$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft File: LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json) Hash identifier: GqV/r6EXuvlbHDNEEniCA5AAniYoIZTbI0XtSYAI7HM= Subject key identifier: 11:A5:99:0D:FC:28:5F:C5:4E:D6:B4:83:84:3B:23:95:98:C1:12:FA Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Certificate serial: 0A05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft Manifest number: 09F3 Signing time: Tue 04 Nov 2025 20:00:34 +0000 Manifest this update: Tue 04 Nov 2025 20:00:34 +0000 Manifest next update: Tue 11 Nov 2025 20:00:34 +0000 Files and hashes: 1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: Rgfk/5PuUcdKb8ib+lKS0X7QsQZmYQMFDjyA5gTBuu4=) 2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: VFpsjuU9PDSH64UL2gEPWAoxtpRrzaaut6Rewkzu2Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2565 (0xa05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Validity Not Before: Nov 4 20:00:34 2025 GMT Not After : Nov 11 20:00:34 2025 GMT Subject: CN=690a5b62-3491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:02:35:c9:64:3b:36:da:58:01:d7:d2:d1:fb: 18:5e:0f:45:b5:cb:0a:ea:e8:2c:2b:b6:12:0f:6a: 0a:2f:a5:b7:9d:2b:21:3b:cb:f8:9c:aa:04:02:2a: 1e:a1:6e:98:1f:6d:1e:0b:c7:97:a7:fa:ec:c2:70: d9:c3:b8:cc:2a:4f:b0:fe:43:73:8c:52:9b:8a:37: b2:ca:1a:53:3e:f4:c7:5c:3b:1d:f9:2e:45:a9:17: fb:08:41:18:2c:54:7d:48:ed:f6:b1:50:8f:23:52: 79:31:f6:c5:41:87:8f:97:05:2b:79:89:6c:eb:39: dd:0d:e6:51:c0:52:7a:89:10:25:71:9f:d8:08:b0: b5:d7:d5:b6:e2:5c:c0:59:2e:07:b7:f9:18:41:98: ba:24:cb:dd:dc:fe:24:6e:2a:5f:87:a4:14:6d:96: a1:0e:ac:8e:aa:07:87:38:82:47:e2:86:0f:ff:9f: de:e1:21:2f:b5:4b:9c:35:7a:52:c2:52:9e:46:9c: d4:1f:25:8d:00:18:47:07:71:64:4e:5c:76:95:e6: 9b:11:48:ac:7c:45:4e:60:ef:9d:c1:2e:80:f3:ae: cb:1d:07:fa:17:36:af:eb:cf:14:bf:a3:a1:f2:07: 5b:ed:c4:b4:0c:b0:a6:f2:46:2d:fe:85:bc:48:71: 62:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A5:99:0D:FC:28:5F:C5:4E:D6:B4:83:84:3B:23:95:98:C1:12:FA X509v3 Authority Key Identifier: keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:38:93:95:fd:3a:6b:5a:99:9c:bc:00:9f:0c:f4:e0:c5:bb: 13:1c:db:bf:ff:7a:07:95:83:dd:29:87:0e:d1:4f:c2:26:c2: 39:d6:a9:21:ce:c8:95:0a:4d:8e:c9:25:f1:fb:45:ef:2a:62: 98:ea:1e:4e:60:56:c8:e6:2f:d5:13:45:3e:13:b8:6c:92:27: a4:65:2c:a4:a2:20:cb:08:6f:5e:06:29:5c:84:cc:37:ab:5a: 8e:4c:1d:eb:b1:f3:d3:23:90:e7:ce:a6:be:04:11:5e:77:dd: 4a:b5:06:0b:8f:c2:8e:43:4e:17:47:57:53:3b:6f:37:02:d8: 4f:ab:8c:c2:97:2e:19:56:d5:f6:00:27:03:74:30:04:9e:62: f2:9a:a5:29:3d:26:6c:c5:ea:cf:3f:e2:6c:44:93:28:19:2b: c1:e9:93:43:d1:d9:c1:40:a1:70:9f:10:1f:27:53:7f:c9:66: 3f:a3:68:1d:88:90:e3:e0:55:af:57:7a:41:7c:a1:16:42:6e: 3b:24:0d:b0:89:f5:b6:5c:3e:1a:f5:55:f5:07:e3:3b:8d:e1: 59:8e:bb:8b:92:57:01:d7:72:35:18:4a:9f:89:98:d9:b0:72: 58:c8:f8:f5:41:58:08:c9:43:b0:f9:79:98:99:32:a7:ca:1e: 8d:07:4a:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx OTg5MTkzQTUwHhcNMjUxMTA0MjAwMDM0WhcNMjUxMTExMjAwMDM0WjAYMRYwFAYD VQQDEw02OTBhNWI2Mi0zNDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wI1yWQ7NtpYAdfS0fsYXg9FtcsK6ugsK7YSD2oKL6W3nSshO8v4nKoEAioe oW6YH20eC8eXp/rswnDZw7jMKk+w/kNzjFKbijeyyhpTPvTHXDsd+S5FqRf7CEEY LFR9SO32sVCPI1J5MfbFQYePlwUreYls6zndDeZRwFJ6iRAlcZ/YCLC119W24lzA WS4Ht/kYQZi6JMvd3P4kbipfh6QUbZahDqyOqgeHOIJH4oYP/5/e4SEvtUucNXpS wlKeRpzUHyWNABhHB3FkTlx2leabEUisfEVOYO+dwS6A867LHQf6Fzav688Uv6Oh 8gdb7cS0DLCm8kYt/oW8SHFiBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGlmQ38 KF/FTta0g4Q7I5WYwRL6MB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkFERi81ODUzMjBERThCRDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3 czluNm9yNlhRb2daaVJrNlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuOJOV/TprWpmcvACfDPTgxbsTHNu//3oHlYPdKYcO0U/CJsI51qkh zsiVCk2OySXx+0XvKmKY6h5OYFbI5i/VE0U+E7hskiekZSykoiDLCG9eBilchMw3 q1qOTB3rsfPTI5Dnzqa+BBFed91KtQYLj8KOQ04XR1dTO283AthPq4zCly4ZVtX2 ACcDdDAEnmLymqUpPSZsxerPP+JsRJMoGSvB6ZND0dnBQKFwnxAfJ1N/yWY/o2gd iJDj4FWvV3pBfKEWQm47JA2wifW2XD4a9VX1B+M7jeFZjruLklcB13I1GEqfiZjZ sHJYyPj1QVgIyUOw+XmYmTKnyh6NB0pP -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:20 2025 by rpki-client