$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json) Hash identifier: hMI6RLkX6C+V8rUFs2/EsM3LgAkiex8tH5OUXBqz22c= Subject key identifier: 9A:20:70:FD:6C:05:FE:F5:F5:A2:D8:9B:40:33:45:51:0D:63:BA:69 Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft Manifest number: 0140 Signing time: Sun 19 Oct 2025 07:08:59 +0000 Manifest this update: Sun 19 Oct 2025 07:08:58 +0000 Manifest next update: Sun 26 Oct 2025 07:08:58 +0000 Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: kyzNRgyLwnGqC4qw2aX8KaLIeR9I3F6pAh05CttVH30=) 2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: 9aD9MOI/POVIQ6uNZALTtWvg8bFsGYj1bzTi/aW5HI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Validity Not Before: Oct 19 07:08:58 2025 GMT Not After : Oct 26 07:08:58 2025 GMT Subject: CN=68f48e8b-a01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1e:3a:aa:01:e8:95:75:a4:81:be:d4:79:c4: fb:86:2b:c5:ea:86:f2:fd:a1:02:a3:c2:e2:12:c3: 1b:27:ac:71:b6:55:c7:4a:be:c5:77:d2:04:94:a6: 2d:8f:b3:00:57:12:f1:65:76:06:d5:ce:89:2e:6f: 06:a9:95:51:62:25:cd:84:88:3b:dd:7c:9e:1b:67: 3c:fc:85:8e:aa:65:7f:af:88:f3:b2:19:36:c2:74: 7f:fe:56:23:3e:2e:56:9f:45:4b:fd:0e:13:66:8e: 32:0f:e9:21:b4:ee:84:07:53:a6:d1:d7:27:63:4d: 09:75:11:26:c5:aa:99:08:dc:86:50:00:fa:8b:7e: bf:d3:ea:69:29:f6:95:a9:fb:df:fe:a5:8b:5e:01: ed:a9:c6:c4:2d:e0:45:e5:17:de:05:ce:81:77:ab: da:d0:0f:8e:95:41:0d:bb:c8:83:4b:cf:65:f3:5f: 3f:6a:42:c2:68:d0:82:3c:58:e4:55:a2:df:53:3d: bb:5a:62:6d:63:76:f4:f1:6d:32:09:72:14:de:95: 4f:eb:ff:bd:87:88:7a:fb:2c:10:11:1a:b3:b9:08: 9e:d7:0f:a6:21:4e:d1:3b:ee:d1:1b:2d:5f:bd:0b: 61:fd:69:d5:af:1f:92:60:03:3d:2f:ed:10:6b:36: 66:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:20:70:FD:6C:05:FE:F5:F5:A2:D8:9B:40:33:45:51:0D:63:BA:69 X509v3 Authority Key Identifier: keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c2:72:62:56:d3:19:8a:40:29:b1:36:27:10:39:40:c1:7a: bd:06:50:3c:2b:f9:46:7a:c7:25:24:07:26:e6:a3:9a:45:82: 0e:92:b6:ca:5f:89:14:40:06:2e:63:43:05:08:02:c5:74:68: 0c:c8:16:30:ad:bd:f4:37:55:04:a2:e7:d8:75:9b:9a:93:f7: 41:54:a1:9f:a0:22:c9:46:ab:3f:14:03:70:82:8f:ec:6f:e5: c1:14:b6:e7:9f:f9:be:df:17:e4:e0:03:b2:a1:c7:cb:35:1f: 87:6c:66:68:77:67:a9:81:e3:a8:66:c5:55:1d:ae:de:d0:44: 21:a4:3f:4b:51:19:e6:c9:e0:a7:6e:25:08:d2:58:59:f0:d5: 52:ae:a4:b9:c3:b1:4d:eb:f5:9d:57:f5:2d:09:d4:8d:76:55: e4:13:33:0e:b8:c8:48:8b:6a:cf:7d:85:44:8a:00:ea:f6:5a: 2d:7c:48:7e:7d:9e:84:99:71:f4:7b:d8:21:aa:77:19:98:98: 75:64:b9:75:2c:9e:87:f7:ca:12:6c:95:66:1d:55:f9:76:3f: f0:5b:12:0d:2e:1a:14:bd:a9:ff:7d:5f:40:14:4d:2e:c4:c2: 21:99:eb:c2:5d:ec:1e:cd:28:79:2e:84:46:c2:0c:1d:7c:ed: 25:5a:a7:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDJDNkI4QzdGOEI2MTBFODkxQ0I5Q0JGNkNEQkQ5OTk4 QUE5Mzg2MEIwHhcNMjUxMDE5MDcwODU4WhcNMjUxMDI2MDcwODU4WjAYMRYwFAYD VQQDEw02OGY0OGU4Yi1hMDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyx46qgHolXWkgb7UecT7hivF6oby/aECo8LiEsMbJ6xxtlXHSr7Fd9IElKYt j7MAVxLxZXYG1c6JLm8GqZVRYiXNhIg73XyeG2c8/IWOqmV/r4jzshk2wnR//lYj Pi5Wn0VL/Q4TZo4yD+khtO6EB1Om0dcnY00JdREmxaqZCNyGUAD6i36/0+ppKfaV qfvf/qWLXgHtqcbELeBF5RfeBc6Bd6va0A+OlUENu8iDS89l818/akLCaNCCPFjk VaLfUz27WmJtY3b08W0yCXIU3pVP6/+9h4h6+ywQERqzuQie1w+mIU7RO+7RGy1f vQth/WnVrx+SYAM9L+0QazZmOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJogcP1s Bf719aLYm0AzRVENY7ppMB8GA1UdIwQYMBaAFCxrjH+LYQ6JHLnL9s29mZiqk4YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EMjA1NTlGRUMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERva2N1Y3YyemIyWm1LcVRo Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xHdU1mNHRoRG9rY3VjdjJ6YjJabUtxVGhncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EMjA1NTlGRUMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERv a2N1Y3YyemIyWm1LcVRoZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMwnJiVtMZikApsTYnEDlAwXq9BlA8K/lGesclJAcm5qOaRYIOkrbK X4kUQAYuY0MFCALFdGgMyBYwrb30N1UEoufYdZuak/dBVKGfoCLJRqs/FANwgo/s b+XBFLbnn/m+3xfk4AOyocfLNR+HbGZod2epgeOoZsVVHa7e0EQhpD9LURnmyeCn biUI0lhZ8NVSrqS5w7FN6/WdV/UtCdSNdlXkEzMOuMhIi2rPfYVEigDq9lotfEh+ fZ6EmXH0e9ghqncZmJh1ZLl1LJ6H98oSbJVmHVX5dj/wWxINLhoUvan/fV9AFE0u xMIhmevCXewezSh5LoRGwgwdfO0lWqfA -----END CERTIFICATE-----Generated at Tue Oct 21 12:47:33 2025 by rpki-client