$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft File: 0l-HlucNZw6YbGwkdz5rd4w2BXc.mft (raw, json) Hash identifier: tRFhiTH/O9AOPrqWYG1Kd/qTIHQb6D9Kf7U0wWmD8Z0= Subject key identifier: 1E:35:A4:1E:F4:31:E1:5C:77:42:88:56:91:A5:D6:42:DA:79:84:9B Authority key identifier: D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77 Certificate issuer: /CN=A914FD01/serialNumber=D25F8796E70D670E986C6C24773E6B778C360577 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft Manifest number: 20 Signing time: Sun 19 Oct 2025 11:19:21 +0000 Manifest this update: Sun 19 Oct 2025 11:19:21 +0000 Manifest next update: Sun 26 Oct 2025 11:19:21 +0000 Files and hashes: 1: 0l-HlucNZw6YbGwkdz5rd4w2BXc.crl (hash: DUJ/wUt5qjITFojSAuO1TXSn/WW9PshOkRVNAP9E/2U=) 2: 442749147D6311F0BC413466C4F9AE02.roa (hash: U/qMD7uylhtZUr24KZzqo+D5k35qqAvh49xpiigrEd0=) 3: 44AA60D87D6311F0BC413466C4F9AE02.roa (hash: E4IkE6FRMTE0lAhudQztXcTO2n4pZjttFwQTGBoNBn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD01, serialNumber=D25F8796E70D670E986C6C24773E6B778C360577 Validity Not Before: Oct 19 11:19:21 2025 GMT Not After : Oct 26 11:19:21 2025 GMT Subject: CN=68f4c939-b148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:80:4a:ff:54:17:00:d8:9b:1f:fa:81:b0:1c: ea:d0:9c:a7:ac:d7:91:57:ac:51:fe:be:83:d0:78: 6e:69:4e:15:db:5f:e1:e7:fc:4a:ca:aa:e2:dc:4b: b9:64:62:79:d9:83:f8:4a:d6:cb:13:68:d5:2c:b6: 3f:a2:75:22:94:b3:99:55:83:05:42:f2:92:3a:44: 26:61:65:b6:6c:fd:45:51:56:94:bf:82:94:fd:8b: a0:92:64:68:59:f2:51:ca:de:5e:2c:9b:cb:8d:82: 1e:b7:ec:25:06:0f:f1:b3:7d:8e:fe:a0:72:c5:70: cc:fa:fa:a7:ac:b3:17:9a:f6:fb:b2:99:40:88:ac: 11:af:a9:74:b8:d8:fb:fe:86:5a:0e:6a:af:21:b1: 1e:7b:5d:e3:ca:09:65:ff:78:16:d4:24:54:80:ad: 3a:bd:18:59:bd:bf:5f:67:60:21:9a:5b:22:e9:e9: 13:6f:0c:57:9f:bf:91:8c:4c:b8:4e:55:df:b0:40: c2:69:e0:8f:47:76:04:f2:66:6e:b9:8a:75:ea:be: 80:6d:ab:2a:72:59:a2:8f:02:6c:d7:63:a7:bf:5c: 80:87:2f:63:16:fe:d1:55:30:29:dd:57:e1:e8:ba: 71:b1:c0:9e:47:d6:c5:8c:44:2e:5f:20:46:19:1e: 6b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:35:A4:1E:F4:31:E1:5C:77:42:88:56:91:A5:D6:42:DA:79:84:9B X509v3 Authority Key Identifier: keyid:D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a1:e1:df:ea:c1:37:88:b2:9a:f1:f0:ba:0b:da:76:8a:f7: 