$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft File: ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json) Hash identifier: JPAYHuwO3MwYRn74S5hePdOv16rQqUUdoCUI0twzKM8= Subject key identifier: E4:EE:4C:CC:58:DE:65:F1:91:36:A7:50:8A:CD:D8:CD:20:71:E1:C2 Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF Certificate issuer: /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft Manifest number: 01B9 Signing time: Wed 05 Nov 2025 03:11:40 +0000 Manifest this update: Wed 05 Nov 2025 03:11:39 +0000 Manifest next update: Wed 12 Nov 2025 03:11:39 +0000 Files and hashes: 1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: yBu8+k3WWxxb+E/GbUM6YRWtRIXEK0in25LoQMkfKqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Validity Not Before: Nov 5 03:11:39 2025 GMT Not After : Nov 12 03:11:39 2025 GMT Subject: CN=690ac06b-1ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1d:ae:77:cf:2b:39:c3:6b:a3:af:90:f0:e2: b1:bf:ee:bd:3a:50:6e:5e:83:e9:b4:1d:26:85:a7: ff:19:37:c0:de:72:28:c6:27:c1:64:74:44:85:33: 63:f0:c7:55:dc:c7:4c:94:e8:22:c3:bf:ed:d5:24: 0d:55:92:3e:28:24:1e:1f:d3:e3:4f:76:26:c1:ca: a5:5a:36:ba:a5:fa:7a:1a:7e:53:04:e2:d3:0d:89: e2:b6:db:68:7c:3e:9a:3f:08:1e:30:d1:50:ab:f9: 62:b1:c7:6f:f6:2d:cb:77:13:7a:ac:c4:c4:1a:d8: 53:a3:ef:16:f5:b5:a3:6b:70:71:15:dc:e5:08:e5: 71:29:5a:b0:c4:b8:7f:ed:dd:63:b2:bb:dd:e3:34: 40:a1:95:7f:97:05:64:f3:9c:b5:b2:ef:d9:d2:5e: 57:a3:eb:2b:09:8e:f9:f1:fb:74:16:64:e8:bb:91: 70:15:00:47:60:d9:4a:cd:0d:52:ba:8f:c1:5f:11: 3f:af:ed:a9:e4:d2:6d:5e:ba:84:7c:1b:11:57:75: 93:d0:88:88:55:15:02:2c:15:78:a0:ea:60:55:04: f0:42:7e:a1:a1:01:03:ea:33:56:57:10:6d:c8:a2: 57:5b:df:a8:88:63:de:77:8d:28:32:a0:6d:67:a5: a7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EE:4C:CC:58:DE:65:F1:91:36:A7:50:8A:CD:D8:CD:20:71:E1:C2 X509v3 Authority Key Identifier: keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:12:15:b4:57:b5:6e:dd:df:a0:fe:13:e6:22:57:0c:7d:f8: b5:3c:ce:ca:20:dc:f7:32:48:a2:ac:99:76:ce:bd:f6:ef:11: 14:a0:f6:e7:20:fe:c0:05:54:0f:96:b1:e2:db:be:a6:b0:3d: cf:00:7b:00:c8:63:09:9d:e5:96:0e:6b:a6:a4:2b:a1:40:92: e7:04:5c:ff:17:48:cb:d9:ac:77:ed:6b:31:ec:a4:ab:65:b9: 8f:4d:45:14:e7:1d:fc:36:5c:50:ce:35:20:1e:2b:b4:02:12: 16:b0:7a:c2:32:32:50:d4:68:b6:76:5e:f3:ea:7d:6d:5d:3c: aa:2e:48:bc:62:cf:c6:aa:56:d7:12:88:8f:a8:e7:b6:2b:40: e0:ca:61:09:e6:d4:0f:d1:d5:82:82:f3:66:31:ae:2a:c8:77: f1:1b:dc:db:3f:22:2f:57:4f:ce:39:a6:a6:9c:3c:14:74:13: 0f:67:0a:3f:3b:d3:8a:86:44:fe:d2:b3:e8:ad:33:91:5a:e1: 8d:e1:7e:e4:73:13:59:60:0b:b0:ec:67:d6:58:eb:48:fb:d4: 87:69:e7:f5:84:81:97:ac:cd:b9:a9:37:29:f4:fd:80:1f:a2: be:9a:c8:13:8f:9f:d6:04:ae:7e:c4:c8:87:13:9a:c1:be:b3: 90:ba:ff:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwRjgxMTAvBgNVBAUTKDk2MzNGNjJGRkIyMTg2NzZFQkM5M0YxQzM3Njk2NDlD MEM1RDg0REYwHhcNMjUxMTA1MDMxMTM5WhcNMjUxMTEyMDMxMTM5WjAYMRYwFAYD VQQDEw02OTBhYzA2Yi0xY2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxR2ud88rOcNro6+Q8OKxv+69OlBuXoPptB0mhaf/GTfA3nIoxifBZHREhTNj 8MdV3MdMlOgiw7/t1SQNVZI+KCQeH9PjT3YmwcqlWja6pfp6Gn5TBOLTDYnittto fD6aPwgeMNFQq/liscdv9i3LdxN6rMTEGthTo+8W9bWja3BxFdzlCOVxKVqwxLh/ 7d1jsrvd4zRAoZV/lwVk85y1su/Z0l5Xo+srCY758ft0FmTou5FwFQBHYNlKzQ1S uo/BXxE/r+2p5NJtXrqEfBsRV3WT0IiIVRUCLBV4oOpgVQTwQn6hoQED6jNWVxBt yKJXW9+oiGPed40oMqBtZ6WndQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTuTMxY 3mXxkTanUIrN2M0gceHCMB8GA1UdIwQYMBaAFJYz9i/7IYZ268k/HDdpZJwMXYTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjBGOC9CMDZGQUUyRTE5 N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhuYnJ5VDhjTjJsa25BeGRo TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xqUDJMX3NoaG5icnlUOGNOMmxrbkF4ZGhOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjBGOC9CMDZGQUUyRTE5N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhu YnJ5VDhjTjJsa25BeGRoTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpEhW0V7Vu3d+g/hPmIlcMffi1PM7KINz3MkiirJl2zr327xEUoPbn IP7ABVQPlrHi276msD3PAHsAyGMJneWWDmumpCuhQJLnBFz/F0jL2ax37Wsx7KSr ZbmPTUUU5x38NlxQzjUgHiu0AhIWsHrCMjJQ1Gi2dl7z6n1tXTyqLki8Ys/GqlbX EoiPqOe2K0DgymEJ5tQP0dWCgvNmMa4qyHfxG9zbPyIvV0/OOaamnDwUdBMPZwo/ O9OKhkT+0rPorTORWuGN4X7kcxNZYAuw7GfWWOtI+9SHaef1hIGXrM25qTcp9P2A H6K+msgTj5/WBK5+xMiHE5rBvrOQuv/R -----END CERTIFICATE-----Generated at Wed Nov 5 21:00:47 2025 by rpki-client