$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json) Hash identifier: ArALk8omPnSiwYmP1Lu5h2UuN0Jjs/OEDe7+5UWaav4= Subject key identifier: F5:34:6B:99:FC:8F:94:A0:2A:C8:04:B7:65:29:94:0F:5F:3F:94:C7 Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Certificate serial: 0582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft Manifest number: 0546 Signing time: Thu 23 Oct 2025 00:44:06 +0000 Manifest this update: Thu 23 Oct 2025 00:44:06 +0000 Manifest next update: Thu 30 Oct 2025 00:44:06 +0000 Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: TOdOdJYXg336b4dm3/5dh+O2wb9/0NpCu5ny9r3ab70=) 2: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: khj0U83Oh0MV75Awop79+WdRP+WJETqec/zA5LVnzro=) 3: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: 2jfJLAfv4sSmTjn+t4R2DbosLO6LZGV4JERzq1/IuT0=) 4: F88F642285E411EEB951413BC4F9AE02.roa (hash: 5XS7gAJ1w57LGdHifEwdGpT41QuHVgx3tURmBIG/Ph0=) 5: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: ZVXIXb68LMeIyoHASYy5oVFyflHWdmoVD7FAYMUQOp4=) 6: BBDA9B429E6311ECA6EC8071C4F9AE02.roa (hash: WiSL38A4AfTZxujdbevnM0BHhlMtOQknr2QyeEfpbeg=) 7: 95C12B8E21A111EE8360C139C4F9AE02.roa (hash: ANarnw7th2betqTUJ1dSr/6kmM20Z4BPNu0RmkGVouY=) 8: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: H6lUECWs/LnmCnEJB/ye5BlXZoehdKlxdmR5+P/1VOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 00:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1410 (0x582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Validity Not Before: Oct 23 00:44:06 2025 GMT Not After : Oct 30 00:44:06 2025 GMT Subject: CN=68f97a56-913e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:57:b4:58:85:ca:78:4f:1a:08:64:67:77: 1d:21:6f:b9:ab:d3:11:e9:9a:d4:2b:fe:6c:40:c1: 7c:18:76:70:87:03:ae:fc:77:ec:b1:12:ac:8b:09: 6d:5f:7a:20:41:29:95:78:4e:7b:33:98:42:49:04: 1e:88:29:5e:ae:9a:74:38:52:54:2f:c8:47:cb:91: c4:26:20:89:c6:a0:e9:9d:ed:79:0a:6f:5c:6e:5c: 19:a9:3a:4d:77:2d:d0:14:6c:8a:a8:f1:05:83:e1: 0a:6a:ce:56:bc:15:5a:89:48:f1:96:3a:8d:ef:38: 40:ea:b1:23:7e:ab:f1:12:e6:d8:82:f0:98:2e:72: bf:7f:8e:e0:b8:e0:35:3d:0a:46:20:b1:94:31:f9: cc:69:b3:bd:20:9a:5d:bd:48:f0:0c:ef:5f:04:66: 89:35:ac:62:61:b2:71:90:a3:b9:b3:ab:a9:86:b4: 7e:54:ba:70:87:83:16:77:2e:b5:dc:01:11:64:25: 98:a5:3d:e5:c9:6f:84:b3:68:f0:c4:bc:64:28:ce: b9:c5:7c:90:94:69:90:b9:cb:cf:e3:ba:e0:4e:af: b4:f6:ef:48:50:2c:c3:f0:1a:25:4d:d3:b1:8e:7d: ca:1b:82:b8:08:e2:2e:db:8a:a2:ff:b9:85:68:99: 8f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:34:6B:99:FC:8F:94:A0:2A:C8:04:B7:65:29:94:0F:5F:3F:94:C7 X509v3 Authority Key Identifier: keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:84:9d:da:d3:df:f0:39:6d:a2:7b:ef:55:d1:46:be:63:88: 70:31:8a:e9:c1:b4:71:e5:f7:58:d7:64:1e:fc:da:b7:9a:51: d9:69:c8:75:3f:37:06:88:bf:fd:15:79:93:d6:c5:07:ba:26: e4:24:98:b2:67:5b:1b:97:f4:b7:3f:0b:e4:49:b2:da:1a:58: e0:f0:85:f3:a2:54:71:52:11:b0:f0:83:a2:cd:56:6b:5d:f3: dc:42:a8:91:48:13:60:3d:73:a8:4b:a9:5e:b2:07:7a:87:1e: 2a:0c:e2:65:93:3a:ba:bb:41:1a:92:67:a0:e0:fd:b4:4c:b6: 1e:2e:6c:bc:7c:2c:d7:24:b9:7e:40:7f:fa:88:bb:95:24:f7: 7c:f7:f5:03:25:8a:54:3d:f9:92:66:ae:89:c7:d2:d3:a7:54: bd:ec:13:3f:82:73:16:d7:2a:92:62:09:fd:a9:d9:d9:5a:a3: e0:e3:0a:32:d1:01:8b:a6:ac:8e:d3:f1:a8:0c:4b:af:73:00: 1a:d9:4d:f5:eb:aa:fe:28:f3:ca:b6:98:21:01:8b:de:16:c0: 06:bb:8a:9d:72:1e:3c:57:4b:91:3b:72:70:e9:74:cf:f8:fd: 7f:76:83:8d:67:ba:a8:1a:98:d6:63:98:a8:36:09:e9:b2:32: 83:9b:fb:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy MEM4RkQ1N0IwHhcNMjUxMDIzMDA0NDA2WhcNMjUxMDMwMDA0NDA2WjAYMRYwFAYD VQQDEw02OGY5N2E1Ni05MTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RlXtFiFynhPGghkZ3cdIW+5q9MR6ZrUK/5sQMF8GHZwhwOu/HfssRKsiwlt X3ogQSmVeE57M5hCSQQeiClerpp0OFJUL8hHy5HEJiCJxqDpne15Cm9cblwZqTpN dy3QFGyKqPEFg+EKas5WvBVaiUjxljqN7zhA6rEjfqvxEubYgvCYLnK/f47guOA1 PQpGILGUMfnMabO9IJpdvUjwDO9fBGaJNaxiYbJxkKO5s6uphrR+VLpwh4MWdy61 3AERZCWYpT3lyW+Es2jwxLxkKM65xXyQlGmQucvP47rgTq+09u9IUCzD8BolTdOx jn3KG4K4COIu24qi/7mFaJmPFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPU0a5n8 j5SgKsgEt2UplA9fP5THMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2 MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q3Mi80NTc2QTY3MjI2MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgy d0x0WS1TRVo1bGdneVAxWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBthJ3a09/wOW2ie+9V0Ua+Y4hwMYrpwbRx5fdY12Qe/Nq3mlHZach1 PzcGiL/9FXmT1sUHuibkJJiyZ1sbl/S3PwvkSbLaGljg8IXzolRxUhGw8IOizVZr XfPcQqiRSBNgPXOoS6lesgd6hx4qDOJlkzq6u0Eakmeg4P20TLYeLmy8fCzXJLl+ QH/6iLuVJPd89/UDJYpUPfmSZq6Jx9LTp1S97BM/gnMW1yqSYgn9qdnZWqPg4woy 0QGLpqyO0/GoDEuvcwAa2U3166r+KPPKtpghAYveFsAGu4qdch48V0uRO3Jw6XTP +P1/doONZ7qoGpjWY5ioNgnpsjKDm/tM -----END CERTIFICATE-----Generated at Fri Oct 24 06:38:25 2025 by rpki-client