$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft File: L3LcETktqlBahWLidjiGBgPNvr8.mft (raw, json) Hash identifier: l+KcdCp/0N2i5hte+rTt3XuVe9pdfc64ORZFfq0dtaQ= Subject key identifier: B3:E4:D8:49:72:BE:AA:0E:58:41:DA:E5:7B:07:18:DE:8E:C4:3C:8A Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF Certificate issuer: /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft Manifest number: 4E Signing time: Sun 19 Oct 2025 10:40:53 +0000 Manifest this update: Sun 19 Oct 2025 10:40:52 +0000 Manifest next update: Sun 26 Oct 2025 10:40:52 +0000 Files and hashes: 1: L3LcETktqlBahWLidjiGBgPNvr8.crl (hash: phbZHMLCvChPHqjOYtsCOXGZA84wOHT6UqPeQsU9C/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Validity Not Before: Oct 19 10:40:52 2025 GMT Not After : Oct 26 10:40:52 2025 GMT Subject: CN=68f4c035-f97c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:14:c3:34:a5:90:1f:ce:c1:f9:7e:dc:b7:44: 3b:dc:c0:ed:2b:58:64:e7:51:c5:f5:65:e4:38:0c: 4b:ec:6e:83:81:c0:fe:96:76:39:54:10:2e:18:f9: 3d:21:f7:14:dd:75:3f:5d:a9:ab:15:30:24:87:51: 8d:a8:2d:0a:34:56:75:d2:1a:c7:14:03:06:a3:3b: 1b:fe:d0:81:5e:21:4c:d0:7e:b7:b8:b0:13:27:f3: 30:95:c1:20:4b:44:09:d2:cb:18:e8:07:1f:c0:3c: 95:3e:6b:46:97:59:9f:40:72:d5:1f:3b:a7:5c:34: 3b:d1:a9:62:43:1e:da:6b:27:df:a8:46:01:f4:54: dd:da:ba:35:47:74:6f:c0:c6:32:c7:6d:d8:8b:93: ef:8d:bd:f3:5e:5b:6f:7a:69:6b:4b:0f:21:41:0b: 90:43:4d:93:0c:5e:9e:a3:80:5a:56:0f:7a:f3:0a: 25:e7:c1:e0:85:81:14:38:ed:3f:26:c0:d1:25:cc: cd:1d:1a:50:c5:69:d7:3d:50:68:2f:d3:2d:a8:b1: 9f:ee:63:b5:2d:19:6f:69:4a:5c:a9:c1:d2:2b:9c: 36:ad:14:7b:69:cd:7c:ff:a2:4f:f6:56:36:52:b1: 00:3d:d6:a3:d3:a0:b7:c7:48:62:b0:8c:f4:22:90: 1d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E4:D8:49:72:BE:AA:0E:58:41:DA:E5:7B:07:18:DE:8E:C4:3C:8A X509v3 Authority Key Identifier: keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:63:5d:7e:8a:ce:09:3d:75:de:05:79:3e:96:dd:a0:ef:f2: 08:4f:9a:fb:3c:26:99:72:40:dd:7d:7a:96:20:f0:4f:3c:60: 42:62:d7:09:88:9f:66:a2:00:f9:03:68:f2:a1:31:ee:ee:7f: 72:93:49:87:65:05:7d:71:65:2f:08:cc:4d:07:52:de:04:65: 44:93:ad:cc:32:a1:fe:4d:76:e0:e4:53:bc:57:89:6b:18:76: d5:0c:54:af:cd:bf:c2:9c:65:e5:6f:68:ce:4c:31:88:ea:95: 97:11:1d:91:fa:2d:2b:79:38:a2:ec:22:50:6b:91:69:b1:df: 64:6b:47:83:0f:f1:f8:a6:8c:7d:79:6e:da:6b:a8:c9:b1:55: 94:48:56:98:7a:60:46:3d:8a:c2:73:35:2f:82:18:90:1b:a6: 3f:57:f7:2b:4b:47:59:75:a0:65:4e:af:04:5c:34:06:f2:59: bb:bc:a1:bd:f5:91:77:c4:49:f6:2e:9f:b1:f6:d6:8b:d3:40: a3:8a:f3:42:04:bc:43:29:26:16:bb:de:76:32:73:c3:39:93: 9b:18:7a:e2:10:3c:ed:bd:e0:de:57:bf:99:8a:cf:67:b2:f7: 35:d7:f5:25:0f:b0:54:21:e7:5b:78:a7:e9:02:fd:5f:91:2a: 18:13:93:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDU5RjExMC8GA1UEBRMoMkY3MkRDMTEzOTJEQUE1MDVBODU2MkUyNzYzODg2MDYw M0NEQkVCRjAeFw0yNTEwMTkxMDQwNTJaFw0yNTEwMjYxMDQwNTJaMBgxFjAUBgNV BAMTDTY4ZjRjMDM1LWY5N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAFMM0pZAfzsH5fty3RDvcwO0rWGTnUcX1ZeQ4DEvsboOBwP6WdjlUEC4Y+T0h 9xTddT9dqasVMCSHUY2oLQo0VnXSGscUAwajOxv+0IFeIUzQfre4sBMn8zCVwSBL RAnSyxjoBx/APJU+a0aXWZ9ActUfO6dcNDvRqWJDHtprJ9+oRgH0VN3aujVHdG/A xjLHbdiLk++NvfNeW296aWtLDyFBC5BDTZMMXp6jgFpWD3rzCiXnweCFgRQ47T8m wNElzM0dGlDFadc9UGgv0y2osZ/uY7UtGW9pSlypwdIrnDatFHtpzXz/ok/2VjZS sQA91qPToLfHSGKwjPQikB31AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs+TYSXK+ qg5YQdrlewcY3o7EPIowHwYDVR0jBBgwFoAUL3LcETktqlBahWLidjiGBgPNvr8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENTlGLzAxOTA0M0YwMzNG NjExRjA5Q0UzOEU0MUM0RjlBRTAyL0wzTGNFVGt0cWxCYWhXTGlkamlHQmdQTnZy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDNMY0VUa3RxbEJhaFdMaWRqaUdCZ1BOdnI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE NTlGLzAxOTA0M0YwMzNGNjExRjA5Q0UzOEU0MUM0RjlBRTAyL0wzTGNFVGt0cWxC YWhXTGlkamlHQmdQTnZyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABtjXX6Kzgk9dd4FeT6W3aDv8ghPmvs8JplyQN19epYg8E88YEJi1wmI n2aiAPkDaPKhMe7uf3KTSYdlBX1xZS8IzE0HUt4EZUSTrcwyof5NduDkU7xXiWsY dtUMVK/Nv8KcZeVvaM5MMYjqlZcRHZH6LSt5OKLsIlBrkWmx32RrR4MP8fimjH15 btprqMmxVZRIVph6YEY9isJzNS+CGJAbpj9X9ytLR1l1oGVOrwRcNAbyWbu8ob31 kXfESfYun7H21ovTQKOK80IEvEMpJha73nYyc8M5k5sYeuIQPO294N5Xv5mKz2ey 9zXX9SUPsFQh51t4p+kC/V+RKhgTkwA= -----END CERTIFICATE-----Generated at Mon Oct 20 21:55:39 2025 by rpki-client