$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: tbw1NCSA97I/I/10mGLUTaeCknive5UKog9fndw5Sh4= Subject key identifier: 29:DA:E9:9D:80:E4:D5:EB:CA:05:44:5B:0C:8D:ED:D2:17:4E:88:94 Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: FC Signing time: Wed 05 Nov 2025 05:18:19 +0000 Manifest this update: Wed 05 Nov 2025 05:18:18 +0000 Manifest next update: Wed 12 Nov 2025 05:18:18 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: NQPzlvyxo4Y3nMdzmeJyzgE7o1RFAwnYGLqMXTroCPs=) 2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: XWY3Z0PrjeVbgUGRkkonKlE66Ol3xZjgkZ/1G2BNmmU=) 3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: clF6JNb3xxwZ4+TvE/qZQW2JPLeVEQfwTMXzv7FMnBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Nov 5 05:18:18 2025 GMT Not After : Nov 12 05:18:18 2025 GMT Subject: CN=690ade1a-442b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:29:e6:37:45:3c:82:95:99:bb:24:b6:6c:a9: 53:37:eb:e5:35:71:fe:3b:3d:e7:5d:6a:e9:30:e4: e2:99:13:52:b1:1c:8f:b6:ec:31:2d:3c:38:ed:02: f9:68:a9:63:c7:7f:69:f7:d6:8d:c3:b9:fd:99:da: b8:a8:54:87:a3:5f:90:01:77:5d:09:ab:79:17:8c: fe:d6:31:c1:b1:fb:0e:b1:9e:fd:a4:82:3b:a7:61: 11:d1:72:cd:95:96:b1:1b:c6:40:23:16:b8:d5:d4: bd:c0:49:fe:f7:ca:1d:ad:62:f0:e7:89:33:3c:23: c9:d4:44:b4:cd:e1:e3:96:57:31:f6:1d:3e:c1:aa: f3:b2:48:3c:0d:e4:3e:71:af:97:75:32:6d:7d:94: ea:80:f1:63:d4:ba:18:12:b9:2f:49:61:da:a0:dd: 00:d0:3b:2f:1f:21:54:50:84:cc:de:21:12:ba:f4: e4:70:e3:2a:96:60:e7:7a:94:9f:ff:c5:eb:65:e2: 7a:61:5b:28:ca:15:55:44:ec:43:db:11:a0:08:f5: d7:53:b3:19:c7:1e:41:25:dc:d5:71:eb:20:89:05: 9d:a5:e7:55:f7:35:d9:8b:fc:73:e4:53:96:17:96: 3c:7c:85:7f:78:8f:1a:89:d2:cd:20:36:93:64:2c: 66:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DA:E9:9D:80:E4:D5:EB:CA:05:44:5B:0C:8D:ED:D2:17:4E:88:94 X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:a6:f1:f1:00:db:94:23:32:ba:e0:ae:90:3a:19:cc:a9:b8: a3:c5:fa:5a:02:78:b6:bf:1e:3b:8f:ef:47:8b:5a:98:b7:af: 59:aa:87:ea:91:0b:b3:4c:57:c9:6c:bb:ff:17:c1:a8:19:cb: 6a:de:5a:11:1b:e0:9b:09:09:0a:bf:7a:d7:1d:bf:f1:48:86: bc:c8:64:93:00:70:ff:04:1f:fa:43:36:ba:de:af:29:fa:80: 0c:c3:3b:75:9b:1a:87:33:37:60:83:96:fd:54:fc:fb:b8:8b: 72:a7:51:72:ae:59:d0:3f:dd:5c:a9:33:b9:b2:cb:d2:b7:a7: 45:5f:5e:d5:fe:5f:b6:dd:d1:15:93:d4:5b:21:59:63:99:e7: 45:60:46:a5:16:93:76:20:b3:77:8b:d9:74:fe:ee:de:05:59: 51:e1:ea:3d:8c:db:37:20:56:b9:fa:86:4c:82:71:3d:2f:a7: dd:b1:1f:7c:ab:42:cc:61:c0:04:b4:08:67:ca:4b:e2:02:27: 4f:77:43:9c:da:d0:71:fe:bf:fe:47:46:37:25:ca:b7:6f:34: 9d:70:19:fb:22:81:cb:a2:54:50:0b:64:a8:f7:d4:cd:6c:80: 15:a9:01:cf:9e:0f:77:49:a8:69:45:f1:fb:39:8f:6f:1f:b9: 2f:57:26:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjUxMTA1MDUxODE4WhcNMjUxMTEyMDUxODE4WjAYMRYwFAYD VQQDEw02OTBhZGUxYS00NDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCnmN0U8gpWZuyS2bKlTN+vlNXH+Oz3nXWrpMOTimRNSsRyPtuwxLTw47QL5 aKljx39p99aNw7n9mdq4qFSHo1+QAXddCat5F4z+1jHBsfsOsZ79pII7p2ER0XLN lZaxG8ZAIxa41dS9wEn+98odrWLw54kzPCPJ1ES0zeHjllcx9h0+warzskg8DeQ+ ca+XdTJtfZTqgPFj1LoYErkvSWHaoN0A0DsvHyFUUITM3iESuvTkcOMqlmDnepSf /8XrZeJ6YVsoyhVVROxD2xGgCPXXU7MZxx5BJdzVcesgiQWdpedV9zXZi/xz5FOW F5Y8fIV/eI8aidLNIDaTZCxmjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCna6Z2A 5NXrygVEWwyN7dIXToiUMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3pvHxANuUIzK64K6QOhnMqbijxfpaAni2vx47j+9Hi1qYt69Zqofq kQuzTFfJbLv/F8GoGctq3loRG+CbCQkKv3rXHb/xSIa8yGSTAHD/BB/6Qza63q8p +oAMwzt1mxqHMzdgg5b9VPz7uItyp1FyrlnQP91cqTO5ssvSt6dFX17V/l+23dEV k9RbIVljmedFYEalFpN2ILN3i9l0/u7eBVlR4eo9jNs3IFa5+oZMgnE9L6fdsR98 q0LMYcAEtAhnykviAidPd0Oc2tBx/r/+R0Y3Jcq3bzSdcBn7IoHLolRQC2So99TN bIAVqQHPng93SahpRfH7OY9vH7kvVyaK -----END CERTIFICATE-----Generated at Wed Nov 5 23:59:24 2025 by rpki-client