$ rpki-client -vvf rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft File: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft (raw, json) Hash identifier: UXS/LadSfrg76AiLbfNWnkA4EXDcF7KWKQeXAc4jFSM= Subject key identifier: 0E:8F:22:F9:C9:0A:CE:FF:56:69:08:75:4A:6E:0C:E2:39:34:EA:E6 Authority key identifier: FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC Certificate issuer: /CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Certificate serial: 1535 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft Manifest number: 152C Signing time: Thu 30 Oct 2025 16:48:09 +0000 Manifest this update: Thu 30 Oct 2025 16:48:09 +0000 Manifest next update: Thu 06 Nov 2025 16:48:09 +0000 Files and hashes: 1: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl (hash: OZq2C777PgEYFypWnmZiPQPe9yD7UDS8xmn/fsBrE8Q=) 2: 1BFCE1E0554F11E8A5C82D57C4F9AE02.roa (hash: ZrttKe2gUPdi3/NYLhVsPF2RlqfjZO1IxCJ4ZBHDkLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5429 (0x1535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D599B, serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Validity Not Before: Oct 30 16:48:09 2025 GMT Not After : Nov 6 16:48:09 2025 GMT Subject: CN=690396c9-9e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:3e:e7:c5:fe:a5:00:c3:63:77:9c:08:5b: 74:e3:af:7b:62:4e:59:2a:a4:71:f0:b4:9b:10:07: 7b:d5:7f:80:67:76:4b:4d:ca:c1:29:ee:41:29:58: 61:1e:9d:c8:a3:ad:c4:9b:75:58:e0:3f:1f:41:88: 33:0f:89:a5:eb:d9:4c:21:77:3e:46:1e:bc:ea:de: 6c:37:e0:94:28:cc:93:4f:21:89:7e:d8:4b:05:88: ae:f7:ed:24:f4:18:7e:69:7c:0a:70:0c:a5:70:6d: 4e:f6:90:dc:14:16:04:84:59:c5:72:f0:91:39:7a: 93:36:2a:58:cd:43:28:7e:76:a1:32:d3:0a:e4:06: 9b:07:e6:ca:14:02:bc:db:69:46:24:a6:2d:07:e8: ff:7d:4d:81:ad:1a:e2:10:bc:44:2c:f3:ac:58:b7: 44:e3:e9:7f:1a:38:ac:4c:54:04:a6:67:95:ad:73: b2:7e:c8:8b:7f:50:dd:29:1d:1b:db:7a:21:33:9e: 59:08:51:99:fc:35:50:76:a2:12:9c:bc:07:7f:db: f8:7a:ad:36:5b:ee:b6:1f:b2:e3:8e:33:98:16:7e: d0:60:f5:20:12:da:8f:55:1a:86:c6:dc:19:ea:be: 36:f5:4f:09:4c:0f:74:e1:b7:7c:b4:52:a6:7a:e0: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8F:22:F9:C9:0A:CE:FF:56:69:08:75:4A:6E:0C:E2:39:34:EA:E6 X509v3 Authority Key Identifier: keyid:FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:01:95:66:c8:75:7f:84:25:f2:1d:8f:7d:2a:fc:75:54:f1: 76:4f:f3:a2:b7:a1:ca:7e:87:73:c4:33:c5:65:7d:cd:ae:3a: 11:50:88:89:9c:8e:e5:f1:b1:50:c6:bd:ef:5e:ea:1a:1f:d9: 26:63:67:77:b2:c9:ad:ec:bd:01:e7:26:0e:55:61:fe:1e:17: ad:39:25:9f:6e:d3:1b:11:0b:c7:cc:76:c1:0b:3b:67:0a:8f: d9:c9:75:8e:5f:23:f3:64:f6:f2:24:db:d3:99:6c:d4:95:49: a6:3a:d2:db:15:a9:e9:e3:a0:35:cd:20:b7:ad:e3:6b:71:c9: c8:6b:5d:8b:14:93:d8:a4:ea:7d:49:db:02:50:8a:e3:ff:b5: f1:e6:a1:9d:f7:9c:81:df:10:15:65:3e:24:42:99:26:f2:71: 11:57:1b:2c:74:c9:4c:4e:ad:b8:99:6f:69:8f:81:7e:93:da: a9:ca:b0:18:31:b0:a8:7c:49:bf:2e:fc:05:32:0b:a1:a4:38: 7e:be:cc:8b:da:4d:d8:df:e3:7c:02:25:6d:06:23:42:66:e9: 6e:1f:4f:b4:55:c9:e3:de:70:f7:32:c9:58:75:e6:f4:5b:87: d2:b8:24:62:f3:65:c1:27:36:4d:0b:97:57:13:74:5a:c2:24: cd:a5:83:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU5OUIxMTAvBgNVBAUTKEZDQjIzQzdCRjVGMTkzNTYyNzVCQUNGNTdDREI1NUJG RDYwRTA0QUMwHhcNMjUxMDMwMTY0ODA5WhcNMjUxMTA2MTY0ODA5WjAYMRYwFAYD VQQDEw02OTAzOTZjOS05ZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYY+58X+pQDDY3ecCFt04697Yk5ZKqRx8LSbEAd71X+AZ3ZLTcrBKe5BKVhh Hp3Io63Em3VY4D8fQYgzD4ml69lMIXc+Rh686t5sN+CUKMyTTyGJfthLBYiu9+0k 9Bh+aXwKcAylcG1O9pDcFBYEhFnFcvCROXqTNipYzUMofnahMtMK5AabB+bKFAK8 22lGJKYtB+j/fU2BrRriELxELPOsWLdE4+l/GjisTFQEpmeVrXOyfsiLf1DdKR0b 23ohM55ZCFGZ/DVQdqISnLwHf9v4eq02W+62H7LjjjOYFn7QYPUgEtqPVRqGxtwZ 6r429U8JTA904bd8tFKmeuBeFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6PIvnJ Cs7/VmkIdUpuDOI5NOrmMB8GA1UdIwQYMBaAFPyyPHv18ZNWJ1us9XzbVb/WDgSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTk5Qi9ENzIyNEZGMjU0 QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsxWW5XNnoxZk50VnY5WU9C S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19MSThlX1h4azFZblc2ejFmTnRWdjlZT0JLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTk5Qi9ENzIyNEZGMjU0QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsx WW5XNnoxZk50VnY5WU9CS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFAZVmyHV/hCXyHY99Kvx1VPF2T/Oit6HKfodzxDPFZX3NrjoRUIiJ nI7l8bFQxr3vXuoaH9kmY2d3ssmt7L0B5yYOVWH+HhetOSWfbtMbEQvHzHbBCztn Co/ZyXWOXyPzZPbyJNvTmWzUlUmmOtLbFanp46A1zSC3reNrccnIa12LFJPYpOp9 SdsCUIrj/7Xx5qGd95yB3xAVZT4kQpkm8nERVxssdMlMTq24mW9pj4F+k9qpyrAY MbCofEm/LvwFMguhpDh+vsyL2k3Y3+N8AiVtBiNCZuluH0+0Vcnj3nD3MslYdeb0 W4fSuCRi82XBJzZNC5dXE3RawiTNpYNd -----END CERTIFICATE-----Generated at Fri Oct 31 06:20:57 2025 by rpki-client