$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft File: LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json) Hash identifier: yxfClAgrRy1TEP9cZp53jn3lZ1PI2EfN8Mvnz24T0I4= Subject key identifier: EF:E3:0D:33:2A:02:B8:5B:A9:CD:D9:06:AF:CF:C6:A1:66:49:40:B6 Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft Manifest number: 0104 Signing time: Mon 03 Nov 2025 05:03:36 +0000 Manifest this update: Mon 03 Nov 2025 05:03:35 +0000 Manifest next update: Mon 10 Nov 2025 05:03:35 +0000 Files and hashes: 1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: sbiD/IHxNACkWEd0FxB8c9d9RSk8CPRTLIbN5hJWxJ8=) 2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: tqUNG1S/rsB6bW3LBm3IsjWdqGyc7l/8ScuxBxWoVEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Validity Not Before: Nov 3 05:03:35 2025 GMT Not After : Nov 10 05:03:35 2025 GMT Subject: CN=690837a8-8986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:e2:76:e3:99:51:be:58:74:0c:82:41:3e: c1:c6:02:84:4a:69:14:d7:43:3e:56:e2:22:cc:2d: 97:cd:e7:8d:5e:05:b3:f0:35:d4:c2:b6:7c:8f:5f: 17:3b:ed:57:e5:0b:be:e7:dd:70:52:f3:9b:da:52: b4:cf:7e:d1:2f:c4:53:29:f2:ab:d6:00:8c:26:16: 41:0f:8d:57:66:59:4d:34:25:de:63:c8:92:91:42: 0a:90:82:39:6f:6b:28:0b:e4:86:01:fe:14:b0:e2: bf:8b:90:f6:45:f1:a3:71:ea:9c:03:41:18:76:37: 3e:34:a0:28:0f:44:92:d4:ab:3b:e8:40:6c:69:7a: db:d3:83:21:58:d7:b5:76:5c:8f:2b:71:99:c9:0b: c3:fd:5b:02:7e:83:13:93:b1:13:ba:e9:68:0f:fd: 7f:dc:82:c6:d0:0e:8e:72:02:e2:27:d7:77:6f:61: f6:34:0b:bb:f0:80:9a:3b:9d:48:08:0c:61:21:a7: f3:f0:10:e2:60:b5:08:78:e9:35:52:5f:b4:98:dc: 2b:f1:4f:86:16:95:fa:c6:d2:59:e9:d1:9c:aa:67: f0:ab:52:29:b1:04:87:30:cc:46:e8:c3:ed:36:31: 5a:3d:0b:0e:0f:1b:6f:c4:69:3c:44:8e:64:55:07: 70:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E3:0D:33:2A:02:B8:5B:A9:CD:D9:06:AF:CF:C6:A1:66:49:40:B6 X509v3 Authority Key Identifier: keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:21:fe:c4:82:ef:3f:94:1e:88:a6:5e:cc:f4:87:d9:39:e5: 1f:b9:e4:84:e7:c1:3d:61:83:eb:f5:8d:d0:8b:f2:3b:db:e9: f3:a9:aa:98:62:a8:0c:cf:31:ee:d1:7c:c7:39:75:57:0b:0f: 58:15:09:47:c6:11:31:77:e8:c7:31:97:17:f3:56:0d:8c:58: 3f:54:59:4e:51:00:ce:a5:a2:e4:27:67:98:aa:ba:57:ec:09: 88:2e:68:e6:41:aa:4c:80:a3:5e:41:89:a8:b8:9f:8d:bf:a3: 11:30:49:57:30:c5:b2:5d:45:60:18:b3:6f:d7:94:8b:00:ce: 93:30:e8:23:fa:87:ce:6c:4b:aa:3c:32:35:c4:97:5c:0a:68: a6:ea:6d:2c:f1:24:c2:14:b6:0e:03:75:ea:23:f5:71:a6:97: 2f:0c:87:8d:3a:a8:2d:17:50:b1:e0:fb:56:f4:34:de:70:5d: db:da:ba:09:c0:9e:c3:3f:9b:81:25:b6:5f:2d:d3:3e:b9:bf: 9e:c9:9d:90:2f:60:09:02:b7:20:bc:ae:3b:e7:05:21:b5:24: ad:f2:2e:2c:c9:ee:3d:70:14:61:44:e9:03:45:17:e9:cc:b8: a5:5b:b1:d4:e0:2a:c7:ca:be:08:9e:f2:e5:70:16:7b:48:2c: 81:f1:08:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM5REExMTAvBgNVBAUTKDJEMUUwRUE3N0FDQTNGRTU5N0RFRjMxOTYyMUVGNDBE MTJENEMxREMwHhcNMjUxMTAzMDUwMzM1WhcNMjUxMTEwMDUwMzM1WjAYMRYwFAYD VQQDEw02OTA4MzdhOC04OTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDXiduOZUb5YdAyCQT7BxgKESmkU10M+VuIizC2XzeeNXgWz8DXUwrZ8j18X O+1X5Qu+591wUvOb2lK0z37RL8RTKfKr1gCMJhZBD41XZllNNCXeY8iSkUIKkII5 b2soC+SGAf4UsOK/i5D2RfGjceqcA0EYdjc+NKAoD0SS1Ks76EBsaXrb04MhWNe1 dlyPK3GZyQvD/VsCfoMTk7ETuuloD/1/3ILG0A6OcgLiJ9d3b2H2NAu78ICaO51I CAxhIafz8BDiYLUIeOk1Ul+0mNwr8U+GFpX6xtJZ6dGcqmfwq1IpsQSHMMxG6MPt NjFaPQsODxtvxGk8RI5kVQdwbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/jDTMq Arhbqc3ZBq/PxqFmSUC2MB8GA1UdIwQYMBaAFC0eDqd6yj/ll97zGWIe9A0S1MHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzlEQS82Q0I5RDBBNjJG QUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1AtV1gzdk1aWWg3MERSTFV3 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xSNE9wM3JLUC1XWDN2TVpZaDcwRFJMVXdkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzlEQS82Q0I5RDBBNjJGQUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1At V1gzdk1aWWg3MERSTFV3ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiIf7Egu8/lB6Ipl7M9IfZOeUfueSE58E9YYPr9Y3Qi/I72+nzqaqY YqgMzzHu0XzHOXVXCw9YFQlHxhExd+jHMZcX81YNjFg/VFlOUQDOpaLkJ2eYqrpX 7AmILmjmQapMgKNeQYmouJ+Nv6MRMElXMMWyXUVgGLNv15SLAM6TMOgj+ofObEuq PDI1xJdcCmim6m0s8STCFLYOA3XqI/VxppcvDIeNOqgtF1Cx4PtW9DTecF3b2roJ wJ7DP5uBJbZfLdM+ub+eyZ2QL2AJArcgvK475wUhtSSt8i4sye49cBRhROkDRRfp zLilW7HU4CrHyr4InvLlcBZ7SCyB8Qh2 -----END CERTIFICATE-----Generated at Tue Nov 4 01:10:12 2025 by rpki-client