$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json) Hash identifier: ff/xa6/9n3ZrkO1gcJwfEoYxZdq2WHx08IXZwbcXO0c= Subject key identifier: F6:8F:6B:7B:C2:FA:F0:96:DB:8F:40:BF:77:7B:75:44:B1:DD:C3:68 Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0CBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft Manifest number: 0CA4 Signing time: Tue 04 Nov 2025 18:29:19 +0000 Manifest this update: Tue 04 Nov 2025 18:29:18 +0000 Manifest next update: Tue 11 Nov 2025 18:29:18 +0000 Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: 7XzU7J2oXPARRXmiBGr77J0CSLIllhA27dIh0QyoT3E=) 2: FB170730324211EFA9B5F949C4F9AE02.roa (hash: yYm1dMIQ816DxBHWaOlKO9yBaX3TNCa5zS93/rSk5Bg=) 3: B430443A324211EFB14FB614C4F9AE02.roa (hash: mSmKdhP1dOumHc/59nE808KhJQxB4mVR7KUP5N0koRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3262 (0xcbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: Nov 4 18:29:18 2025 GMT Not After : Nov 11 18:29:18 2025 GMT Subject: CN=690a45ff-f4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8a:65:a9:d1:d6:c0:05:2c:43:b8:00:f3:25: 9d:ed:50:fb:a0:cf:45:66:6f:7c:db:ff:e1:42:12: e5:ae:fc:44:f6:c3:3a:48:f4:bb:3b:a3:63:f6:c4: 7e:7b:8a:e4:e6:2f:40:5f:00:4b:7c:b6:a8:d0:ef: dc:f7:dc:99:6d:36:cd:5f:72:f4:9c:cd:96:8f:44: 4d:e8:a6:79:1a:fc:21:27:9d:7d:e8:30:8c:75:bf: ad:63:70:39:cf:1a:56:57:cf:3c:c9:ed:85:8e:1b: 07:f0:35:b0:0a:5b:6f:9b:a5:e8:64:c3:fe:f0:be: 5c:a2:6c:6d:20:13:58:09:ea:d2:84:6d:70:c6:3e: 2a:5c:c2:60:6d:49:4b:ea:62:a3:4d:9d:fc:63:a0: 8d:2a:45:9c:85:56:5c:4c:8f:f9:90:32:4e:93:fb: 5b:ec:50:19:41:75:13:8d:d8:31:82:f5:b7:6a:30: cd:d9:f5:2e:73:fb:0e:cc:e3:f1:b3:f9:c6:ca:5f: c6:62:d1:ed:49:32:6d:5a:07:2b:39:38:52:6b:0c: 76:ff:85:0d:ed:0d:3c:13:ae:72:97:9b:77:64:11: 08:6f:df:12:98:28:9f:33:e6:e5:cd:da:9a:61:de: 74:a5:ec:d2:3f:53:3a:76:99:ad:b3:ab:58:85:8e: 41:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8F:6B:7B:C2:FA:F0:96:DB:8F:40:BF:77:7B:75:44:B1:DD:C3:68 X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:c9:04:7b:f9:9d:69:56:ad:71:05:fc:7c:88:12:c9:e2:d6: f1:60:bc:7c:bf:8e:33:7a:75:d1:1c:dd:15:d6:41:94:d2:bc: a6:4c:b8:e5:d1:c6:39:da:2e:79:e3:90:74:ca:04:fb:41:4c: 07:70:04:d6:c8:75:13:b9:c0:fd:cd:68:9b:12:ca:14:b4:21: 76:f7:ba:76:fa:b4:e1:da:1c:c9:ae:a5:0a:f1:78:2a:5b:ab: f1:56:0d:ef:bb:0d:29:30:70:55:e5:07:90:40:51:0f:9e:01: a4:70:68:ab:74:cf:e9:45:3d:f6:14:18:21:c8:ea:4c:d2:34: 37:b8:03:5b:23:39:42:14:2a:69:0e:f9:7b:84:ef:b7:54:1c: 1a:bd:7d:27:38:b3:14:f9:88:12:16:eb:43:81:7b:0d:85:bd: fb:59:13:a8:b7:f5:4d:19:50:f3:63:28:b4:af:8b:56:17:9f: 85:3d:a7:5a:0e:d9:7c:f4:ac:b4:23:74:e4:02:08:62:6f:cc: e1:57:39:c6:34:d3:10:71:cf:aa:38:75:ec:c6:39:00:63:7f: fe:b0:a9:3f:fa:55:aa:98:47:8b:a4:81:03:cf:53:9c:ca:9e: 35:f8:f8:ed:08:3e:ac:71:55:ff:cb:ef:b7:db:95:86:68:9b: d4:e4:9f:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjUxMTA0MTgyOTE4WhcNMjUxMTExMTgyOTE4WjAYMRYwFAYD VQQDEw02OTBhNDVmZi1mNGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24plqdHWwAUsQ7gA8yWd7VD7oM9FZm982//hQhLlrvxE9sM6SPS7O6Nj9sR+ e4rk5i9AXwBLfLao0O/c99yZbTbNX3L0nM2Wj0RN6KZ5GvwhJ5196DCMdb+tY3A5 zxpWV888ye2FjhsH8DWwCltvm6XoZMP+8L5comxtIBNYCerShG1wxj4qXMJgbUlL 6mKjTZ38Y6CNKkWchVZcTI/5kDJOk/tb7FAZQXUTjdgxgvW3ajDN2fUuc/sOzOPx s/nGyl/GYtHtSTJtWgcrOThSawx2/4UN7Q08E65yl5t3ZBEIb98SmCifM+blzdqa Yd50pezSP1M6dpmts6tYhY5BNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaPa3vC +vCW249Av3d7dUSx3cNoMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4 TFpFRUtBaThyZnpiYzBkVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADyQR7+Z1pVq1xBfx8iBLJ4tbxYLx8v44zenXRHN0V1kGU0rymTLjl 0cY52i5545B0ygT7QUwHcATWyHUTucD9zWibEsoUtCF297p2+rTh2hzJrqUK8Xgq W6vxVg3vuw0pMHBV5QeQQFEPngGkcGirdM/pRT32FBghyOpM0jQ3uANbIzlCFCpp Dvl7hO+3VBwavX0nOLMU+YgSFutDgXsNhb37WROot/VNGVDzYyi0r4tWF5+FPada Dtl89Ky0I3TkAghib8zhVznGNNMQcc+qOHXsxjkAY3/+sKk/+lWqmEeLpIEDz1Oc yp41+PjtCD6scVX/y++325WGaJvU5J/u -----END CERTIFICATE-----Generated at Wed Nov 5 17:17:58 2025 by rpki-client