$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft File: LQx0fe_201Ecz11T86dlcA8cgqA.mft (raw, json) Hash identifier: Y6XBRvjqTF3gbGH+o+LUhBNqDiKGN7yuENr9Pa/RFFw= Subject key identifier: 7E:2F:B9:E9:1B:D1:30:FE:4E:BA:8E:2B:B3:5D:9F:44:53:01:D3:89 Authority key identifier: 2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 Certificate issuer: /CN=A9170975/serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft Manifest number: 4D Signing time: Thu 23 Oct 2025 09:28:26 +0000 Manifest this update: Thu 23 Oct 2025 09:28:26 +0000 Manifest next update: Thu 30 Oct 2025 09:28:26 +0000 Files and hashes: 1: LQx0fe_201Ecz11T86dlcA8cgqA.crl (hash: YECjsnLva/49BGwXKaWRBppkBHR4GFSOLcmZCt/tPIE=) 2: B0B8FBDA3A2A11F09E37DB48C4F9AE02.roa (hash: Gk5HrV+ASLgWFwT9SMxMpFzIA+vBFJ75IOUj++Jvz6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 09:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170975, serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Validity Not Before: Oct 23 09:28:26 2025 GMT Not After : Oct 30 09:28:26 2025 GMT Subject: CN=68f9f53a-3847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:90:1a:86:fb:28:0f:2c:ea:8c:00:f4:36:45: 58:f9:5b:5f:05:53:42:37:cf:11:67:66:ee:f6:d0: 06:7e:39:93:57:d9:98:ca:02:fd:28:ff:d6:f0:f4: f8:d1:d3:0e:55:33:29:61:0e:b0:5d:43:24:2f:ac: 51:53:e1:a3:3b:e9:46:a8:98:18:ab:51:93:39:69: b2:81:6b:aa:10:6d:af:bb:d1:87:f3:c0:9c:3a:09: 9d:32:47:e2:81:2e:30:93:96:15:cf:aa:b6:4f:20: 9a:f4:36:e8:57:0d:77:ce:bc:82:21:62:80:bd:a7: d6:31:c2:be:e2:32:03:e6:7b:32:09:34:9a:69:7d: 15:ff:c3:62:2a:f7:f7:b9:4b:d2:2a:ea:e5:10:50: 60:07:4c:22:d1:e9:a4:17:d7:be:df:9e:f8:b9:0e: bc:f4:52:ab:f9:c2:ee:2f:39:59:50:6f:36:39:31: d9:5b:96:f2:c5:b9:33:d5:1a:4c:d8:01:71:0f:08: 59:21:69:ce:41:06:e2:ac:b0:1d:04:e7:49:dc:5d: 1d:94:79:d2:50:10:ab:50:b8:5e:11:56:bb:db:1b: 24:b0:f4:9b:1f:bf:af:6b:9e:b1:ad:0b:ad:50:df: 5d:19:ca:51:9b:32:a7:7d:c1:e2:be:3f:24:34:ea: 03:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2F:B9:E9:1B:D1:30:FE:4E:BA:8E:2B:B3:5D:9F:44:53:01:D3:89 X509v3 Authority Key Identifier: keyid:2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:5d:33:1e:fb:d3:0c:78:b4:92:8e:14:f2:19:fc:e6:57:ef: 35:d6:62:29:e1:17:b4:11:83:45:2b:cd:82:c4:5d:5f:7d:40: 35:f1:3e:88:9d:e5:0c:ed:39:d6:27:3b:38:e8:f3:5f:02:f0: 7e:00:65:b6:72:81:6e:f9:87:3e:b1:2a:87:e5:2f:36:18:25: 63:0d:87:35:dd:cf:87:1a:45:af:8b:d6:d5:33:38:67:96:80: 88:c3:ee:12:7a:db:03:14:76:1a:18:3d:d6:2f:d8:21:6e:af: 29:ee:23:1a:06:78:d6:cd:e1:f6:45:86:ed:0f:d3:b0:64:46: b1:e5:06:9e:c9:13:a1:3e:5f:b6:1a:3a:bc:2a:88:0c:b1:ce: 53:33:33:b6:96:ad:ad:f8:2f:c2:49:f4:4e:64:3c:69:cf:75: 19:0d:53:e0:4f:ef:86:ff:ea:2e:23:46:68:e2:a1:90:79:97: f6:e9:0b:53:da:be:b6:bb:86:1e:36:ac:ce:ee:9a:ee:81:2e: e9:2f:7f:d7:e6:cb:dd:06:ef:41:81:fb:87:70:0f:92:e1:b4: d4:ce:e9:d8:d1:8c:f1:64:a4:a5:ff:d3:5a:06:53:c6:2e:b3: 32:3b:f7:9e:d3:b7:99:41:cc:40:95:b0:e9:1e:26:e0:1c:94: 8f:99:b2:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDk3NTExMC8GA1UEBRMoMkQwQzc0N0RFRkY2RDM1MTFDQ0Y1RDUzRjNBNzY1NzAw RjFDODJBMDAeFw0yNTEwMjMwOTI4MjZaFw0yNTEwMzAwOTI4MjZaMBgxFjAUBgNV BAMTDTY4ZjlmNTNhLTM4NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTkBqG+ygPLOqMAPQ2RVj5W18FU0I3zxFnZu720AZ+OZNX2ZjKAv0o/9bw9PjR 0w5VMylhDrBdQyQvrFFT4aM76UaomBirUZM5abKBa6oQba+70YfzwJw6CZ0yR+KB LjCTlhXPqrZPIJr0NuhXDXfOvIIhYoC9p9Yxwr7iMgPmezIJNJppfRX/w2Iq9/e5 S9Iq6uUQUGAHTCLR6aQX177fnvi5Drz0Uqv5wu4vOVlQbzY5MdlblvLFuTPVGkzY AXEPCFkhac5BBuKssB0E50ncXR2UedJQEKtQuF4RVrvbGySw9Jsfv69rnrGtC61Q 310ZylGbMqd9weK+PyQ06gMXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfi+56RvR MP5Ouo4rs12fRFMB04kwHwYDVR0jBBgwFoAULQx0fe/201Ecz11T86dlcA8cgqAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTc1LzVGOTAzNUY2M0Ey NjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFFY3oxMVQ4NmRsY0E4Y2dx QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFF4MGZlXzIwMUVjejExVDg2ZGxjQThjZ3FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTc1LzVGOTAzNUY2M0EyNjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFF Y3oxMVQ4NmRsY0E4Y2dxQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKJdMx770wx4tJKOFPIZ/OZX7zXWYinhF7QRg0UrzYLEXV99QDXxPoid 5QztOdYnOzjo818C8H4AZbZygW75hz6xKoflLzYYJWMNhzXdz4caRa+L1tUzOGeW gIjD7hJ62wMUdhoYPdYv2CFurynuIxoGeNbN4fZFhu0P07BkRrHlBp7JE6E+X7Ya OrwqiAyxzlMzM7aWra34L8JJ9E5kPGnPdRkNU+BP74b/6i4jRmjioZB5l/bpC1Pa vra7hh42rM7umu6BLukvf9fmy90G70GB+4dwD5LhtNTO6djRjPFkpKX/01oGU8Yu szI7957Tt5lBzECVsOkeJuAclI+Zsvk= -----END CERTIFICATE-----Generated at Thu Oct 23 13:13:39 2025 by rpki-client