$ rpki-client -vvf rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft File: lCeAdFXYAaHRECh75X8-hPYpDKA.mft (raw, json) Hash identifier: NcdN4XaaDBJkqX5aQ0yubUF3U3sdoKbJjJL8FeJzhC0= Subject key identifier: D6:96:34:63:15:F3:6F:D5:D0:03:3A:B0:1A:07:C7:F2:22:79:0F:09 Authority key identifier: 94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 Certificate issuer: /CN=A91D585E/serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft Manifest number: 010B Signing time: Mon 03 Nov 2025 04:56:27 +0000 Manifest this update: Mon 03 Nov 2025 04:56:27 +0000 Manifest next update: Mon 10 Nov 2025 04:56:27 +0000 Files and hashes: 1: lCeAdFXYAaHRECh75X8-hPYpDKA.crl (hash: bDuJIcZLyjW3qEU8EWR0sT3YZzoz42LhYaPnPB5LEUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D585E, serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Validity Not Before: Nov 3 04:56:27 2025 GMT Not After : Nov 10 04:56:27 2025 GMT Subject: CN=690835fb-2f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:d6:b4:35:2a:de:80:e8:0d:40:69:40:12: f8:b5:db:55:c1:c0:24:23:13:21:6d:09:fe:b7:9a: d0:a6:96:8f:bc:45:2d:8c:49:8b:93:12:ab:fb:3d: 79:d1:51:6d:77:aa:2e:bb:e2:7a:08:3b:a3:8e:8d: 81:78:a3:3b:7f:af:2e:b4:91:a0:80:8a:12:19:8d: c7:09:6d:aa:f7:9a:d9:58:55:af:71:8e:ec:4f:29: 4e:2c:87:40:a6:3f:02:73:f0:d2:32:b0:67:60:c9: 85:13:d9:f0:e9:ff:78:b5:d0:48:9d:e9:25:cb:7d: 9d:fc:5a:bd:6d:dd:16:e7:a8:af:a7:6a:a9:14:be: 38:0b:24:6d:c3:87:67:a8:8c:f8:38:f8:4b:cd:e0: 92:c0:3f:a6:8c:84:ab:08:84:b6:cb:98:87:d4:e6: 65:96:f5:c5:8d:a0:d1:39:4f:49:05:19:9b:1e:40: fb:9d:79:c3:8b:1e:55:f0:91:ef:f3:b8:67:7d:5b: 8f:3d:9a:24:21:f3:02:e0:ba:ff:14:d2:94:3b:69: 74:00:c2:11:a9:c4:b9:7b:2e:60:69:e6:d1:24:6f: d6:70:2d:44:61:78:30:35:62:a0:9e:db:57:01:d7: 3d:d0:1c:0c:36:d3:00:0c:51:22:26:3e:00:85:83: 98:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:96:34:63:15:F3:6F:D5:D0:03:3A:B0:1A:07:C7:F2:22:79:0F:09 X509v3 Authority Key Identifier: keyid:94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0f:ea:bd:67:81:61:f7:b4:22:33:5c:33:cb:de:6f:c8:11: ea:ea:4b:77:c3:8b:20:76:f3:23:72:18:f8:40:3c:ea:8d:8d: 8e:94:17:ea:83:46:a5:d6:38:49:ac:ba:1d:70:e6:2c:a2:9a: 1e:f8:9b:a7:2b:71:a0:70:04:6a:d5:6e:dc:6e:21:9e:77:b5: 7a:76:9c:24:f1:e0:9a:41:ed:0a:d5:1d:f4:16:ee:8d:14:be: 27:a5:5e:e7:fc:2a:6e:05:ce:6b:9e:01:48:b3:93:10:67:26: 70:c0:d7:b3:31:03:6d:48:d3:41:13:70:a7:7c:c6:33:d4:2a: 8b:42:5c:f7:0a:00:10:7f:ea:e4:7d:fe:5d:3b:6c:a5:b5:c4: c6:9e:ca:4e:9a:10:d2:c3:33:04:ab:44:8d:5b:3e:b2:b7:67: e8:1b:32:df:8f:1e:c9:de:cb:4e:ea:5e:75:c1:4b:6e:e3:f0: e1:d8:9d:ee:59:c4:12:d0:64:25:6b:36:6e:17:af:36:c0:23: b4:1d:7b:c1:06:c7:a2:4f:d2:8c:59:ac:8f:c8:64:15:d5:8b: a5:43:aa:b2:c2:e7:f5:d5:81:a8:f1:e3:ca:25:e2:93:df:f7: b5:8e:53:00:e5:e4:4e:0a:e9:35:2a:a6:74:05:7d:1a:37:93: 04:52:fc:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4NUUxMTAvBgNVBAUTKDk0Mjc4MDc0NTVEODAxQTFEMTEwMjg3QkU1N0YzRTg0 RjYyOTBDQTAwHhcNMjUxMTAzMDQ1NjI3WhcNMjUxMTEwMDQ1NjI3WjAYMRYwFAYD VQQDEw02OTA4MzVmYi0yZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyTWtDUq3oDoDUBpQBL4tdtVwcAkIxMhbQn+t5rQppaPvEUtjEmLkxKr+z15 0VFtd6ouu+J6CDujjo2BeKM7f68utJGggIoSGY3HCW2q95rZWFWvcY7sTylOLIdA pj8Cc/DSMrBnYMmFE9nw6f94tdBInekly32d/Fq9bd0W56ivp2qpFL44CyRtw4dn qIz4OPhLzeCSwD+mjISrCIS2y5iH1OZllvXFjaDROU9JBRmbHkD7nXnDix5V8JHv 87hnfVuPPZokIfMC4Lr/FNKUO2l0AMIRqcS5ey5gaebRJG/WcC1EYXgwNWKgnttX Adc90BwMNtMADFEiJj4AhYOYmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaWNGMV 82/V0AM6sBoHx/IieQ8JMB8GA1UdIwQYMBaAFJQngHRV2AGh0RAoe+V/PoT2KQyg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTg1RS80QkRBNzQ0NDFF NkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFhSFJFQ2g3NVg4LWhQWXBE S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDZUFkRlhZQWFIUkVDaDc1WDgtaFBZcERLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTg1RS80QkRBNzQ0NDFFNkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFh SFJFQ2g3NVg4LWhQWXBES0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfD+q9Z4Fh97QiM1wzy95vyBHq6kt3w4sgdvMjchj4QDzqjY2OlBfq g0al1jhJrLodcOYsopoe+JunK3GgcARq1W7cbiGed7V6dpwk8eCaQe0K1R30Fu6N FL4npV7n/CpuBc5rngFIs5MQZyZwwNezMQNtSNNBE3CnfMYz1CqLQlz3CgAQf+rk ff5dO2yltcTGnspOmhDSwzMEq0SNWz6yt2foGzLfjx7J3stO6l51wUtu4/Dh2J3u WcQS0GQlazZuF682wCO0HXvBBseiT9KMWayPyGQV1YulQ6qywuf11YGo8ePKJeKT 3/e1jlMA5eROCuk1KqZ0BX0aN5MEUvwG -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:00 2025 by rpki-client