$ rpki-client -vvf rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft File: l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft (raw, json) Hash identifier: SiW1bQuYR6PeWMb2YcNEdnOeMTL0UTPj+BpnjQW/Gts= Subject key identifier: 73:83:DF:F2:C8:CD:A9:DD:4C:46:2B:00:1F:E5:17:C6:14:DE:B8:74 Authority key identifier: 97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1 Certificate issuer: /CN=A91309C9/serialNumber=97958FFFE696D80C57636524A46E18234176FBC1 Certificate serial: 0452 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft Manifest number: 044D Signing time: Sun 19 Oct 2025 02:06:22 +0000 Manifest this update: Sun 19 Oct 2025 02:06:22 +0000 Manifest next update: Sun 26 Oct 2025 02:06:22 +0000 Files and hashes: 1: l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl (hash: xUIWpE845Msf51+qIYseX+tJw+4OYKsNknLMVfKY2K8=) 2: 46BFB17C739711ECAD333D27C4F9AE02.roa (hash: 6m2q3lRXLAFrPlHDZxzNnpenf3mKGBo+gMVhi6EnOZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91309C9, serialNumber=97958FFFE696D80C57636524A46E18234176FBC1 Validity Not Before: Oct 19 02:06:22 2025 GMT Not After : Oct 26 02:06:22 2025 GMT Subject: CN=68f4479e-c05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:aa:e4:13:8f:20:3c:0b:65:1f:54:04:ef: c3:b7:d3:70:ed:df:5f:ca:ba:e5:7c:07:83:32:8e: 5a:eb:89:e7:7b:43:4f:d6:8d:d5:a1:47:7a:10:3f: 2f:89:16:4d:90:f5:3f:8c:14:c3:ce:7f:f2:1f:33: c9:ba:b2:fe:b7:f4:ff:2f:cd:14:7f:cf:61:36:79: 4d:a1:de:f2:f7:b3:3e:77:a2:dc:a2:79:fd:9d:9d: 1b:06:5a:c1:0b:17:3c:26:2f:d4:04:7e:f3:2b:16: 81:1e:aa:a6:ed:20:6b:d1:73:73:45:1d:ad:14:e9: 30:a0:6e:a6:c5:b1:90:fd:03:1a:ec:4e:61:32:8b: b0:00:13:45:07:a8:a7:e6:15:bd:b0:66:73:28:e8: 43:c3:92:2f:e8:19:2a:c3:32:1a:c9:84:84:78:d4: 81:54:fe:1d:eb:c0:80:ea:e1:d2:cb:4a:1f:ca:e5: 29:f5:a6:65:aa:91:e2:97:54:1b:56:1a:3e:4a:cc: ed:f6:25:ac:b0:71:fb:d5:23:c1:ba:1a:14:7b:1e: 77:6f:bd:a7:05:0c:13:f8:3e:c6:58:02:d0:db:25: 82:ed:2f:93:ae:fd:08:25:99:6c:1b:a9:d7:47:89: 20:04:66:b0:a1:8f:23:58:f2:3d:27:d8:03:82:6d: ee:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:83:DF:F2:C8:CD:A9:DD:4C:46:2B:00:1F:E5:17:C6:14:DE:B8:74 X509v3 Authority Key Identifier: keyid:97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:1b:73:21:6b:60:eb:6d:ee:a0:12:58:51:81:28:4b:49:34: 