$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft File: L3LcETktqlBahWLidjiGBgPNvr8.mft (raw, json) Hash identifier: A5WwPg76LwCvsvEON5+fZvtJgPp+t1tkeY8+hmf2NYQ= Subject key identifier: BD:E8:D8:86:DB:8B:46:E7:8E:83:2E:D2:F7:89:9C:67:75:B8:EA:DA Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF Certificate issuer: /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft Manifest number: 56 Signing time: Mon 03 Nov 2025 07:10:52 +0000 Manifest this update: Mon 03 Nov 2025 07:10:52 +0000 Manifest next update: Mon 10 Nov 2025 07:10:52 +0000 Files and hashes: 1: L3LcETktqlBahWLidjiGBgPNvr8.crl (hash: MTY37tUbaRrOSSshV+Wb2+tV4oHycjvEAtDOUjpgclw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Validity Not Before: Nov 3 07:10:52 2025 GMT Not After : Nov 10 07:10:52 2025 GMT Subject: CN=6908557c-60b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:5b:61:9e:ea:2d:e1:28:06:0c:aa:4e:ca: f0:8a:ea:c1:79:da:f6:3f:ea:da:aa:6a:12:d8:d1: cc:55:1a:ed:fd:c1:65:21:ac:68:26:30:6b:a5:18: f4:8c:64:19:8a:db:01:4b:af:6c:64:2f:84:4c:6f: af:58:ef:09:70:de:e2:9b:6a:d9:17:e0:75:b1:32: 6f:81:2a:00:e2:d6:e7:72:1b:42:34:c9:df:40:d4: 27:85:9b:7e:3d:22:f2:4d:65:53:e7:4e:18:c6:4b: e9:63:32:d7:69:93:f6:2e:5c:68:82:6a:0c:9c:ef: 06:99:c2:fa:4b:64:1a:73:2e:99:fb:20:26:73:20: f2:7d:96:4d:16:8b:fe:2b:3c:23:ee:6e:ea:be:f5: ff:b3:f1:6d:f5:72:5b:17:9f:6a:e2:25:85:77:ef: c9:a1:47:b6:e9:42:a1:c8:26:bf:ed:84:e9:11:d3: f5:62:13:c1:31:5a:8a:47:02:aa:d0:68:a1:36:8a: c5:c3:2f:c3:32:db:2b:fa:08:6e:19:c5:81:d5:8f: bd:00:e0:a1:7c:23:df:09:26:3c:e2:18:34:31:09: 98:bc:b9:c9:06:04:b3:1f:a7:34:90:fc:dd:09:9b: eb:63:50:a9:38:7c:b5:3d:04:d1:38:41:d2:1a:0c: 04:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E8:D8:86:DB:8B:46:E7:8E:83:2E:D2:F7:89:9C:67:75:B8:EA:DA X509v3 Authority Key Identifier: keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:09:de:29:f2:85:6e:2b:07:7f:c3:f9:7a:79:b9:f4:50:02: 70:55:0e:0d:66:b2:ae:90:66:16:f9:c6:ec:bc:3e:3e:65:0d: 17:90:fb:35:03:dd:f4:b7:c5:f5:ad:0e:60:91:45:76:4a:f6: 3a:88:a6:63:e7:77:ae:e8:7b:4e:f3:c0:78:df:22:77:f0:ca: 02:d9:0b:ae:a0:7e:8f:ef:19:8e:74:9d:c2:5a:de:66:a0:71: cb:c9:f3:70:f6:09:3b:aa:16:f5:b7:1c:ee:9b:ba:be:79:24: dc:59:5f:40:93:bf:9d:21:54:9e:7d:18:a4:15:0d:4f:fe:2c: 67:c8:f9:d8:74:e9:e4:76:6e:4f:e2:41:dc:90:06:09:fc:0e: 77:22:7a:53:29:33:3d:52:42:15:e2:38:45:fc:b2:da:59:1c: d3:51:08:3d:e6:ab:f5:66:be:67:b4:77:f6:37:dc:2d:f7:68: ad:bb:73:47:63:53:f1:13:f5:5b:74:b7:e8:0f:36:64:07:67: fd:1b:22:c1:ff:02:27:5d:6e:a2:6b:67:2b:26:48:61:2f:e7: 4c:32:71:91:bf:40:d4:b0:dc:68:08:df:82:cd:ad:ad:f0:27: e3:73:e7:3e:87:70:a7:61:d8:af:f5:ad:da:e9:ea:21:a9:29: f0:7e:c9:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDU5RjExMC8GA1UEBRMoMkY3MkRDMTEzOTJEQUE1MDVBODU2MkUyNzYzODg2MDYw M0NEQkVCRjAeFw0yNTExMDMwNzEwNTJaFw0yNTExMTAwNzEwNTJaMBgxFjAUBgNV BAMTDTY5MDg1NTdjLTYwYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+Rlthnuot4SgGDKpOyvCK6sF52vY/6tqqahLY0cxVGu39wWUhrGgmMGulGPSM ZBmK2wFLr2xkL4RMb69Y7wlw3uKbatkX4HWxMm+BKgDi1udyG0I0yd9A1CeFm349 IvJNZVPnThjGS+ljMtdpk/YuXGiCagyc7waZwvpLZBpzLpn7ICZzIPJ9lk0Wi/4r PCPubuq+9f+z8W31clsXn2riJYV378mhR7bpQqHIJr/thOkR0/ViE8ExWopHAqrQ aKE2isXDL8My2yv6CG4ZxYHVj70A4KF8I98JJjziGDQxCZi8uckGBLMfpzSQ/N0J m+tjUKk4fLU9BNE4QdIaDASjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvejYhtuL RueOgy7S94mcZ3W46towHwYDVR0jBBgwFoAUL3LcETktqlBahWLidjiGBgPNvr8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENTlGLzAxOTA0M0YwMzNG NjExRjA5Q0UzOEU0MUM0RjlBRTAyL0wzTGNFVGt0cWxCYWhXTGlkamlHQmdQTnZy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDNMY0VUa3RxbEJhaFdMaWRqaUdCZ1BOdnI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE NTlGLzAxOTA0M0YwMzNGNjExRjA5Q0UzOEU0MUM0RjlBRTAyL0wzTGNFVGt0cWxC YWhXTGlkamlHQmdQTnZyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJsJ3inyhW4rB3/D+Xp5ufRQAnBVDg1msq6QZhb5xuy8Pj5lDReQ+zUD 3fS3xfWtDmCRRXZK9jqIpmPnd67oe07zwHjfInfwygLZC66gfo/vGY50ncJa3mag ccvJ83D2CTuqFvW3HO6bur55JNxZX0CTv50hVJ59GKQVDU/+LGfI+dh06eR2bk/i QdyQBgn8DncielMpMz1SQhXiOEX8stpZHNNRCD3mq/Vmvme0d/Y33C33aK27c0dj U/ET9Vt0t+gPNmQHZ/0bIsH/AiddbqJrZysmSGEv50wycZG/QNSw3GgI34LNra3w J+Nz5z6HcKdh2K/1rdrp6iGpKfB+yQs= -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:40 2025 by rpki-client