$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft File: LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json) Hash identifier: 9mE5vW0zqP7Z2lxPqHY2n9JXSrmW0nWySDHVDmUFhQs= Subject key identifier: A0:B1:25:53:88:F0:58:02:63:06:D4:3D:48:EA:F7:0E:C0:F4:47:6B Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25 Certificate issuer: /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft Manifest number: 5B Signing time: Fri 07 Nov 2025 02:27:28 +0000 Manifest this update: Fri 07 Nov 2025 02:27:27 +0000 Manifest next update: Fri 14 Nov 2025 02:27:27 +0000 Files and hashes: 1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: KzuXJnVX1M+ewWvuOBgRbNvzcgyp6ZKxBsnHOUSr+10=) 2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: 2CjDcwjgwp6gOmqeOjKh58gY5ezLWgyuFkjz5k3OnLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Nov 2025 02:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525 Validity Not Before: Nov 7 02:27:27 2025 GMT Not After : Nov 14 02:27:27 2025 GMT Subject: CN=690d5910-e39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:3a:8c:f8:a2:fc:99:75:ec:78:4c:68:1d: 91:d7:06:23:73:a1:76:5a:58:28:30:2c:51:38:9c: 28:35:df:ba:39:dc:93:7e:d8:f5:24:36:7c:fd:22: 83:fb:35:d4:20:fd:69:fb:07:7d:f3:1b:f3:b2:ec: 7e:a8:8d:81:e2:da:49:d9:ac:95:f0:54:9d:20:1c: 3d:e7:2e:ad:35:59:92:4c:f5:78:cc:22:cb:70:ea: 97:c7:e8:2d:ae:d9:58:d2:76:e2:56:6f:16:bd:f9: a0:85:b8:2e:f9:c3:e5:ef:21:8f:e8:23:07:89:c5: be:75:23:a2:92:9a:8d:0c:8a:d6:15:9e:1e:58:93: 90:da:6a:a9:48:26:68:40:7d:80:f9:10:98:31:1f: c5:7f:65:37:15:7a:d3:a7:77:4e:47:83:f6:fd:b2: 15:9b:4f:c5:f9:5f:ba:90:3c:d5:e9:4e:8d:4d:e5: 1f:b3:f4:3e:b4:03:86:1d:e4:f5:30:e8:e0:b3:49: 2a:0d:c0:6d:20:6c:8e:b1:75:19:f2:80:55:59:b5: d5:91:4b:5d:ef:ce:78:c4:ac:e9:48:51:2d:76:af: 5b:52:04:54:37:57:7c:9d:35:64:dd:29:1d:f8:0c: 88:1c:28:43:9f:68:71:dc:38:78:7f:57:a3:06:a9: f1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B1:25:53:88:F0:58:02:63:06:D4:3D:48:EA:F7:0E:C0:F4:47:6B X509v3 Authority Key Identifier: keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d3:76:9d:b2:26:2c:75:7e:70:94:27:94:1d:f8:f6:4b:6f: ef:4a:0f:eb:cf:c0:c9:52:26:64:2d:b7:15:37:8b:99:09:93: 3f:3b:94:ca:80:c1:92:ca:0e:07:31:4a:26:b2:2d:08:e7:c0: e9:52:76:35:50:bf:bb:28:e7:00:5a:fe:19:cd:ab:84:7f:41: b6:c6:cf:72:90:fe:30:77:c8:64:69:17:a5:3b:ca:c4:49:d0: 02:d0:ff:8c:84:db:83:d5:dd:58:d6:2c:d1:ef:9e:42:30:9a: 67:37:5c:50:1a:cc:c2:4c:01:35:ac:04:e1:88:fd:f2:71:c2: ec:ad:b6:42:9f:5e:75:1c:b2:25:85:79:2c:c8:50:f6:b0:7c: 25:b9:37:7b:05:3e:59:01:0d:ad:67:ad:3e:49:fb:43:b3:82: b1:4f:b4:bf:0c:d1:86:85:66:61:30:c6:a4:61:48:08:46:07: 95:09:a7:d8:3a:f7:fa:8a:37:ea:ac:00:6c:e1:7b:66:16:33: 36:d1:5e:ae:79:c1:f3:99:92:ab:4f:4e:29:5f:c9:de:67:00: df:8b:31:02:d6:5f:91:26:c6:6b:de:4f:9e:e3:90:5e:fc:00: af:db:e4:b8:09:db:d8:94:77:a5:da:d8:02:75:db:b2:f2:cf: 70:c0:2d:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjQ2MjExMC8GA1UEBRMoMkQ3RDVDNUY3NkNBM0E2OEY2NDk4MDJDOUQ4QjY2QTdG MjZGNjUyNTAeFw0yNTExMDcwMjI3MjdaFw0yNTExMTQwMjI3MjdaMBgxFjAUBgNV BAMTDTY5MGQ1OTEwLWUzOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyTTqM+KL8mXXseExoHZHXBiNzoXZaWCgwLFE4nCg137o53JN+2PUkNnz9IoP7 NdQg/Wn7B33zG/Oy7H6ojYHi2knZrJXwVJ0gHD3nLq01WZJM9XjMIstw6pfH6C2u 2VjSduJWbxa9+aCFuC75w+XvIY/oIweJxb51I6KSmo0MitYVnh5Yk5DaaqlIJmhA fYD5EJgxH8V/ZTcVetOnd05Hg/b9shWbT8X5X7qQPNXpTo1N5R+z9D60A4Yd5PUw 6OCzSSoNwG0gbI6xdRnygFVZtdWRS13vznjErOlIUS12r1tSBFQ3V3ydNWTdKR34 DIgcKEOfaHHcOHh/V6MGqfGRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoLElU4jw WAJjBtQ9SOr3DsD0R2swHwYDVR0jBBgwFoAULX1cX3bKOmj2SYAsnYtmp/JvZSUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDYyL0EyN0NDM0U0MzJG RjExRjA4NTlCNUEyREM0RjlBRTAyL0xYMWNYM2JLT21qMlNZQXNuWXRtcF9KdlpT VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFgxY1gzYktPbWoyU1lBc25ZdG1wX0p2WlNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC NDYyL0EyN0NDM0U0MzJGRjExRjA4NTlCNUEyREM0RjlBRTAyL0xYMWNYM2JLT21q MlNZQXNuWXRtcF9KdlpTVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAPTdp2yJix1fnCUJ5Qd+PZLb+9KD+vPwMlSJmQttxU3i5kJkz87lMqA wZLKDgcxSiayLQjnwOlSdjVQv7so5wBa/hnNq4R/QbbGz3KQ/jB3yGRpF6U7ysRJ 0ALQ/4yE24PV3VjWLNHvnkIwmmc3XFAazMJMATWsBOGI/fJxwuyttkKfXnUcsiWF eSzIUPawfCW5N3sFPlkBDa1nrT5J+0OzgrFPtL8M0YaFZmEwxqRhSAhGB5UJp9g6 9/qKN+qsAGzhe2YWMzbRXq55wfOZkqtPTilfyd5nAN+LMQLWX5EmxmveT57jkF78 AK/b5LgJ29iUd6Xa2AJ127Lyz3DALbI= -----END CERTIFICATE-----Generated at Fri Nov 7 11:44:18 2025 by rpki-client