$ rpki-client -vvf rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft File: lRKAntQ1o2QK-bdfCvspKNQWPDE.mft (raw, json) Hash identifier: TKaBHH9gG3HtJWFEyGP4ZPNOsipzpVItOUfw53UGH9M= Subject key identifier: 1E:6A:EE:72:B3:F1:56:4C:D0:C3:E7:63:BA:EF:6C:29:1B:9F:56:C7 Authority key identifier: 95:12:80:9E:D4:35:A3:64:0A:F9:B7:5F:0A:FB:29:28:D4:16:3C:31 Certificate issuer: /CN=A91B45C0/serialNumber=9512809ED435A3640AF9B75F0AFB2928D4163C31 Certificate serial: 1243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft Manifest number: 123E Signing time: Sun 02 Nov 2025 17:08:40 +0000 Manifest this update: Sun 02 Nov 2025 17:08:39 +0000 Manifest next update: Sun 09 Nov 2025 17:08:39 +0000 Files and hashes: 1: lRKAntQ1o2QK-bdfCvspKNQWPDE.crl (hash: a/VhU31Oy3LprKRW2ezCdE67dnBsZ9xaqLDx+d+to8k=) 2: 9995A38CFADC11EF87E86958C4F9AE02.roa (hash: lPLi48Hcf9N1auMQ0fWenp3rORwIoz4fywb8Qz85E7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.crl rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4675 (0x1243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B45C0, serialNumber=9512809ED435A3640AF9B75F0AFB2928D4163C31 Validity Not Before: Nov 2 17:08:39 2025 GMT Not After : Nov 9 17:08:39 2025 GMT Subject: CN=69079017-7d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7b:38:94:b2:be:5c:4f:5c:7d:b8:01:fe:d6: 94:8e:d8:5e:50:5e:dd:fa:e1:53:cc:4c:82:d3:f9: fe:d9:90:07:95:0a:5c:1d:68:14:6d:aa:48:3f:cd: 5d:57:89:c2:91:34:c5:be:2e:98:43:fa:fc:e9:03: b3:cb:0e:97:8c:21:eb:b3:fb:8a:73:a9:a1:80:25: 3e:b2:d8:14:50:9f:bc:81:66:be:d8:ad:64:23:f6: 1b:47:aa:09:58:8c:11:e5:5c:01:03:9e:f5:27:9c: dd:6d:20:ab:5e:38:48:b7:21:ae:6e:9e:23:8e:60: da:c1:36:0b:b3:e0:8d:f5:84:4c:29:16:bf:13:30: 38:4c:65:d9:00:87:b5:aa:8e:18:fd:76:e9:a1:72: e7:19:33:17:1e:5f:9d:14:04:fd:b3:2b:b4:b8:32: ca:73:35:da:0f:cf:7f:99:53:37:60:ab:61:5a:e1: 4a:58:b0:6f:23:db:41:1b:17:01:de:a1:70:c5:71: 6d:53:e9:aa:88:dd:75:35:72:4a:4d:f9:dd:50:9c: 4d:c0:49:f4:ca:09:eb:f8:0f:22:4b:b2:af:08:19: 9a:b1:ec:be:79:5c:a0:3f:80:54:26:19:1d:f4:39: 4c:9d:6f:f5:d8:db:c7:fd:49:58:b4:59:29:8f:6f: db:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6A:EE:72:B3:F1:56:4C:D0:C3:E7:63:BA:EF:6C:29:1B:9F:56:C7 X509v3 Authority Key Identifier: keyid:95:12:80:9E:D4:35:A3:64:0A:F9:B7:5F:0A:FB:29:28:D4:16:3C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:90:2d:10:34:22:c7:9a:fe:64:78:de:09:69:84:9d:72:4a: 