$ rpki-client -vvf rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft File: LNEILrR3cdIdqQBYLz7IfGndXMw.mft (raw, json) Hash identifier: SBAqnCKKbVl9UoHsanVnIdE8BVX7ZEvhkqhlJuIodr4= Subject key identifier: 96:CF:61:53:6C:E3:7A:06:E9:76:19:EB:99:F1:59:19:23:D7:46:2E Authority key identifier: 2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC Certificate issuer: /CN=A91D84F7/serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft Manifest number: DE Signing time: Sun 19 Oct 2025 08:30:54 +0000 Manifest this update: Sun 19 Oct 2025 08:30:53 +0000 Manifest next update: Sun 26 Oct 2025 08:30:53 +0000 Files and hashes: 1: LNEILrR3cdIdqQBYLz7IfGndXMw.crl (hash: 7y555aMyspHp0qptCiF4ZjHr0w/pOmivXXg8OCqrXSo=) 2: AAFB89C25B8E11EF8774691FC4F9AE02.roa (hash: Z8UDv1UV/5P3Y0FPBjtW9ftg+P9GP6R45lfE98ZqVpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D84F7, serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC Validity Not Before: Oct 19 08:30:53 2025 GMT Not After : Oct 26 08:30:53 2025 GMT Subject: CN=68f4a1bd-ab3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:02:8f:d4:1a:24:05:52:c2:36:40:57:55: dd:6d:c4:f6:c8:1e:d8:16:f1:90:ac:18:86:8a:96: b3:8e:4c:3e:f1:43:51:2c:b7:91:ef:37:99:f2:97: 49:45:91:34:0e:7a:bf:f6:a6:65:a4:5c:31:91:46: 93:3b:b8:ce:cc:7d:89:59:84:40:a3:7b:54:f7:0a: bf:49:c6:2e:dd:bf:70:69:d2:f6:04:6d:8c:4b:ba: 47:a9:eb:67:df:b5:0e:92:d5:0e:fa:97:ce:45:54: b7:24:2f:95:2b:1d:f8:58:1b:de:63:ea:ad:73:ad: d4:30:b4:52:36:4c:ba:e0:c0:d8:3c:25:98:be:64: 2d:37:6b:ea:07:a6:03:f9:7c:f7:87:43:1c:20:03: 68:f5:74:56:68:f3:bf:0c:84:fb:93:b7:54:0a:e6: 9c:c6:7f:d8:1d:f9:6a:74:ba:4f:65:dd:15:2c:ac: 66:4d:c2:e6:da:8f:9b:14:4d:bf:bd:0a:4c:c7:99: 40:fc:54:95:f5:a0:1b:22:c0:70:fc:fd:34:c1:a1: 56:f1:0f:fa:16:59:3a:06:75:2e:0d:da:fd:92:94: ea:9f:2c:28:bb:d5:49:54:61:b0:40:5e:2b:31:0c: 68:32:49:45:90:10:16:5c:e5:29:ea:e2:34:ea:2a: 0e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CF:61:53:6C:E3:7A:06:E9:76:19:EB:99:F1:59:19:23:D7:46:2E X509v3 Authority Key Identifier: keyid:2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:cf:55:ca:d3:8f:6e:1f:79:48:d3:8a:5b:62:76:31:d0:e3: e2:01:2c:6a:f8:f9:11:4d:37:b4:99:59:83:8c:11:2f:11:89: 78:78:98:2f:56:a8:42:f5:b5:31:92:f4:d5:ad:6d:22:16:6f: d9:2c:d7:15:ae:3d:c9:70:50:0c:4d:8d:bf:6d:c5:1e:d8:ef: f5:1b:4d:be:25:6b:ec:77:ec:b4:04:9d:0f:c1:ce:d7:41:a9: b3:91:0d:59:8e:68:b3:8c:1b:0b:2e:6c:ff:9f:c2:f0:74:2a: 16:b7:99:f8:22:44:26:75:e8:8a:13:b9:21:6c:0b:f7:f6:2b: cd:9a:86:b0:5f:0f:67:01:30:45:11:35:f4:6d:95:ce:1b:e0: da:1b:e7:d8:4c:9b:dc:9e:10:3c:ae:20:af:48:11:bb:8b:02: b2:79:0a:e0:2f:ea:61:a0:af:06:e3:c9:4e:f6:c0:9a:cd:d6: 19:18:8f:01:4e:c3:10:18:fd:2e:b4:19:4b:b4:fa:d0:a5:1c: a4:9e:a9:43:a7:25:3f:b8:16:5f:22:a7:e9:73:d2:d6:aa:2c: db:da:31:9f:85:a6:18:eb:7d:58:75:f0:89:f3:a0:bc:dc:4d: 7a:14:b8:4f:5a:48:43:b0:ff:7d:78:f2:59:57:67:2a:23:4e: 73:92:b1:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg0RjcxMTAvBgNVBAUTKDJDRDEwODJFQjQ3NzcxRDIxREE5MDA1ODJGM0VDODdD NjlERDVDQ0MwHhcNMjUxMDE5MDgzMDUzWhcNMjUxMDI2MDgzMDUzWjAYMRYwFAYD VQQDEw02OGY0YTFiZC1hYjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lkCj9QaJAVSwjZAV1XdbcT2yB7YFvGQrBiGipazjkw+8UNRLLeR7zeZ8pdJ RZE0Dnq/9qZlpFwxkUaTO7jOzH2JWYRAo3tU9wq/ScYu3b9wadL2BG2MS7pHqetn 37UOktUO+pfORVS3JC+VKx34WBveY+qtc63UMLRSNky64MDYPCWYvmQtN2vqB6YD +Xz3h0McIANo9XRWaPO/DIT7k7dUCuacxn/YHflqdLpPZd0VLKxmTcLm2o+bFE2/ vQpMx5lA/FSV9aAbIsBw/P00waFW8Q/6Flk6BnUuDdr9kpTqnywou9VJVGGwQF4r MQxoMklFkBAWXOUp6uI06ioOHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbPYVNs 43oG6XYZ65nxWRkj10YuMB8GA1UdIwQYMBaAFCzRCC60d3HSHakAWC8+yHxp3VzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODRGNy83OUNBRkIyNjVC OEUxMUVGOTE3N0U5MUVDNEY5QUUwMi9MTkVJTHJSM2NkSWRxUUJZTHo3SWZHbmRY TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xORUlMclIzY2RJZHFRQllMejdJZkduZFhNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODRGNy83OUNBRkIyNjVCOEUxMUVGOTE3N0U5MUVDNEY5QUUwMi9MTkVJTHJSM2Nk SWRxUUJZTHo3SWZHbmRYTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpz1XK049uH3lI04pbYnYx0OPiASxq+PkRTTe0mVmDjBEvEYl4eJgv VqhC9bUxkvTVrW0iFm/ZLNcVrj3JcFAMTY2/bcUe2O/1G02+JWvsd+y0BJ0Pwc7X QamzkQ1ZjmizjBsLLmz/n8LwdCoWt5n4IkQmdeiKE7khbAv39ivNmoawXw9nATBF ETX0bZXOG+DaG+fYTJvcnhA8riCvSBG7iwKyeQrgL+phoK8G48lO9sCazdYZGI8B TsMQGP0utBlLtPrQpRyknqlDpyU/uBZfIqfpc9LWqizb2jGfhaYY631YdfCJ86C8 3E16FLhPWkhDsP99ePJZV2cqI05zkrEs -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:48 2025 by rpki-client