10:db:3c:0a:34:e5:6a:68:7e:3f:da:dd:ed:26:71:b8:2f:54: 3b:99:5a:f6:58:fe:71:aa:13:e7:0c:8d:f2:dd:c1:b0:00:45: 73:f1:b4:05:87:45:80:84:f6:54:78:50:cf:59:60:c8:b4:33: 02:c0:10:c3:b5:06:57:63:05:84:16:2e:74:e8:7f:71:cf:55: a0:d0:ab:6e:73:33:8f:d4:44:55:5a:9c:64:91:a4:43:1d:93: 12:a4:6a:c2:52:f7:b1:0b:f2:4a:8f:ea:42:a1:66:7b:1d:21: d6:c2:6e:67:30:d4:90:99:a8:0c:fa:8e:be:33:1f:a4:72:1e: d3:0f:9f:86:69:c5:48:56:07:82:70:fc:39:29:e3:ee:47:b8: 8b:2f:de:61:df:43:97:0c:b1:6d:75:e3:b8:f3:f6:3d:f4:20: 68:02:c6:56:03:f2:e9:1b:50:16:cf:e5:44:8e:b0:05:cb:b0: c4:4e:42:ac:31:9a:b1:32:13:a0:75:24:78:61:13:4f:88:26: 88:cf:55:29:d8:dc:39:5f:cb:9f:d0:12:2c:0c:3e:0c:d6:70: 69:a5:25:ad:2c:c3:d3:a1:e4:94:85:7f:08:f5:f6:22:6a:d2: da:5b:17:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RkQwMTExMC8GA1UEBRMoRDI1Rjg3OTZFNzBENjcwRTk4NkM2QzI0NzczRTZCNzc4 QzM2MDU3NzAeFw0yNTEwMTkxMTE5MjFaFw0yNTEwMjYxMTE5MjFaMBgxFjAUBgNV BAMTDTY4ZjRjOTM5LWIxNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvgEr/VBcA2Jsf+oGwHOrQnKes15FXrFH+voPQeG5pThXbX+Hn/ErKquLcS7lk YnnZg/hK1ssTaNUstj+idSKUs5lVgwVC8pI6RCZhZbZs/UVRVpS/gpT9i6CSZGhZ 8lHK3l4sm8uNgh637CUGD/GzfY7+oHLFcMz6+qessxea9vuymUCIrBGvqXS42Pv+ hloOaq8hsR57XePKCWX/eBbUJFSArTq9GFm9v19nYCGaWyLp6RNvDFefv5GMTLhO Vd+wQMJp4I9HdgTyZm65inXqvoBtqypyWaKPAmzXY6e/XICHL2MW/tFVMCndV+Ho unGxwJ5H1sWMRC5fIEYZHmtFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHjWkHvQx 4Vx3QohWkaXWQtp5hJswHwYDVR0jBBgwFoAU0l+HlucNZw6YbGwkdz5rd4w2BXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGRDAxLzM2QTcxRTRFN0Q1 RjExRjA5RUM5QzkzOEM0RjlBRTAyLzBsLUhsdWNOWnc2WWJHd2tkejVyZDR3MkJY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMGwtSGx1Y05adzZZYkd3a2R6NXJkNHcyQlhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG RDAxLzM2QTcxRTRFN0Q1RjExRjA5RUM5QzkzOEM0RjlBRTAyLzBsLUhsdWNOWnc2 WWJHd2tkejVyZDR3MkJYYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFCh4d/qwTeIsprx8LoL2naK9xDbPAo05Wpofj/a3e0mcbgvVDuZWvZY /nGqE+cMjfLdwbAARXPxtAWHRYCE9lR4UM9ZYMi0MwLAEMO1BldjBYQWLnTof3HP VaDQq25zM4/URFVanGSRpEMdkxKkasJS97EL8kqP6kKhZnsdIdbCbmcw1JCZqAz6 jr4zH6RyHtMPn4ZpxUhWB4Jw/Dkp4+5HuIsv3mHfQ5cMsW1147jz9j30IGgCxlYD 8ukbUBbP5USOsAXLsMROQqwxmrEyE6B1JHhhE0+IJojPVSnY3Dlfy5/QEiwMPgzW cGmlJa0sw9Oh5JSFfwj19iJq0tpbFzQ= -----END CERTIFICATE-----Generated at Sun Oct 19 23:27:10 2025 by rpki-client