0f:3b:92:a8:f5:12:3f:71:12:fc:1a:32:ee:13:14:2a:45:0b: 75:0c:96:ff:3d:06:91:49:c7:b9:0d:d4:a8:d4:6c:24:e6:87: 07:03:21:b8:7d:d6:c0:eb:42:ea:82:74:45:c6:3d:22:9e:ef: 6e:01:cb:e0:52:b7:35:ff:d0:f8:b4:a0:ad:f7:26:2a:85:37: bc:4c:a5:dc:c6:b3:06:e7:46:7a:32:39:31:0f:a9:9a:e9:df: 35:cd:98:62:41:b8:f3:6a:b0:5f:7d:54:0c:aa:0c:37:f1:89: 36:5f:e6:70:80:a1:6e:a3:7f:fb:fe:e3:10:d6:52:1c:1e:a4: 47:07:23:74:f9:df:ec:90:0c:65:f1:4f:55:ee:0f:c9:01:c3: f4:4e:20:2f:63:2b:3c:8c:8e:af:02:b4:0c:66:16:a3:fc:16: 1d:06:55:e9:6b:06:2a:fc:4d:6b:59:26:29:3d:21:33:d6:60: 92:31:80:8b:d4:6e:5e:c0:86:85:a0:ce:0e:f8:99:d2:c2:21: 40:fe:d9:20:93:e9:52:0d:93:5d:5c:de:f0:92:0e:63:43:50: 3f:d9:7e:6b:9c:6f:2a:3d:dd:2e:b7:26:dc:b6:76:24:4a:a2: f2:8d:4a:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA5QzkxMTAvBgNVBAUTKDk3OTU4RkZGRTY5NkQ4MEM1NzYzNjUyNEE0NkUxODIz NDE3NkZCQzEwHhcNMjUxMDE5MDIwNjIyWhcNMjUxMDI2MDIwNjIyWjAYMRYwFAYD VQQDEw02OGY0NDc5ZS1jMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+mq5BOPIDwLZR9UBO/Dt9Nw7d9fyrrlfAeDMo5a64nne0NP1o3VoUd6ED8v iRZNkPU/jBTDzn/yHzPJurL+t/T/L80Uf89hNnlNod7y97M+d6Lconn9nZ0bBlrB Cxc8Ji/UBH7zKxaBHqqm7SBr0XNzRR2tFOkwoG6mxbGQ/QMa7E5hMouwABNFB6in 5hW9sGZzKOhDw5Iv6BkqwzIayYSEeNSBVP4d68CA6uHSy0ofyuUp9aZlqpHil1Qb Vho+Sszt9iWssHH71SPBuhoUex53b72nBQwT+D7GWALQ2yWC7S+Trv0IJZlsG6nX R4kgBGawoY8jWPI9J9gDgm3u9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOD3/LI zandTEYrAB/lF8YU3rh0MB8GA1UdIwQYMBaAFJeVj//mltgMV2NlJKRuGCNBdvvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDlDOS80NkQ3MkRFMjcz NjYxMUVDODk4MkJFMEFDNEY5QUUwMi9sNVdQXy1hVzJBeFhZMlVrcEc0WUkwRjIt OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1V1BfLWFXMkF4WFkyVWtwRzRZSTBGMi04RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDlDOS80NkQ3MkRFMjczNjYxMUVDODk4MkJFMEFDNEY5QUUwMi9sNVdQXy1hVzJB eFhZMlVrcEc0WUkwRjItOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9G3Mha2Drbe6gElhRgShLSTQPO5Ko9RI/cRL8GjLuExQqRQt1DJb/ PQaRSce5DdSo1Gwk5ocHAyG4fdbA60LqgnRFxj0inu9uAcvgUrc1/9D4tKCt9yYq hTe8TKXcxrMG50Z6MjkxD6ma6d81zZhiQbjzarBffVQMqgw38Yk2X+ZwgKFuo3/7 /uMQ1lIcHqRHByN0+d/skAxl8U9V7g/JAcP0TiAvYys8jI6vArQMZhaj/BYdBlXp awYq/E1rWSYpPSEz1mCSMYCL1G5ewIaFoM4O+JnSwiFA/tkgk+lSDZNdXN7wkg5j Q1A/2X5rnG8qPd0utybctnYkSqLyjUoN -----END CERTIFICATE-----Generated at Mon Oct 20 09:35:25 2025 by rpki-client