$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json) Hash identifier: lyBV0/0aQZAgSeQ7QuzgTaUhj/hHoiwmIa8ndnSna+I= Subject key identifier: FA:4A:33:E0:BC:CC:19:CA:02:37:EB:41:DC:C3:6A:29:B4:37:B5:C7 Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0C91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft Manifest number: 0C8A Signing time: Sat 18 Oct 2025 19:05:42 +0000 Manifest this update: Sat 18 Oct 2025 19:05:41 +0000 Manifest next update: Sat 25 Oct 2025 19:05:41 +0000 Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: +9Rbnh2+oxazqSgcSN8Q7P4IVgKjL/blteXZDqp/9io=) 2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: OUjIlN8Q3EsaPIKbBShyZ2ErWs3i9iaEMQNeWIb8brA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3217 (0xc91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: Oct 18 19:05:41 2025 GMT Not After : Oct 25 19:05:41 2025 GMT Subject: CN=68f3e506-e658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:af:ad:9d:6b:83:a4:30:bd:a5:e4:80:d3:dd: f6:19:6e:fa:f6:bd:c9:c2:35:9c:50:ae:11:90:6e: 6a:d0:2a:d2:a2:b0:eb:b9:4f:10:fe:3f:bb:f0:c5: 71:cd:c9:a9:f2:2a:45:fa:fd:73:1b:19:c1:69:23: 01:c1:33:cf:78:03:4d:61:f2:e4:67:bb:8e:fc:fb: 37:4f:cb:79:44:8d:b2:b4:0e:87:9f:7e:17:08:95: 3d:e5:2f:d4:7b:21:7f:41:ed:d0:4b:d4:f9:0a:04: 18:11:cb:4e:e3:0b:ce:a8:df:b9:b5:f7:2b:a7:68: 51:b6:96:72:e3:00:95:26:93:bb:29:2b:4e:33:df: 44:ab:a9:53:2d:12:c0:17:a4:df:8c:13:b6:f3:ee: 56:89:06:0f:de:71:fe:05:7f:90:04:20:02:c5:a2: c7:28:06:6c:23:c8:29:30:e6:de:bb:88:e9:78:1a: 4c:5f:64:da:1b:6b:9c:95:0e:5c:a1:0e:50:f5:eb: 59:d7:c9:66:b9:1c:0d:33:cb:90:f7:3d:50:8a:f4: f4:b9:1b:0a:06:95:59:dd:79:0e:7f:9f:95:3c:bf: 96:04:6e:86:89:d6:af:4c:15:a9:95:80:d2:12:70: f2:68:48:b6:29:51:3a:11:59:b9:ac:34:b9:59:70: 14:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4A:33:E0:BC:CC:19:CA:02:37:EB:41:DC:C3:6A:29:B4:37:B5:C7 X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:cd:4e:44:13:7c:d9:3a:3f:23:26:ff:32:43:8d:b9:03:44: 1c:e7:d0:fc:c8:be:9c:7c:f2:f5:57:99:3b:0b:9c:16:24:84: 3b:b2:7b:15:61:da:4d:61:28:4d:3f:e6:3f:33:13:cd:ee:f3: 33:7e:0d:c4:cd:a9:79:71:28:52:3f:8f:aa:ae:09:be:b3:de: 05:4c:f1:46:ab:43:9a:03:e7:97:25:e5:49:f5:05:70:ad:cf: 31:d6:0d:49:30:6b:71:2f:84:89:69:7c:38:81:fa:bd:ca:cd: 72:cf:ed:2b:dd:72:6e:18:af:54:41:f0:c5:42:ee:22:a4:fe: c0:83:62:b3:f0:f2:02:6a:26:23:48:1e:58:2c:8c:43:e4:0e: 1c:48:ab:27:cb:e3:92:3a:a0:8c:ac:e6:60:ba:85:f3:ca:e4: ce:d1:cc:3a:5a:99:2b:68:5a:69:25:2a:09:30:d7:49:70:40: 06:38:f7:01:8d:0e:ba:68:df:cd:6b:fe:f5:cc:0a:68:9f:33: cd:bf:38:8e:a1:04:7c:da:fc:a5:4f:3d:39:3d:bb:7c:c2:97: 5c:a9:7e:74:1c:94:50:e8:3f:ba:70:c4:9b:00:1d:46:10:fb: 99:f7:00:b0:c3:bc:55:75:cf:8c:03:fa:8c:f2:a6:cf:d3:3f: 2b:b0:92:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjUxMDE4MTkwNTQxWhcNMjUxMDI1MTkwNTQxWjAYMRYwFAYD VQQDEw02OGYzZTUwNi1lNjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2a+tnWuDpDC9peSA0932GW769r3JwjWcUK4RkG5q0CrSorDruU8Q/j+78MVx zcmp8ipF+v1zGxnBaSMBwTPPeANNYfLkZ7uO/Ps3T8t5RI2ytA6Hn34XCJU95S/U eyF/Qe3QS9T5CgQYEctO4wvOqN+5tfcrp2hRtpZy4wCVJpO7KStOM99Eq6lTLRLA F6TfjBO28+5WiQYP3nH+BX+QBCACxaLHKAZsI8gpMObeu4jpeBpMX2TaG2uclQ5c oQ5Q9etZ18lmuRwNM8uQ9z1QivT0uRsKBpVZ3XkOf5+VPL+WBG6GidavTBWplYDS EnDyaEi2KVE6EVm5rDS5WXAUXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpKM+C8 zBnKAjfrQdzDaim0N7XHMB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1 VTRyYkZSaWpTR3BHQXI3VVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgzU5EE3zZOj8jJv8yQ425A0Qc59D8yL6cfPL1V5k7C5wWJIQ7snsV YdpNYShNP+Y/MxPN7vMzfg3Ezal5cShSP4+qrgm+s94FTPFGq0OaA+eXJeVJ9QVw rc8x1g1JMGtxL4SJaXw4gfq9ys1yz+0r3XJuGK9UQfDFQu4ipP7Ag2Kz8PICaiYj SB5YLIxD5A4cSKsny+OSOqCMrOZguoXzyuTO0cw6WpkraFppJSoJMNdJcEAGOPcB jQ66aN/Na/71zAponzPNvziOoQR82vylTz05Pbt8wpdcqX50HJRQ6D+6cMSbAB1G EPuZ9wCww7xVdc+MA/qM8qbP0z8rsJIs -----END CERTIFICATE-----Generated at Mon Oct 20 08:04:39 2025 by rpki-client