$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft File: ltMlORFGzztdo_4Uaf7BKLS2jEk.mft (raw, json) Hash identifier: LYHUf3rFpK39PGTIpE37aQHLHCHDy9zxFbumRQXEXmc= Subject key identifier: FD:93:B6:72:BF:B7:0F:61:5A:DC:25:2C:40:B2:D8:47:2E:82:D6:35 Authority key identifier: 96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49 Certificate issuer: /CN=A91E63E7/serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft Manifest number: BF Signing time: Sun 19 Oct 2025 09:00:27 +0000 Manifest this update: Sun 19 Oct 2025 09:00:26 +0000 Manifest next update: Sun 26 Oct 2025 09:00:26 +0000 Files and hashes: 1: ltMlORFGzztdo_4Uaf7BKLS2jEk.crl (hash: xezBLdZOMry5gRHcIgqGK1/Tni6IdsRvpHiL3jWq3rw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49 Validity Not Before: Oct 19 09:00:26 2025 GMT Not After : Oct 26 09:00:26 2025 GMT Subject: CN=68f4a8ab-4bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e0:e6:8b:71:f5:f4:24:51:c8:3c:00:39:83: 85:15:a6:06:d7:93:f2:5f:1a:5d:d2:8d:97:ef:23: 4b:55:ba:08:6e:6b:31:d5:b8:52:72:4c:cc:be:8a: dc:af:b3:c7:d8:98:bb:52:82:eb:a3:79:c1:a0:69: ad:0b:67:23:65:b9:28:7d:f3:ef:2d:5b:62:55:8a: 28:45:fd:d6:19:2e:c8:8f:09:d0:61:a0:f1:69:38: 4a:60:ff:2a:f4:28:90:31:47:26:5e:51:61:88:e2: a3:d4:7a:fd:ed:bb:89:3e:58:33:39:2d:6c:e8:6f: 06:28:46:02:82:0e:8f:e0:9a:11:0a:88:79:35:0c: 1a:99:45:49:94:11:57:50:eb:2c:dc:fa:b4:e2:aa: 25:32:4e:bd:1a:f3:ab:78:14:f1:9f:37:f7:1c:15: d1:ae:9d:8b:6f:e1:50:0b:40:53:08:88:3e:bd:11: 37:47:8e:59:a9:b8:50:65:28:84:3c:08:79:ce:c8: b1:f3:f2:47:69:6d:80:d7:4e:85:ae:aa:9c:6c:ac: b0:97:ef:62:05:ac:8a:3f:96:60:3d:43:9a:a0:94: f2:f9:47:43:35:11:b9:a3:5c:44:0e:42:38:ec:61: 62:3a:92:66:23:cd:f2:6f:7b:25:a6:2f:e8:d6:e8: 39:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:93:B6:72:BF:B7:0F:61:5A:DC:25:2C:40:B2:D8:47:2E:82:D6:35 X509v3 Authority Key Identifier: keyid:96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e9:7c:1b:53:bf:7d:47:f4:f2:c1:32:8f:5d:83:24:05:f8: 13:a2:e4:65:da:7f:c4:55:51:44:bd:af:e2:b4:68:15:79:c7: 4e:fb:4c:a2:10:75:c7:2c:1b:ff:29:0f:3f:23:2a:ef:af:67: be:5c:b8:f9:65:26:d1:a3:e7:b8:4f:be:e2:46:e6:3d:77:d6: d3:c1:56:5b:f0:36:ba:ae:a0:3b:54:8b:9a:77:10:8f:3d:a3: ff:f3:55:08:5b:2d:af:d7:d8:4c:86:97:a0:1b:2c:f7:14:d2: 3e:a0:48:fd:e9:72:2e:29:60:f8:3d:94:68:8a:e3:22:ce:7c: 42:cf:21:2a:11:47:38:b6:d9:89:d2:56:97:b5:3f:ba:2d:89: fa:87:4f:ea:22:db:32:a7:ac:ec:a4:63:b9:ef:08:66:1d:f3: 51:4b:6e:9b:af:4c:60:4d:99:93:b6:f8:16:e8:b7:99:8e:fe: 93:44:54:a4:2f:96:95:2e:bf:f1:2c:c8:34:4f:66:32:5b:3c: 02:73:6a:b8:3b:85:20:0b:a1:33:d2:b3:2a:16:6e:03:02:5d: dd:3f:89:4d:fe:f4:78:17:6d:a2:62:bb:64:56:a9:55:a3:d9: d2:3f:c3:41:99:a5:52:3a:e8:c6:92:b8:6c:0c:8d:43:b1:9a: a3:9e:6d:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzRTcxMTAvBgNVBAUTKDk2RDMyNTM5MTE0NkNGM0I1REEzRkUxNDY5RkVDMTI4 QjRCNjhDNDkwHhcNMjUxMDE5MDkwMDI2WhcNMjUxMDI2MDkwMDI2WjAYMRYwFAYD VQQDEw02OGY0YThhYi00YmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruDmi3H19CRRyDwAOYOFFaYG15PyXxpd0o2X7yNLVboIbmsx1bhSckzMvorc r7PH2Ji7UoLro3nBoGmtC2cjZbkoffPvLVtiVYooRf3WGS7IjwnQYaDxaThKYP8q 9CiQMUcmXlFhiOKj1Hr97buJPlgzOS1s6G8GKEYCgg6P4JoRCoh5NQwamUVJlBFX UOss3Pq04qolMk69GvOreBTxnzf3HBXRrp2Lb+FQC0BTCIg+vRE3R45ZqbhQZSiE PAh5zsix8/JHaW2A106FrqqcbKywl+9iBayKP5ZgPUOaoJTy+UdDNRG5o1xEDkI4 7GFiOpJmI83yb3slpi/o1ug5ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2TtnK/ tw9hWtwlLECy2EcugtY1MB8GA1UdIwQYMBaAFJbTJTkRRs87XaP+FGn+wSi0toxJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjNFNy80QUNCOEJGMDg4 NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9sdE1sT1JGR3p6dGRvXzRVYWY3QktMUzJq RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x0TWxPUkZHenp0ZG9fNFVhZjdCS0xTMmpFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjNFNy80QUNCOEJGMDg4NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9sdE1sT1JGR3p6 dGRvXzRVYWY3QktMUzJqRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw6XwbU799R/TywTKPXYMkBfgTouRl2n/EVVFEva/itGgVecdO+0yi EHXHLBv/KQ8/Iyrvr2e+XLj5ZSbRo+e4T77iRuY9d9bTwVZb8Da6rqA7VIuadxCP PaP/81UIWy2v19hMhpegGyz3FNI+oEj96XIuKWD4PZRoiuMiznxCzyEqEUc4ttmJ 0laXtT+6LYn6h0/qItsyp6zspGO57whmHfNRS26br0xgTZmTtvgW6LeZjv6TRFSk L5aVLr/xLMg0T2YyWzwCc2q4O4UgC6Ez0rMqFm4DAl3dP4lN/vR4F22iYrtkVqlV o9nSP8NBmaVSOujGkrhsDI1DsZqjnm1+ -----END CERTIFICATE-----Generated at Mon Oct 20 12:41:00 2025 by rpki-client