$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft File: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft (raw, json) Hash identifier: TASnJTHe8kJ7WuNeSj/ioIFj/d2z+s0pQ4GHj823G/M= Subject key identifier: 79:9F:81:82:A3:AD:CF:7F:30:A8:1D:EA:C1:81:BF:2C:BC:B5:1A:43 Authority key identifier: 2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E Certificate issuer: /CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Certificate serial: 1930 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft Manifest number: 191B Signing time: Mon 20 Oct 2025 16:46:29 +0000 Manifest this update: Mon 20 Oct 2025 16:46:29 +0000 Manifest next update: Mon 27 Oct 2025 16:46:29 +0000 Files and hashes: 1: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl (hash: p0+tKwNleEc1h6qu7QN+Ns8MfwJrfj2aSBn67QQB68Y=) 2: 0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa (hash: psURfyPJMxxR2CGBpJlzsnwoEyc78Mv6OwXOUqaExNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6448 (0x1930) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9467, serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Validity Not Before: Oct 20 16:46:29 2025 GMT Not After : Oct 27 16:46:29 2025 GMT Subject: CN=68f66765-fb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ff:7d:2a:73:20:71:5b:80:60:5d:0f:72:b9: dc:94:81:f1:13:ae:c4:75:95:aa:6a:78:2c:2d:6e: 5b:83:4b:5f:42:3a:82:4c:32:fb:c0:fe:6c:48:07: 97:bd:ba:05:91:83:8c:75:05:ee:61:94:eb:cb:b5: 41:c8:a8:e2:2b:3b:89:29:13:5f:4d:a6:e1:3c:70: c8:db:d1:4c:c2:2a:15:27:b2:97:f4:9e:cf:d0:2d: 18:98:6f:c6:8b:b5:dd:27:b9:90:61:fe:58:a7:43: 40:ea:d6:bc:1a:5e:4c:67:6c:be:2e:d1:56:69:04: 0d:9f:62:21:a7:1c:4c:b7:59:3e:21:61:a5:f5:ba: ec:db:6f:4e:4e:5d:a1:d4:2a:7e:df:44:11:9c:71: 2e:fd:70:64:c8:bc:bb:88:a1:da:31:65:49:c8:1f: 77:c1:9e:e0:02:c0:8e:33:2d:ff:b0:87:dc:91:23: 6d:3d:4a:c5:ee:e1:96:bb:78:2b:17:2f:fa:cc:f8: e9:49:b9:ae:76:37:5a:85:aa:36:63:2d:a7:28:6f: ce:6e:a8:2a:a7:ef:a4:25:f7:c3:4b:13:31:b7:15: e6:36:ac:18:b6:11:a1:b7:5e:46:ed:89:57:bb:c3: 4e:01:3b:d4:13:d4:af:78:fc:84:e7:11:a6:9b:9e: f1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9F:81:82:A3:AD:CF:7F:30:A8:1D:EA:C1:81:BF:2C:BC:B5:1A:43 X509v3 Authority Key Identifier: keyid:2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:2d:1f:e1:ea:3e:30:61:f0:17:44:dd:c7:8e:c7:2f:cd:7e: 7b:09:7f:f7:a8:99:78:07:a1:7d:71:bc:a8:7d:57:c3:ef:a6: 2d:4d:8a:b4:08:03:a7:44:ca:96:73:34:64:47:56:4f:ad:90: 8c:5a:22:8e:a9:91:d5:1b:fe:e7:ce:2d:ea:ec:92:0e:9f:f9: 98:b7:ce:7a:6a:6e:14:45:d1:89:a5:9c:a7:6b:a4:6f:5a:25: 3a:95:80:8a:8f:a0:64:8f:d1:e3:20:21:ac:69:6c:80:0f:f0: 17:21:be:18:4d:54:1c:7b:fe:c7:66:80:2a:c3:1d:8e:09:1c: 49:b1:93:ee:ae:9e:84:9b:03:ef:94:f3:47:40:1d:4e:8e:11: f4:90:b3:77:69:8d:39:6a:dc:d8:11:cf:53:72:9c:cd:37:82: e3:3a:17:31:48:01:18:a6:7b:b9:3c:35:b0:97:77:5c:cb:f8: 28:01:36:4b:d7:b6:1a:4e:38:c0:ed:2d:4f:04:37:ac:df:d6: cc:6f:83:9b:36:9d:8b:d6:2b:43:c7:fc:d3:20:f4:a6:d4:a8: 0c:4d:e3:4a:70:3f:57:9f:4f:31:c0:78:52:75:1f:e1:39:f6: 5b:56:70:88:d0:ea:37:65:b1:9c:f4:c8:42:72:d6:d2:12:68: 8f:cd:b1:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk0NjcxMTAvBgNVBAUTKDJFMTY0REI0NUI4NDZCQkFFNjhDMjc3RDQzRjg4MkY2 NDA5MjI4MUUwHhcNMjUxMDIwMTY0NjI5WhcNMjUxMDI3MTY0NjI5WjAYMRYwFAYD VQQDEw02OGY2Njc2NS1mYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0f99KnMgcVuAYF0PcrnclIHxE67EdZWqangsLW5bg0tfQjqCTDL7wP5sSAeX vboFkYOMdQXuYZTry7VByKjiKzuJKRNfTabhPHDI29FMwioVJ7KX9J7P0C0YmG/G i7XdJ7mQYf5Yp0NA6ta8Gl5MZ2y+LtFWaQQNn2IhpxxMt1k+IWGl9brs229OTl2h 1Cp+30QRnHEu/XBkyLy7iKHaMWVJyB93wZ7gAsCOMy3/sIfckSNtPUrF7uGWu3gr Fy/6zPjpSbmudjdahao2Yy2nKG/Obqgqp++kJffDSxMxtxXmNqwYthGht15G7YlX u8NOATvUE9SvePyE5xGmm57xhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmfgYKj rc9/MKgd6sGBvyy8tRpDMB8GA1UdIwQYMBaAFC4WTbRbhGu65ownfUP4gvZAkige MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTQ2Ny85MTVDMDdFNjkx RUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3cm1qQ2Q5UV9pQzlrQ1NL QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xoWk50RnVFYTdybWpDZDlRX2lDOWtDU0tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTQ2Ny85MTVDMDdFNjkxRUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3 cm1qQ2Q5UV9pQzlrQ1NLQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmLR/h6j4wYfAXRN3HjscvzX57CX/3qJl4B6F9cbyofVfD76YtTYq0 CAOnRMqWczRkR1ZPrZCMWiKOqZHVG/7nzi3q7JIOn/mYt856am4URdGJpZyna6Rv WiU6lYCKj6Bkj9HjICGsaWyAD/AXIb4YTVQce/7HZoAqwx2OCRxJsZPurp6EmwPv lPNHQB1OjhH0kLN3aY05atzYEc9TcpzNN4LjOhcxSAEYpnu5PDWwl3dcy/goATZL 17YaTjjA7S1PBDes39bMb4ObNp2L1itDx/zTIPSm1KgMTeNKcD9Xn08xwHhSdR/h OfZbVnCI0Oo3ZbGc9MhCctbSEmiPzbHe -----END CERTIFICATE-----Generated at Wed Oct 22 18:38:06 2025 by rpki-client