$ rpki-client -vvf rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft File: lx1PfDIP2Y7P374A1z4CiBX-I_E.mft (raw, json) Hash identifier: tTLMjV59zi0suXxonsdplscCkoZAZ81qzdDR7PrJuNM= Subject key identifier: EB:93:11:5B:31:B6:11:AD:E7:D7:51:08:24:07:F8:E5:B2:19:4E:A0 Authority key identifier: 97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 Certificate issuer: /CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Certificate serial: 25BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft Manifest number: 25AF Signing time: Sun 02 Nov 2025 15:44:39 +0000 Manifest this update: Sun 02 Nov 2025 15:44:39 +0000 Manifest next update: Sun 09 Nov 2025 15:44:39 +0000 Files and hashes: 1: lx1PfDIP2Y7P374A1z4CiBX-I_E.crl (hash: BxTRvxxmG+uQApLWAHvjqeL+sSRkwdL+K0DYFOZkXrU=) 2: 77139F3054EF11E783C5A42EC4F9AE02.roa (hash: WW7ULLrrOIB9GGHcDB9wM2m87d2vUNfw8IK2SkFOaB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9663 (0x25bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916588E, serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Validity Not Before: Nov 2 15:44:39 2025 GMT Not After : Nov 9 15:44:39 2025 GMT Subject: CN=69077c67-d9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b5:6c:91:5f:0e:63:30:b2:f6:43:df:8e:1f: 46:39:1d:09:62:ad:63:4d:73:f1:5b:78:8b:46:64: 9c:78:fb:26:fe:06:76:93:81:fd:ee:57:7d:e8:16: 4a:b9:d3:65:08:b5:6b:50:ae:d8:b4:f1:c3:14:c6: b4:e5:8a:27:9d:ae:77:3e:58:58:8f:ba:55:43:7f: 73:3f:27:b4:70:ae:c7:c7:ed:88:eb:93:42:ff:3d: f7:4a:81:66:f5:5a:ec:2e:10:92:8f:db:7d:87:76: 3c:7f:2e:01:f3:bf:7d:17:56:41:4c:9b:c1:3f:1e: 5e:13:2d:e9:85:01:7e:15:2f:d0:3a:e7:7c:b5:c9: 44:9b:02:23:a4:9d:36:f2:fb:d1:9c:28:ad:20:64: 35:c7:b8:8f:35:d7:19:ec:1a:37:0c:3c:36:fb:3b: e9:88:4b:8a:65:4e:8d:b6:bf:54:23:f2:0f:e9:16: 1e:3a:c9:77:06:3a:92:4f:5f:7c:0d:3f:4e:5d:18: 00:81:52:7d:29:35:f5:82:d7:04:d2:1f:ca:39:82: a8:08:5a:64:c0:07:8d:fa:47:fd:69:b8:23:ed:41: a2:02:0e:dc:1c:f5:c7:d2:ea:9d:3a:fc:44:f5:1f: 14:e3:9e:e5:8e:2f:de:f3:41:e2:70:dd:42:59:64: 89:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:93:11:5B:31:B6:11:AD:E7:D7:51:08:24:07:F8:E5:B2:19:4E:A0 X509v3 Authority Key Identifier: keyid:97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:40:a8:5c:00:98:3c:a5:c1:c4:48:74:2b:49:57:b0:7e:2f: db:94:a4:99:9b:74:6a:49:4b:40:da:ee:a4:25:17:7a:68:2c: 76:f3:f5:a7:23:49:02:5f:90:d9:cf:6b:35:31:79:d7:b0:d3: d1:26:3d:c9:d2:5f:41:e8:d5:46:42:22:9a:81:ad:c2:8c:dd: 0e:da:28:96:40:ad:a3:26:43:4d:cd:cc:ee:d8:47:ec:31:d9: 24:73:9f:15:c6:17:e9:b5:2b:7c:1b:30:92:c1:78:5b:97:b5: e5:b1:be:49:c8:9d:37:fe:0f:df:17:04:49:03:de:63:2d:f9: 4c:2b:0f:6b:68:45:95:36:a3:42:c6:a1:c9:1b:f7:a7:c2:aa: a9:5f:5e:e5:03:9c:2f:6d:1f:4d:d6:f3:fc:1b:29:af:a6:29: 51:b8:3e:d5:1c:07:84:39:29:98:4d:64:d5:b1:e8:b9:49:f6: 36:85:d6:f6:46:7c:4b:09:e8:ec:c0:86:a2:3b:4b:c9:31:56: e0:b5:fa:40:59:47:90:a5:61:74:7c:8e:72:fe:d0:6d:2d:b0: 0c:0a:ef:6a:2f:fe:90:a8:43:b0:40:05:e7:b4:27:2f:7b:61: 6a:7e:09:2a:82:64:80:c9:e2:66:50:4a:f7:3c:8c:bd:ee:86: a5:0a:fa:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4OEUxMTAvBgNVBAUTKDk3MUQ0RjdDMzIwRkQ5OEVDRkRGQkUwMEQ3M0UwMjg4 MTVGRTIzRjEwHhcNMjUxMTAyMTU0NDM5WhcNMjUxMTA5MTU0NDM5WjAYMRYwFAYD VQQDEw02OTA3N2M2Ny1kOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4rVskV8OYzCy9kPfjh9GOR0JYq1jTXPxW3iLRmScePsm/gZ2k4H97ld96BZK udNlCLVrUK7YtPHDFMa05Yonna53PlhYj7pVQ39zPye0cK7Hx+2I65NC/z33SoFm 9VrsLhCSj9t9h3Y8fy4B8799F1ZBTJvBPx5eEy3phQF+FS/QOud8tclEmwIjpJ02 8vvRnCitIGQ1x7iPNdcZ7Bo3DDw2+zvpiEuKZU6Ntr9UI/IP6RYeOsl3BjqST198 DT9OXRgAgVJ9KTX1gtcE0h/KOYKoCFpkwAeN+kf9abgj7UGiAg7cHPXH0uqdOvxE 9R8U457lji/e80HicN1CWWSJPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuTEVsx thGt59dRCCQH+OWyGU6gMB8GA1UdIwQYMBaAFJcdT3wyD9mOz9++ANc+AogV/iPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTg4RS9EQTgwMzFCMjFB MjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZN1AzNzRBMXo0Q2lCWC1J X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x4MVBmRElQMlk3UDM3NEExejRDaUJYLUlfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTg4RS9EQTgwMzFCMjFBMjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZ N1AzNzRBMXo0Q2lCWC1JX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+QKhcAJg8pcHESHQrSVewfi/blKSZm3RqSUtA2u6kJRd6aCx28/Wn I0kCX5DZz2s1MXnXsNPRJj3J0l9B6NVGQiKaga3CjN0O2iiWQK2jJkNNzczu2Efs Mdkkc58VxhfptSt8GzCSwXhbl7Xlsb5JyJ03/g/fFwRJA95jLflMKw9raEWVNqNC xqHJG/enwqqpX17lA5wvbR9N1vP8GymvpilRuD7VHAeEOSmYTWTVsei5SfY2hdb2 RnxLCejswIaiO0vJMVbgtfpAWUeQpWF0fI5y/tBtLbAMCu9qL/6QqEOwQAXntCcv e2FqfgkqgmSAyeJmUEr3PIy97oalCvrY -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:14 2025 by rpki-client