$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft File: LPF-aFt4j16uSgHViDUmG18LLqQ.mft (raw, json) Hash identifier: FRufpk1rvy0V1j7DLf95S7X+3FkodR7k60ZAV7gyz0M= Subject key identifier: 27:4A:F2:14:D3:AB:CC:C8:C5:D5:D4:85:9F:4C:1E:31:6F:64:5E:48 Authority key identifier: 2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4 Certificate issuer: /CN=A91FABEF/serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft Manifest number: 0138 Signing time: Sun 19 Oct 2025 07:15:00 +0000 Manifest this update: Sun 19 Oct 2025 07:15:00 +0000 Manifest next update: Sun 26 Oct 2025 07:15:00 +0000 Files and hashes: 1: LPF-aFt4j16uSgHViDUmG18LLqQ.crl (hash: xiFPURJj7yw/xsx+tHyYS1Z99uhmuCcFNkMXXw4tMs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FABEF, serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4 Validity Not Before: Oct 19 07:15:00 2025 GMT Not After : Oct 26 07:15:00 2025 GMT Subject: CN=68f48ff4-ff15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a8:a2:70:5c:61:14:b8:f7:71:05:ec:fc:76: 43:12:34:8e:cd:81:94:68:f7:a4:4d:41:32:6d:77: fc:ae:82:6b:d4:45:f5:4b:1e:e2:d1:f0:6b:31:a2: 77:9b:f2:74:13:20:cb:dc:83:18:12:61:00:93:7f: a6:8e:ff:ba:a1:a4:eb:26:39:46:78:6f:dc:60:56: 2b:ef:39:82:89:2a:ad:d0:2e:6e:49:3c:52:28:54: 62:91:50:f0:49:45:0f:ee:69:29:01:ac:7a:08:bf: 67:91:ba:82:b6:d5:6e:8d:05:2d:e1:1e:da:39:fa: 77:26:a7:94:1a:d6:cf:c4:e8:cd:53:c8:af:0f:01: 5b:88:3c:92:c7:70:13:a4:53:74:d8:e1:34:b3:70: 3e:bd:8f:ee:80:5f:08:73:5b:9e:2a:d1:45:6d:84: 2a:35:23:7b:49:15:03:74:a4:7f:13:b7:93:5d:d4: 24:11:ed:a4:12:55:83:53:f9:cf:8e:c7:4c:1b:ae: a4:11:98:7b:37:c2:65:c7:5b:8c:43:32:51:d3:cb: 89:c4:4e:8d:28:7d:7e:5a:cd:8d:1f:d5:a8:e1:97: d7:35:66:12:c3:6c:13:da:cc:db:ec:3a:74:5e:ff: d6:ef:4b:79:02:91:c2:c2:9c:3b:79:45:49:08:d0: 4d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4A:F2:14:D3:AB:CC:C8:C5:D5:D4:85:9F:4C:1E:31:6F:64:5E:48 X509v3 Authority Key Identifier: keyid:2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:8a:29:e5:4f:29:c4:00:c6:11:07:b2:6f:59:fa:77:ba:80: 60:ad:6c:b1:0a:ae:d9:25:69:83:b3:da:b1:37:f9:02:c7:0e: ee:78:e7:97:2f:af:9a:9c:33:29:6d:06:e9:9f:d2:31:de:c0: da:5c:7b:a2:12:31:34:56:4c:3a:ea:b6:d5:60:3e:61:d8:5c: af:3a:c8:4b:33:8f:09:78:65:04:41:b2:f0:1c:5a:07:18:39: 9b:e7:51:ff:35:98:a1:96:02:7c:07:b5:46:a1:69:46:92:c0: 74:52:1e:5c:97:52:92:cd:72:bd:7e:0e:74:6f:08:2f:83:6d: dd:9b:45:5d:6e:a0:01:50:89:ba:7b:65:6b:1e:e0:80:91:ce: b7:a6:e3:ae:d4:1b:5b:76:91:b2:13:90:96:54:f2:df:d1:6f: c7:5c:54:71:2d:f7:de:7c:e0:fd:6c:a9:18:59:7b:68:3e:5c: 24:0b:97:3c:e2:ea:1d:d2:e2:44:2d:ab:f8:89:a9:9b:0a:c6: 28:07:c2:81:7f:10:c6:f7:1a:1e:dc:3c:78:ef:e9:01:53:99: 1e:d6:8f:6d:4b:0a:66:62:79:76:73:db:6a:80:a7:08:36:db: 7e:4e:b6:52:86:ae:60:33:c0:44:c1:10:dd:86:77:9a:5b:43: 3c:96:0e:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCRUYxMTAvBgNVBAUTKDJDRjE3RTY4NUI3ODhGNUVBRTRBMDFENTg4MzUyNjFC NUYwQjJFQTQwHhcNMjUxMDE5MDcxNTAwWhcNMjUxMDI2MDcxNTAwWjAYMRYwFAYD VQQDEw02OGY0OGZmNC1mZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KiicFxhFLj3cQXs/HZDEjSOzYGUaPekTUEybXf8roJr1EX1Sx7i0fBrMaJ3 m/J0EyDL3IMYEmEAk3+mjv+6oaTrJjlGeG/cYFYr7zmCiSqt0C5uSTxSKFRikVDw SUUP7mkpAax6CL9nkbqCttVujQUt4R7aOfp3JqeUGtbPxOjNU8ivDwFbiDySx3AT pFN02OE0s3A+vY/ugF8Ic1ueKtFFbYQqNSN7SRUDdKR/E7eTXdQkEe2kElWDU/nP jsdMG66kEZh7N8Jlx1uMQzJR08uJxE6NKH1+Ws2NH9Wo4ZfXNWYSw2wT2szb7Dp0 Xv/W70t5ApHCwpw7eUVJCNBNtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdK8hTT q8zIxdXUhZ9MHjFvZF5IMB8GA1UdIwQYMBaAFCzxfmhbeI9erkoB1Yg1JhtfCy6k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUJFRi9DOUFGNUQyQ0NC MTkxMUVFODE1RkFCNjhDNEY5QUUwMi9MUEYtYUZ0NGoxNnVTZ0hWaURVbUcxOExM cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQRi1hRnQ0ajE2dVNnSFZpRFVtRzE4TExxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUJFRi9DOUFGNUQyQ0NCMTkxMUVFODE1RkFCNjhDNEY5QUUwMi9MUEYtYUZ0NGox NnVTZ0hWaURVbUcxOExMcVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApiinlTynEAMYRB7JvWfp3uoBgrWyxCq7ZJWmDs9qxN/kCxw7ueOeX L6+anDMpbQbpn9Ix3sDaXHuiEjE0Vkw66rbVYD5h2FyvOshLM48JeGUEQbLwHFoH GDmb51H/NZihlgJ8B7VGoWlGksB0Uh5cl1KSzXK9fg50bwgvg23dm0VdbqABUIm6 e2VrHuCAkc63puOu1BtbdpGyE5CWVPLf0W/HXFRxLffefOD9bKkYWXtoPlwkC5c8 4uod0uJELav4iambCsYoB8KBfxDG9xoe3Dx47+kBU5ke1o9tSwpmYnl2c9tqgKcI Ntt+TrZShq5gM8BEwRDdhneaW0M8lg7h -----END CERTIFICATE-----Generated at Mon Oct 20 04:11:43 2025 by rpki-client