$ rpki-client -vvf rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft File: ld96gQDZeVNoc6wP-Z9uRyhSupk.mft (raw, json) Hash identifier: 66Ql718Jg9TfdzxGZlnPq2REKpogZDvx0mAUJKWiy+k= Subject key identifier: 1B:CF:65:FC:E7:74:47:41:9F:1B:CE:E1:1E:96:F6:95:CD:3F:BC:F8 Authority key identifier: 95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99 Certificate issuer: /CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99 Certificate serial: 0759 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft Manifest number: 0753 Signing time: Tue 04 Nov 2025 21:46:39 +0000 Manifest this update: Tue 04 Nov 2025 21:46:39 +0000 Manifest next update: Tue 11 Nov 2025 21:46:39 +0000 Files and hashes: 1: ld96gQDZeVNoc6wP-Z9uRyhSupk.crl (hash: n+rTcoVBErqiD7x60SRY/wmJiKqxf8Yu+SWiJFL9gEA=) 2: 02DAC07852C611ED845AB22BC4F9AE02.roa (hash: qvspaedVSxXhNT9OPfm4dmWtO2TlaRcmc3pC2Y/603Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881 (0x759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91987D0, serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99 Validity Not Before: Nov 4 21:46:39 2025 GMT Not After : Nov 11 21:46:39 2025 GMT Subject: CN=690a743f-8d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4d:28:ba:92:50:5a:98:c0:f1:93:55:44:c4: 7f:df:d2:5b:41:50:a0:d7:2d:11:1b:db:80:3f:06: 8f:f5:07:ad:71:c0:88:34:a9:17:29:a2:c8:fb:88: 41:2f:ab:0d:e0:31:16:61:e7:5a:9f:9f:5c:dd:ec: db:16:e9:44:70:e8:07:3d:7f:3a:6a:ac:22:8a:bf: ca:13:00:48:8c:96:de:f8:eb:a1:5e:9c:bd:8f:ec: 66:96:08:d2:20:6f:df:93:74:2e:38:c8:67:3f:ce: 67:ee:75:14:80:c6:75:d4:fd:3f:b4:d7:f0:04:e6: e4:0b:6b:ed:32:36:c1:4c:87:6a:d5:69:40:91:c4: 34:dc:fd:9a:b8:64:ed:b0:c3:97:83:cb:fc:e0:b5: ee:80:92:8a:82:64:08:77:48:02:11:73:84:17:1a: 71:70:54:5a:26:64:55:0d:13:e9:82:21:a7:62:5f: 19:2a:3c:3b:cd:69:c0:9e:b3:a4:6c:72:f0:b8:49: 87:ca:b1:fa:bf:15:d4:f4:4e:18:39:2a:0b:32:ae: cf:76:f1:c8:12:99:fb:e1:04:25:78:28:48:df:c7: 98:17:b9:0b:cd:ff:e4:a2:cc:ef:81:65:d6:9e:e8: 34:6f:79:ab:32:e5:21:18:f7:cb:f5:28:60:1c:c5: ec:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CF:65:FC:E7:74:47:41:9F:1B:CE:E1:1E:96:F6:95:CD:3F:BC:F8 X509v3 Authority Key Identifier: keyid:95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:99:b0:42:f1:a7:d3:c1:9c:94:48:2a:f0:16:01:a9:b2:6d: 7d:49:7f:43:cb:ff:90:70:5c:b1:e0:d0:78:00:9f:f2:0a:32: f7:8f:15:3f:0a:73:82:bb:49:b9:51:a4:db:12:aa:28:37:f4: 67:0c:09:93:57:00:ab:db:cc:39:1f:0b:28:9c:b3:5d:29:a1: 3c:ab:f8:1a:1f:3b:80:03:52:cb:5e:1c:d3:f0:b4:41:9c:73: f4:71:e8:81:27:9f:5a:2c:4d:b4:74:de:c2:f0:26:b8:cd:f1: 40:d0:29:7d:55:8e:c0:8e:e9:2a:73:06:e5:47:13:0e:87:3e: 14:35:54:f1:3f:48:ad:4e:0e:a2:3a:db:7a:28:7b:2a:d9:ab: 21:b1:53:c1:bc:d1:33:af:35:fd:7c:63:2e:64:54:80:54:05: 59:85:89:9c:fc:86:fd:31:68:39:c1:91:ce:ae:e3:41:2e:e2: 69:e7:d7:b8:4b:00:e2:08:af:d2:eb:0d:27:9a:b9:d9:09:ed: 14:42:64:33:45:8e:35:2f:48:5d:17:78:0a:54:6f:76:07:4b: 53:eb:58:08:dc:ba:8f:1b:1e:95:9b:53:44:80:18:79:56:a8: d2:c7:f4:66:d0:b7:52:39:3b:1f:65:d7:df:ef:8b:b8:61:5a: 1d:0e:82:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3RDAxMTAvBgNVBAUTKDk1REY3QTgxMDBEOTc5NTM2ODczQUMwRkY5OUY2RTQ3 Mjg1MkJBOTkwHhcNMjUxMTA0MjE0NjM5WhcNMjUxMTExMjE0NjM5WjAYMRYwFAYD VQQDEw02OTBhNzQzZi04ZDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2k0oupJQWpjA8ZNVRMR/39JbQVCg1y0RG9uAPwaP9QetccCINKkXKaLI+4hB L6sN4DEWYedan59c3ezbFulEcOgHPX86aqwiir/KEwBIjJbe+OuhXpy9j+xmlgjS IG/fk3QuOMhnP85n7nUUgMZ11P0/tNfwBObkC2vtMjbBTIdq1WlAkcQ03P2auGTt sMOXg8v84LXugJKKgmQId0gCEXOEFxpxcFRaJmRVDRPpgiGnYl8ZKjw7zWnAnrOk bHLwuEmHyrH6vxXU9E4YOSoLMq7PdvHIEpn74QQleChI38eYF7kLzf/koszvgWXW nug0b3mrMuUhGPfL9ShgHMXs+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvPZfzn dEdBnxvO4R6W9pXNP7z4MB8GA1UdIwQYMBaAFJXfeoEA2XlTaHOsD/mfbkcoUrqZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODdEMC8xOEVCMDc1MjQy QkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVWTm9jNndQLVo5dVJ5aFN1 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkOTZnUURaZVZOb2M2d1AtWjl1UnloU3Vway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODdEMC8xOEVCMDc1MjQyQkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVW Tm9jNndQLVo5dVJ5aFN1cGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRmbBC8afTwZyUSCrwFgGpsm19SX9Dy/+QcFyx4NB4AJ/yCjL3jxU/ CnOCu0m5UaTbEqooN/RnDAmTVwCr28w5HwsonLNdKaE8q/gaHzuAA1LLXhzT8LRB nHP0ceiBJ59aLE20dN7C8Ca4zfFA0Cl9VY7AjukqcwblRxMOhz4UNVTxP0itTg6i Ott6KHsq2ashsVPBvNEzrzX9fGMuZFSAVAVZhYmc/Ib9MWg5wZHOruNBLuJp59e4 SwDiCK/S6w0nmrnZCe0UQmQzRY41L0hdF3gKVG92B0tT61gI3LqPGx6Vm1NEgBh5 VqjSx/Rm0LdSOTsfZdff74u4YVodDoK5 -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:40 2025 by rpki-client