$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json) Hash identifier: C++zz3hY4+KssqT1Z4H6TWSroVAEtUZ4uNikirxAFwE= Subject key identifier: 96:E6:6A:2D:4F:3F:5B:F7:C7:03:EE:10:44:B4:74:9E:81:DD:AC:2B Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0CB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft Manifest number: 0C9B Signing time: Sat 18 Oct 2025 19:09:49 +0000 Manifest this update: Sat 18 Oct 2025 19:09:49 +0000 Manifest next update: Sat 25 Oct 2025 19:09:49 +0000 Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: Mlf07E8xI3D2BWzirjs+VaWld/GuHgeH7dURb5z1FLc=) 2: FB170730324211EFA9B5F949C4F9AE02.roa (hash: yYm1dMIQ816DxBHWaOlKO9yBaX3TNCa5zS93/rSk5Bg=) 3: B430443A324211EFB14FB614C4F9AE02.roa (hash: mSmKdhP1dOumHc/59nE808KhJQxB4mVR7KUP5N0koRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3253 (0xcb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: Oct 18 19:09:49 2025 GMT Not After : Oct 25 19:09:49 2025 GMT Subject: CN=68f3e5fd-6828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:52:95:05:de:e6:f6:e1:52:93:0f:a6:d3:9b: a5:16:39:bb:51:2f:10:86:14:08:50:cc:20:fc:98: 70:28:80:26:39:c3:2e:b3:1e:9f:7d:84:d5:f6:e6: ac:90:b9:2f:9e:65:22:e5:6b:ed:7b:4c:62:31:62: 47:77:d8:2d:25:67:f8:4a:66:04:93:77:be:5e:05: 40:fd:e8:03:b2:df:6b:29:10:a9:0b:5c:5e:90:ca: ca:99:02:b8:30:0c:c2:8f:56:44:ec:d4:7b:fb:e4: c7:49:9b:64:4f:18:f6:2e:d0:6d:f4:f1:fb:4d:eb: ae:12:d7:1a:a6:36:9d:bc:e8:98:3d:b2:4a:bd:2d: 53:42:03:bc:6f:c5:bd:6a:97:5a:54:92:2e:9d:f8: 0f:0e:90:9b:53:08:95:7f:5e:20:b3:80:f7:c0:65: c0:9d:89:ae:96:d3:0f:d3:18:6a:66:88:27:49:67: 4d:d1:a9:86:3a:7d:57:0c:1e:d5:be:3a:d9:3c:76: b4:5a:ec:29:7a:53:cd:e8:cb:0a:cd:c2:51:ba:c2: 44:9a:03:7d:91:60:65:e7:43:4d:27:82:3f:39:b0: bb:82:8e:51:25:67:e3:7e:3f:d3:f3:ff:e0:b8:c3: 58:7e:3e:77:33:d8:44:cd:b4:c2:22:61:f4:3e:a3: dc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E6:6A:2D:4F:3F:5B:F7:C7:03:EE:10:44:B4:74:9E:81:DD:AC:2B X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:48:8c:92:57:ca:cd:4b:ba:42:f9:17:ff:90:68:8e:3f:cf: 52:33:11:81:36:23:65:05:09:0f:13:8f:25:e7:5b:ca:7a:cb: a9:1f:7f:00:f6:19:bb:60:57:0d:5f:2c:bb:69:44:b4:1e:a6: c1:42:19:ac:71:45:c4:cf:38:e2:71:cf:23:09:8c:9f:85:64: a8:87:20:ef:10:87:dc:f5:08:f0:31:b0:63:03:61:4a:04:f6: 4d:c6:71:33:3b:6d:0c:b9:cf:f0:28:a0:47:87:c0:e7:0b:a1: 27:b8:55:fa:89:43:e1:58:2e:3b:76:bf:df:c8:c6:90:64:cb: 9d:2e:e6:51:83:fb:11:4a:a0:17:1c:10:66:c8:a4:f4:17:63: 43:7c:ae:10:ce:b8:d1:ab:bd:43:00:1b:65:30:e7:6a:42:e7: a0:74:be:a2:fb:dc:bd:af:d3:73:8e:25:ab:09:09:10:2d:5f: ce:b6:91:3b:f2:9b:c3:66:a3:e4:69:28:c1:be:f7:bf:ed:05: e4:ac:fa:24:d1:ef:b1:9f:c1:1f:7e:d6:26:dc:55:a3:b3:30: cb:92:3d:7c:a2:b5:2f:8a:de:95:75:e4:96:c3:c4:1f:ca:3f: ac:29:e6:38:ad:54:88:0b:af:9b:e2:97:46:2f:31:6f:b6:05: 92:d7:b4:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjUxMDE4MTkwOTQ5WhcNMjUxMDI1MTkwOTQ5WjAYMRYwFAYD VQQDEw02OGYzZTVmZC02ODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01KVBd7m9uFSkw+m05ulFjm7US8QhhQIUMwg/JhwKIAmOcMusx6ffYTV9uas kLkvnmUi5Wvte0xiMWJHd9gtJWf4SmYEk3e+XgVA/egDst9rKRCpC1xekMrKmQK4 MAzCj1ZE7NR7++THSZtkTxj2LtBt9PH7TeuuEtcapjadvOiYPbJKvS1TQgO8b8W9 apdaVJIunfgPDpCbUwiVf14gs4D3wGXAnYmultMP0xhqZognSWdN0amGOn1XDB7V vjrZPHa0WuwpelPN6MsKzcJRusJEmgN9kWBl50NNJ4I/ObC7go5RJWfjfj/T8//g uMNYfj53M9hEzbTCImH0PqPcWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbmai1P P1v3xwPuEES0dJ6B3awrMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4 TFpFRUtBaThyZnpiYzBkVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoSIySV8rNS7pC+Rf/kGiOP89SMxGBNiNlBQkPE48l51vKesupH38A 9hm7YFcNXyy7aUS0HqbBQhmscUXEzzjicc8jCYyfhWSohyDvEIfc9QjwMbBjA2FK BPZNxnEzO20Muc/wKKBHh8DnC6EnuFX6iUPhWC47dr/fyMaQZMudLuZRg/sRSqAX HBBmyKT0F2NDfK4QzrjRq71DABtlMOdqQuegdL6i+9y9r9NzjiWrCQkQLV/OtpE7 8pvDZqPkaSjBvve/7QXkrPok0e+xn8EfftYm3FWjszDLkj18orUvit6VdeSWw8Qf yj+sKeY4rVSIC6+b4pdGLzFvtgWS17To -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:16 2025 by rpki-client