$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft File: LJM3XsY801R8z5PRPhK1urgy_Zw.mft (raw, json) Hash identifier: iOJpjA19nruPYTByYKa8RLHw5h3k/nJFgs+44NoLGyQ= Subject key identifier: EB:FD:FE:65:7B:CC:FB:5B:89:94:E8:B9:9A:1E:A0:04:7D:AC:FA:D1 Authority key identifier: 2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C Certificate issuer: /CN=A91E0C5F/serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C Certificate serial: 0FB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft Manifest number: 16C0 Signing time: Tue 04 Nov 2025 17:35:53 +0000 Manifest this update: Tue 04 Nov 2025 17:35:52 +0000 Manifest next update: Tue 11 Nov 2025 17:35:52 +0000 Files and hashes: 1: LJM3XsY801R8z5PRPhK1urgy_Zw.crl (hash: 2FhjSuBGvvICPelVXC8MHaR9X9t1gnz9908tDk90qoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4024 (0xfb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C5F, serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C Validity Not Before: Nov 4 17:35:52 2025 GMT Not After : Nov 11 17:35:52 2025 GMT Subject: CN=690a3979-e6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1d:53:64:24:bd:e4:00:2b:4d:40:c0:f0:ba: c5:4f:ce:68:4c:35:8a:32:00:8e:48:ee:90:2a:ff: 82:81:a6:e2:d9:b9:34:f2:1b:eb:39:78:b4:26:8a: 35:fc:8b:44:74:49:eb:3a:c9:db:6c:a8:3c:e8:2d: b6:83:73:42:c2:96:f0:e1:7c:c1:74:16:a0:3b:02: 67:dd:c0:13:30:3e:22:34:52:e5:d8:58:76:27:05: 33:ca:b9:18:85:da:76:53:60:0b:76:75:b5:ae:8b: 54:7c:54:b3:a3:40:07:e1:c7:2f:2d:3f:ec:ac:2b: 40:bc:bb:b6:43:d9:06:d1:5a:e0:8c:1d:1b:84:36: 0c:5a:da:a9:ac:19:61:c3:fc:2d:d0:da:85:6d:29: 84:c7:b0:6b:48:95:55:d7:10:eb:b8:48:5c:11:ca: 6c:b3:62:04:8e:ae:ab:11:40:f3:3a:ef:cb:d1:55: 5d:95:86:22:6c:53:71:44:9f:d9:bb:82:79:07:f7: fb:ad:ef:14:9b:82:7e:d1:bf:84:be:e0:f9:5d:73: 81:74:ad:52:d7:28:2d:63:34:e7:6b:2e:19:68:e4: 97:9e:db:cb:2d:9f:c6:bd:9b:a5:8d:90:5e:47:b3: b6:04:b6:94:f4:8a:88:e1:3a:55:4e:85:27:54:bb: fc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FD:FE:65:7B:CC:FB:5B:89:94:E8:B9:9A:1E:A0:04:7D:AC:FA:D1 X509v3 Authority Key Identifier: keyid:2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:2d:92:7e:d2:14:06:40:91:7c:6d:2d:6a:98:27:e7:d8:e9: 51:47:66:90:c3:85:6e:7b:6b:1a:dc:70:70:bc:b8:e3:8a:ac: 4f:37:a6:3a:5c:99:e1:d3:a5:4e:3c:b1:ee:31:23:7a:36:64: aa:de:86:27:a8:4c:03:79:59:49:a9:51:5f:52:a2:6e:54:ee: 90:91:eb:8a:72:94:9d:82:a5:ae:98:2f:ed:c9:eb:44:80:16: ee:7b:ff:1e:73:2b:56:1a:b0:ed:87:21:5c:53:a4:c1:bb:54: c9:93:52:41:5e:18:28:51:86:6a:91:72:30:97:4d:f3:b8:16: 06:93:44:40:30:12:15:b5:ba:91:63:50:e4:e6:9f:4d:fb:5d: b5:4d:58:0b:bb:02:ac:43:da:9e:9a:5e:0e:c0:08:79:79:74: 31:72:a2:9d:c8:ac:a4:d1:f1:f9:1c:3c:23:03:96:87:8d:ae: 81:ed:14:d7:10:b3:29:ff:f5:51:e1:00:89:e4:55:14:26:88: 20:41:80:7f:d9:ef:89:e4:50:3a:37:bc:f6:98:6e:1e:c6:8d: ef:90:87:2c:15:40:0e:e7:39:e2:6d:88:76:de:47:16:db:44: 68:8c:27:b6:19:fb:1f:10:1e:fd:74:dd:f6:cb:71:76:73:d5: 7a:4d:71:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDNUYxMTAvBgNVBAUTKDJDOTMzNzVFQzYzQ0QzNTQ3Q0NGOTNEMTNFMTJCNUJB QjgzMkZEOUMwHhcNMjUxMTA0MTczNTUyWhcNMjUxMTExMTczNTUyWjAYMRYwFAYD VQQDEw02OTBhMzk3OS1lNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtB1TZCS95AArTUDA8LrFT85oTDWKMgCOSO6QKv+Cgabi2bk08hvrOXi0Joo1 /ItEdEnrOsnbbKg86C22g3NCwpbw4XzBdBagOwJn3cATMD4iNFLl2Fh2JwUzyrkY hdp2U2ALdnW1rotUfFSzo0AH4ccvLT/srCtAvLu2Q9kG0VrgjB0bhDYMWtqprBlh w/wt0NqFbSmEx7BrSJVV1xDruEhcEcpss2IEjq6rEUDzOu/L0VVdlYYibFNxRJ/Z u4J5B/f7re8Um4J+0b+EvuD5XXOBdK1S1ygtYzTnay4ZaOSXntvLLZ/GvZuljZBe R7O2BLaU9IqI4TpVToUnVLv8kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOv9/mV7 zPtbiZTouZoeoAR9rPrRMB8GA1UdIwQYMBaAFCyTN17GPNNUfM+T0T4Stbq4Mv2c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEM1Ri84QjU0N0E3MjY2 NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi9MSk0zWHNZODAxUjh6NVBSUGhLMXVyZ3lf WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xKTTNYc1k4MDFSOHo1UFJQaEsxdXJneV9ady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEM1Ri84QjU0N0E3MjY2NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi9MSk0zWHNZODAx Ujh6NVBSUGhLMXVyZ3lfWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBLZJ+0hQGQJF8bS1qmCfn2OlRR2aQw4Vue2sa3HBwvLjjiqxPN6Y6 XJnh06VOPLHuMSN6NmSq3oYnqEwDeVlJqVFfUqJuVO6QkeuKcpSdgqWumC/tyetE gBbue/8ecytWGrDthyFcU6TBu1TJk1JBXhgoUYZqkXIwl03zuBYGk0RAMBIVtbqR Y1Dk5p9N+121TVgLuwKsQ9qeml4OwAh5eXQxcqKdyKyk0fH5HDwjA5aHja6B7RTX ELMp//VR4QCJ5FUUJoggQYB/2e+J5FA6N7z2mG4exo3vkIcsFUAO5znibYh23kcW 20RojCe2GfsfEB79dN32y3F2c9V6TXHP -----END CERTIFICATE-----Generated at Wed Nov 5 13:51:51 2025 by rpki-client