$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: jssv/WU/P31i8lkUTLM9IPJvDxcPWQIgi22I6Wm3L4w= Subject key identifier: 03:B3:91:E4:3E:51:45:D8:AF:FA:4F:EF:B6:35:2F:16:0E:F5:AF:0D Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0B7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0B65 Signing time: Sat 18 Oct 2025 20:02:00 +0000 Manifest this update: Sat 18 Oct 2025 20:01:59 +0000 Manifest next update: Sat 25 Oct 2025 20:01:59 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: NPNaoYX7bqi39RaAHZacOENo5NvopU//bSqNj3IvsPA=) 2: A2055C2E57D911F0BD42DB6DC4F9AE02.roa (hash: TqYpv2WwUkuRYuB5QyDoQVNiTgsmONzJzREbUEtpPrE=) 3: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: vpWpUnXP3M0kRZXRJe9IPBkx6ZqY5gGfHE6hnKUPIZE=) 4: 6DEA717805F811F0833EAC2FC4F9AE02.roa (hash: CCycuwjR/zG8JMtLvZuunOXdbHVwvFPn+/QALmHYm1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2943 (0xb7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Oct 18 20:01:59 2025 GMT Not After : Oct 25 20:01:59 2025 GMT Subject: CN=68f3f237-6b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2e:6f:83:df:3d:b8:37:ad:80:67:7f:de:79: 89:19:38:ec:f9:07:8d:12:26:0a:60:50:3d:4d:7f: d4:50:43:30:62:ca:a3:9a:f1:c6:97:16:07:e0:bf: 6e:a6:50:ce:ba:4e:ab:12:e6:25:ec:f5:19:a5:e0: e4:54:22:1a:53:31:f7:9b:d3:51:95:0f:d5:48:e3: fb:06:e0:38:fa:34:72:f8:ce:f5:a6:db:bb:a3:8b: 51:1b:7b:af:2c:f1:43:4e:8d:7b:10:06:cf:14:d0: f6:77:fa:3e:96:5f:26:6e:03:25:47:7d:a8:80:e5: 7f:19:fc:8c:40:8d:1f:ea:fe:c9:71:47:b6:30:e5: 3f:ea:6c:bb:66:bb:74:85:a5:07:86:6c:1a:03:06: 97:c1:ef:94:82:2a:c7:27:41:19:c0:1f:f7:ce:89: ea:ca:6d:82:ed:d9:da:08:57:d2:ba:3b:f4:74:41: 8e:4a:bf:16:66:bc:dc:ba:9b:c6:74:67:fd:b6:7a: 87:d8:91:1b:ce:5d:91:a2:9e:65:75:5a:da:e4:4b: 99:76:49:46:d7:a2:6c:b9:21:a5:05:19:e8:6c:01: 75:15:88:fe:cd:2e:c7:77:e3:c1:e2:16:44:0d:b5: 34:16:be:cd:28:63:5f:97:23:27:ab:76:52:b7:29: 82:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B3:91:E4:3E:51:45:D8:AF:FA:4F:EF:B6:35:2F:16:0E:F5:AF:0D X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:26:4d:fe:de:d0:f1:a3:db:6d:32:c8:32:7a:85:a8:50:93: 7e:bc:33:2d:84:ad:ea:9c:2b:8c:ee:06:92:fd:3f:0e:90:fd: 5a:e3:a7:5b:85:72:c5:3f:22:fd:73:8e:03:2d:a7:31:ac:d9: 34:ac:47:45:50:69:c0:8c:b3:0a:45:fa:3f:e3:b9:db:e6:a5: 41:03:e7:a2:17:35:41:36:a9:51:6d:2b:b0:92:5b:35:17:d9: a9:c0:98:dc:1c:94:29:ee:39:4c:3a:23:cc:b8:c8:2f:2f:b0: a8:c4:59:30:a5:d7:0f:10:2b:19:b8:71:3a:79:2e:cc:92:5c: df:d4:bd:c3:ee:8c:7e:78:94:51:74:f0:31:81:09:f8:da:38: d0:c8:59:56:8f:44:6f:cc:34:24:91:0d:0c:f0:11:dc:60:92: 89:db:d4:cd:6a:4c:06:37:e5:86:5c:41:9e:7d:b0:e4:7a:7d: f3:27:a5:c1:98:f4:6f:06:2f:c8:85:cb:ab:f3:4c:25:c6:08: 5f:6b:89:85:3d:7f:24:a5:b7:fb:95:ff:d5:68:9a:67:89:b6: 97:ee:cc:6f:4b:ea:41:f0:4d:35:4c:1f:5c:1c:3e:ba:ec:eb: 4c:2f:ae:81:5b:ce:f7:cc:ee:77:21:b3:2b:22:b0:10:2c:9c: 01:b4:a8:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjUxMDE4MjAwMTU5WhcNMjUxMDI1MjAwMTU5WjAYMRYwFAYD VQQDEw02OGYzZjIzNy02YjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAry5vg989uDetgGd/3nmJGTjs+QeNEiYKYFA9TX/UUEMwYsqjmvHGlxYH4L9u plDOuk6rEuYl7PUZpeDkVCIaUzH3m9NRlQ/VSOP7BuA4+jRy+M71ptu7o4tRG3uv LPFDTo17EAbPFND2d/o+ll8mbgMlR32ogOV/GfyMQI0f6v7JcUe2MOU/6my7Zrt0 haUHhmwaAwaXwe+UgirHJ0EZwB/3zonqym2C7dnaCFfSujv0dEGOSr8WZrzcupvG dGf9tnqH2JEbzl2Rop5ldVra5EuZdklG16JsuSGlBRnobAF1FYj+zS7Hd+PB4hZE DbU0Fr7NKGNflyMnq3ZStymC1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOzkeQ+ UUXYr/pP77Y1LxYO9a8NMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyJk3+3tDxo9ttMsgyeoWoUJN+vDMthK3qnCuM7gaS/T8OkP1a46db hXLFPyL9c44DLacxrNk0rEdFUGnAjLMKRfo/47nb5qVBA+eiFzVBNqlRbSuwkls1 F9mpwJjcHJQp7jlMOiPMuMgvL7CoxFkwpdcPECsZuHE6eS7Mklzf1L3D7ox+eJRR dPAxgQn42jjQyFlWj0RvzDQkkQ0M8BHcYJKJ29TNakwGN+WGXEGefbDken3zJ6XB mPRvBi/Ihcur80wlxghfa4mFPX8kpbf7lf/VaJpnibaX7sxvS+pB8E01TB9cHD66 7OtML66BW873zO53IbMrIrAQLJwBtKjP -----END CERTIFICATE-----Generated at Mon Oct 20 08:37:58 2025 by rpki-client