$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft File: LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json) Hash identifier: ze0XQB2Sdrn6YcoyOU4Hq+GOqoYTtTGUbiTKJ9YDAdM= Subject key identifier: 82:9D:2E:25:FF:85:13:E7:11:89:02:EB:F1:0F:BA:FE:F2:20:98:60 Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 Certificate issuer: /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Certificate serial: 01F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft Manifest number: 01F3 Signing time: Mon 03 Nov 2025 02:29:13 +0000 Manifest this update: Mon 03 Nov 2025 02:29:12 +0000 Manifest next update: Mon 10 Nov 2025 02:29:12 +0000 Files and hashes: 1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: 8oiOkQwj7Ah85YMNm36xhx6xMoDpMYGo1fzcF4h3YgU=) 2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: JysCwCJJxEUrqo1TsnL+HZ8PxWYOSwYy6QcS3aO9jis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Validity Not Before: Nov 3 02:29:12 2025 GMT Not After : Nov 10 02:29:12 2025 GMT Subject: CN=69081379-3951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:81:16:7b:a2:0a:b8:82:ed:5f:06:22:a9:d3: 09:f7:cc:11:c2:e2:c5:df:fa:99:54:c3:b1:0f:65: 4f:90:97:c0:cb:95:5b:8c:88:e3:5f:68:03:a2:99: a9:6e:6f:cf:77:9b:19:5d:29:ab:3e:93:a6:1d:79: 0a:05:d4:c2:76:30:4e:62:34:67:bd:93:ab:a2:91: 50:95:00:c2:c4:ed:51:90:48:c3:07:17:40:9d:65: 6a:82:b3:cc:28:42:46:4a:94:41:5c:f2:2c:8e:a4: 5b:e4:72:7c:6d:26:80:25:e5:6e:59:2e:fa:29:bf: f3:3c:c6:99:94:a6:5e:be:13:9e:b3:be:9d:db:48: 34:e7:89:87:3b:98:ee:e4:1e:ae:12:3a:8b:00:02: 2c:cb:62:84:a4:bf:7e:eb:dd:c2:8e:62:84:31:d5: 4e:3b:22:94:cd:38:51:6d:ac:94:af:86:4e:d8:a2: 66:9e:6e:b9:a8:94:79:37:0d:52:a7:66:ff:1d:77: 3c:09:27:52:58:0b:7b:65:a2:a0:04:af:52:ad:d0: de:4d:8d:82:9e:ab:f7:a7:67:c3:cc:f9:eb:68:a2: b3:a9:78:c6:f5:50:09:ac:15:c0:73:c7:b1:80:3e: cb:d3:13:94:ae:1d:08:f8:f7:ab:2e:68:27:4e:6f: 45:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9D:2E:25:FF:85:13:E7:11:89:02:EB:F1:0F:BA:FE:F2:20:98:60 X509v3 Authority Key Identifier: keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:f5:40:a2:d2:7c:00:42:5f:3b:27:3e:32:88:78:2e:0d:2e: 24:88:bf:a6:98:54:dc:3c:8b:de:b1:c0:bf:8f:e4:35:76:8f: af:40:c1:52:85:42:e3:e3:85:fa:56:62:ad:aa:b8:7f:25:6e: 45:ba:09:5e:d6:11:8c:b7:f3:e5:01:10:ca:87:b5:d9:1a:f9: 92:34:b6:6e:fe:a4:d8:f3:73:b2:ae:05:58:87:20:ae:34:b0: 31:f9:8f:46:6b:d7:ea:9e:96:a8:1a:e5:e3:d0:21:2f:bb:a4: a1:63:cb:d1:a8:e4:cb:b5:81:10:ab:e0:18:35:06:c8:33:67: bc:61:30:db:d4:80:b2:a8:95:42:c7:0c:53:81:99:3e:58:8b: 20:3f:10:47:be:26:21:3d:92:d4:64:f4:8f:6f:ce:19:d8:f5: ff:b4:ad:f8:84:5d:d9:28:0e:21:7f:09:ac:1b:04:14:dd:8b: 72:89:5d:07:b4:2e:5e:e6:69:2b:1f:91:fb:6c:e2:19:27:8a: dd:47:58:ed:ad:35:34:0f:c5:da:41:0f:e5:76:2a:99:2d:4f: 50:7c:90:cd:1b:a4:3f:f5:8e:0e:23:42:07:37:19:5f:8f:6b: 5c:bc:c8:5a:8a:c7:4d:a3:c0:2c:08:81:08:b4:28:f9:95:06: 0a:e7:f6:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzMUQxMTAvBgNVBAUTKDJFOUMxMUM2RDI5NDVENTJGOTVGMjRDMzlERDFGNDE4 N0EzNDE3RTUwHhcNMjUxMTAzMDIyOTEyWhcNMjUxMTEwMDIyOTEyWjAYMRYwFAYD VQQDEw02OTA4MTM3OS0zOTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8IEWe6IKuILtXwYiqdMJ98wRwuLF3/qZVMOxD2VPkJfAy5VbjIjjX2gDopmp bm/Pd5sZXSmrPpOmHXkKBdTCdjBOYjRnvZOropFQlQDCxO1RkEjDBxdAnWVqgrPM KEJGSpRBXPIsjqRb5HJ8bSaAJeVuWS76Kb/zPMaZlKZevhOes76d20g054mHO5ju 5B6uEjqLAAIsy2KEpL9+693CjmKEMdVOOyKUzThRbayUr4ZO2KJmnm65qJR5Nw1S p2b/HXc8CSdSWAt7ZaKgBK9SrdDeTY2Cnqv3p2fDzPnraKKzqXjG9VAJrBXAc8ex gD7L0xOUrh0I+PerLmgnTm9FKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKdLiX/ hRPnEYkC6/EPuv7yIJhgMB8GA1UdIwQYMBaAFC6cEcbSlF1S+V8kw53R9Bh6NBfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjMxRC9FN0U3RUM1MEJE NjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhWTDVYeVREbmRIMEdIbzBG LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xwd1J4dEtVWFZMNVh5VERuZEgwR0hvMEYtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjMxRC9FN0U3RUM1MEJENjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhW TDVYeVREbmRIMEdIbzBGLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp9UCi0nwAQl87Jz4yiHguDS4kiL+mmFTcPIvescC/j+Q1do+vQMFS hULj44X6VmKtqrh/JW5Fugle1hGMt/PlARDKh7XZGvmSNLZu/qTY83OyrgVYhyCu NLAx+Y9Ga9fqnpaoGuXj0CEvu6ShY8vRqOTLtYEQq+AYNQbIM2e8YTDb1ICyqJVC xwxTgZk+WIsgPxBHviYhPZLUZPSPb84Z2PX/tK34hF3ZKA4hfwmsGwQU3YtyiV0H tC5e5mkrH5H7bOIZJ4rdR1jtrTU0D8XaQQ/ldiqZLU9QfJDNG6Q/9Y4OI0IHNxlf j2tcvMhaisdNo8AsCIEItCj5lQYK5/aC -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:17 2025 by rpki-client