$ rpki-client -vvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft File: Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json) Hash identifier: drFXrBFXcqwJaSoaerMBmNd3Jcq1gYx6Snqs5fS0VOQ= Subject key identifier: 45:8C:99:21:AF:1A:8D:D9:D6:73:C9:BC:49:3C:10:89:16:62:6A:3F Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 Certificate issuer: /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Certificate serial: 3555 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft Manifest number: 351A Signing time: Sun 02 Nov 2025 14:15:34 +0000 Manifest this update: Sun 02 Nov 2025 14:15:34 +0000 Manifest next update: Sun 09 Nov 2025 14:15:34 +0000 Files and hashes: 1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: dmmBITX27SJumr1bLdvmBRo3189llZUvYO24GiSy3t0=) 2: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: kZ7lGqUSa7QDbdQn5Phtug9wEvqAopDp24gkxncZqms=) 3: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: gPXM355jFI8rfBytnJ40meI4jOctz96q7otlI3dOULI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13653 (0x3555) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Validity Not Before: Nov 2 14:15:34 2025 GMT Not After : Nov 9 14:15:34 2025 GMT Subject: CN=69076786-48ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6e:74:07:c0:32:2c:82:ba:fd:09:cd:40:b3: 35:4c:c7:30:16:11:ce:65:a8:ca:13:4c:98:c7:77: 51:79:10:5d:82:0d:e7:87:91:d5:34:3f:48:39:cf: 52:f4:0e:23:dd:b4:7b:ac:45:a7:ab:a7:11:d5:10: 20:2d:74:7f:62:ea:85:30:45:75:89:c2:38:50:69: 6a:34:25:8d:a0:e9:b3:e9:78:e1:dc:a6:b3:7a:e1: 2a:ea:c5:b6:e3:91:62:00:a1:d7:2d:99:27:73:ed: 9a:d1:1d:bf:5b:fc:f8:d8:3b:e8:32:e3:13:48:22: 33:70:b5:64:2d:ee:7c:97:2f:82:97:9f:7c:6d:84: 1c:57:d0:ea:b7:68:05:f2:f1:db:0a:00:ba:35:68: 22:7c:44:c4:13:ad:0a:25:71:93:e5:5b:90:4f:9e: 34:b4:4d:df:8b:34:13:9c:9f:1c:c0:27:03:fd:6b: 31:da:11:06:f4:8e:b0:1f:6e:32:53:71:c6:47:cc: 59:cd:f1:bb:9d:3c:65:13:c5:03:dd:07:01:63:e2: d4:3d:b4:b6:e0:42:59:2b:8a:5b:98:30:c8:ec:ec: e4:b1:7d:57:81:6c:8b:3a:45:aa:92:53:52:a6:83: 94:fc:8c:7f:da:34:99:eb:cb:bf:f0:3c:b7:4c:ee: 86:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8C:99:21:AF:1A:8D:D9:D6:73:C9:BC:49:3C:10:89:16:62:6A:3F X509v3 Authority Key Identifier: keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:41:0c:fb:ff:b3:2c:a6:a5:0d:f9:b8:f4:55:d2:16:94:d5: 39:9c:89:f5:8a:a7:8e:9a:1a:3b:af:d5:82:46:70:0a:7c:1a: 60:84:ad:ef:18:41:b1:c4:0f:dc:69:b3:c3:0a:6c:60:c3:83: 9e:58:93:e1:58:18:3c:71:19:04:45:46:8a:5f:15:dc:f0:17: 22:63:a0:e4:ab:27:3f:94:d6:b4:61:e6:4f:dd:9e:2f:60:d9: 66:ef:ff:6b:df:be:07:79:4d:29:98:82:0d:06:bd:c6:d6:d2: ac:1f:0f:c9:e4:7b:ff:93:2c:c5:7a:eb:01:47:b7:3b:4b:65: a3:b5:a0:72:e3:55:9a:6d:1e:b7:6b:4d:95:06:9c:7b:ee:cb: bc:fc:fc:0a:bf:9f:bb:0a:13:d5:6a:ef:b6:08:b3:96:3a:4b: 00:64:bd:2f:71:e5:64:3f:ba:b4:a5:00:03:1d:3c:ea:06:56: 3a:31:5e:42:1f:60:77:c3:91:1c:43:b5:27:37:10:89:b0:08: 84:e0:91:56:4d:f6:d9:ca:d7:3f:7a:e9:33:dd:32:78:30:73: dc:4a:e7:aa:00:2c:cd:82:60:20:05:cd:e1:53:cc:14:f0:ac: 4b:e6:28:fb:aa:c9:e3:69:09:e3:a8:c5:94:37:93:98:0b:bf: b0:e0:70:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1RkQxMTAvBgNVBAUTKDJFOERBRjQ5RTI3RTRGQzEyQkUwNUVGN0RGMUE4MkJC Mjg3MTI2QTEwHhcNMjUxMTAyMTQxNTM0WhcNMjUxMTA5MTQxNTM0WjAYMRYwFAYD VQQDEw02OTA3Njc4Ni00OGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4m50B8AyLIK6/QnNQLM1TMcwFhHOZajKE0yYx3dReRBdgg3nh5HVND9IOc9S 9A4j3bR7rEWnq6cR1RAgLXR/YuqFMEV1icI4UGlqNCWNoOmz6Xjh3KazeuEq6sW2 45FiAKHXLZknc+2a0R2/W/z42DvoMuMTSCIzcLVkLe58ly+Cl598bYQcV9Dqt2gF 8vHbCgC6NWgifETEE60KJXGT5VuQT540tE3fizQTnJ8cwCcD/Wsx2hEG9I6wH24y U3HGR8xZzfG7nTxlE8UD3QcBY+LUPbS24EJZK4pbmDDI7OzksX1XgWyLOkWqklNS poOU/Ix/2jSZ68u/8Dy3TO6GuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWMmSGv Go3Z1nPJvEk8EIkWYmo/MB8GA1UdIwQYMBaAFC6Nr0nifk/BK+Be998agrsocSah MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVGRC9CQ0U0RDEwQTFE NjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4RXI0RjczM3hxQ3V5aHhK cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xvMnZTZUotVDhFcjRGNzMzeHFDdXloeEpxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVGRC9CQ0U0RDEwQTFENjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4 RXI0RjczM3hxQ3V5aHhKcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATQQz7/7MspqUN+bj0VdIWlNU5nIn1iqeOmho7r9WCRnAKfBpghK3v GEGxxA/cabPDCmxgw4OeWJPhWBg8cRkERUaKXxXc8BciY6Dkqyc/lNa0YeZP3Z4v YNlm7/9r374HeU0pmIINBr3G1tKsHw/J5Hv/kyzFeusBR7c7S2WjtaBy41WabR63 a02VBpx77su8/PwKv5+7ChPVau+2CLOWOksAZL0vceVkP7q0pQADHTzqBlY6MV5C H2B3w5EcQ7UnNxCJsAiE4JFWTfbZytc/eukz3TJ4MHPcSueqACzNgmAgBc3hU8wU 8KxL5ij7qsnjaQnjqMWUN5OYC7+w4HB/ -----END CERTIFICATE-----Generated at Mon Nov 3 18:15:05 2025 by rpki-client