$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft File: l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json) Hash identifier: l9KICSY/Pl3EUT9eRkr8lewZGoe7BkO184TouX7DGWc= Subject key identifier: FA:4C:88:E3:45:A0:FE:5A:6D:6D:DB:7A:C0:B6:64:F4:41:5C:DC:16 Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 Certificate issuer: /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Certificate serial: 0A56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft Manifest number: 0A4F Signing time: Sat 18 Oct 2025 20:40:35 +0000 Manifest this update: Sat 18 Oct 2025 20:40:34 +0000 Manifest next update: Sat 25 Oct 2025 20:40:34 +0000 Files and hashes: 1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: VsTHjYpHEWyKDmdxJ+hIFb8jPNzRN9LydaAy/SyVaq4=) 2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: v31hx7pnoT1x1labmZhnEXrmOdmMDEQ40w+RQf8muiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2646 (0xa56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Validity Not Before: Oct 18 20:40:34 2025 GMT Not After : Oct 25 20:40:34 2025 GMT Subject: CN=68f3fb43-11aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:ee:e1:4a:5e:32:0b:66:41:6e:ac:b8:ac: 68:95:9c:19:fd:f9:8c:9b:c0:19:3e:17:b3:c0:f2: 13:d3:34:49:0c:77:85:f3:82:67:50:4f:83:22:ab: 40:44:e4:da:32:5c:94:6f:e3:33:23:0b:4b:12:0f: 06:da:0e:11:e3:15:ec:5d:1c:56:bc:f6:38:44:ed: 02:00:3c:cc:08:a1:f1:64:84:17:67:e0:7e:c2:d2: 44:8e:b5:a3:1a:17:86:ac:b1:ab:16:f8:4d:f7:ba: 6b:58:5c:20:31:80:a9:f7:4b:2b:c7:53:a6:d3:18: 63:22:4f:29:1b:10:a4:10:90:59:18:94:d1:c5:b8: 74:1c:93:03:06:31:cb:f3:5d:d1:04:e3:2a:6b:76: de:da:1e:62:86:4f:e1:f0:3c:78:25:29:b1:02:f7: 9a:33:32:54:1f:6b:7b:f8:5a:e9:73:cc:f8:c5:c0: 07:1a:45:13:40:03:af:f5:b5:26:03:8a:6b:19:63: 70:8a:e6:27:1d:66:f7:95:0c:d2:d9:cd:dc:36:83: 2c:1a:b4:db:34:62:de:3a:9a:74:c4:42:0b:1c:1d: 7c:82:a6:8e:1d:61:8d:1a:a7:fc:d5:46:69:ed:ab: 47:77:a4:dd:f4:89:a2:2e:7e:eb:d7:f7:b8:ce:e3: 43:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4C:88:E3:45:A0:FE:5A:6D:6D:DB:7A:C0:B6:64:F4:41:5C:DC:16 X509v3 Authority Key Identifier: keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:1b:69:ac:58:74:0f:60:4f:72:b0:70:1f:36:68:b5:71:0f: 66:a2:d3:75:8f:89:f0:63:fb:7f:c7:59:41:47:85:5f:b7:45: 05:ac:3a:1a:9f:7f:98:36:bc:7a:75:9c:06:8f:68:1f:bd:0f: 06:ea:01:dd:bd:43:ca:2e:a3:d8:f1:9c:a2:5b:9e:0e:d0:1b: 39:d8:d8:9a:fa:4a:56:3f:5c:5a:1c:45:eb:57:21:a2:85:46: 71:e5:cb:ee:b3:82:20:c7:53:5e:e9:82:4b:05:d1:c4:2c:f5: 96:ab:1b:e1:8b:74:50:95:05:cb:26:bf:02:63:bb:49:e3:e1: 90:e2:b4:93:bf:44:f2:8a:0c:e2:d6:44:0e:51:c9:c3:3f:42: 67:13:fb:7e:98:ff:f6:8d:cc:34:81:ff:39:d6:06:40:4b:5a: aa:21:86:ce:9f:a3:cf:b6:aa:ae:8d:40:4e:0b:cb:19:0d:1c: 24:e3:bf:85:96:06:f6:62:83:11:aa:f4:b0:99:52:a2:20:ae: cd:09:3b:e5:1b:34:38:49:59:b7:a5:27:75:5d:de:42:25:ba: bf:58:72:0c:5d:c5:50:3d:3a:3a:49:a2:72:09:4b:5e:60:62: ee:9f:8d:69:ad:25:72:fa:33:1d:71:59:0f:b0:06:73:39:fe: 40:2e:95:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwNjMxMTAvBgNVBAUTKDk3OTdGNzg1MjcwNkVFMUM0MkM2OEE1RTQ1MEI1NzJG OEVFNTA4MTgwHhcNMjUxMDE4MjA0MDM0WhcNMjUxMDI1MjA0MDM0WjAYMRYwFAYD VQQDEw02OGYzZmI0My0xMWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJnu4UpeMgtmQW6suKxolZwZ/fmMm8AZPhezwPIT0zRJDHeF84JnUE+DIqtA ROTaMlyUb+MzIwtLEg8G2g4R4xXsXRxWvPY4RO0CADzMCKHxZIQXZ+B+wtJEjrWj GheGrLGrFvhN97prWFwgMYCp90srx1Om0xhjIk8pGxCkEJBZGJTRxbh0HJMDBjHL 813RBOMqa3be2h5ihk/h8Dx4JSmxAveaMzJUH2t7+Frpc8z4xcAHGkUTQAOv9bUm A4prGWNwiuYnHWb3lQzS2c3cNoMsGrTbNGLeOpp0xEILHB18gqaOHWGNGqf81UZp 7atHd6Td9ImiLn7r1/e4zuNDXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpMiONF oP5abW3besC2ZPRBXNwWMB8GA1UdIwQYMBaAFJeX94UnBu4cQsaKXkULVy+O5QgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTA2My82ODg5QURGMjc0 QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdoeEN4b3BlUlF0WEw0N2xD QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1ZjNoU2NHN2h4Q3hvcGVSUXRYTDQ3bENCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTA2My82ODg5QURGMjc0QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdo eEN4b3BlUlF0WEw0N2xDQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgG2msWHQPYE9ysHAfNmi1cQ9motN1j4nwY/t/x1lBR4Vft0UFrDoa n3+YNrx6dZwGj2gfvQ8G6gHdvUPKLqPY8ZyiW54O0Bs52Nia+kpWP1xaHEXrVyGi hUZx5cvus4Igx1Ne6YJLBdHELPWWqxvhi3RQlQXLJr8CY7tJ4+GQ4rSTv0Tyigzi 1kQOUcnDP0JnE/t+mP/2jcw0gf851gZAS1qqIYbOn6PPtqqujUBOC8sZDRwk47+F lgb2YoMRqvSwmVKiIK7NCTvlGzQ4SVm3pSd1Xd5CJbq/WHIMXcVQPTo6SaJyCUte YGLun41prSVy+jMdcVkPsAZzOf5ALpVz -----END CERTIFICATE-----Generated at Mon Oct 20 16:25:37 2025 by rpki-client