$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft File: L0SuugpVRAZYiXBbwu8c2uEVgyU.mft (raw, json) Hash identifier: IcGiIZmRFoXd3um17y3OnMst55PbwWiq/fy+TNcnJII= Subject key identifier: BA:13:59:BB:43:56:C4:B0:38:AC:CB:86:17:AC:6D:71:6D:1A:DB:43 Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 Certificate issuer: /CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Certificate serial: 3522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft Manifest number: 34FF Signing time: Mon 20 Oct 2025 14:50:13 +0000 Manifest this update: Mon 20 Oct 2025 14:50:12 +0000 Manifest next update: Mon 27 Oct 2025 14:50:12 +0000 Files and hashes: 1: L0SuugpVRAZYiXBbwu8c2uEVgyU.crl (hash: 530CwIGrH0ZVHEB3lh6lq77SU6D+EGdjvFEsyedW+Ik=) 2: CBCF6A88358611F08913BB23C4F9AE02.roa (hash: yZVCdma3V4dQKQMPhMiZF1dGAyhRhWyJLkEIKyUx++k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13602 (0x3522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Validity Not Before: Oct 20 14:50:12 2025 GMT Not After : Oct 27 14:50:12 2025 GMT Subject: CN=68f64c25-d918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:85:54:44:ea:e1:f1:7f:d3:e2:5c:b9:9d:3d: 94:c6:26:06:f7:5c:93:28:1e:f7:55:1b:61:09:e5: 00:7a:f0:5a:a0:c9:4f:af:af:ec:83:42:e3:77:3b: 5f:45:9f:a3:92:76:2f:ac:28:85:b7:d6:e8:7d:f1: ce:f0:ae:02:ef:ef:f5:16:ec:79:36:42:aa:d0:09: f8:94:15:1b:1d:14:fa:1c:01:bc:60:ee:97:e8:ec: 4c:28:ac:01:4c:a1:cc:f8:86:20:87:c0:23:00:47: ee:08:1c:c7:50:ab:44:d1:89:40:6d:31:30:25:48: 35:3c:c5:60:c2:22:67:cd:11:a7:19:f2:a1:1c:82: 6a:fd:da:fb:e0:8d:1b:95:28:f7:25:d0:01:a1:4f: 5d:9b:23:41:69:fa:1f:f1:e4:74:67:c8:6d:3b:2c: e3:5c:9c:57:c3:bb:56:d2:00:8b:af:17:4c:cb:d2: ac:5c:a2:d4:e0:b7:42:61:23:88:f3:07:c0:b0:c2: 9e:4f:fa:9d:b0:be:5c:52:ba:d2:c0:94:ac:a4:7c: 08:9e:b6:15:02:16:71:05:e2:90:4f:24:83:5b:76: b7:a5:4b:21:98:3a:ad:5e:1f:bb:19:71:e5:ff:24: af:39:3d:97:45:ab:5e:a5:25:2f:40:1f:fc:b0:e2: 8f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:13:59:BB:43:56:C4:B0:38:AC:CB:86:17:AC:6D:71:6D:1A:DB:43 X509v3 Authority Key Identifier: keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:e9:74:eb:08:9a:b8:e5:c0:a4:ff:8a:bd:72:a5:af:1d:21: 1a:2f:cf:4c:ab:34:71:33:91:c9:4a:3e:56:9e:f6:62:ea:7d: 1c:61:54:0c:2b:04:87:2a:17:29:55:71:f4:f7:7b:fc:d1:bb: ac:f2:a2:6c:81:77:88:87:2c:78:f6:97:07:c8:78:5e:c6:a0: 25:b6:d9:a2:5c:43:89:c7:ec:89:53:e2:c8:30:7d:c6:3e:bb: f8:59:1c:87:2a:3f:2d:6c:56:c4:f5:b0:d3:cb:ab:f6:87:70: 30:f8:8a:8e:3b:d7:46:38:38:43:ec:fe:f7:93:50:65:fe:c8: 30:af:e3:21:37:75:cc:35:cd:a2:f3:64:02:ca:05:63:c4:99: 94:39:d7:4e:43:91:b1:a2:f8:d9:3b:81:44:29:3f:f4:22:1b: 49:e8:68:21:65:9f:ed:e7:11:42:7d:5e:c0:41:1e:14:22:bd: 89:79:e8:bf:45:98:0d:e6:8d:ef:9e:04:a2:c6:8e:46:0d:96: 28:78:94:37:00:3b:f5:95:a9:fb:82:c1:4b:de:8c:ec:09:3d: 1b:c9:44:17:8f:47:9f:04:09:49:ed:81:c5:1d:e1:4c:ad:ca: 52:f4:34:73:d4:e3:3d:d5:72:bb:a2:28:80:8b:31:be:4b:e8: e6:a0:f9:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDJGNDRBRUJBMEE1NTQ0MDY1ODg5NzA1QkMyRUYxQ0RB RTExNTgzMjUwHhcNMjUxMDIwMTQ1MDEyWhcNMjUxMDI3MTQ1MDEyWjAYMRYwFAYD VQQDEw02OGY2NGMyNS1kOTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4VUROrh8X/T4ly5nT2UxiYG91yTKB73VRthCeUAevBaoMlPr6/sg0Ljdztf RZ+jknYvrCiFt9boffHO8K4C7+/1Fux5NkKq0An4lBUbHRT6HAG8YO6X6OxMKKwB TKHM+IYgh8AjAEfuCBzHUKtE0YlAbTEwJUg1PMVgwiJnzRGnGfKhHIJq/dr74I0b lSj3JdABoU9dmyNBafof8eR0Z8htOyzjXJxXw7tW0gCLrxdMy9KsXKLU4LdCYSOI 8wfAsMKeT/qdsL5cUrrSwJSspHwInrYVAhZxBeKQTySDW3a3pUshmDqtXh+7GXHl /ySvOT2XRatepSUvQB/8sOKPgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoTWbtD VsSwOKzLhhesbXFtGttDMB8GA1UdIwQYMBaAFC9ErroKVUQGWIlwW8LvHNrhFYMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9BMzZBNjI2RTFE OTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJBWllpWEJid3U4YzJ1RVZn eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wwU3V1Z3BWUkFaWWlYQmJ3dThjMnVFVmd5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC9BMzZBNjI2RTFEOTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJB WllpWEJid3U4YzJ1RVZneVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU6XTrCJq45cCk/4q9cqWvHSEaL89MqzRxM5HJSj5WnvZi6n0cYVQM KwSHKhcpVXH093v80bus8qJsgXeIhyx49pcHyHhexqAlttmiXEOJx+yJU+LIMH3G Prv4WRyHKj8tbFbE9bDTy6v2h3Aw+IqOO9dGODhD7P73k1Bl/sgwr+MhN3XMNc2i 82QCygVjxJmUOddOQ5GxovjZO4FEKT/0IhtJ6GghZZ/t5xFCfV7AQR4UIr2Jeei/ RZgN5o3vngSixo5GDZYoeJQ3ADv1lan7gsFL3ozsCT0byUQXj0efBAlJ7YHFHeFM rcpS9DRz1OM91XK7oiiAizG+S+jmoPmk -----END CERTIFICATE-----Generated at Mon Oct 20 17:24:18 2025 by rpki-client