$ rpki-client -vvf rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft File: lCeAdFXYAaHRECh75X8-hPYpDKA.mft (raw, json) Hash identifier: Y43vHxiyR7fEHAxx+F9FERvaBWcZ0pCvFu3ClXr29dI= Subject key identifier: D8:F1:64:83:A5:54:AD:8E:5B:1A:FE:F4:40:FC:AE:3E:5A:AB:7A:58 Authority key identifier: 94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 Certificate issuer: /CN=A91D585E/serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft Manifest number: 0104 Signing time: Sun 19 Oct 2025 07:56:23 +0000 Manifest this update: Sun 19 Oct 2025 07:56:22 +0000 Manifest next update: Sun 26 Oct 2025 07:56:22 +0000 Files and hashes: 1: lCeAdFXYAaHRECh75X8-hPYpDKA.crl (hash: izC7txjo2hutU3W5RkrTqyINlr2xe2bqiqPYvFVjKHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D585E, serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Validity Not Before: Oct 19 07:56:22 2025 GMT Not After : Oct 26 07:56:22 2025 GMT Subject: CN=68f499a6-9dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a5:ed:66:f6:cf:ca:85:04:bb:f4:d8:2e:08: 35:87:a5:0d:e2:25:33:57:47:dd:0e:29:e1:ef:7e: b0:62:c3:c1:ea:b9:8a:f4:b7:79:cd:64:88:27:e4: 09:fc:f8:0d:36:6c:6a:c2:0f:5e:93:57:3f:dd:9e: ad:8a:09:96:21:9e:c7:01:1c:cb:99:37:71:a9:6a: 09:1c:36:ec:99:df:61:c1:2b:64:43:22:c0:96:61: 09:29:07:97:df:a1:e7:45:52:5f:0b:ab:8e:07:cc: ac:d7:a8:35:22:81:90:5a:9c:86:b2:c6:1d:b9:ce: 1b:a4:f9:76:e1:37:50:9e:27:36:76:b6:09:38:bc: 39:7c:3b:2d:f5:33:a9:f3:cc:56:c5:4e:3f:c5:7d: ba:89:16:52:cb:45:6f:e6:b2:cf:6c:c2:e1:08:3f: 62:3f:25:7c:e2:1e:a3:d4:27:2b:73:59:89:39:59: 08:71:42:55:cc:85:f2:11:0f:49:f5:da:29:24:fd: 3f:23:95:f7:d4:b7:77:68:f4:fa:4d:0f:c4:c7:c4: 0a:2a:64:e2:ff:60:07:e1:7d:58:98:e2:25:ad:2f: 90:26:29:37:37:d0:87:94:43:42:b5:02:b4:99:93: ee:86:0c:78:40:ec:6b:40:0f:3b:f5:58:74:34:7a: 67:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F1:64:83:A5:54:AD:8E:5B:1A:FE:F4:40:FC:AE:3E:5A:AB:7A:58 X509v3 Authority Key Identifier: keyid:94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:8e:1d:d5:6d:91:85:a6:5d:17:b4:11:73:90:b7:89:dc:fd: b9:9b:ea:b3:db:7e:97:39:03:cf:63:ef:87:3c:35:c0:a2:ff: 4f:c4:0e:4e:4a:4e:5d:7f:b2:75:b6:dc:2f:75:c8:38:41:68: e7:1c:18:87:b8:3d:12:6a:6b:83:41:6c:50:5d:26:86:6f:72: b8:07:44:4b:a4:ee:33:e1:8e:dd:a1:ee:dd:b8:48:03:6a:38: e7:15:04:eb:f9:5b:45:04:e7:09:24:8d:8f:fe:94:f3:b0:bd: 73:ea:25:c1:be:3f:8d:e8:dd:f8:d9:ce:f5:8a:10:eb:75:ab: f8:11:b6:5c:88:9e:29:36:a9:97:b2:d6:7f:5f:ae:95:6d:a8: dc:b1:8e:e3:51:39:a9:a8:95:7a:43:65:03:b5:a1:6e:fe:b0: a4:ff:a1:a9:86:0a:f3:72:c1:9e:e5:19:3e:2d:e1:73:53:80: 0b:f0:d8:84:a2:b3:23:1a:5d:9a:a2:b6:96:05:f1:c6:6f:bf: aa:25:00:69:fa:8d:73:35:00:49:06:8d:c0:9a:2b:59:45:4a: 9d:6b:c3:95:a1:2d:2b:a7:2d:9c:58:80:70:fd:2c:06:12:f2: b1:ec:76:2d:63:17:e0:7b:ef:3d:00:a3:19:ff:be:b6:ef:9b: 01:96:90:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4NUUxMTAvBgNVBAUTKDk0Mjc4MDc0NTVEODAxQTFEMTEwMjg3QkU1N0YzRTg0 RjYyOTBDQTAwHhcNMjUxMDE5MDc1NjIyWhcNMjUxMDI2MDc1NjIyWjAYMRYwFAYD VQQDEw02OGY0OTlhNi05ZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qXtZvbPyoUEu/TYLgg1h6UN4iUzV0fdDinh736wYsPB6rmK9Ld5zWSIJ+QJ /PgNNmxqwg9ek1c/3Z6tigmWIZ7HARzLmTdxqWoJHDbsmd9hwStkQyLAlmEJKQeX 36HnRVJfC6uOB8ys16g1IoGQWpyGssYduc4bpPl24TdQnic2drYJOLw5fDst9TOp 88xWxU4/xX26iRZSy0Vv5rLPbMLhCD9iPyV84h6j1Ccrc1mJOVkIcUJVzIXyEQ9J 9dopJP0/I5X31Ld3aPT6TQ/Ex8QKKmTi/2AH4X1YmOIlrS+QJik3N9CHlENCtQK0 mZPuhgx4QOxrQA879Vh0NHpnSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjxZIOl VK2OWxr+9ED8rj5aq3pYMB8GA1UdIwQYMBaAFJQngHRV2AGh0RAoe+V/PoT2KQyg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTg1RS80QkRBNzQ0NDFF NkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFhSFJFQ2g3NVg4LWhQWXBE S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDZUFkRlhZQWFIUkVDaDc1WDgtaFBZcERLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTg1RS80QkRBNzQ0NDFFNkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFh SFJFQ2g3NVg4LWhQWXBES0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBojh3VbZGFpl0XtBFzkLeJ3P25m+qz236XOQPPY++HPDXAov9PxA5O Sk5df7J1ttwvdcg4QWjnHBiHuD0SamuDQWxQXSaGb3K4B0RLpO4z4Y7doe7duEgD ajjnFQTr+VtFBOcJJI2P/pTzsL1z6iXBvj+N6N342c71ihDrdav4EbZciJ4pNqmX stZ/X66VbajcsY7jUTmpqJV6Q2UDtaFu/rCk/6GphgrzcsGe5Rk+LeFzU4AL8NiE orMjGl2aoraWBfHGb7+qJQBp+o1zNQBJBo3AmitZRUqda8OVoS0rpy2cWIBw/SwG EvKx7HYtYxfge+89AKMZ/76275sBlpBi -----END CERTIFICATE-----Generated at Mon Oct 20 04:08:07 2025 by rpki-client