45:a4:24:fc:15:f7:93:34:a6:3e:fe:fe:e0:99:02:b7:23:18: dd:c2:41:f7:d0:fb:0a:cd:9c:60:79:b8:3f:c5:ce:9f:d8:bb: d4:e8:34:33:17:12:69:d6:73:03:56:a6:09:5e:a5:04:de:58: a9:af:c8:21:89:3e:b4:3b:25:ef:bb:33:fb:93:a9:27:d5:cd: 54:af:03:be:09:4f:bf:aa:2c:68:f2:ed:5b:19:57:ea:56:5a: 55:09:a1:fe:a7:33:e4:8b:13:32:5d:f4:ef:7c:46:4f:56:9a: f2:07:e8:64:0b:94:6d:40:9c:73:bb:5c:73:b2:39:e0:a6:8f: 43:03:56:1b:67:2f:ac:2d:cd:d6:75:cc:c6:85:d0:25:9c:58: 07:5d:03:61:7c:3b:b7:41:07:3c:2c:4a:83:2e:bc:cb:2c:a7: 2d:db:be:78:b5:ef:b5:4f:0b:f9:d0:bd:61:57:3a:8d:66:af: 33:9b:aa:16:89:56:86:52:29:7e:72:63:a2:ff:7b:65:e8:d7: 3e:69:b2:e1:89:7e:c7:4e:da:42:f0:46:e7:c2:e8:49:58:15: 02:08:02:86:26:b4:fb:92:54:29:2d:ad:b8:87:10:fb:f2:44: 65:d3:a7:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ1QzAxMTAvBgNVBAUTKDk1MTI4MDlFRDQzNUEzNjQwQUY5Qjc1RjBBRkIyOTI4 RDQxNjNDMzEwHhcNMjUxMTAyMTcwODM5WhcNMjUxMTA5MTcwODM5WjAYMRYwFAYD VQQDEw02OTA3OTAxNy03ZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXs4lLK+XE9cfbgB/taUjtheUF7d+uFTzEyC0/n+2ZAHlQpcHWgUbapIP81d V4nCkTTFvi6YQ/r86QOzyw6XjCHrs/uKc6mhgCU+stgUUJ+8gWa+2K1kI/YbR6oJ WIwR5VwBA571J5zdbSCrXjhItyGubp4jjmDawTYLs+CN9YRMKRa/EzA4TGXZAIe1 qo4Y/XbpoXLnGTMXHl+dFAT9syu0uDLKczXaD89/mVM3YKthWuFKWLBvI9tBGxcB 3qFwxXFtU+mqiN11NXJKTfndUJxNwEn0ygnr+A8iS7KvCBmasey+eVygP4BUJhkd 9DlMnW/12NvH/UlYtFkpj2/bkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5q7nKz 8VZM0MPnY7rvbCkbn1bHMB8GA1UdIwQYMBaAFJUSgJ7UNaNkCvm3Xwr7KSjUFjwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDVDMC9CREVFNzI5QUU2 RDkxMUU4OEI4QkY3N0NDNEY5QUUwMi9sUktBbnRRMW8yUUstYmRmQ3ZzcEtOUVdQ REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0FudFExbzJRSy1iZGZDdnNwS05RV1BERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDVDMC9CREVFNzI5QUU2RDkxMUU4OEI4QkY3N0NDNEY5QUUwMi9sUktBbnRRMW8y UUstYmRmQ3ZzcEtOUVdQREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnkC0QNCLHmv5keN4JaYSdckpFpCT8FfeTNKY+/v7gmQK3IxjdwkH3 0PsKzZxgebg/xc6f2LvU6DQzFxJp1nMDVqYJXqUE3lipr8ghiT60OyXvuzP7k6kn 1c1UrwO+CU+/qixo8u1bGVfqVlpVCaH+pzPkixMyXfTvfEZPVpryB+hkC5RtQJxz u1xzsjngpo9DA1YbZy+sLc3WdczGhdAlnFgHXQNhfDu3QQc8LEqDLrzLLKct2754 te+1Twv50L1hVzqNZq8zm6oWiVaGUil+cmOi/3tl6Nc+abLhiX7HTtpC8EbnwuhJ WBUCCAKGJrT7klQpLa24hxD78kRl06cX -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:20 2025 by rpki-client