$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft File: 9UTm_uoP5rnfex2j2aWS_Lispik.mft (raw, json) Hash identifier: W3rRb/1NlYh0826lk38P2NKLKfCfF1kBOLiF4l/APF4= Subject key identifier: EA:B3:E9:A9:46:C3:24:12:5E:20:77:DB:7A:D9:D8:B3:DA:94:1A:7A Authority key identifier: F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29 Certificate issuer: /CN=A91DD55B/serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft Manifest number: 017F Signing time: Mon 03 Nov 2025 03:39:39 +0000 Manifest this update: Mon 03 Nov 2025 03:39:38 +0000 Manifest next update: Mon 10 Nov 2025 03:39:38 +0000 Files and hashes: 1: 9UTm_uoP5rnfex2j2aWS_Lispik.crl (hash: 75l40L8Q1e80CtuRZZwLSiQ3Q8lIaGKrJJW27Wz2/uQ=) 2: 6C3D2A826D7911EEBA9F0F7AC4F9AE02.roa (hash: bDVD8hPvc8iZ5B+yKX28yhd7xbk9dGO0omZHroVfOq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD55B, serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629 Validity Not Before: Nov 3 03:39:38 2025 GMT Not After : Nov 10 03:39:38 2025 GMT Subject: CN=690823fb-d497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2d:3c:b6:f6:a3:95:fa:e3:09:0a:5f:3b:1d: d9:e0:ee:f6:9a:0e:1e:d7:34:1b:36:dd:e0:8a:79: d1:59:e1:8c:d7:e4:08:e1:7f:18:da:22:fb:ba:07: 70:be:b2:5b:ff:75:77:a2:a7:c8:3a:16:8a:06:71: 5a:02:4d:31:af:25:28:e5:a3:12:8b:06:d3:41:a2: 2e:95:d5:e1:7c:30:e6:e4:e9:01:15:bd:45:f4:97: ff:e3:07:07:aa:93:97:44:e3:8b:ea:f7:30:cd:66: fb:79:fe:c4:62:ac:a7:5b:8f:b1:af:8f:da:a6:ef: 42:a3:f4:d5:33:66:de:da:6e:6f:a9:93:a9:d2:6d: 6f:ca:8b:e5:98:b7:23:b8:06:cf:55:1d:ba:d4:45: d4:be:a3:15:68:7e:67:cd:72:da:49:cf:e4:2e:eb: 5d:3b:96:a1:2d:23:a8:b7:d1:c2:1a:3a:67:61:9c: f2:eb:09:5c:ba:b8:e1:af:64:d8:6d:82:76:b0:cc: cb:bd:b0:25:68:40:23:51:a3:e3:6d:c3:0c:dc:41: 6d:7d:1b:89:0a:ab:2d:51:d2:fb:13:09:45:a1:10: 95:cb:88:03:0d:d3:b2:f9:f2:44:43:d6:57:92:17: 4f:51:de:05:72:e5:5b:65:c8:47:8f:51:99:86:bb: 17:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B3:E9:A9:46:C3:24:12:5E:20:77:DB:7A:D9:D8:B3:DA:94:1A:7A X509v3 Authority Key Identifier: keyid:F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d2:a9:13:20:4a:a0:81:22:ad:c0:f3:04:48:2e:41:25:98: 7c:f8:b4:7d:1a:7a:16:b1:2a:1e:c4:9d:c5:c3:71:80:f6:52: 8f:00:d9:3e:7c:0b:5f:d1:94:ea:a8:5d:a3:9b:fb:68:7b:67: bd:ba:66:f4:83:99:0f:19:55:8d:66:6e:84:5b:ba:91:47:ab: 11:db:f7:c4:3a:5a:21:ff:66:58:81:1e:17:d7:6a:74:c8:e8: 7e:d4:4d:95:7c:ad:bd:e7:e2:9a:36:b2:7b:11:3e:26:ea:f0: 5d:cf:d7:25:64:25:30:ef:13:ca:b9:2a:be:64:9b:c6:b8:a3: 01:57:54:e9:3a:58:f5:fc:78:74:c5:29:d5:14:27:c3:dd:7f: 95:78:29:ff:ae:fe:85:52:90:9a:f1:39:91:a8:1e:05:31:a5: 02:c8:cd:1c:56:85:9a:d5:a8:17:d2:4c:23:75:aa:15:e1:87: 18:12:56:7f:e6:d7:ad:c8:35:54:cf:c0:89:de:75:4c:f4:68: 69:58:10:80:8a:38:c6:d8:1d:19:a9:66:23:8c:81:eb:4c:e3: 8d:96:40:08:2e:17:e6:c6:14:b2:f5:b3:b0:5e:07:ec:15:03: c2:7b:8b:5a:cf:cb:ff:b4:59:a2:07:0c:01:c8:91:fa:ba:82: 0c:cc:03:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ1NUIxMTAvBgNVBAUTKEY1NDRFNkZFRUEwRkU2QjlERjdCMURBM0Q5QTU5MkZD QjhBQ0E2MjkwHhcNMjUxMTAzMDMzOTM4WhcNMjUxMTEwMDMzOTM4WjAYMRYwFAYD VQQDEw02OTA4MjNmYi1kNDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArC08tvajlfrjCQpfOx3Z4O72mg4e1zQbNt3ginnRWeGM1+QI4X8Y2iL7ugdw vrJb/3V3oqfIOhaKBnFaAk0xryUo5aMSiwbTQaIuldXhfDDm5OkBFb1F9Jf/4wcH qpOXROOL6vcwzWb7ef7EYqynW4+xr4/apu9Co/TVM2be2m5vqZOp0m1vyovlmLcj uAbPVR261EXUvqMVaH5nzXLaSc/kLutdO5ahLSOot9HCGjpnYZzy6wlcurjhr2TY bYJ2sMzLvbAlaEAjUaPjbcMM3EFtfRuJCqstUdL7EwlFoRCVy4gDDdOy+fJEQ9ZX khdPUd4FcuVbZchHj1GZhrsXUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqz6alG wyQSXiB323rZ2LPalBp6MB8GA1UdIwQYMBaAFPVE5v7qD+a533sdo9mlkvy4rKYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDU1Qi84RjQzNDlDODZE NzcxMUVFODM1NTRFNzRDNEY5QUUwMi85VVRtX3VvUDVybmZleDJqMmFXU19MaXNw aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVVG1fdW9QNXJuZmV4MmoyYVdTX0xpc3Bpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDU1Qi84RjQzNDlDODZENzcxMUVFODM1NTRFNzRDNEY5QUUwMi85VVRtX3VvUDVy bmZleDJqMmFXU19MaXNwaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy0qkTIEqggSKtwPMESC5BJZh8+LR9GnoWsSoexJ3Fw3GA9lKPANk+ fAtf0ZTqqF2jm/toe2e9umb0g5kPGVWNZm6EW7qRR6sR2/fEOloh/2ZYgR4X12p0 yOh+1E2VfK295+KaNrJ7ET4m6vBdz9clZCUw7xPKuSq+ZJvGuKMBV1TpOlj1/Hh0 xSnVFCfD3X+VeCn/rv6FUpCa8TmRqB4FMaUCyM0cVoWa1agX0kwjdaoV4YcYElZ/ 5tetyDVUz8CJ3nVM9GhpWBCAijjG2B0ZqWYjjIHrTOONlkAILhfmxhSy9bOwXgfs FQPCe4taz8v/tFmiBwwByJH6uoIMzAPp -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:09 2025 by rpki-client