$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: nGg1DqgNkysbDblb6P4G7svy28ZZDq9+rEqRj16+7tA= Subject key identifier: 9E:AB:99:EF:39:BC:F4:8C:40:AB:AB:13:E5:3C:61:E5:5B:AB:D1:5B Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0C65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0C5D Signing time: Tue 04 Nov 2025 18:40:35 +0000 Manifest this update: Tue 04 Nov 2025 18:40:34 +0000 Manifest next update: Tue 11 Nov 2025 18:40:34 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: gLBhodv6qNxUElU6/2KsRP4vv2aiFXduvMb6rW3qTcE=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: DL4w0jdh6arH3ZaUufUuEs12A9UV6IxUUOEelp+erPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3173 (0xc65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: Nov 4 18:40:34 2025 GMT Not After : Nov 11 18:40:34 2025 GMT Subject: CN=690a48a3-d37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:41:24:e9:df:37:34:29:e5:e9:13:0e:d9: 36:3a:28:6c:2a:0e:74:79:39:4a:39:7d:20:d8:ff: 14:88:9c:41:42:0b:b2:94:1d:90:1c:8a:6a:d1:37: 61:2c:0e:a4:ae:03:36:e2:9f:76:2f:bd:af:8d:1a: ec:80:62:8d:0a:f8:09:be:62:e9:42:72:72:c3:fe: 0d:4f:f6:fd:d1:98:4f:6c:6b:7b:c7:d1:6f:88:ba: bc:54:3f:48:b6:0e:c8:42:7b:8b:b3:ef:1d:0c:0e: 8c:5a:63:3f:ea:d3:df:10:9f:f5:8b:42:c3:89:d7: 46:57:8c:17:c2:77:4d:c7:1d:ac:73:c7:53:c7:1d: 1b:b9:3a:2c:d7:2c:e0:0d:3b:64:89:f3:0d:8c:7e: d8:8d:79:98:9f:d3:6c:67:51:03:f2:04:1d:77:0a: 74:51:fa:48:e9:40:47:bd:30:bf:b2:da:36:ed:26: fc:c3:86:fc:20:b7:e4:f3:9f:51:5a:a8:85:06:7d: 57:04:4e:7b:a3:19:14:4a:7e:cd:34:7a:c7:af:f6: dd:e4:02:45:85:38:d0:84:c7:83:2d:07:c5:b7:89: e5:1a:bb:86:92:43:7f:b0:6e:10:ca:cd:97:54:98: 6b:84:8f:c2:b8:47:25:77:c2:86:9c:77:14:cc:90: 1c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AB:99:EF:39:BC:F4:8C:40:AB:AB:13:E5:3C:61:E5:5B:AB:D1:5B X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f1:3d:29:e7:f8:f4:60:7f:35:ad:09:b8:84:93:27:c2:a5: 00:67:04:6a:4b:ce:f6:43:f2:13:12:82:a7:d7:0d:9a:6c:de: d2:f9:71:12:b6:28:76:d5:e7:cc:eb:dc:f1:41:82:3e:4c:18: 85:35:bb:72:fc:4f:9b:ab:fd:5f:71:f2:18:3a:78:c3:1e:b2: e5:a1:f5:fd:16:42:9f:3b:2c:04:42:f9:0c:ab:63:13:33:b8: 56:56:8e:38:80:d6:4d:9b:c9:2f:47:e7:6c:67:48:57:89:c9: d2:74:b9:fc:40:8a:36:43:15:1d:f7:6d:a1:f0:6b:6d:3c:59: 9f:30:c1:0b:e7:c0:97:ef:97:e0:05:07:25:20:99:00:47:23: 5c:44:ba:e4:f9:39:75:1c:0c:6f:a2:36:58:fb:ea:8e:d3:a5: ba:0c:2d:47:8a:b0:ef:62:6e:a4:6a:a0:46:27:b7:30:4e:77: ea:7b:29:2d:06:97:5d:63:03:4b:9e:17:dd:db:bd:cd:5f:f0: 17:09:30:07:93:35:13:3a:e1:01:fd:0f:b3:44:69:53:89:0e: 36:ca:db:f6:5f:66:5a:3b:d4:aa:0d:4e:26:d2:9a:85:13:48: 81:61:e8:06:7b:66:66:83:46:d1:53:8e:86:6c:2c:50:e3:51: 26:41:2e:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjUxMTA0MTg0MDM0WhcNMjUxMTExMTg0MDM0WjAYMRYwFAYD VQQDEw02OTBhNDhhMy1kMzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArctBJOnfNzQp5ekTDtk2OihsKg50eTlKOX0g2P8UiJxBQguylB2QHIpq0Tdh LA6krgM24p92L72vjRrsgGKNCvgJvmLpQnJyw/4NT/b90ZhPbGt7x9FviLq8VD9I tg7IQnuLs+8dDA6MWmM/6tPfEJ/1i0LDiddGV4wXwndNxx2sc8dTxx0buTos1yzg DTtkifMNjH7YjXmYn9NsZ1ED8gQddwp0UfpI6UBHvTC/sto27Sb8w4b8ILfk859R WqiFBn1XBE57oxkUSn7NNHrHr/bd5AJFhTjQhMeDLQfFt4nlGruGkkN/sG4Qys2X VJhrhI/CuEcld8KGnHcUzJAcvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6rme85 vPSMQKurE+U8YeVbq9FbMB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl8T0p5/j0YH81rQm4hJMnwqUAZwRqS872Q/ITEoKn1w2abN7S+XES tih21efM69zxQYI+TBiFNbty/E+bq/1fcfIYOnjDHrLlofX9FkKfOywEQvkMq2MT M7hWVo44gNZNm8kvR+dsZ0hXicnSdLn8QIo2QxUd922h8GttPFmfMMEL58CX75fg BQclIJkARyNcRLrk+Tl1HAxvojZY++qO06W6DC1HirDvYm6kaqBGJ7cwTnfqeykt BpddYwNLnhfd273NX/AXCTAHkzUTOuEB/Q+zRGlTiQ42ytv2X2ZaO9SqDU4m0pqF E0iBYegGe2Zmg0bRU46GbCxQ41EmQS7h -----END CERTIFICATE-----Generated at Wed Nov 5 13:37:16 2025 by rpki-client