$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft File: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft (raw, json) Hash identifier: FfL8jGGdv9vNj6Fef41je1uSNZUMM1OfnKmKutsyJZM= Subject key identifier: B0:04:A8:17:B4:89:A2:8A:1F:3E:67:E2:5B:2E:CB:C7:A8:3C:F4:F3 Authority key identifier: 2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 Certificate issuer: /CN=A91F0CF4/serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Certificate serial: 0BFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft Manifest number: 1450 Signing time: Sat 18 Oct 2025 19:36:50 +0000 Manifest this update: Sat 18 Oct 2025 19:36:50 +0000 Manifest next update: Sat 25 Oct 2025 19:36:50 +0000 Files and hashes: 1: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl (hash: t+NB4MN/eq/TtbxIgkOdWQapDmQQBjycclc3UOiGL2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3067 (0xbfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CF4, serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Validity Not Before: Oct 18 19:36:50 2025 GMT Not After : Oct 25 19:36:50 2025 GMT Subject: CN=68f3ec52-a0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b9:59:b2:a3:ef:fe:60:8f:53:03:63:2d:5b: 7c:4a:1a:89:cf:5b:60:55:9c:1b:9f:01:6b:18:ea: 8c:ac:61:77:b2:55:e7:34:c7:2b:20:da:d0:a5:aa: b2:65:33:9e:59:60:b4:8c:ed:f3:f9:20:69:fb:63: e6:6e:33:9a:bd:4a:08:e5:01:17:0a:9d:8c:37:88: 47:a2:8d:60:34:b2:15:0a:23:be:0f:b0:2b:58:53: b9:03:46:a3:39:05:54:bf:6c:55:8b:6a:b3:5b:37: 9f:b0:6e:a7:fb:b4:13:4b:96:8c:00:8a:75:6d:f6: 0e:9d:35:ce:22:71:2d:8f:7f:a5:d8:25:f7:fd:cd: 9d:ac:d7:ff:3a:61:39:da:50:05:b1:98:72:06:97: d9:c8:c9:3b:73:d2:7e:97:85:e4:35:17:5c:ab:79: a2:1e:be:cd:26:5b:78:46:e7:de:c7:f0:55:7d:c5: 8f:9b:87:42:0e:17:46:dd:d2:ce:03:a3:0a:f2:cc: 04:c0:7f:66:b6:fb:1b:a7:56:28:ae:e8:d6:62:00: 56:86:ac:ef:bc:f6:24:0b:a6:84:d9:e2:14:75:06: 59:93:62:b9:83:03:5a:a2:45:e2:35:fc:e0:7b:70: 47:ef:fb:e1:34:77:ae:9c:e5:3b:bc:d9:ac:48:a9: fa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:04:A8:17:B4:89:A2:8A:1F:3E:67:E2:5B:2E:CB:C7:A8:3C:F4:F3 X509v3 Authority Key Identifier: keyid:2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ed:c2:7d:a8:29:5b:96:0c:dc:4c:92:f1:3b:51:3d:b0:64: 8b:00:a1:0e:ca:cb:01:ca:c8:70:a8:2f:95:0f:d7:37:49:55: 30:ec:16:ad:e0:bb:78:c9:09:3c:24:17:e8:53:41:6a:2c:3d: e8:7c:b8:b0:32:e0:59:bd:c8:b9:19:d3:3d:42:8d:c6:86:d7: af:80:e5:60:a1:96:26:65:ef:65:1a:78:bc:0f:67:d5:a0:a0: 1f:dd:1d:fa:b5:c5:0c:d9:15:6f:cc:b0:a2:01:1c:2c:da:83: 0d:81:c4:f8:0b:41:53:d3:d6:a8:0b:e2:92:5c:50:b2:ae:4f: ef:bd:07:04:56:9d:2c:e1:88:0c:20:09:e1:92:e8:e5:e0:1a: d7:24:89:8d:f6:a6:43:89:26:44:c5:46:02:d3:08:e4:70:cc: e4:16:7f:a5:4d:09:bd:32:19:25:5a:b2:39:aa:a5:94:a8:cf: 56:a5:44:df:81:39:21:3f:9a:d7:17:35:b1:d8:32:70:86:85: da:e0:af:72:50:91:b5:62:8f:e8:7e:d9:f3:de:18:af:93:c8: ca:9b:ee:07:c4:7b:9b:70:f8:1e:7a:56:46:f5:e5:09:f7:39: 0c:ff:00:e6:68:1f:eb:1e:4f:14:37:fe:80:47:a7:ad:e0:b7: d4:3c:6f:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDRjQxMTAvBgNVBAUTKDJFQTA2MDJFMEVFNjAxNkI1MEZBRTQwRDkzNjUzQkEz QzE4ODgwNDMwHhcNMjUxMDE4MTkzNjUwWhcNMjUxMDI1MTkzNjUwWjAYMRYwFAYD VQQDEw02OGYzZWM1Mi1hMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rlZsqPv/mCPUwNjLVt8ShqJz1tgVZwbnwFrGOqMrGF3slXnNMcrINrQpaqy ZTOeWWC0jO3z+SBp+2PmbjOavUoI5QEXCp2MN4hHoo1gNLIVCiO+D7ArWFO5A0aj OQVUv2xVi2qzWzefsG6n+7QTS5aMAIp1bfYOnTXOInEtj3+l2CX3/c2drNf/OmE5 2lAFsZhyBpfZyMk7c9J+l4XkNRdcq3miHr7NJlt4Rufex/BVfcWPm4dCDhdG3dLO A6MK8swEwH9mtvsbp1YorujWYgBWhqzvvPYkC6aE2eIUdQZZk2K5gwNaokXiNfzg e3BH7/vhNHeunOU7vNmsSKn6FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAEqBe0 iaKKHz5n4lsuy8eoPPTzMB8GA1UdIwQYMBaAFC6gYC4O5gFrUPrkDZNlO6PBiIBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENGNC85QUU5QTkxMjFG QTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFXdFEtdVFOazJVN284R0ln RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxQmdMZzdtQVd0US11UU5rMlU3bzhHSWdFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MENGNC85QUU5QTkxMjFGQTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFX dFEtdVFOazJVN284R0lnRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA67cJ9qClblgzcTJLxO1E9sGSLAKEOyssByshwqC+VD9c3SVUw7Bat 4Lt4yQk8JBfoU0FqLD3ofLiwMuBZvci5GdM9Qo3GhtevgOVgoZYmZe9lGni8D2fV oKAf3R36tcUM2RVvzLCiARws2oMNgcT4C0FT09aoC+KSXFCyrk/vvQcEVp0s4YgM IAnhkujl4BrXJImN9qZDiSZExUYC0wjkcMzkFn+lTQm9MhklWrI5qqWUqM9WpUTf gTkhP5rXFzWx2DJwhoXa4K9yUJG1Yo/oftnz3hivk8jKm+4HxHubcPgeelZG9eUJ 9zkM/wDmaB/rHk8UN/6AR6et4LfUPG/t -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:22 2025 by rpki-client