$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft File: L2rfQq_RZAgOox4PO4M4vtbaHlk.mft (raw, json) Hash identifier: SaRC+EBiO3dFNVUfvhkVhvyiVTXuREMiP1jrGgCarAM= Subject key identifier: 5C:E6:37:1B:DE:6B:35:60:AE:60:0D:70:59:5D:60:8B:25:B1:63:47 Authority key identifier: 2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 Certificate issuer: /CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Certificate serial: 09F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft Manifest number: 09EC Signing time: Tue 04 Nov 2025 19:59:14 +0000 Manifest this update: Tue 04 Nov 2025 19:59:14 +0000 Manifest next update: Tue 11 Nov 2025 19:59:14 +0000 Files and hashes: 1: L2rfQq_RZAgOox4PO4M4vtbaHlk.crl (hash: DDgVuWKE0ofevI74pJlSkz34D9xkAwj3EROgABhgJiY=) 2: F3173EDC898C11EA97286262C4F9AE02.roa (hash: BtxRntrFd2gslQewNiqZhW9mWCF+vgLPC26me/9r2bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2547 (0x9f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7164, serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Validity Not Before: Nov 4 19:59:14 2025 GMT Not After : Nov 11 19:59:14 2025 GMT Subject: CN=690a5b12-e126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:9d:3f:48:3b:66:ca:1d:6c:4e:c5:de:c3: 7d:1d:11:5d:8d:21:c3:48:16:4a:f2:45:20:1f:c0: 90:79:8b:32:1d:99:1d:3b:f0:df:5d:83:a3:c5:56: d3:c1:19:6e:e3:aa:a8:6f:b3:9a:35:63:7a:d1:2e: 21:cc:19:3a:dd:4e:54:de:44:c2:b7:46:bd:a0:ef: 43:8a:8e:be:63:d6:4b:9a:e4:35:cf:cf:03:81:e3: b3:e7:1d:9a:d1:b1:8a:73:08:b0:86:3b:c7:59:ea: 65:0e:8d:76:1c:df:ae:12:69:7a:76:89:28:f2:b2: 77:49:6a:7d:a8:87:c6:d6:37:e6:6e:d6:ed:2f:d9: aa:c9:99:04:43:a6:b7:ec:7b:c1:33:55:03:94:32: ef:3f:92:48:f1:e3:4f:d4:a8:f0:f8:56:b3:67:53: f5:f7:27:ba:9d:02:05:2b:ec:11:10:bf:ce:f1:98: 1a:22:c8:4e:e0:fd:e2:9a:33:a7:d2:f7:06:c1:58: b2:db:58:28:df:db:bd:af:7e:cb:b8:5f:59:d4:39: e6:28:b9:80:0b:75:9d:b4:91:44:ce:87:e2:23:2a: da:98:63:60:06:2f:c5:22:b4:ed:1b:9b:f0:33:ba: 0a:9e:08:b7:9f:e3:a1:cf:6c:70:fe:50:55:7e:92: c6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E6:37:1B:DE:6B:35:60:AE:60:0D:70:59:5D:60:8B:25:B1:63:47 X509v3 Authority Key Identifier: keyid:2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:83:a4:54:b8:97:8f:75:f6:24:10:60:1a:ed:48:b8:76:40: 1a:5f:33:c3:34:e1:a1:e9:15:a4:86:50:ba:29:dc:47:b8:21: 65:e1:75:42:5f:fc:49:33:26:ff:3d:bf:06:1a:97:e8:5c:61: f7:0f:0b:f1:5c:1e:6d:9c:39:7a:cd:8d:3d:b7:0c:8b:62:cc: c1:67:eb:72:80:1f:eb:9c:6f:da:f9:76:10:c6:c3:d7:e4:b3: 45:ac:d5:16:6e:b4:e6:13:42:9b:5e:9d:fd:aa:2d:13:6c:de: 89:37:6a:9f:92:2c:ea:ca:fb:dc:63:58:d2:6c:c6:8b:23:c6: 5d:69:1d:d0:86:99:88:39:e1:32:58:35:0a:62:81:aa:e1:6b: 95:c8:95:bb:9c:39:53:e9:35:5e:d8:3c:a7:b9:29:d3:bb:6b: fe:3b:4a:15:c8:e3:d6:08:3a:ef:20:4d:a4:f0:c3:43:d0:9c: 88:7d:31:eb:9d:e0:80:5b:49:06:8b:59:5d:af:41:d4:60:0e: 1a:40:09:e7:4e:c4:c7:b1:06:aa:8f:78:2e:36:f4:0a:7e:ec: 88:ae:79:70:62:7f:df:50:bc:ce:01:35:3e:cc:a2:9c:c4:a9: ca:f2:43:ea:ed:2f:4e:b7:51:1c:de:35:54:c2:fa:58:85:1d: cb:f9:98:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxNjQxMTAvBgNVBAUTKDJGNkFERjQyQUZEMTY0MDgwRUEzMUUwRjNCODMzOEJF RDZEQTFFNTkwHhcNMjUxMTA0MTk1OTE0WhcNMjUxMTExMTk1OTE0WjAYMRYwFAYD VQQDEw02OTBhNWIxMi1lMTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3ydP0g7ZsodbE7F3sN9HRFdjSHDSBZK8kUgH8CQeYsyHZkdO/DfXYOjxVbT wRlu46qob7OaNWN60S4hzBk63U5U3kTCt0a9oO9Dio6+Y9ZLmuQ1z88DgeOz5x2a 0bGKcwiwhjvHWeplDo12HN+uEml6doko8rJ3SWp9qIfG1jfmbtbtL9mqyZkEQ6a3 7HvBM1UDlDLvP5JI8eNP1Kjw+FazZ1P19ye6nQIFK+wREL/O8ZgaIshO4P3imjOn 0vcGwViy21go39u9r37LuF9Z1DnmKLmAC3WdtJFEzofiIyramGNgBi/FIrTtG5vw M7oKngi3n+Ohz2xw/lBVfpLGiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzmNxve azVgrmANcFldYIslsWNHMB8GA1UdIwQYMBaAFC9q30Kv0WQIDqMeDzuDOL7W2h5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzE2NC8yMjhBQkY3NDg5 OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpBZ09veDRQTzRNNHZ0YmFI bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wycmZRcV9SWkFnT294NFBPNE00dnRiYUhsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzE2NC8yMjhBQkY3NDg5OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpB Z09veDRQTzRNNHZ0YmFIbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4g6RUuJePdfYkEGAa7Ui4dkAaXzPDNOGh6RWkhlC6KdxHuCFl4XVC X/xJMyb/Pb8GGpfoXGH3DwvxXB5tnDl6zY09twyLYszBZ+tygB/rnG/a+XYQxsPX 5LNFrNUWbrTmE0KbXp39qi0TbN6JN2qfkizqyvvcY1jSbMaLI8ZdaR3QhpmIOeEy WDUKYoGq4WuVyJW7nDlT6TVe2DynuSnTu2v+O0oVyOPWCDrvIE2k8MND0JyIfTHr neCAW0kGi1ldr0HUYA4aQAnnTsTHsQaqj3guNvQKfuyIrnlwYn/fULzOATU+zKKc xKnK8kPq7S9Ot1Ec3jVUwvpYhR3L+ZhZ -----END CERTIFICATE-----Generated at Wed Nov 5 16:40:53 2025 by rpki-client