$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft File: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft (raw, json) Hash identifier: zHqm7LE0FuaDqLwKhlPJmQgN5AOxhcwgOmEzEMZYFBU= Subject key identifier: DE:9E:D5:09:31:34:1D:B9:A3:07:DC:2C:4E:A4:F9:85:7B:E1:CD:19 Authority key identifier: 2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 Certificate issuer: /CN=A91F0CF4/serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Certificate serial: 0C04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft Manifest number: 1462 Signing time: Tue 04 Nov 2025 18:53:14 +0000 Manifest this update: Tue 04 Nov 2025 18:53:13 +0000 Manifest next update: Tue 11 Nov 2025 18:53:13 +0000 Files and hashes: 1: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl (hash: doWzt/XavT2GzThehwaPb91PC7WOPnMHD2neOe4CX9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3076 (0xc04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CF4, serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Validity Not Before: Nov 4 18:53:13 2025 GMT Not After : Nov 11 18:53:13 2025 GMT Subject: CN=690a4b99-6de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f6:19:81:ce:0f:12:dd:a6:8c:7c:95:90:de: ce:07:dc:b2:40:ca:69:43:23:55:d1:ff:70:d6:c8: 76:45:90:e3:d2:41:1a:8f:30:46:bb:62:75:0e:f0: 77:64:24:b7:56:3e:06:2d:53:b7:93:66:b4:08:22: 50:e4:03:1c:7c:60:eb:16:1e:12:7b:90:2a:8b:91: 70:cd:81:c5:5a:ab:b8:c3:b5:e2:90:df:1b:6b:bb: 7c:20:21:55:12:7a:eb:d2:2d:9f:72:b3:d7:cd:93: 4c:22:06:e1:6f:4d:f8:74:40:72:82:e3:98:5f:7c: bd:9a:eb:da:dc:b4:72:c2:bc:50:68:bd:8a:08:1c: a0:06:e1:e6:db:93:b2:e4:a9:0b:ce:b2:0b:a0:1d: af:e1:e6:c6:d3:1a:64:5e:e5:32:0f:fc:b1:d2:6f: 67:8b:43:a0:8c:c5:f8:31:19:92:f4:93:03:13:ad: dd:8d:d5:2e:07:d8:5a:9b:2c:c2:3d:92:2b:5f:6b: 79:52:3a:f0:cd:a9:5f:e6:b1:6f:f2:5a:48:94:7e: 70:20:a9:77:ba:af:f8:d6:df:c8:96:ca:c2:31:e6: 48:0f:71:b5:29:6d:6a:aa:c5:12:b3:53:a4:a6:90: cb:c6:81:9d:65:2d:93:68:d3:49:23:e1:41:dd:6d: b2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9E:D5:09:31:34:1D:B9:A3:07:DC:2C:4E:A4:F9:85:7B:E1:CD:19 X509v3 Authority Key Identifier: keyid:2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f8:cb:e4:34:d9:94:34:89:06:24:c9:19:84:b9:63:7d:92: 0b:28:58:a9:76:b0:43:2b:6b:a5:20:93:f1:0e:5e:75:91:ea: b0:da:db:ce:4a:da:17:c8:d7:14:ed:6b:32:0d:82:b0:cd:94: 4a:7d:dd:4e:77:ba:15:19:05:63:2b:6a:3c:19:5a:17:a8:f5: e1:5f:0b:f0:4f:d3:2d:1f:2e:f4:90:d8:9e:b0:7c:bc:4e:a6: cd:cd:78:e5:d1:1c:88:27:33:e3:d8:96:63:b0:fc:9a:eb:62: 3d:a5:e8:ca:3f:c8:31:a4:b9:16:dc:7a:17:d4:3c:e8:03:0f: 31:6a:7e:d7:05:06:a3:2d:be:9e:75:0a:0f:ca:7e:4d:81:97: 2d:2f:7c:1d:27:a6:f7:b8:1d:11:61:b1:70:ad:6c:6b:93:c8: 97:e2:aa:5d:19:c6:1c:3c:d1:89:e0:24:fe:f1:04:30:41:6f: 61:eb:c9:11:3d:26:d1:87:2f:80:6d:1b:d2:5a:57:10:18:a0: 5d:0c:8c:11:e7:a7:04:4a:3b:d7:f3:c5:08:0b:2a:5b:fc:e0: a2:fe:38:b5:81:67:dd:2c:cf:9b:c4:5f:08:9e:5e:19:e1:db: d5:d3:da:f8:60:5e:35:df:91:71:d8:25:b3:c4:ab:5b:79:ac: 44:40:bd:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDRjQxMTAvBgNVBAUTKDJFQTA2MDJFMEVFNjAxNkI1MEZBRTQwRDkzNjUzQkEz QzE4ODgwNDMwHhcNMjUxMTA0MTg1MzEzWhcNMjUxMTExMTg1MzEzWjAYMRYwFAYD VQQDEw02OTBhNGI5OS02ZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PYZgc4PEt2mjHyVkN7OB9yyQMppQyNV0f9w1sh2RZDj0kEajzBGu2J1DvB3 ZCS3Vj4GLVO3k2a0CCJQ5AMcfGDrFh4Se5Aqi5FwzYHFWqu4w7XikN8ba7t8ICFV Enrr0i2fcrPXzZNMIgbhb034dEByguOYX3y9muva3LRywrxQaL2KCBygBuHm25Oy 5KkLzrILoB2v4ebG0xpkXuUyD/yx0m9ni0OgjMX4MRmS9JMDE63djdUuB9hamyzC PZIrX2t5Ujrwzalf5rFv8lpIlH5wIKl3uq/41t/IlsrCMeZID3G1KW1qqsUSs1Ok ppDLxoGdZS2TaNNJI+FB3W2yywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6e1Qkx NB25owfcLE6k+YV74c0ZMB8GA1UdIwQYMBaAFC6gYC4O5gFrUPrkDZNlO6PBiIBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENGNC85QUU5QTkxMjFG QTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFXdFEtdVFOazJVN284R0ln RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxQmdMZzdtQVd0US11UU5rMlU3bzhHSWdFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MENGNC85QUU5QTkxMjFGQTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFX dFEtdVFOazJVN284R0lnRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf+MvkNNmUNIkGJMkZhLljfZILKFipdrBDK2ulIJPxDl51keqw2tvO StoXyNcU7WsyDYKwzZRKfd1Od7oVGQVjK2o8GVoXqPXhXwvwT9MtHy70kNiesHy8 TqbNzXjl0RyIJzPj2JZjsPya62I9pejKP8gxpLkW3HoX1DzoAw8xan7XBQajLb6e dQoPyn5NgZctL3wdJ6b3uB0RYbFwrWxrk8iX4qpdGcYcPNGJ4CT+8QQwQW9h68kR PSbRhy+AbRvSWlcQGKBdDIwR56cESjvX88UICypb/OCi/ji1gWfdLM+bxF8Inl4Z 4dvV09r4YF4135Fx2CWzxKtbeaxEQL23 -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:26 2025 by rpki-client