:7c:fd:99:e5:eb:10:94:92:e4:41: 1f:62:f3:cc:9e:12:0c:01:b5:7f:cc:42:68:bc:33:b2:b9:c2: de:91:4f:bf:22:18:bc:75:04:bb:03:0e:30:11:70:2b:b5:bd: ba:28:25:4b:93:f8:63:79:c1:bf:fa:1c:10:f4:1b:71:6b:ef: c4:cb:ff:56:5c:a8:35:4d:dc:c1:08:b9:e4:9d:91:da:4e:42: d0:0f:e0:f1:dc:50:bb:c0:64:52:77:46:91:1d:7f:3e:07:c0: 12:0d:d5:e5:2e:4b:e9:56:53:f1:e9:90:47:a7:e3:c9:19:cc: fa:dd:a7:9b:bc:ff:fd:9e:5a:52:0d:be:42:97:15:d0:0b:ad: c3:de:d9:60:e0:db:79:a9:cc:ad:d7:ea:38:04:33:e6:a5:ac: 54:fb:81:79:6a:34:d9:b8:de:9a:9b:d8:75:d9:27:6d:fd:1a: 3f:19:72:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjUxMDE5MDgxMTAxWhcNMjUxMDI2MDgxMTAxWjAYMRYwFAYD VQQDEw02OGY0OWQxNS0zNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuRsiHAs5mpf66KbxG2dE/yY+6nmrK5qVmiG4tJ6MuslH/bOB0UpUchdVN2Y DMCmSGiQrNSCzeX5kb+60CkjL3/7thr32Y0gO0tAiZ99WwATnZam+JJKsAXqNkD9 fkNy2yRLkU8+pOKdbvrU+4NLmQtfqhk37Nk0bsFBcsknqT0JXSC7HTjKSR/hafw8 n1HfSr9ZcBsmY2uMQNdga3VcehegWMPCpb4WPsNGg/VBGPC0ACcdpdQECMrJL5JX T1BOKkIgeBYHzBGtBX2j1iVC6rqDpjac8Lqp5zkT7s19uyCRRv9spREo+0BO6MQw tKkCxZy587YfLAelXf76cMqv0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJGwLBq klrCKAQrLik2ohUjI4IiMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA84H3WcLHYSZD9rEY+tU9LIsAjNj8KSY4RLgaNoF4HbfLVSejJ9CCQ 4m0zolg9LXQcDPaYkijzrKe8YvWBfydyxehCMCZ0kvnNOeNhGqJMvXz9meXrEJSS 5EEfYvPMnhIMAbV/zEJovDOyucLekU+/Ihi8dQS7Aw4wEXArtb26KCVLk/hjecG/ +hwQ9Btxa+/Ey/9WXKg1TdzBCLnknZHaTkLQD+Dx3FC7wGRSd0aRHX8+B8ASDdXl LkvpVlPx6ZBHp+PJGcz63aebvP/9nlpSDb5ClxXQC63D3tlg4Nt5qcyt1+o4BDPm paxU+4F5ajTZuN6am9h12Sdt/Ro/GXJy -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:46 2025 by rpki-client