$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft File: Lz71uQE3FOMXTGcArgSCTi8FwjA.mft (raw, json) Hash identifier: wqTZ9utsqysRjpRI+u/EtVqL7g8mVhcMUrCRTKKqyKY= Subject key identifier: FF:ED:C1:FA:35:14:7B:E1:55:75:B9:3A:EB:23:9C:A4:46:83:A6:9D Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 0388 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft Manifest number: 0366 Signing time: Mon 03 Nov 2025 00:53:45 +0000 Manifest this update: Mon 03 Nov 2025 00:53:45 +0000 Manifest next update: Mon 10 Nov 2025 00:53:45 +0000 Files and hashes: 1: Lz71uQE3FOMXTGcArgSCTi8FwjA.crl (hash: d2ot4GwIPPATnwxfbD3qLqn7/POygI0tAJfSiFeSR5o=) 2: 19E46D60D0F711EC8673072FC4F9AE02.roa (hash: eS0SkthbbyWxVM1PH+Y2UO1xSi4Vr2C2N13i593TCX4=) 3: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (hash: ugSG0jqem3rs4xTGOWUqAAlzlasFYzS5jXjJfZyh3NM=) 4: 196C52A8D0F711EC8673072FC4F9AE02.roa (hash: 1zywqVEPzRbdKjUH9lfurYX548Q8woU0JCmn0L04HiU=) 5: 6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (hash: QV4TEx4o0H+S1ztXPsRaHI/PqCLYaPoZZrkBgaPymwI=) 6: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (hash: uEFMEysaJCpfT6acgeEaH657dOYiucYQFMSducsR5+M=) 7: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (hash: RP0USEP4cmm5/rPyavYfSImz5bM19LFBMACm4cna7sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 904 (0x388) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: Nov 3 00:53:45 2025 GMT Not After : Nov 10 00:53:45 2025 GMT Subject: CN=6907fd19-6a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a0:53:f9:58:92:8f:94:f1:8b:73:ba:cb:b5: 7d:86:d6:c7:6c:a1:d4:d1:f9:ba:1d:4f:de:01:ae: e2:c1:c1:83:20:93:9e:b7:90:b3:eb:46:aa:6c:2d: 01:1b:93:d6:b0:19:ad:ca:1f:7a:25:8e:a1:84:3e: 5f:a5:d2:a4:e1:73:05:e8:8b:d9:e0:45:bb:c5:08: 07:9b:53:ff:f7:69:50:ba:99:61:6c:11:83:1e:fd: 58:bf:e0:6b:37:cf:1a:ea:d8:d0:08:d3:e8:9b:7f: af:27:30:dc:c1:9a:12:19:1f:7a:02:9b:67:f2:3b: d6:6b:72:eb:c9:3a:aa:82:3d:47:f9:4f:1c:bf:a3: 02:1a:e3:80:56:d7:27:eb:89:5c:71:3c:c4:63:d6: e6:42:38:37:ad:54:2c:38:c8:6b:73:d7:64:c7:82: 30:4f:02:7b:40:10:71:c7:99:1b:21:91:4f:7e:53: 51:c5:76:51:10:60:6d:29:93:21:60:54:44:70:e6: d5:05:ba:50:b0:9e:4b:3e:a8:f5:c7:32:9b:e0:41: c7:10:34:07:86:78:c4:76:e9:76:24:c4:f8:aa:01: 08:fe:e1:ad:8f:16:e8:27:f6:d5:04:0d:9a:c3:5c: 64:62:e5:75:ab:c2:38:16:02:95:f3:1b:a4:2c:99: 73:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:ED:C1:FA:35:14:7B:E1:55:75:B9:3A:EB:23:9C:A4:46:83:A6:9D X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:a5:f3:c5:4c:ae:1a:42:0f:fe:64:84:62:88:bd:7b:ac:80: e5:51:0c:08:66:40:32:71:02:6a:7a:aa:36:4b:3b:7e:89:bd: 62:9c:46:bf:94:a4:ad:fe:8f:a9:99:5f:ef:72:b0:0d:31:11: 89:e3:4e:af:8e:1e:af:1b:5a:c0:14:bc:f0:e5:5b:66:51:5d: 80:3b:2a:d2:4c:40:c4:be:36:6d:2f:63:0a:3a:25:01:6e:18: da:61:6d:fd:b6:a8:55:58:fd:ec:3a:8b:a4:69:73:a6:9d:29: 34:4e:b8:71:32:6d:f4:0d:fd:5d:e4:29:7c:d3:9d:e1:23:58: c2:35:c0:9e:ff:0c:33:a0:7a:ab:09:52:1b:e3:3e:76:da:f2: 25:39:7e:8e:0d:19:d4:b1:f6:d0:45:09:c3:ca:db:be:1f:a0: a8:08:0f:8b:a6:fb:67:61:b3:5b:06:a1:a7:05:77:e7:ed:7f: 60:0a:45:5b:67:01:d4:da:ac:34:8c:77:3f:2e:51:9b:77:6b: db:da:af:c7:0e:a8:4e:58:7a:cb:08:e9:54:f8:3f:9b:4d:11: e2:56:aa:0e:25:fa:bc:08:16:16:7d:d9:b3:95:8e:5d:b0:d0: 21:18:be:5b:bb:41:6c:a7:b2:54:c3:f5:0e:5d:2c:bf:3f:e6: 4e:ea:08:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjUxMTAzMDA1MzQ1WhcNMjUxMTEwMDA1MzQ1WjAYMRYwFAYD VQQDEw02OTA3ZmQxOS02YTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaBT+ViSj5Txi3O6y7V9htbHbKHU0fm6HU/eAa7iwcGDIJOet5Cz60aqbC0B G5PWsBmtyh96JY6hhD5fpdKk4XMF6IvZ4EW7xQgHm1P/92lQuplhbBGDHv1Yv+Br N88a6tjQCNPom3+vJzDcwZoSGR96Aptn8jvWa3LryTqqgj1H+U8cv6MCGuOAVtcn 64lccTzEY9bmQjg3rVQsOMhrc9dkx4IwTwJ7QBBxx5kbIZFPflNRxXZREGBtKZMh YFREcObVBbpQsJ5LPqj1xzKb4EHHEDQHhnjEdul2JMT4qgEI/uGtjxboJ/bVBA2a w1xkYuV1q8I4FgKV8xukLJlzrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/twfo1 FHvhVXW5OusjnKRGg6adMB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDZCMS85QTBFQ0UxMEQwRjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZP TVhUR2NBcmdTQ1RpOEZ3akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIpfPFTK4aQg/+ZIRiiL17rIDlUQwIZkAycQJqeqo2Szt+ib1inEa/ lKSt/o+pmV/vcrANMRGJ406vjh6vG1rAFLzw5VtmUV2AOyrSTEDEvjZtL2MKOiUB bhjaYW39tqhVWP3sOoukaXOmnSk0TrhxMm30Df1d5Cl8053hI1jCNcCe/wwzoHqr CVIb4z522vIlOX6ODRnUsfbQRQnDytu+H6CoCA+LpvtnYbNbBqGnBXfn7X9gCkVb ZwHU2qw0jHc/LlGbd2vb2q/HDqhOWHrLCOlU+D+bTRHiVqoOJfq8CBYWfdmzlY5d sNAhGL5bu0Fsp7JUw/UOXSy/P+ZO6ghC -----END CERTIFICATE-----Generated at Tue Nov 4 08:28:06 2025 by rpki-client