$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft File: LT4_u8fCsSzVNMi57TeG-2qlVQY.mft (raw, json) Hash identifier: hxK7sSQDrVt7VE8cNT4S25r+mlt8OWRji8NU9opov0Q= Subject key identifier: 7A:DE:C4:82:B3:01:43:65:52:9E:D9:02:B1:2B:CC:F0:34:27:69:2B Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06 Certificate issuer: /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft Manifest number: 4A Signing time: Fri 17 Oct 2025 11:03:28 +0000 Manifest this update: Fri 17 Oct 2025 11:03:27 +0000 Manifest next update: Fri 24 Oct 2025 11:03:27 +0000 Files and hashes: 1: LT4_u8fCsSzVNMi57TeG-2qlVQY.crl (hash: GiN2mazSFBqICPxBoeuSC7WbouospFFotrLIsGwJCpE=) 2: D055AA08480111F098A44B5CC4F9AE02.roa (hash: qhyVTwwEqxyTdaMk7ejochFJVyO6XKIlCbt0eSHtSs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506 Validity Not Before: Oct 17 11:03:27 2025 GMT Not After : Oct 24 11:03:27 2025 GMT Subject: CN=68f22280-19ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:3e:c5:2c:e3:e1:41:57:fe:6c:19:43:82: 15:94:e4:02:73:6c:3e:22:ff:84:31:82:c1:f3:b5: ee:92:16:3d:c3:ac:63:f5:3d:eb:6c:7a:da:8e:e1: 20:70:85:44:89:98:f4:e8:f5:42:da:a2:cb:61:ea: 5d:b8:9c:c0:82:88:2b:a4:cd:20:c2:d3:cb:a1:be: 72:f5:d7:ca:34:22:4f:84:77:92:de:d7:e5:08:c3: 66:41:83:34:10:39:ea:22:c9:10:89:98:88:b5:66: 0e:88:47:f4:47:86:c6:95:f2:93:cd:2e:1e:50:e0: d1:5e:15:7c:28:ac:40:6f:60:d1:da:a2:c2:54:75: bc:52:6e:d8:85:d9:b5:0c:e0:09:47:ef:8f:c8:83: 0f:b2:96:7a:48:96:ac:88:49:94:57:d9:5f:86:22: 56:d8:c2:c4:2d:d6:d3:f7:74:22:96:21:0c:f5:f8: 43:b2:7f:56:97:52:4c:44:4b:d0:5d:54:fa:5e:40: 9c:c9:27:c2:09:83:89:48:88:5e:43:a5:90:f0:9e: 5f:b4:49:c6:11:db:8c:16:cb:4e:9e:03:89:30:aa: 79:4a:97:77:7d:65:cf:ee:02:6c:b5:7f:b7:27:9e: 59:d8:73:56:14:2e:21:7f:e1:f8:50:04:86:fa:55: e4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DE:C4:82:B3:01:43:65:52:9E:D9:02:B1:2B:CC:F0:34:27:69:2B X509v3 Authority Key Identifier: keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:88:ef:a0:cc:8c:94:ad:50:12:58:62:16:af:72:6d:ab:11: 04:44:bf:87:41:01:4b:10:07:34:ca:34:a9:ab:cf:c5:53:d3: 73:74:bb:1e:fb:ad:26:02:38:05:5d:b0:48:6c:f1:bb:d5:e1: e8:ba:95:35:f7:98:b6:5b:09:4d:88:e4:26:d1:83:f8:f6:72: eb:1a:42:15:1f:77:b9:2c:b2:29:7c:e9:6d:0f:97:a5:ad:69: 1a:5d:ca:e0:7f:66:34:67:6a:1d:f8:a9:09:93:52:2f:7b:f9: 55:68:10:a8:02:35:74:28:0c:e2:6e:84:07:cc:31:78:37:2f: 45:e1:40:65:b0:d4:32:77:c8:af:57:fa:68:d2:20:16:b3:ea: b1:2c:56:43:1f:26:7c:2e:b1:9a:8a:f6:f2:5e:8b:0b:99:ec: 58:d2:24:28:69:3b:27:e5:c0:66:57:07:d8:17:f8:1a:29:db: 93:ea:11:d8:36:76:bb:53:17:8b:45:85:32:e2:39:66:ad:54: be:dd:5d:0b:a7:9b:3e:92:10:86:35:1e:4c:f9:c5:7a:c9:0d: 5c:c3:4b:35:f6:cb:56:9b:e6:f3:57:da:a6:82:bc:9d:b1:96: 01:8b:79:7e:ba:39:a5:c8:c6:75:b9:9b:fe:b0:b2:74:de:26: 1a:59:44:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0IzNjExMC8GA1UEBRMoMkQzRTNGQkJDN0MyQjEyQ0Q1MzRDOEI5RUQzNzg2RkI2 QUE1NTUwNjAeFw0yNTEwMTcxMTAzMjdaFw0yNTEwMjQxMTAzMjdaMBgxFjAUBgNV BAMTDTY4ZjIyMjgwLTE5ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7ED7FLOPhQVf+bBlDghWU5AJzbD4i/4QxgsHzte6SFj3DrGP1PetsetqO4SBw hUSJmPTo9ULaosth6l24nMCCiCukzSDC08uhvnL118o0Ik+Ed5Le1+UIw2ZBgzQQ OeoiyRCJmIi1Zg6IR/RHhsaV8pPNLh5Q4NFeFXworEBvYNHaosJUdbxSbtiF2bUM 4AlH74/Igw+ylnpIlqyISZRX2V+GIlbYwsQt1tP3dCKWIQz1+EOyf1aXUkxES9Bd VPpeQJzJJ8IJg4lIiF5DpZDwnl+0ScYR24wWy06eA4kwqnlKl3d9Zc/uAmy1f7cn nlnYc1YULiF/4fhQBIb6VeSdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUet7EgrMB Q2VSntkCsSvM8DQnaSswHwYDVR0jBBgwFoAULT4/u8fCsSzVNMi57TeG+2qlVQYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3QjM2LzZBMkNFODgyNDA4 RjExRjBCMzRBRUY0N0M0RjlBRTAyL0xUNF91OGZDc1N6Vk5NaTU3VGVHLTJxbFZR WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFQ0X3U4ZkNzU3pWTk1pNTdUZUctMnFsVlFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 QjM2LzZBMkNFODgyNDA4RjExRjBCMzRBRUY0N0M0RjlBRTAyL0xUNF91OGZDc1N6 Vk5NaTU3VGVHLTJxbFZRWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJmI76DMjJStUBJYYhavcm2rEQREv4dBAUsQBzTKNKmrz8VT03N0ux77 rSYCOAVdsEhs8bvV4ei6lTX3mLZbCU2I5CbRg/j2cusaQhUfd7kssil86W0Pl6Wt aRpdyuB/ZjRnah34qQmTUi97+VVoEKgCNXQoDOJuhAfMMXg3L0XhQGWw1DJ3yK9X +mjSIBaz6rEsVkMfJnwusZqK9vJeiwuZ7FjSJChpOyflwGZXB9gX+Bop25PqEdg2 drtTF4tFhTLiOWatVL7dXQunmz6SEIY1Hkz5xXrJDVzDSzX2y1ab5vNX2qaCvJ2x lgGLeX66OaXIxnW5m/6wsnTeJhpZRBs= -----END CERTIFICATE-----Generated at Sat Oct 18 23:39:01 2025 by rpki-client