$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: GPyHd1jGzH21UW/NkfaSUvxlFI0IbFBR6PDRacWHD0Q= Subject key identifier: 9B:D5:07:04:65:FB:BA:BB:D5:4C:3A:9D:49:C4:DF:65:AA:05:FF:9E Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0C5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0C54 Signing time: Sat 18 Oct 2025 19:21:45 +0000 Manifest this update: Sat 18 Oct 2025 19:21:44 +0000 Manifest next update: Sat 25 Oct 2025 19:21:44 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: QyjBdfjBDUwnz6AMXbecNmrmswaBKX7727v2zXLYph0=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: DL4w0jdh6arH3ZaUufUuEs12A9UV6IxUUOEelp+erPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3164 (0xc5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: Oct 18 19:21:44 2025 GMT Not After : Oct 25 19:21:44 2025 GMT Subject: CN=68f3e8c9-5bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:19:72:62:93:24:20:08:1c:f8:6d:ae:b9:a9: a4:93:6c:62:8d:b6:4a:b1:a2:fa:df:cd:8b:a6:65: a8:9a:72:dc:1d:d0:e0:ea:c9:e3:0a:35:93:6a:36: c6:a3:30:1f:32:86:e1:c2:24:7a:2a:31:ac:41:c8: f3:ae:4f:8c:02:fc:49:34:14:ba:20:22:66:43:70: 4b:b7:d7:36:b9:a8:ff:72:36:c7:cf:d3:e1:4d:73: 9a:0a:dc:a5:be:20:4c:6f:1e:8f:30:6e:42:eb:a9: 47:4a:2b:33:d0:fb:5b:da:c1:f8:80:fb:28:41:d9: 0d:10:76:cb:55:70:c5:55:96:85:0c:6c:17:ba:dc: fa:ef:56:32:1b:9a:15:7d:04:6f:1d:24:ce:92:50: 69:8d:69:e5:e9:a3:9b:a1:b3:c6:a2:fd:01:4d:28: fc:56:29:2b:9b:1a:74:68:bf:f9:c6:6f:dd:2b:54: fd:27:9c:31:45:b5:47:2d:f8:c2:64:3c:73:fe:14: 18:90:1c:99:f3:4e:31:fd:78:1c:13:2f:39:ed:66: 0d:0d:d7:ff:e0:46:04:5d:5f:73:cf:d2:0f:f9:87: 3a:39:2d:29:ea:05:13:d6:27:a1:0c:f6:85:71:c3: b3:c8:a5:90:43:95:7a:46:04:ac:da:ab:a3:84:1e: 8f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D5:07:04:65:FB:BA:BB:D5:4C:3A:9D:49:C4:DF:65:AA:05:FF:9E X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:fd:55:08:c6:b0:32:68:06:04:b5:09:be:00:b0:8d:f5:3b: 55:fa:c3:79:33:bb:26:f8:fc:b7:1b:a0:c8:fa:65:b3:45:91: ae:8e:e2:6d:35:0f:a1:e2:b6:39:5e:3e:ac:4e:2a:f6:44:fb: bf:e1:78:dd:28:98:3c:7c:24:aa:e3:27:0c:14:bb:84:bc:38: e9:61:06:98:79:34:13:b2:03:93:f9:a5:d0:e9:56:3a:b9:de: 62:b4:1a:ab:5c:89:54:b8:00:ed:1d:9c:f0:38:71:4b:ee:20: 13:8a:20:2a:af:bc:0e:b3:dd:c9:aa:50:d0:39:81:de:de:39: d9:de:86:e3:ef:8b:62:15:a6:ba:33:54:48:07:42:83:ec:fe: 92:d4:03:b9:7f:7e:6e:55:44:23:b0:9c:00:8d:0c:8d:0a:ce: bb:af:16:61:46:9f:23:ca:15:c3:4d:de:ef:3e:da:35:90:00: 8b:33:92:b5:eb:a4:aa:d2:8c:63:fc:e5:c2:36:c5:d8:43:1b: ff:47:a2:ec:7d:e8:5e:2d:0d:8b:5b:49:35:8f:1c:9c:55:1e: a2:2b:0d:90:14:44:b8:0e:c0:18:3e:a4:56:ab:12:20:da:97: 74:1c:f9:a9:78:7d:28:39:97:e5:b6:61:17:46:28:2e:e6:2d: 07:6e:70:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjUxMDE4MTkyMTQ0WhcNMjUxMDI1MTkyMTQ0WjAYMRYwFAYD VQQDEw02OGYzZThjOS01YmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxlyYpMkIAgc+G2uuamkk2xijbZKsaL6382LpmWomnLcHdDg6snjCjWTajbG ozAfMobhwiR6KjGsQcjzrk+MAvxJNBS6ICJmQ3BLt9c2uaj/cjbHz9PhTXOaCtyl viBMbx6PMG5C66lHSisz0Ptb2sH4gPsoQdkNEHbLVXDFVZaFDGwXutz671YyG5oV fQRvHSTOklBpjWnl6aObobPGov0BTSj8Vikrmxp0aL/5xm/dK1T9J5wxRbVHLfjC ZDxz/hQYkByZ804x/XgcEy857WYNDdf/4EYEXV9zz9IP+Yc6OS0p6gUT1iehDPaF ccOzyKWQQ5V6RgSs2qujhB6PCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvVBwRl +7q71Uw6nUnE32WqBf+eMB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0/VUIxrAyaAYEtQm+ALCN9TtV+sN5M7sm+Py3G6DI+mWzRZGujuJt NQ+h4rY5Xj6sTir2RPu/4XjdKJg8fCSq4ycMFLuEvDjpYQaYeTQTsgOT+aXQ6VY6 ud5itBqrXIlUuADtHZzwOHFL7iATiiAqr7wOs93JqlDQOYHe3jnZ3obj74tiFaa6 M1RIB0KD7P6S1AO5f35uVUQjsJwAjQyNCs67rxZhRp8jyhXDTd7vPto1kACLM5K1 66Sq0oxj/OXCNsXYQxv/R6LsfeheLQ2LW0k1jxycVR6iKw2QFES4DsAYPqRWqxIg 2pd0HPmpeH0oOZfltmEXRigu5i0HbnBr -----END CERTIFICATE-----Generated at Mon Oct 20 00:23:47 2025 by rpki-client