$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft File: lY1wluouaxa8JKHQRXGdLsUUSX4.mft (raw, json) Hash identifier: ZtKoS4SY3Bi5jsSFbUufEbd1Ok2C4G4zXc8bswf+jJs= Subject key identifier: CA:D7:2D:74:E6:87:69:29:4E:95:39:06:98:3C:68:50:42:8E:A2:F9 Authority key identifier: 95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E Certificate issuer: /CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft Manifest number: 02A5 Signing time: Mon 03 Nov 2025 01:29:00 +0000 Manifest this update: Mon 03 Nov 2025 01:28:59 +0000 Manifest next update: Mon 10 Nov 2025 01:28:59 +0000 Files and hashes: 1: lY1wluouaxa8JKHQRXGdLsUUSX4.crl (hash: 5/9KAw8Xl7gEYpbeIwMnL5NIM/ff+iaN8Il3KUYUGxc=) 2: 01109D481B9011EDBC68484CC4F9AE02.roa (hash: SSzVNdfhJc5xjlACETmueaivBNOUX59PK+NBqYEOe30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28D8, serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E Validity Not Before: Nov 3 01:28:59 2025 GMT Not After : Nov 10 01:28:59 2025 GMT Subject: CN=6908055c-d9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c6:b9:0e:9f:cc:04:22:62:3f:89:4d:f3:60: fd:29:8f:fa:22:a3:32:f6:60:8f:75:30:03:42:e4: f1:2a:05:e4:bb:4f:5c:24:1d:0f:96:5b:04:f6:8d: 32:6a:a3:c4:f7:76:ab:7c:c0:b4:7a:72:da:bd:65: 03:b6:ba:60:67:98:5a:b8:46:86:ab:79:83:2e:a6: a1:05:94:32:85:f1:99:7a:a5:fd:9f:56:00:de:2e: 20:4c:d0:45:10:fb:95:15:9a:3c:d6:2d:a3:cd:3c: 99:90:1a:d2:ef:df:6f:2a:1d:c2:9e:61:a8:ee:00: 43:4d:bb:c5:a5:e8:54:9f:64:58:a0:82:cb:2c:70: 4e:29:14:41:c8:a7:ef:e8:92:78:62:2a:31:23:1b: cc:79:52:d9:43:72:94:6e:15:b5:7f:97:bf:fe:ce: 8d:e8:01:e2:c1:2f:3d:ce:2a:31:f3:b7:f1:8d:3f: be:50:b8:b6:a1:50:ae:9e:f5:02:0a:1e:6c:65:78: e9:6c:46:36:f6:9a:5e:aa:3e:d0:da:f8:e7:03:6f: 48:dd:5f:59:ea:86:7a:cf:3b:97:3c:e2:0e:34:8c: 9e:df:b2:a0:c5:3e:5e:91:c3:1d:b1:29:84:fe:07: 8d:90:59:62:60:0d:d8:71:2e:b3:a7:43:e1:8b:1e: 67:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D7:2D:74:E6:87:69:29:4E:95:39:06:98:3C:68:50:42:8E:A2:F9 X509v3 Authority Key Identifier: keyid:95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:d9:7d:ff:2c:18:85:bf:c3:39:d5:1e:5b:71:4f:cb:c2:fe: ab:1c:04:15:c4:86:89:d9:bb:7e:3f:d3:4e:39:77:1c:d9:04: 74:a5:51:6b:17:c8:22:1f:75:f1:51:0d:37:7f:d6:d9:4e:a9: dd:26:58:bf:2c:30:2a:50:44:0d:48:17:7b:d1:aa:d0:52:e8: 0d:88:2a:59:a6:91:c9:53:98:3e:04:41:96:39:00:53:b5:c8: 0e:35:60:c4:b3:56:08:7c:43:b4:e1:6b:24:b4:31:9e:4e:e8: 25:55:f1:20:73:a0:e6:78:93:54:a3:51:77:4f:0b:73:2b:cf: ff:2d:d6:4c:ad:73:37:70:cb:f8:82:2f:e9:17:97:68:c8:35: 3a:62:02:6b:a4:24:ad:18:44:d3:2f:34:fb:a3:fa:65:47:b7: 1f:4a:40:36:4d:71:e6:af:f3:0a:d1:e7:10:0d:2b:3e:62:5d: 94:bb:21:c3:92:ec:fa:0b:6b:4a:c7:79:b3:d6:bf:ef:a7:d1: 1f:c1:3a:a3:3a:98:56:3e:07:fc:0c:d6:6d:ca:37:78:eb:76: 03:eb:96:20:43:57:6d:f5:7f:1c:05:85:03:48:d1:43:26:2b: fb:6e:c5:24:9b:a6:cc:d5:8f:ce:9a:3f:c3:22:4f:d0:9f:3e: 98:cb:0e:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RDgxMTAvBgNVBAUTKDk1OEQ3MDk2RUEyRTZCMTZCQzI0QTFEMDQ1NzE5RDJF QzUxNDQ5N0UwHhcNMjUxMTAzMDEyODU5WhcNMjUxMTEwMDEyODU5WjAYMRYwFAYD VQQDEw02OTA4MDU1Yy1kOWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyca5Dp/MBCJiP4lN82D9KY/6IqMy9mCPdTADQuTxKgXku09cJB0PllsE9o0y aqPE93arfMC0enLavWUDtrpgZ5hauEaGq3mDLqahBZQyhfGZeqX9n1YA3i4gTNBF EPuVFZo81i2jzTyZkBrS799vKh3CnmGo7gBDTbvFpehUn2RYoILLLHBOKRRByKfv 6JJ4YioxIxvMeVLZQ3KUbhW1f5e//s6N6AHiwS89ziox87fxjT++ULi2oVCunvUC Ch5sZXjpbEY29ppeqj7Q2vjnA29I3V9Z6oZ6zzuXPOIONIye37KgxT5ekcMdsSmE /geNkFliYA3YcS6zp0Phix5nQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrXLXTm h2kpTpU5Bpg8aFBCjqL5MB8GA1UdIwQYMBaAFJWNcJbqLmsWvCSh0EVxnS7FFEl+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhEOC82QjI0QkNDMjFB QkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4YThKS0hRUlhHZExzVVVT WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZMXdsdW91YXhhOEpLSFFSWEdkTHNVVVNYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhEOC82QjI0QkNDMjFBQkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4 YThKS0hRUlhHZExzVVVTWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC2X3/LBiFv8M51R5bcU/Lwv6rHAQVxIaJ2bt+P9NOOXcc2QR0pVFr F8giH3XxUQ03f9bZTqndJli/LDAqUEQNSBd70arQUugNiCpZppHJU5g+BEGWOQBT tcgONWDEs1YIfEO04WsktDGeTuglVfEgc6DmeJNUo1F3TwtzK8//LdZMrXM3cMv4 gi/pF5doyDU6YgJrpCStGETTLzT7o/plR7cfSkA2TXHmr/MK0ecQDSs+Yl2UuyHD kuz6C2tKx3mz1r/vp9EfwTqjOphWPgf8DNZtyjd463YD65YgQ1dt9X8cBYUDSNFD Jiv7bsUkm6bM1Y/Omj/DIk/Qnz6Yyw5Z -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:09 2025 by rpki-client