$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft File: LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json) Hash identifier: j+lZ5LRNwOkIx1c2kFcLcnsJ53W6Ok6Km2rHw6KNbTk= Subject key identifier: 02:5F:FB:FC:0E:FA:5A:2B:38:EC:9E:D5:52:76:E7:A6:A3:CF:A2:CD Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 Certificate issuer: /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Certificate serial: 0BE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft Manifest number: 0BDA Signing time: Tue 04 Nov 2025 19:00:26 +0000 Manifest this update: Tue 04 Nov 2025 19:00:26 +0000 Manifest next update: Tue 11 Nov 2025 19:00:26 +0000 Files and hashes: 1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: 5Ptz28qE7sKfhayfFMYXOdT/aGDoD1CFoen5fWXKsHc=) 2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: IpF3dE92/TbQ62Lm9/2a1/eIhWDEF6cu9VkkblkvmV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3044 (0xbe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EBB, serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Validity Not Before: Nov 4 19:00:26 2025 GMT Not After : Nov 11 19:00:26 2025 GMT Subject: CN=690a4d4a-08ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:53:26:97:53:a4:c4:19:34:58:a5:83:66:f7: 25:3d:8f:4e:18:8f:0e:09:57:f0:d3:81:de:bb:1c: ee:f7:1b:00:56:27:57:8a:f0:0c:9f:2e:df:5a:ce: dc:2a:9a:6d:ba:de:93:30:a6:88:e1:d6:ca:3a:47: 78:81:8d:95:da:73:55:bf:02:a7:7d:26:c7:e9:92: 9d:ff:2c:f8:34:c2:2c:c0:28:03:e7:45:fe:1a:b4: 47:f3:03:11:5b:2b:c2:ef:e6:a6:d5:6c:93:39:7f: f5:ff:7e:c0:b3:d5:2f:90:6b:21:80:55:53:18:ae: ac:1f:e3:3d:d9:5f:1a:6c:b6:b3:84:2d:e0:37:77: ae:c1:c1:93:78:35:3a:ef:23:14:cb:15:94:72:25: ab:6e:7c:9f:05:46:6e:c8:f9:e5:65:c2:de:47:49: 5e:2b:5a:48:84:13:e8:2f:46:4d:4c:ff:39:e5:b6: 88:74:01:c1:35:23:04:e9:ba:34:82:a1:b3:21:d1: 4b:50:1c:70:99:78:01:03:7d:86:1b:14:2b:a4:31: a3:cf:34:12:d9:a5:26:4d:7d:ef:ef:95:7a:b0:da: 9f:12:e8:54:e5:99:c4:27:c6:ec:0f:d3:6d:2d:f8: 02:ea:5d:4b:82:7c:d6:47:4c:86:30:9b:d9:c6:ea: 31:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5F:FB:FC:0E:FA:5A:2B:38:EC:9E:D5:52:76:E7:A6:A3:CF:A2:CD X509v3 Authority Key Identifier: keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:60:9d:53:54:cb:94:8c:ac:2d:d0:ed:d2:48:93:56:9b:d0: 4b:23:e9:79:26:e4:aa:1a:a3:48:cd:f0:dc:fe:c2:2f:93:c1: 44:a9:e4:ef:3b:93:4d:9c:8b:23:1f:4a:dd:11:a7:ac:89:54: a1:db:d5:5e:0a:52:3c:59:5b:e5:b4:ea:21:43:8e:1a:30:bb: f0:2a:4f:a9:13:9a:b0:f4:0a:45:7a:a1:ca:c3:83:3d:6a:7c: 30:1c:96:48:08:c8:fa:e2:52:b6:99:9a:73:df:c1:1a:96:c3: 21:29:35:db:21:d2:ad:e3:e2:a2:d3:aa:15:83:aa:b3:97:d8: a6:d2:c7:bc:87:79:af:a1:61:fa:af:db:ff:0d:6e:91:c0:d7: 4b:03:b9:2d:4c:72:f2:e1:c2:02:fc:9f:12:b9:ce:7e:3d:09: cf:7d:46:72:fe:cb:0f:1d:3d:4b:86:66:81:5f:9b:65:36:bc: bc:27:12:90:cb:12:1b:d8:20:fe:d0:67:13:b6:d6:05:da:6d: 6b:e9:82:da:a4:63:18:c6:91:77:ca:2d:ae:51:b0:1f:d8:66: 0b:20:09:23:06:d8:cc:52:1d:b1:00:fb:63:ad:cd:e6:97:c6: 5b:97:8a:35:45:d9:f0:61:5e:ca:0d:53:f1:ae:45:53:27:05: 82:d6:3a:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFQkIxMTAvBgNVBAUTKDJENjRGQTM0NzhDOTk0OTE3NjhFNjZFNkU5OTdFOUZB QTk1Q0EyRDMwHhcNMjUxMTA0MTkwMDI2WhcNMjUxMTExMTkwMDI2WjAYMRYwFAYD VQQDEw02OTBhNGQ0YS0wOGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+1Mml1OkxBk0WKWDZvclPY9OGI8OCVfw04Heuxzu9xsAVidXivAMny7fWs7c Kpptut6TMKaI4dbKOkd4gY2V2nNVvwKnfSbH6ZKd/yz4NMIswCgD50X+GrRH8wMR WyvC7+am1WyTOX/1/37As9UvkGshgFVTGK6sH+M92V8abLazhC3gN3euwcGTeDU6 7yMUyxWUciWrbnyfBUZuyPnlZcLeR0leK1pIhBPoL0ZNTP855baIdAHBNSME6bo0 gqGzIdFLUBxwmXgBA32GGxQrpDGjzzQS2aUmTX3v75V6sNqfEuhU5ZnEJ8bsD9Nt LfgC6l1LgnzWR0yGMJvZxuoxZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJf+/wO +lorOOye1VJ256ajz6LNMB8GA1UdIwQYMBaAFC1k+jR4yZSRdo5m5umX6fqpXKLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVCQi9GOTI2M0QxNjJC MDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxKRjJqbWJtNlpmcC1xbGNv dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXVDZOSGpKbEpGMmptYm02WmZwLXFsY290TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVCQi9GOTI2M0QxNjJCMDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxK RjJqbWJtNlpmcC1xbGNvdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcYJ1TVMuUjKwt0O3SSJNWm9BLI+l5JuSqGqNIzfDc/sIvk8FEqeTv O5NNnIsjH0rdEaesiVSh29VeClI8WVvltOohQ44aMLvwKk+pE5qw9ApFeqHKw4M9 anwwHJZICMj64lK2mZpz38EalsMhKTXbIdKt4+Ki06oVg6qzl9im0se8h3mvoWH6 r9v/DW6RwNdLA7ktTHLy4cIC/J8Suc5+PQnPfUZy/ssPHT1LhmaBX5tlNry8JxKQ yxIb2CD+0GcTttYF2m1r6YLapGMYxpF3yi2uUbAf2GYLIAkjBtjMUh2xAPtjrc3m l8Zbl4o1RdnwYV7KDVPxrkVTJwWC1jqT -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:12 2025 by rpki-client