$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft File: LsoZlE2psLqHJb5wu-9Unl0huTc.mft (raw, json) Hash identifier: b37fKa4SWfTAJL/q9Ck92Gv+jQkJjHs8CLTFwPQLAMQ= Subject key identifier: C1:D7:EB:C6:ED:63:5B:A2:E6:7B:10:6B:21:D2:EF:3F:1F:CA:1E:CC Authority key identifier: 2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 Certificate issuer: /CN=A91F0C55/serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Certificate serial: 07FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft Manifest number: 07F7 Signing time: Sun 02 Nov 2025 20:59:24 +0000 Manifest this update: Sun 02 Nov 2025 20:59:24 +0000 Manifest next update: Sun 09 Nov 2025 20:59:24 +0000 Files and hashes: 1: LsoZlE2psLqHJb5wu-9Unl0huTc.crl (hash: srdn0Rt+PFd3JB5l8J4qjl8Crag2aLTmoBHFJ3a9UYM=) 2: 29B0FABC031511EB8CE8EF17C4F9AE02.roa (hash: sG7UL926kP/YZ39ExAkg0TB2U8tUiq8ceCaDw+3J2EY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C55, serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Validity Not Before: Nov 2 20:59:24 2025 GMT Not After : Nov 9 20:59:24 2025 GMT Subject: CN=6907c62c-e98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2c:b2:d7:16:7e:06:f4:4e:7a:df:b7:87:d7: e2:40:8f:02:6a:b3:34:69:fc:72:ed:4b:9e:50:ab: 32:c5:f8:b3:b6:20:63:f1:fc:16:08:a1:f1:ca:f9: ab:50:be:61:70:f2:62:60:2f:95:01:2b:8c:c7:a3: 3b:4e:d7:af:50:e3:55:aa:30:4f:29:75:45:d0:2b: 01:76:b9:65:09:16:cd:ed:bf:86:b3:e4:e0:6c:80: f5:df:fb:e4:16:ae:ee:bf:51:8b:14:7a:97:b9:f4: 24:e3:45:e4:1f:64:77:11:96:9c:5c:25:10:17:6b: 32:9f:ca:26:4e:32:d5:9a:7f:36:36:03:24:49:6c: 23:d9:80:f8:5a:70:44:3c:24:ce:b3:c1:d8:9d:be: 68:e2:e8:01:00:26:ea:93:63:7d:05:59:6f:f0:75: 08:64:6c:a3:88:68:4d:78:93:45:7f:c4:8d:fe:9a: 69:53:f8:3f:bb:4d:c1:84:bd:37:8b:5f:d0:02:c3: e5:f6:f5:de:85:24:00:12:72:0a:42:18:bd:e0:96: fd:fc:d8:69:3d:6c:57:23:d3:7a:22:fc:2f:3d:ca: ba:76:2a:aa:6c:41:47:da:76:58:b4:f1:09:57:4f: 24:90:e7:d6:e1:cb:be:a9:c9:06:d3:ae:74:21:f1: 18:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D7:EB:C6:ED:63:5B:A2:E6:7B:10:6B:21:D2:EF:3F:1F:CA:1E:CC X509v3 Authority Key Identifier: keyid:2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:eb:e2:4c:ac:ea:7c:e1:74:ff:c5:6a:63:72:43:96:c2:6d: a4:f3:23:6b:e3:90:82:e4:fe:01:45:09:24:72:75:69:09:5b: bd:12:ca:76:2f:d5:34:06:09:56:63:14:7c:5e:04:d3:ac:40: da:4d:c3:52:50:f9:8f:38:04:14:8f:2f:73:ba:c9:b5:e3:8d: 9f:e0:5e:42:73:f5:d5:de:df:da:41:5a:84:51:10:e2:61:50: 54:24:b7:82:9d:8c:66:a8:c2:9f:2c:45:0c:b3:64:30:8c:2b: 42:d5:35:01:de:25:37:01:81:c0:31:a9:8d:7d:2b:e5:aa:9a: 2d:18:86:a6:8a:36:4a:36:8d:86:e6:ce:df:fa:11:8f:f0:57: 66:89:32:f2:18:59:aa:9e:a8:e0:be:12:ab:99:c8:6a:f3:ad: cd:42:df:0d:79:8c:33:7a:3d:15:f8:5a:b9:bc:07:bd:06:75: 93:17:83:07:8c:3d:98:6c:cc:d7:6f:86:f9:69:f6:ba:71:73: 0b:f8:3c:b5:34:d1:54:3b:59:2f:16:2f:16:6d:a8:42:15:ec: 08:51:26:1b:ad:27:66:41:5e:7b:9b:01:f2:57:d9:86:57:37: c6:7e:e3:f8:1b:41:3e:f2:e2:32:11:df:e5:88:d1:71:6d:3f: 77:cc:54:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNTUxMTAvBgNVBAUTKDJFQ0ExOTk0NERBOUIwQkE4NzI1QkU3MEJCRUY1NDlF NUQyMUI5MzcwHhcNMjUxMTAyMjA1OTI0WhcNMjUxMTA5MjA1OTI0WjAYMRYwFAYD VQQDEw02OTA3YzYyYy1lOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Cyy1xZ+BvROet+3h9fiQI8CarM0afxy7UueUKsyxfiztiBj8fwWCKHxyvmr UL5hcPJiYC+VASuMx6M7TtevUONVqjBPKXVF0CsBdrllCRbN7b+Gs+TgbID13/vk Fq7uv1GLFHqXufQk40XkH2R3EZacXCUQF2syn8omTjLVmn82NgMkSWwj2YD4WnBE PCTOs8HYnb5o4ugBACbqk2N9BVlv8HUIZGyjiGhNeJNFf8SN/pppU/g/u03BhL03 i1/QAsPl9vXehSQAEnIKQhi94Jb9/NhpPWxXI9N6IvwvPcq6diqqbEFH2nZYtPEJ V08kkOfW4cu+qckG0650IfEYNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHX68bt Y1ui5nsQayHS7z8fyh7MMB8GA1UdIwQYMBaAFC7KGZRNqbC6hyW+cLvvVJ5dIbk3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM1NS80MTU3RkY5NjAz MTMxMUVCQTcwQ0M4MTJDNEY5QUUwMi9Mc29abEUycHNMcUhKYjV3dS05VW5sMGh1 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzb1psRTJwc0xxSEpiNXd1LTlVbmwwaHVUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEM1NS80MTU3RkY5NjAzMTMxMUVCQTcwQ0M4MTJDNEY5QUUwMi9Mc29abEUycHNM cUhKYjV3dS05VW5sMGh1VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB56+JMrOp84XT/xWpjckOWwm2k8yNr45CC5P4BRQkkcnVpCVu9Esp2 L9U0BglWYxR8XgTTrEDaTcNSUPmPOAQUjy9zusm1442f4F5Cc/XV3t/aQVqEURDi YVBUJLeCnYxmqMKfLEUMs2QwjCtC1TUB3iU3AYHAMamNfSvlqpotGIamijZKNo2G 5s7f+hGP8FdmiTLyGFmqnqjgvhKrmchq863NQt8NeYwzej0V+Fq5vAe9BnWTF4MH jD2YbMzXb4b5afa6cXML+Dy1NNFUO1kvFi8WbahCFewIUSYbrSdmQV57mwHyV9mG VzfGfuP4G0E+8uIyEd/liNFxbT93zFRD -----END CERTIFICATE-----Generated at Tue Nov 4 01:06:05 2025 by rpki-client