$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json) Hash identifier: Qdr8FajIf6mesRAGqgr/ip6Cua5G8JXE5HoH6NA/Lww= Subject key identifier: C4:88:2A:98:92:FA:CE:7C:16:AB:6B:E1:B7:E5:6C:A5:A4:68:61:E6 Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Certificate serial: 0474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft Manifest number: 0469 Signing time: Sat 25 Oct 2025 03:11:45 +0000 Manifest this update: Sat 25 Oct 2025 03:11:45 +0000 Manifest next update: Sat 01 Nov 2025 03:11:45 +0000 Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: cIxzCyjB7VGJ4tEex0r7vNRBabeXB6lJSxQX7pIZVpY=) 2: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: tNJLz/05MhN+kNpDsEpSvyxEjiBHI8/Qy5MZGniM9So=) 3: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: PeSRHrlXLPWq0OR7M6KoyLAqMUZOAeVzYm1KrZ/ISG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 03:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1140 (0x474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABE54, serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Validity Not Before: Oct 25 03:11:45 2025 GMT Not After : Nov 1 03:11:45 2025 GMT Subject: CN=68fc3ff1-9491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6e:ec:b5:8b:26:82:e8:da:82:0a:8a:64:ba: f0:b3:8f:4f:9a:d0:d5:98:80:d9:2d:8e:e7:43:be: 56:51:b6:bd:cd:e9:7c:4d:23:a4:92:27:77:df:8c: b4:8c:87:98:f4:9b:a0:2d:43:f7:b6:90:31:f6:32: 72:04:e9:84:94:6b:d4:74:12:15:fb:8f:a4:ae:68: f6:ca:83:f4:1b:f9:e0:99:ca:be:ab:1e:b2:22:d7: f5:47:01:66:cf:9f:78:00:92:01:3b:73:6f:88:99: cc:f6:3b:3d:fb:df:10:54:ed:1f:b4:1e:15:35:3a: ce:25:a3:c3:33:00:fb:4b:38:0e:fd:2e:c9:52:2f: 40:65:5e:bb:00:b4:02:2a:71:64:8c:76:10:87:5b: 08:a7:54:e9:d4:ce:12:69:e6:e5:bc:1c:5d:63:38: fe:ef:6b:ce:d7:3d:45:2e:b8:02:9c:74:72:54:07: 2f:6b:70:51:44:e0:f1:9c:92:fa:c8:91:a6:13:43: db:4b:41:b8:fc:3b:65:4e:64:54:36:30:83:40:9d: 18:19:48:41:33:03:c4:a5:19:57:42:7c:77:4d:4d: ad:16:1c:e8:ad:4d:ba:40:e0:2f:d1:30:d1:87:7f: 13:3d:0b:90:ea:ee:72:13:9b:4c:33:df:48:cc:20: 4b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:88:2A:98:92:FA:CE:7C:16:AB:6B:E1:B7:E5:6C:A5:A4:68:61:E6 X509v3 Authority Key Identifier: keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:5e:76:87:15:91:5a:0f:4e:69:20:2b:09:4c:63:41:f1:18: 71:13:a4:a8:e8:78:aa:4b:68:a2:ec:d9:3e:47:47:b4:31:7e: 42:e8:c6:c2:95:2f:32:4c:3f:46:39:0f:f8:c2:11:9f:8b:9b: cb:7b:74:73:d4:71:35:6d:94:f7:af:74:c9:c8:1c:15:c2:4f: 42:17:95:9c:09:cb:54:14:da:eb:0e:56:d4:e6:85:71:81:99: 82:47:45:0c:e7:e9:0b:1e:f8:41:7c:90:a9:2d:76:70:c3:ce: c9:3b:ae:32:e8:40:d3:6f:a4:f7:2f:da:39:bd:8f:56:91:42: 63:5c:0f:13:9b:24:da:57:68:03:fd:14:bc:60:91:7e:ac:c6: 2d:77:dc:46:17:bb:84:aa:78:bd:34:32:3c:e3:e0:bd:f8:a4: cc:2c:bd:84:00:d8:e6:22:e1:7c:74:b5:c1:dd:dd:f9:fe:3f: ba:88:44:62:38:6e:22:68:79:0d:42:01:a2:2b:b2:ed:7a:77: f3:e0:50:53:82:1a:cd:78:5a:21:5e:e2:d7:d8:e2:8e:0a:bb: 96:f3:e5:c5:8a:32:c4:f7:83:98:ab:75:7e:cd:03:59:81:a5: ac:10:13:74:8c:a8:1f:13:67:73:a4:11:62:aa:dd:be:9c:ac: df:aa:b1:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFNTQxMTAvBgNVBAUTKDJEN0NFOTRGMTNEODJFNTRGODM0MjNDNjFFQjk2MzNB Rjk0MDU5MjQwHhcNMjUxMDI1MDMxMTQ1WhcNMjUxMTAxMDMxMTQ1WjAYMRYwFAYD VQQDEw02OGZjM2ZmMS05NDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0W7stYsmgujaggqKZLrws49PmtDVmIDZLY7nQ75WUba9zel8TSOkkid334y0 jIeY9JugLUP3tpAx9jJyBOmElGvUdBIV+4+krmj2yoP0G/ngmcq+qx6yItf1RwFm z594AJIBO3NviJnM9js9+98QVO0ftB4VNTrOJaPDMwD7SzgO/S7JUi9AZV67ALQC KnFkjHYQh1sIp1Tp1M4SaeblvBxdYzj+72vO1z1FLrgCnHRyVAcva3BRRODxnJL6 yJGmE0PbS0G4/DtlTmRUNjCDQJ0YGUhBMwPEpRlXQnx3TU2tFhzorU26QOAv0TDR h38TPQuQ6u5yE5tMM99IzCBL3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSIKpiS +s58Fqtr4bflbKWkaGHmMB8GA1UdIwQYMBaAFC186U8T2C5U+DQjxh65Yzr5QFkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkU1NC9BNUMxNTBBQzY4 RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxsVDROQ1BHSHJsak92bEFX U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYenBUeFBZTGxUNE5DUEdIcmxqT3ZsQVdTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkU1NC9BNUMxNTBBQzY4RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxs VDROQ1BHSHJsak92bEFXU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwXnaHFZFaD05pICsJTGNB8RhxE6So6HiqS2ii7Nk+R0e0MX5C6MbC lS8yTD9GOQ/4whGfi5vLe3Rz1HE1bZT3r3TJyBwVwk9CF5WcCctUFNrrDlbU5oVx gZmCR0UM5+kLHvhBfJCpLXZww87JO64y6EDTb6T3L9o5vY9WkUJjXA8TmyTaV2gD /RS8YJF+rMYtd9xGF7uEqni9NDI84+C9+KTMLL2EANjmIuF8dLXB3d35/j+6iERi OG4iaHkNQgGiK7Ltenfz4FBTghrNeFohXuLX2OKOCruW8+XFijLE94OYq3V+zQNZ gaWsEBN0jKgfE2dzpBFiqt2+nKzfqrFm -----END CERTIFICATE-----Generated at Sat Oct 25 17:39:51 2025 by rpki-client