$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft File: Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json) Hash identifier: r8gR95islVd5UIE9jKNPAp62rySgohrPCyuOub4IA6M= Subject key identifier: 8D:7D:8F:2D:39:F2:24:40:CB:59:B4:DF:9E:D7:43:52:6A:CC:1C:7E Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2 Certificate issuer: /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2 Certificate serial: 073E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft Manifest number: 072E Signing time: Sun 02 Nov 2025 21:48:12 +0000 Manifest this update: Sun 02 Nov 2025 21:48:11 +0000 Manifest next update: Sun 09 Nov 2025 21:48:11 +0000 Files and hashes: 1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: 7RsZvbcudmIfgRuFEG5nReTbsRiz3+jxGntshWvsDi0=) 2: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: bT1Rk+hMyaHE50wfZv9GsZYDS5zMvSQ3DNQUIYRD7j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1854 (0x73e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2 Validity Not Before: Nov 2 21:48:11 2025 GMT Not After : Nov 9 21:48:11 2025 GMT Subject: CN=6907d19b-ead6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:41:d7:85:06:d3:f8:93:9c:7d:bd:85:c4:e8: 03:d6:8d:0a:ca:66:2b:61:52:d9:30:13:68:23:bc: 00:b1:ef:76:39:82:9b:96:1e:46:84:50:e4:26:40: 21:d6:f1:73:bd:b5:5f:ba:f5:d8:89:76:b3:24:f4: eb:98:87:6f:71:1a:9f:fd:84:3f:ca:37:b7:a3:1b: 29:b1:ec:cc:fe:0a:3e:5c:46:d1:9b:4d:78:04:4c: bc:83:59:6a:b4:31:30:16:89:3d:65:e4:fb:74:b4: c5:fa:df:15:75:34:e2:bb:20:51:12:3f:fb:12:0f: 1b:f0:5b:8d:a8:98:f4:65:d4:ae:aa:71:79:1c:88: fb:27:e6:a0:b0:22:86:9f:ba:d6:33:48:bb:4e:f4: f1:4e:42:4b:25:cc:27:4e:83:2b:e4:c8:9d:a2:dc: 99:f4:6a:9b:2f:38:82:4c:13:68:c1:42:cf:6a:9b: 54:9f:20:f0:8e:fc:66:9f:9a:1a:d4:c9:53:00:17: 7c:81:5d:26:fd:cf:d9:a5:62:d6:cc:39:a9:3a:59: 45:a6:ec:b8:3a:97:e4:38:ec:ee:54:42:aa:9c:ab: 0b:15:37:ea:85:73:f8:d8:a8:b9:10:95:b8:33:f6: c4:4e:5b:91:fa:70:d0:81:0b:dc:37:06:8e:77:c4: 13:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7D:8F:2D:39:F2:24:40:CB:59:B4:DF:9E:D7:43:52:6A:CC:1C:7E X509v3 Authority Key Identifier: keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f7:90:a4:9b:65:8b:60:dc:15:70:3d:3e:f8:ff:85:22:7a: ba:67:f4:d5:5f:f7:7e:59:f0:eb:ba:9d:c0:7f:20:3f:e5:1e: d5:74:c8:af:6e:c1:8c:21:dc:a3:bb:19:e5:7c:ba:07:4b:c5: 1c:1f:fc:2e:0d:b7:ae:dd:16:8a:69:93:ec:cc:1e:bc:8e:7d: 5d:37:53:89:cc:34:c3:5c:6e:63:f6:4d:5f:ff:ae:49:3f:b5: 4b:c4:7a:d8:2e:89:ee:d1:9d:59:b8:4d:75:1f:65:88:c0:48: 05:8c:ce:cd:9a:c9:b2:d9:87:49:f5:21:1a:3e:16:e7:d6:60: fe:91:d7:e1:10:34:b6:a5:2c:8c:c8:74:8d:ec:1f:c8:29:ee: 18:f3:0d:9b:71:30:d7:62:85:9e:99:f2:57:28:3d:2e:39:76: 04:64:65:6a:3c:b1:c2:19:8f:bb:21:76:5e:49:73:3c:42:71: 93:fa:df:9a:a6:48:ad:36:54:78:31:08:fd:50:18:6b:9e:ec: 34:63:84:c9:84:9e:0b:51:43:61:31:55:70:81:7f:07:04:c7: 93:4f:e2:dd:3f:34:79:72:e7:d2:e3:70:88:62:7e:84:34:3a: 79:8a:cd:4c:ce:e9:3f:1d:ac:c8:04:09:59:4b:6b:c5:f1:73: c3:9f:45:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBODUxMTAvBgNVBAUTKDJFQUY2MDA5NTMzNEU3RjBCQUEwNjVBOTJGNjUzRjVD NzQ0ODk1QzIwHhcNMjUxMTAyMjE0ODExWhcNMjUxMTA5MjE0ODExWjAYMRYwFAYD VQQDEw02OTA3ZDE5Yi1lYWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEHXhQbT+JOcfb2FxOgD1o0KymYrYVLZMBNoI7wAse92OYKblh5GhFDkJkAh 1vFzvbVfuvXYiXazJPTrmIdvcRqf/YQ/yje3oxspsezM/go+XEbRm014BEy8g1lq tDEwFok9ZeT7dLTF+t8VdTTiuyBREj/7Eg8b8FuNqJj0ZdSuqnF5HIj7J+agsCKG n7rWM0i7TvTxTkJLJcwnToMr5MidotyZ9GqbLziCTBNowULPaptUnyDwjvxmn5oa 1MlTABd8gV0m/c/ZpWLWzDmpOllFpuy4OpfkOOzuVEKqnKsLFTfqhXP42Ki5EJW4 M/bETluR+nDQgQvcNwaOd8QTCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI19jy05 8iRAy1m0357XQ1JqzBx+MB8GA1UdIwQYMBaAFC6vYAlTNOfwuqBlqS9lP1x0SJXC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE4NS81NzM3OTJDQTU2 MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVfQzZvR1dwTDJVX1hIUkls Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxOWdDVk0wNV9DNm9HV3BMMlVfWEhSSWxjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE4NS81NzM3OTJDQTU2MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVf QzZvR1dwTDJVX1hIUklsY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl95Ckm2WLYNwVcD0++P+FInq6Z/TVX/d+WfDrup3AfyA/5R7VdMiv bsGMIdyjuxnlfLoHS8UcH/wuDbeu3RaKaZPszB68jn1dN1OJzDTDXG5j9k1f/65J P7VLxHrYLonu0Z1ZuE11H2WIwEgFjM7Nmsmy2YdJ9SEaPhbn1mD+kdfhEDS2pSyM yHSN7B/IKe4Y8w2bcTDXYoWemfJXKD0uOXYEZGVqPLHCGY+7IXZeSXM8QnGT+t+a pkitNlR4MQj9UBhrnuw0Y4TJhJ4LUUNhMVVwgX8HBMeTT+LdPzR5cufS43CIYn6E NDp5is1Mzuk/HazIBAlZS2vF8XPDn0WA -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:20 2025 by rpki-client