$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft File: LFTOW3Q5yME3PII5T2B5FwVy9_0.mft (raw, json) Hash identifier: +UHsJD3FeSPBSle83IQgEm0KLYmiLPa75NqKeGMBaLM= Subject key identifier: 0B:56:F2:D3:DF:13:A8:C3:18:8D:C5:12:40:D0:F5:3B:56:FE:D3:72 Authority key identifier: 2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD Certificate issuer: /CN=A91DC271/serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD Certificate serial: 05E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft Manifest number: 05DD Signing time: Sun 02 Nov 2025 22:58:49 +0000 Manifest this update: Sun 02 Nov 2025 22:58:48 +0000 Manifest next update: Sun 09 Nov 2025 22:58:48 +0000 Files and hashes: 1: LFTOW3Q5yME3PII5T2B5FwVy9_0.crl (hash: A6xZZU3My0Ya2Ehm4LG/2imUyYesnNaCHY+yQlm0XQc=) 2: 26DDF9C4D59311EB9DBD350EC4F9AE02.roa (hash: r1nvlMobRn7ox8IKXb1KWmQHrNC+PsGByKMD0/kqGOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.crl rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1506 (0x5e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC271, serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD Validity Not Before: Nov 2 22:58:48 2025 GMT Not After : Nov 9 22:58:48 2025 GMT Subject: CN=6907e228-172f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:21:34:e9:0a:0d:06:fe:a2:76:ac:63:79:e7: 36:77:14:01:d3:61:7b:c7:f3:92:ec:ee:4e:21:7a: 7b:7b:d4:b3:21:bb:42:8c:fb:b9:2c:c9:84:d3:77: 2e:bd:e5:5d:3e:df:64:ef:80:79:05:69:af:d4:69: 60:6e:1e:1f:0b:23:c9:25:56:b4:28:99:93:79:98: e6:16:89:ef:bd:51:90:1e:86:c1:46:c4:d2:d9:ca: c4:b2:82:16:6a:8b:24:eb:f6:e7:b2:92:5b:d5:58: 54:69:2a:d4:41:d0:53:ca:49:36:0d:82:20:ad:32: 9a:fa:0e:6f:2a:84:5f:34:47:11:e7:ad:4d:68:66: 73:8b:ac:11:da:99:f1:08:f1:84:35:eb:d4:4a:a0: 4f:da:1c:46:6a:b0:76:0a:a1:a4:ea:e1:d0:ba:bf: 2b:31:21:f3:05:ee:84:16:8e:8c:2e:85:f1:d5:d5: dc:3a:44:56:0e:c2:bb:cd:dd:35:b8:4c:5a:ec:71: 96:f2:b7:2c:1c:57:93:61:60:9b:5b:94:80:29:2c: 25:63:0e:2e:63:1a:a5:6a:e3:b4:23:bf:e2:45:c4: f2:ab:53:8a:05:50:ed:31:55:8f:0f:d9:ec:88:c9: 7d:73:7c:0a:2f:78:c8:dc:53:af:a6:ea:41:88:e4: 62:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:56:F2:D3:DF:13:A8:C3:18:8D:C5:12:40:D0:F5:3B:56:FE:D3:72 X509v3 Authority Key Identifier: keyid:2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:3e:0c:c7:c4:9b:69:e2:b6:76:01:93:42:01:fa:b4:9a:d2: 94:9b:ca:dd:15:3d:49:ae:dd:33:da:5d:ce:25:dd:4b:30:a4: c4:2d:f4:4d:1c:15:09:3b:fb:ee:44:09:a6:32:af:0b:05:b7: 99:be:32:bf:0c:c4:60:c5:4a:54:9d:7d:0d:7f:b8:3b:0e:b0: b7:f8:ec:c5:33:4a:d4:04:49:6d:65:42:1c:e4:6b:ba:58:ec: 92:83:b5:08:be:11:b7:5b:fa:b0:60:66:d2:df:48:5e:ea:b4: 63:25:4a:d5:34:04:f6:a8:f4:68:36:3f:fa:54:d4:51:b0:20: 28:bb:02:fc:bd:49:0b:bb:ee:d5:ce:d9:9f:cf:54:94:d4:6d: e5:30:3d:ec:fc:d7:52:01:88:4d:a2:25:24:44:0f:92:a0:1b: c2:64:c6:12:ed:47:0c:cb:26:ba:36:cc:82:af:76:ea:c9:b7: 0d:1a:dc:1d:8d:d6:62:d3:b4:60:2a:0a:5d:66:38:3c:d5:22: 4c:43:77:be:28:8b:00:03:7f:66:ec:6a:75:e0:5e:d0:f8:38: 8c:29:05:fa:c0:3a:91:b5:d7:a8:d0:f6:3c:2d:25:d3:a3:36: 78:61:21:04:91:05:08:3f:68:23:45:2c:88:a9:16:83:1e:6d: e8:77:0a:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyNzExMTAvBgNVBAUTKDJDNTRDRTVCNzQzOUM4QzEzNzNDODIzOTRGNjA3OTE3 MDU3MkY3RkQwHhcNMjUxMTAyMjI1ODQ4WhcNMjUxMTA5MjI1ODQ4WjAYMRYwFAYD VQQDEw02OTA3ZTIyOC0xNzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyE06QoNBv6idqxjeec2dxQB02F7x/OS7O5OIXp7e9SzIbtCjPu5LMmE03cu veVdPt9k74B5BWmv1Glgbh4fCyPJJVa0KJmTeZjmFonvvVGQHobBRsTS2crEsoIW aosk6/bnspJb1VhUaSrUQdBTykk2DYIgrTKa+g5vKoRfNEcR561NaGZzi6wR2pnx CPGENevUSqBP2hxGarB2CqGk6uHQur8rMSHzBe6EFo6MLoXx1dXcOkRWDsK7zd01 uExa7HGW8rcsHFeTYWCbW5SAKSwlYw4uYxqlauO0I7/iRcTyq1OKBVDtMVWPD9ns iMl9c3wKL3jI3FOvpupBiORiRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtW8tPf E6jDGI3FEkDQ9TtW/tNyMB8GA1UdIwQYMBaAFCxUzlt0OcjBNzyCOU9geRcFcvf9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzI3MS83MjRCREFBMkQ1 OEUxMUVCQjc5RDM5ODRDNEY5QUUwMi9MRlRPVzNRNXlNRTNQSUk1VDJCNUZ3Vnk5 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xGVE9XM1E1eU1FM1BJSTVUMkI1RndWeTlfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzI3MS83MjRCREFBMkQ1OEUxMUVCQjc5RDM5ODRDNEY5QUUwMi9MRlRPVzNRNXlN RTNQSUk1VDJCNUZ3Vnk5XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoPgzHxJtp4rZ2AZNCAfq0mtKUm8rdFT1Jrt0z2l3OJd1LMKTELfRN HBUJO/vuRAmmMq8LBbeZvjK/DMRgxUpUnX0Nf7g7DrC3+OzFM0rUBEltZUIc5Gu6 WOySg7UIvhG3W/qwYGbS30he6rRjJUrVNAT2qPRoNj/6VNRRsCAouwL8vUkLu+7V ztmfz1SU1G3lMD3s/NdSAYhNoiUkRA+SoBvCZMYS7UcMyya6NsyCr3bqybcNGtwd jdZi07RgKgpdZjg81SJMQ3e+KIsAA39m7Gp14F7Q+DiMKQX6wDqRtdeo0PY8LSXT ozZ4YSEEkQUIP2gjRSyIqRaDHm3odwrn -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:07 2025 by rpki-client