$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft File: -luvRrfLLI40Y4OqgMs5ayuBxkw.mft (raw, json) Hash identifier: NYUxFlytD6I+R2uTaZoNxRqLROT70aEmJB0dmuWPZKo= Subject key identifier: BD:6E:58:08:79:69:64:BA:86:E6:23:5D:E5:E6:28:60:7D:6E:85:8F Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C Certificate issuer: /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft Manifest number: 0C Signing time: Mon 03 Nov 2025 08:00:39 +0000 Manifest this update: Mon 03 Nov 2025 08:00:38 +0000 Manifest next update: Mon 10 Nov 2025 08:00:38 +0000 Files and hashes: 1: -luvRrfLLI40Y4OqgMs5ayuBxkw.crl (hash: bnijRFKSober4mstd0anllCcG+EQRt3dTekPSlJVM74=) 2: 8E0D20ECB1B311F0A071761BC4F9AE02.roa (hash: YtfROgSWBrfkxktYw4AsohoBZDFK8Vmr6u2SbXT1iLw=) 3: 753E1B20B1B311F0BD0C0785C4F9AE02.roa (hash: ZEgQ8tbj5F35NBxvxNkrasJNkBRbUBDhID22q1DgVs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C Validity Not Before: Nov 3 08:00:38 2025 GMT Not After : Nov 10 08:00:38 2025 GMT Subject: CN=69086127-58c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:ba:a0:b8:04:c5:d5:2d:fb:ed:24:a6:7d: 2f:c5:81:f5:1c:74:9b:ea:6c:ed:73:c1:2c:64:f4: ee:12:2b:96:32:95:c1:0a:f4:dd:ed:58:d5:ee:21: 2b:a0:5d:18:2a:b1:b7:94:1f:bc:70:88:91:42:aa: 6b:17:e2:d8:7f:3d:d3:68:87:c5:0c:3e:7f:f9:d2: 35:70:aa:68:74:bb:57:e5:f1:ed:93:24:f5:b9:24: 2f:3e:3c:b7:6e:15:75:9f:4e:47:f8:04:18:e8:d8: a6:ba:72:65:fe:a2:ea:82:4d:41:ab:a3:e6:a2:2f: 3f:28:3b:1c:af:31:d5:5f:b8:b7:c7:11:68:d5:72: a3:85:85:fa:3b:da:17:b7:81:57:79:26:9b:a2:2f: 22:f1:a4:d4:8f:5a:1b:a4:79:03:75:10:36:6e:16: e8:e5:81:4a:94:d5:29:94:f8:48:7e:10:e7:bf:ac: 5d:b0:97:fc:16:5b:3d:a3:be:e3:5a:ad:59:3c:c2: 53:7f:2b:38:1b:12:33:5c:cf:33:83:0b:fc:78:ad: f7:85:83:ff:e5:13:c4:b1:aa:0e:f5:85:27:37:46: f4:ed:83:8e:85:3b:f0:bf:27:e1:d5:e8:f4:97:64: 2f:0f:23:08:c6:10:d3:d4:86:4d:d2:c3:0d:6a:d2: 96:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6E:58:08:79:69:64:BA:86:E6:23:5D:E5:E6:28:60:7D:6E:85:8F X509v3 Authority Key Identifier: keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ef:44:ac:0b:6e:83:99:de:fc:e9:7e:87:bd:96:8d:34:41: 22:8e:5e:35:a3:51:35:d0:6f:57:a2:e3:5e:c6:ce:83:be:27: b8:15:a4:a0:30:27:27:da:2e:1a:29:c1:ab:71:87:ce:09:89: 54:1c:4c:aa:e3:d9:d2:d9:39:93:b5:07:42:44:60:da:14:97: 87:65:cf:7e:dd:52:37:fb:53:8f:5d:e7:d0:83:22:59:0e:fd: 76:ef:bb:c7:07:fc:97:6d:33:bb:d1:b1:68:ed:d5:94:59:6f: 6d:d2:d6:e2:15:6f:d5:00:a4:9f:9c:a0:32:04:23:c2:a0:03: 51:19:73:a2:64:4b:08:ab:76:0b:dd:ba:e2:28:0e:43:dc:f5: 03:9e:ef:05:77:3f:1b:09:d5:9d:ee:73:9e:12:9c:4b:ec:f7: 7a:8f:16:84:9d:82:26:94:8f:01:68:e2:d6:44:e0:8f:24:c8: 79:e9:7d:08:b1:e7:36:f6:f5:e1:23:3d:e1:c8:5b:80:c7:f0: a5:02:ef:43:b2:f4:ea:de:ba:bd:7c:60:94:62:83:a9:9a:51: db:d4:6a:0e:aa:79:ac:60:6f:84:3a:bd:ae:92:e6:49:e6:dc: f8:b1:56:fb:0a:b4:29:5b:49:6a:82:c2:8a:fa:58:59:41:a7: 16:f2:b2:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MjlENzExMC8GA1UEBRMoRkE1QkFGNDZCN0NCMkM4RTM0NjM4M0FBODBDQjM5NkIy QjgxQzY0QzAeFw0yNTExMDMwODAwMzhaFw0yNTExMTAwODAwMzhaMBgxFjAUBgNV BAMTDTY5MDg2MTI3LTU4YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7s7qguATF1S377SSmfS/FgfUcdJvqbO1zwSxk9O4SK5YylcEK9N3tWNXuISug XRgqsbeUH7xwiJFCqmsX4th/PdNoh8UMPn/50jVwqmh0u1fl8e2TJPW5JC8+PLdu FXWfTkf4BBjo2Ka6cmX+ouqCTUGro+aiLz8oOxyvMdVfuLfHEWjVcqOFhfo72he3 gVd5JpuiLyLxpNSPWhukeQN1EDZuFujlgUqU1SmU+Eh+EOe/rF2wl/wWWz2jvuNa rVk8wlN/KzgbEjNczzODC/x4rfeFg//lE8Sxqg71hSc3RvTtg46FO/C/J+HV6PSX ZC8PIwjGENPUhk3Sww1q0pZpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvW5YCHlp ZLqG5iNd5eYoYH1uhY8wHwYDVR0jBBgwFoAU+luvRrfLLI40Y4OqgMs5ayuBxkww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOUQ3L0YyM0M0REYyQUQ3 MzExRjBBRjY1MDI1NEM0RjlBRTAyLy1sdXZScmZMTEk0MFk0T3FnTXM1YXl1Qnhr dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLWx1dlJyZkxMSTQwWTRPcWdNczVheXVCeGt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy OUQ3L0YyM0M0REYyQUQ3MzExRjBBRjY1MDI1NEM0RjlBRTAyLy1sdXZScmZMTEk0 MFk0T3FnTXM1YXl1Qnhrdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD/vRKwLboOZ3vzpfoe9lo00QSKOXjWjUTXQb1ei417GzoO+J7gVpKAw JyfaLhopwatxh84JiVQcTKrj2dLZOZO1B0JEYNoUl4dlz37dUjf7U49d59CDIlkO /Xbvu8cH/JdtM7vRsWjt1ZRZb23S1uIVb9UApJ+coDIEI8KgA1EZc6JkSwirdgvd uuIoDkPc9QOe7wV3PxsJ1Z3uc54SnEvs93qPFoSdgiaUjwFo4tZE4I8kyHnpfQix 5zb29eEjPeHIW4DH8KUC70Oy9Oreur18YJRig6maUdvUag6qeaxgb4Q6va6S5knm 3PixVvsKtClbSWqCwor6WFlBpxbyskw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:10:29 2025 by rpki-client