$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft File: lC4n1lxHr7WXCpr-goCbMXnYtGY.mft (raw, json) Hash identifier: BwtWZslLRq9u4O5RHlOCuw0tWV3jHnOP68gdrSZHw9Q= Subject key identifier: 7A:89:21:D1:58:D3:94:03:47:BC:B4:CC:A4:1D:1C:DB:36:5E:97:36 Authority key identifier: 94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66 Certificate issuer: /CN=A91DC33B/serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft Manifest number: 16DD Signing time: Sat 18 Oct 2025 17:05:38 +0000 Manifest this update: Sat 18 Oct 2025 17:05:37 +0000 Manifest next update: Sat 25 Oct 2025 17:05:37 +0000 Files and hashes: 1: lC4n1lxHr7WXCpr-goCbMXnYtGY.crl (hash: aMpjpIw1M51mJjSdMxSQtacaHmwX2VIs/Qqoazwy/oY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC33B, serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466 Validity Not Before: Oct 18 17:05:37 2025 GMT Not After : Oct 25 17:05:37 2025 GMT Subject: CN=68f3c8e1-3327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ea:59:76:c8:23:b0:73:ed:8f:cd:74:bd:a0: 9f:90:b0:a5:97:0d:97:34:08:c5:4e:93:8a:c9:80: b5:3c:af:51:e3:bc:5d:a9:ce:c2:49:9b:a3:40:71: 47:e8:ee:93:f6:7f:3d:92:f6:c3:0f:92:da:79:81: 68:ad:2b:1f:06:ee:28:e2:77:5f:07:00:c4:75:06: e3:dd:72:b0:3e:27:32:73:ef:92:41:0e:b0:87:e5: ed:27:03:35:1e:5a:a0:2e:ab:1b:78:47:b8:0f:d2: fc:dd:88:16:22:6d:33:48:8b:78:cf:0f:a3:c9:95: 80:22:a7:40:db:6d:33:67:86:bc:f3:f4:5f:a3:9e: 52:00:9d:55:5f:4d:2d:d6:8f:8e:d0:e7:30:72:44: 42:40:46:7c:e9:da:89:dc:10:e5:20:d5:1d:b6:f1: c0:04:a5:ac:c6:48:65:7f:84:0d:ea:d1:7d:bf:97: 6d:56:04:db:78:64:97:58:9c:dc:bb:e3:a5:6f:57: 8b:a4:21:7b:3d:bc:e7:8a:2d:3e:41:f7:18:9f:99: 2e:72:15:8d:29:b7:bf:20:9c:1e:d2:6f:90:4e:81: 87:34:6e:1c:d7:84:2c:7b:77:ed:39:36:3d:af:48: 8a:1e:3c:e0:86:f4:4d:a1:4d:ef:fd:e2:b1:97:96: 4d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:89:21:D1:58:D3:94:03:47:BC:B4:CC:A4:1D:1C:DB:36:5E:97:36 X509v3 Authority Key Identifier: keyid:94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:62:c7:fe:a6:4a:e9:2f:de:3f:e9:79:b0:5d:1f:05:a5:4f: 3c:97:51:08:07:0b:86:87:9a:53:af:60:9f:43:27:34:e0:ec: 89:7d:76:66:ef:93:53:ed:44:6d:db:68:39:52:49:a7:ea:a0: 2b:14:3a:bf:db:d4:86:ce:d0:9d:23:31:62:d2:7e:72:88:65: 30:6e:45:56:d2:e2:fb:53:6b:58:6e:2b:65:f3:12:80:6b:54: a1:43:32:02:39:65:47:21:c4:16:e3:ec:83:a7:e8:43:6c:81: 08:bc:e8:a3:a8:ba:3a:fb:0b:5e:10:a9:f1:72:0f:66:8f:01: 52:db:c7:6c:cf:d3:f6:f5:bb:24:d4:14:44:c4:a1:c6:03:2b: a0:70:9b:5c:7e:ab:ab:6f:a3:83:02:ed:c2:7d:e2:ea:7a:ae: 21:1b:e2:c4:49:98:3f:81:47:d2:c4:2d:d1:b8:d3:4f:21:ad: dd:a4:53:f8:79:aa:b2:27:82:50:f5:47:76:93:dc:58:c9:90: 3b:9d:b8:b6:34:22:20:28:4c:b6:3b:c6:d3:e8:68:37:41:a1: f6:0e:90:b9:17:79:aa:95:06:0d:83:e7:15:47:68:39:65:a1: 8c:6e:37:56:9b:9f:91:b2:0c:65:37:15:96:d9:fd:28:07:30: db:17:e7:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QzMzQjExMC8GA1UEBRMoOTQyRTI3RDY1QzQ3QUZCNTk3MEE5QUZFODI4MDlCMzE3 OUQ4QjQ2NjAeFw0yNTEwMTgxNzA1MzdaFw0yNTEwMjUxNzA1MzdaMBgxFjAUBgNV BAMTDTY4ZjNjOGUxLTMzMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt6ll2yCOwc+2PzXS9oJ+QsKWXDZc0CMVOk4rJgLU8r1HjvF2pzsJJm6NAcUfo 7pP2fz2S9sMPktp5gWitKx8G7ijid18HAMR1BuPdcrA+JzJz75JBDrCH5e0nAzUe WqAuqxt4R7gP0vzdiBYibTNIi3jPD6PJlYAip0DbbTNnhrzz9F+jnlIAnVVfTS3W j47Q5zByREJARnzp2oncEOUg1R228cAEpazGSGV/hA3q0X2/l21WBNt4ZJdYnNy7 46VvV4ukIXs9vOeKLT5B9xifmS5yFY0pt78gnB7Sb5BOgYc0bhzXhCx7d+05Nj2v SIoePOCG9E2hTe/94rGXlk0tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeokh0VjT lANHvLTMpB0c2zZelzYwHwYDVR0jBBgwFoAUlC4n1lxHr7WXCpr+goCbMXnYtGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDMzNCL0I0QzlGRTkyMDZG NTExRTg5NjE4RjQyRkM0RjlBRTAyL2xDNG4xbHhIcjdXWENwci1nb0NiTVhuWXRH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEM0bjFseEhyN1dYQ3ByLWdvQ2JNWG5ZdEdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD MzNCL0I0QzlGRTkyMDZGNTExRTg5NjE4RjQyRkM0RjlBRTAyL2xDNG4xbHhIcjdX WENwci1nb0NiTVhuWXRHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEBix/6mSukv3j/pebBdHwWlTzyXUQgHC4aHmlOvYJ9DJzTg7Il9dmbv k1PtRG3baDlSSafqoCsUOr/b1IbO0J0jMWLSfnKIZTBuRVbS4vtTa1huK2XzEoBr VKFDMgI5ZUchxBbj7IOn6ENsgQi86KOoujr7C14QqfFyD2aPAVLbx2zP0/b1uyTU FETEocYDK6Bwm1x+q6tvo4MC7cJ94up6riEb4sRJmD+BR9LELdG4008hrd2kU/h5 qrInglD1R3aT3FjJkDuduLY0IiAoTLY7xtPoaDdBofYOkLkXeaqVBg2D5xVHaDll oYxuN1abn5GyDGU3FZbZ/SgHMNsX5zY= -----END CERTIFICATE-----Generated at Mon Oct 20 13:08:38 2025 by rpki-client