$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft File: lSamckeK-nVEXY0H3MV8BYlm7-I.mft (raw, json) Hash identifier: 8jga3aE64m3ujWFZ0p7em9JdX/gH69UA2CPM1SYZzXc= Subject key identifier: 15:D6:A2:20:E3:84:A0:E5:94:8E:E5:EA:5D:9F:D8:C6:68:6D:53:A9 Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 Certificate issuer: /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Certificate serial: 0277 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft Manifest number: 026F Signing time: Sun 19 Oct 2025 03:53:32 +0000 Manifest this update: Sun 19 Oct 2025 03:53:31 +0000 Manifest next update: Sun 26 Oct 2025 03:53:31 +0000 Files and hashes: 1: lSamckeK-nVEXY0H3MV8BYlm7-I.crl (hash: +vyTjsurRF1njIHMKCblzM5iDZIYPCbM/lVyQ3x/t3U=) 2: 6F46908C2D3411ED92165562C4F9AE02.roa (hash: sR0eTjFYTlKs7mzVHMIl7telIMsp7nYju6MlYaiMBkg=) 3: 6E98B3182D3411ED92165562C4F9AE02.roa (hash: 64gg/L8X7dQV3AAOAv3MN1klInujbmxMEcZ9X63m+I4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 631 (0x277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Validity Not Before: Oct 19 03:53:31 2025 GMT Not After : Oct 26 03:53:31 2025 GMT Subject: CN=68f460bb-18a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:d7:78:90:8c:d4:64:3a:c5:50:c2:d9:5e:41: 9a:60:83:81:61:2a:47:17:00:38:0e:95:74:6e:fb: cb:2e:99:02:25:4f:5e:3c:b1:a5:fd:da:57:62:16: 34:86:ce:d6:28:33:10:d8:eb:c8:67:07:50:05:32: cb:b7:ff:64:81:e9:5e:c4:ed:3e:f8:ba:89:2b:7d: c1:f5:71:f5:53:77:6b:29:6b:a1:93:8f:71:a0:24: 0e:0c:a0:07:c9:73:56:c7:4a:61:22:b4:15:d6:9e: 4b:4f:1d:b7:f6:8c:7c:c6:60:8b:15:84:c4:e4:6b: ad:2e:f3:9d:46:d4:95:59:aa:08:63:54:ad:49:69: d1:50:86:65:95:22:96:5d:f9:f0:33:6f:eb:59:e3: 42:e6:30:9f:c0:30:7e:8c:93:a0:c0:72:77:1a:bc: 9b:af:0c:28:eb:d3:23:b4:94:07:21:d1:36:c9:28: 50:12:c6:e4:ad:e8:98:b4:61:5a:a5:3b:f2:62:b7: cb:c3:2d:da:0d:0a:1b:81:06:d1:c4:e9:23:a5:11: 2a:b9:8a:1f:92:51:54:36:6d:43:53:7a:bc:6b:dd: de:4f:68:9a:85:da:54:b9:e6:7a:5e:d3:f3:8c:e2: 9b:78:6d:f0:64:09:97:ef:43:56:b7:cd:7f:a0:fa: 1c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D6:A2:20:E3:84:A0:E5:94:8E:E5:EA:5D:9F:D8:C6:68:6D:53:A9 X509v3 Authority Key Identifier: keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:12:07:20:de:cb:9b:30:91:31:c0:9a:a7:6c:2d:78:16:dc: ef:f7:25:1d:df:e8:ae:c3:eb:f4:99:0d:40:f6:0f:98:60:37: a5:65:0f:01:f7:31:56:a0:48:a6:98:f0:81:db:c7:35:25:76: 14:b9:e0:50:18:ce:7e:58:44:1e:4f:96:c0:f9:89:05:fe:54: 42:77:26:35:60:50:70:d8:3a:3d:29:90:31:d4:3d:ed:04:05: 0f:1f:f6:69:00:65:30:3e:7a:94:2d:01:97:72:d0:d6:4c:f1: 93:81:bb:e2:af:7b:3b:7e:82:87:a2:99:90:f1:23:8f:c9:c9: c2:12:20:52:30:38:25:ad:39:f7:6d:63:ad:a6:ed:e1:a0:53: 39:b3:1a:c3:25:f1:e7:c4:b1:01:5d:57:aa:3f:03:68:33:9a: c5:ad:31:5c:d6:ea:b8:46:91:87:ca:fd:4b:50:2a:41:66:07: 57:69:72:9e:bf:6e:ee:47:26:d5:fe:0f:a6:21:01:47:59:ab: 0f:0e:c0:0b:d0:93:9d:ee:21:81:4e:95:eb:e1:b8:d6:32:74: c6:ec:99:5d:23:5f:bc:f2:b5:16:80:3e:e9:15:e1:fd:5f:2e: ce:55:6d:68:19:ad:fb:36:e4:f5:3d:80:13:a5:4d:8c:aa:a4: 48:d2:ec:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkExQkUxMTAvBgNVBAUTKDk1MjZBNjcyNDc4QUZBNzU0NDVEOEQwN0RDQzU3QzA1 ODk2NkVGRTIwHhcNMjUxMDE5MDM1MzMxWhcNMjUxMDI2MDM1MzMxWjAYMRYwFAYD VQQDEw02OGY0NjBiYi0xOGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA99d4kIzUZDrFUMLZXkGaYIOBYSpHFwA4DpV0bvvLLpkCJU9ePLGl/dpXYhY0 hs7WKDMQ2OvIZwdQBTLLt/9kgelexO0++LqJK33B9XH1U3drKWuhk49xoCQODKAH yXNWx0phIrQV1p5LTx239ox8xmCLFYTE5GutLvOdRtSVWaoIY1StSWnRUIZllSKW XfnwM2/rWeNC5jCfwDB+jJOgwHJ3Grybrwwo69MjtJQHIdE2yShQEsbkreiYtGFa pTvyYrfLwy3aDQobgQbRxOkjpREquYofklFUNm1DU3q8a93eT2iahdpUueZ6XtPz jOKbeG3wZAmX70NWt81/oPocUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXWoiDj hKDllI7l6l2f2MZobVOpMB8GA1UdIwQYMBaAFJUmpnJHivp1RF2NB9zFfAWJZu/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTFCRS80MTY4RkY3NjJE MzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1uVkVYWTBIM01WOEJZbG03 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTYW1ja2VLLW5WRVhZMEgzTVY4QllsbTctSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTFCRS80MTY4RkY3NjJEMzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1u VkVYWTBIM01WOEJZbG03LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtEgcg3subMJExwJqnbC14Ftzv9yUd3+iuw+v0mQ1A9g+YYDelZQ8B 9zFWoEimmPCB28c1JXYUueBQGM5+WEQeT5bA+YkF/lRCdyY1YFBw2Do9KZAx1D3t BAUPH/ZpAGUwPnqULQGXctDWTPGTgbvir3s7foKHopmQ8SOPycnCEiBSMDglrTn3 bWOtpu3hoFM5sxrDJfHnxLEBXVeqPwNoM5rFrTFc1uq4RpGHyv1LUCpBZgdXaXKe v27uRybV/g+mIQFHWasPDsAL0JOd7iGBTpXr4bjWMnTG7JldI1+88rUWgD7pFeH9 Xy7OVW1oGa37NuT1PYATpU2MqqRI0uyX -----END CERTIFICATE-----Generated at Mon Oct 20 20:59:22 2025 by rpki-client