$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft File: lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json) Hash identifier: uk6ZcyKdLN7mfm+dsXoZJtI62L9HKnUgQA6aaKUPrr0= Subject key identifier: D7:EA:55:04:CB:20:54:77:0F:39:B6:C9:E9:5C:12:DA:5C:87:D5:B5 Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF Certificate issuer: /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft Manifest number: 011A Signing time: Thu 23 Oct 2025 06:44:42 +0000 Manifest this update: Thu 23 Oct 2025 06:44:41 +0000 Manifest next update: Thu 30 Oct 2025 06:44:41 +0000 Files and hashes: 1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: IZZUcyngBU7j9gunW2G2WxrPCFqRKtpjU0Plax8S4+M=) 2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: MhVCwr+DLav+lA/a+EyaekFbp041Ik8QtWt4lKnp/qM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 06:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Validity Not Before: Oct 23 06:44:41 2025 GMT Not After : Oct 30 06:44:41 2025 GMT Subject: CN=68f9ceda-f2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:65:eb:c1:36:d6:85:d1:11:01:b2:b5:c6: 32:4a:a7:4f:07:0c:3b:86:bc:a5:f1:59:f4:ef:26: cf:66:ab:3f:53:9a:f4:fe:6f:f8:d2:03:15:58:4e: 46:56:70:75:be:e2:ac:7c:5c:6b:f4:5a:e5:48:f8: 32:a0:8e:67:18:8e:5e:2b:27:88:fd:3d:e5:80:53: 9b:e7:4c:d5:b8:18:2f:26:04:84:98:9c:09:26:07: 91:6f:54:24:0a:6e:75:d3:46:d0:1d:af:79:59:37: 7d:83:5a:8a:77:ce:36:b9:1d:a4:67:8d:74:ec:de: e3:72:e3:8a:aa:76:83:f4:ee:e7:95:e9:5b:bb:2c: cf:02:30:74:eb:a7:67:33:4f:18:c0:42:15:66:48: da:03:09:af:da:00:ca:ef:8f:36:53:81:6d:43:07: 08:4c:05:5a:51:37:c8:f4:ea:71:d1:80:32:04:a6: 08:5d:5c:e6:a6:03:d4:b5:c2:5c:98:a2:84:ac:b0: a3:21:a1:09:5d:03:de:a4:43:8a:4b:2c:25:ad:6a: ab:4f:88:6b:eb:03:71:6d:63:0b:a1:0d:88:ac:64: 9c:39:12:7a:98:34:9d:da:8d:81:14:4c:4d:c8:02: 9a:cd:fc:5e:d6:73:e3:78:e7:ca:ec:06:c1:c4:0d: 17:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EA:55:04:CB:20:54:77:0F:39:B6:C9:E9:5C:12:DA:5C:87:D5:B5 X509v3 Authority Key Identifier: keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:37:07:a6:06:dc:ad:9b:3e:ae:e5:67:90:04:18:c7:d3:0a: f7:44:3e:9a:ce:45:a2:65:15:52:a3:27:d6:8f:59:23:a3:f6: d2:3c:31:7d:0d:ff:b7:63:58:ff:0a:28:38:fc:a2:ff:25:e5: 9e:5b:92:f5:6c:3e:d0:c0:8f:fc:c7:fb:f0:38:c6:0c:af:2a: 19:8e:4c:ab:24:0b:41:25:43:88:28:1c:58:9f:ec:12:3f:00: b5:02:f4:93:8b:38:e9:0d:ea:dc:3f:35:c3:9f:e8:6e:1a:96: 1b:de:05:22:f0:bb:d8:93:82:97:02:2c:77:25:4a:3c:2c:7e: c9:8b:b9:9f:dd:28:86:dc:a1:79:7c:a8:3c:bc:a9:f3:0b:8f: e1:ca:14:07:28:23:bf:e1:f4:e8:d4:84:3e:db:fa:10:58:c3: 5c:6b:f5:17:d8:3e:21:b9:2b:b3:31:17:30:94:a2:07:26:a3: b0:b9:16:8e:d9:c7:cd:1e:16:ae:99:b9:32:5d:08:bb:6a:17: 55:c4:46:63:3d:c7:a5:89:1a:e5:cd:a5:94:28:13:7c:fc:11: 5c:12:64:21:8b:f2:1e:fe:c8:d8:53:0f:05:22:d3:2b:62:22: d7:92:c8:9c:3d:63:b2:20:1c:bf:36:b6:d8:fb:2b:46:28:57: 6e:66:f9:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJFNUUxMTAvBgNVBAUTKDk2QjY1MDEzMTJGOUUxMkVCMTlBNjRGNjIyRTE3Q0Q0 Mjc5REYwQ0YwHhcNMjUxMDIzMDY0NDQxWhcNMjUxMDMwMDY0NDQxWjAYMRYwFAYD VQQDEw02OGY5Y2VkYS1mMmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxq5l68E21oXREQGytcYySqdPBww7hryl8Vn07ybPZqs/U5r0/m/40gMVWE5G VnB1vuKsfFxr9FrlSPgyoI5nGI5eKyeI/T3lgFOb50zVuBgvJgSEmJwJJgeRb1Qk Cm5100bQHa95WTd9g1qKd842uR2kZ4107N7jcuOKqnaD9O7nlelbuyzPAjB066dn M08YwEIVZkjaAwmv2gDK7482U4FtQwcITAVaUTfI9Opx0YAyBKYIXVzmpgPUtcJc mKKErLCjIaEJXQPepEOKSywlrWqrT4hr6wNxbWMLoQ2IrGScORJ6mDSd2o2BFExN yAKazfxe1nPjeOfK7AbBxA0XSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfqVQTL IFR3Dzm2yelcEtpch9W1MB8GA1UdIwQYMBaAFJa2UBMS+eEusZpk9iLhfNQnnfDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkU1RS84M0I4NzJGNDAz OUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRTNnhtbVQySXVGODFDZWQ4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xyWlFFeEw1NFM2eG1tVDJJdUY4MUNlZDhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkU1RS84M0I4NzJGNDAzOUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRT NnhtbVQySXVGODFDZWQ4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1NwemBtytmz6u5WeQBBjH0wr3RD6azkWiZRVSoyfWj1kjo/bSPDF9 Df+3Y1j/Cig4/KL/JeWeW5L1bD7QwI/8x/vwOMYMryoZjkyrJAtBJUOIKBxYn+wS PwC1AvSTizjpDercPzXDn+huGpYb3gUi8LvYk4KXAix3JUo8LH7Ji7mf3SiG3KF5 fKg8vKnzC4/hyhQHKCO/4fTo1IQ+2/oQWMNca/UX2D4huSuzMRcwlKIHJqOwuRaO 2cfNHhaumbkyXQi7ahdVxEZjPceliRrlzaWUKBN8/BFcEmQhi/Ie/sjYUw8FItMr YiLXksicPWOyIBy/NrbY+ytGKFduZvlz -----END CERTIFICATE-----Generated at Thu Oct 23 20:09:02 2025 by rpki-client