$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json) Hash identifier: 61Q9HjHkto6nVQck9NK16YLIWs0XDqlTClqeS/NYjas= Subject key identifier: 33:AD:A6:97:74:E8:9F:FC:14:A6:32:43:35:29:15:05:93:46:79:B7 Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft Manifest number: 5D Signing time: Sun 19 Oct 2025 10:31:44 +0000 Manifest this update: Sun 19 Oct 2025 10:31:43 +0000 Manifest next update: Sun 26 Oct 2025 10:31:43 +0000 Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: 3Lvwa929hVP0cXNI3JkWYtepW1YCVMG/3utvhIzL0cw=) 2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: Jax3Kvx2J0ODr5GgDNYrVUtv6/aFnopa2LSsnYbiSlg=) 3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: maMIBW8WqwpEw8k3CdK6BFRqFVm8airXL8KIFqvlGQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Validity Not Before: Oct 19 10:31:43 2025 GMT Not After : Oct 26 10:31:43 2025 GMT Subject: CN=68f4be10-b525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:80:08:83:6b:b9:4e:1c:bf:33:59:73:51:3b: 5b:6c:4f:0a:e5:75:66:ae:13:7d:63:24:c4:99:9a: f2:6c:a8:23:06:38:da:e2:8f:dc:e9:18:06:78:62: e9:73:22:88:39:ba:d3:91:bb:a8:a6:22:e9:90:d1: 82:b1:e6:4d:02:4f:3d:49:7c:f7:bf:13:dd:26:88: 31:97:fa:28:7d:a4:e2:f6:cf:1a:c9:46:8a:bc:73: ce:86:ba:60:8d:80:01:4c:e2:3f:ac:22:04:79:04: ae:6c:08:0b:c5:51:b8:db:05:cf:b4:f1:3e:f9:96: 4f:3c:37:97:e0:c4:6d:c4:89:2f:cb:34:ab:c0:78: 58:30:d4:2e:c0:eb:27:6b:20:1f:a1:c2:f9:c8:d1: b8:9b:5f:cd:61:c0:92:4f:60:c1:e1:6e:99:3b:85: 49:89:44:61:0c:19:93:20:92:09:e9:70:f0:73:f4: 29:a5:6c:25:6c:49:9f:36:fe:23:6e:79:c6:f9:5c: 8c:96:83:72:2a:e1:9c:8f:8c:56:21:af:60:40:1c: c1:e3:fc:6d:61:56:c2:a8:b2:60:b8:ed:99:4f:82: 0d:14:17:66:f5:16:f2:3c:5a:c7:87:be:93:20:9a: 5c:10:aa:20:74:31:84:02:d9:61:19:ec:3d:25:91: b8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AD:A6:97:74:E8:9F:FC:14:A6:32:43:35:29:15:05:93:46:79:B7 X509v3 Authority Key Identifier: keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:31:c9:5c:3e:bf:da:54:44:a0:72:c6:f8:0c:c3:53:04:f6: 04:f2:0e:68:c3:70:2c:cf:8b:aa:2a:5f:65:18:60:fe:c9:fe: 89:7b:64:19:85:36:6e:ab:a9:50:b8:d7:4d:42:63:74:d0:3c: 5e:1f:ea:25:33:7d:64:b0:92:32:b1:10:bc:37:26:35:21:ed: 2c:3b:dc:9a:26:84:26:d7:71:de:cf:a3:10:72:8e:93:45:8d: 23:c1:d8:58:66:5f:7c:d5:10:bc:27:41:c1:4f:57:fe:76:1f: 74:be:49:31:44:6d:bf:a3:24:e5:2e:08:3b:44:aa:94:ba:f5: 02:43:b8:f2:00:27:2d:e5:4f:31:29:00:be:14:22:aa:3b:b1: 07:6a:cd:58:c5:4c:7c:ab:c7:d2:eb:49:f4:84:11:94:a1:67: bf:b3:79:3d:f2:54:26:7c:5a:97:93:c9:e2:b5:3b:79:f5:7f: f8:0d:17:ca:96:89:13:cd:19:63:70:14:6e:c2:80:8a:1b:2e: b7:b0:40:7a:7a:be:ed:2a:0e:34:5d:bb:a7:e5:5b:6f:86:39: 0f:ee:65:5c:78:7e:b7:3c:a4:92:d9:e5:11:ae:bb:f1:6c:d2: e8:e8:87:f7:c1:ee:48:b2:33:c0:8a:fa:5f:0d:82:87:22:5b: 93:ed:80:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzdBQjExMC8GA1UEBRMoOTRDOEVGM0YyQTkyMkVFMTQ0QUE2RjBCNjY0MzZDQTQ2 NkNDNEIwQTAeFw0yNTEwMTkxMDMxNDNaFw0yNTEwMjYxMDMxNDNaMBgxFjAUBgNV BAMTDTY4ZjRiZTEwLWI1MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZgAiDa7lOHL8zWXNRO1tsTwrldWauE31jJMSZmvJsqCMGONrij9zpGAZ4Yulz Iog5utORu6imIumQ0YKx5k0CTz1JfPe/E90miDGX+ih9pOL2zxrJRoq8c86GumCN gAFM4j+sIgR5BK5sCAvFUbjbBc+08T75lk88N5fgxG3EiS/LNKvAeFgw1C7A6ydr IB+hwvnI0bibX81hwJJPYMHhbpk7hUmJRGEMGZMgkgnpcPBz9CmlbCVsSZ82/iNu ecb5XIyWg3Iq4ZyPjFYhr2BAHMHj/G1hVsKosmC47ZlPgg0UF2b1FvI8WseHvpMg mlwQqiB0MYQC2WEZ7D0lkbiBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUM62ml3To n/wUpjJDNSkVBZNGebcwHwYDVR0jBBgwFoAUlMjvPyqSLuFEqm8LZkNspGbMSwow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzN0FCLzI2NDg0NTkwMjFG MzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbE1qdlB5cVNMdUZFcW04TFprTnNwR2JNU3dvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz N0FCLzI2NDg0NTkwMjFGMzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVG RXFtOExaa05zcEdiTVN3by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABAxyVw+v9pURKByxvgMw1ME9gTyDmjDcCzPi6oqX2UYYP7J/ol7ZBmF Nm6rqVC4101CY3TQPF4f6iUzfWSwkjKxELw3JjUh7Sw73JomhCbXcd7PoxByjpNF jSPB2FhmX3zVELwnQcFPV/52H3S+STFEbb+jJOUuCDtEqpS69QJDuPIAJy3lTzEp AL4UIqo7sQdqzVjFTHyrx9LrSfSEEZShZ7+zeT3yVCZ8WpeTyeK1O3n1f/gNF8qW iRPNGWNwFG7CgIobLrewQHp6vu0qDjRdu6flW2+GOQ/uZVx4frc8pJLZ5RGuu/Fs 0ujoh/fB7kiyM8CK+l8NgociW5PtgD4= -----END CERTIFICATE-----Generated at Mon Oct 20 16:26:22 2025 by rpki-client