$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft File: l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json) Hash identifier: ZygokHACALMBCzoAV4H1SC5AjteANQnyFoxmT8e2D20= Subject key identifier: E3:2F:A9:6E:1D:6A:46:7A:3C:7C:E3:C7:A8:5A:5A:68:35:6D:9E:F4 Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 Certificate issuer: /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Certificate serial: 0A5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft Manifest number: 0A58 Signing time: Tue 04 Nov 2025 19:45:58 +0000 Manifest this update: Tue 04 Nov 2025 19:45:57 +0000 Manifest next update: Tue 11 Nov 2025 19:45:57 +0000 Files and hashes: 1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: RqCUIlFOj2fnz8bUXABWuvdZ9Ma2cpGPhpXKxJ/MTfs=) 2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: v31hx7pnoT1x1labmZhnEXrmOdmMDEQ40w+RQf8muiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2655 (0xa5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Validity Not Before: Nov 4 19:45:57 2025 GMT Not After : Nov 11 19:45:57 2025 GMT Subject: CN=690a57f5-71ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:75:17:55:bf:42:8f:a7:f0:3d:d4:c3:da:b7: 4e:99:b8:09:cc:af:81:29:79:12:12:a8:ae:76:f4: 70:a1:51:b8:5d:b6:0f:4e:9a:85:d1:c7:8f:5a:27: fa:05:5d:5c:3e:9d:da:35:10:ac:2c:db:77:7b:7c: 03:5d:df:3a:37:8a:2b:58:ba:9f:10:a1:e0:d9:18: 37:f4:c6:56:36:5a:77:88:13:de:0d:aa:72:70:62: 64:85:13:28:4f:a4:3b:a5:5b:fa:05:5f:d5:1b:09: 16:da:9b:4b:04:a9:a4:1e:4c:fe:74:b2:82:f9:af: 92:7c:70:2e:ee:fd:c5:b4:9c:ea:66:60:8a:73:96: bb:75:fa:2a:3e:ad:4f:f6:3a:65:ff:93:fa:26:67: 63:0f:72:d8:32:e8:14:a5:fa:95:00:97:86:67:85: 34:0d:5d:08:a4:ad:a5:cd:5a:68:e8:55:c9:fb:51: b1:f2:0a:b2:6e:71:f6:e4:af:60:65:71:09:d2:1f: 51:9f:7b:fe:c9:ca:5f:72:4f:2e:dc:ea:63:a8:35: 79:02:f5:dd:7a:63:82:b8:8b:24:3e:6c:d7:c5:97: cf:dc:df:fb:b4:a7:2e:3a:60:3d:0e:4a:89:e7:5e: 77:04:36:18:c2:7e:8f:2b:45:8a:84:e5:9e:03:d0: 03:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2F:A9:6E:1D:6A:46:7A:3C:7C:E3:C7:A8:5A:5A:68:35:6D:9E:F4 X509v3 Authority Key Identifier: keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:9e:a0:a3:91:c0:e8:e7:1a:b0:75:84:39:52:e4:31:fc:1c: e8:a5:27:39:42:c4:d8:51:63:a0:3c:01:f6:38:65:2d:6c:88: 0e:e7:65:a4:ef:51:5b:01:e0:a1:41:17:45:a8:00:d5:af:d8: a3:03:f8:95:02:b9:c9:12:63:d1:87:26:8e:24:5a:71:92:59: 16:55:57:8a:ff:96:d9:32:bd:d1:94:f7:37:c2:18:46:8e:0e: 92:05:d9:f6:77:ea:b6:2b:e4:98:ba:5b:16:18:bb:55:81:dc: 18:04:e7:18:f6:b1:5f:a6:95:db:2f:39:36:25:89:18:d6:78: 6b:84:59:49:18:43:38:f0:ec:dd:dd:07:9a:94:b0:ca:b6:ae: 84:a0:8f:65:30:8b:30:11:72:0b:d7:4a:27:07:17:39:7a:31: 35:23:fd:cc:ab:59:8b:e4:13:54:46:f9:a1:dd:44:4e:fa:c3: b0:07:82:e3:4b:f6:76:f6:b0:bf:3a:f3:b2:73:9e:62:96:19: 0b:d7:bf:6f:83:22:e0:5a:c4:ff:85:d5:ad:20:95:d8:29:f9: 18:96:71:4b:aa:65:ca:f7:82:c2:a2:02:2d:09:3a:a6:42:87: 4b:81:83:0f:95:62:67:f5:95:3a:51:0c:58:ab:e8:e5:51:ba: f0:89:4a:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwNjMxMTAvBgNVBAUTKDk3OTdGNzg1MjcwNkVFMUM0MkM2OEE1RTQ1MEI1NzJG OEVFNTA4MTgwHhcNMjUxMTA0MTk0NTU3WhcNMjUxMTExMTk0NTU3WjAYMRYwFAYD VQQDEw02OTBhNTdmNS03MWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XUXVb9Cj6fwPdTD2rdOmbgJzK+BKXkSEqiudvRwoVG4XbYPTpqF0cePWif6 BV1cPp3aNRCsLNt3e3wDXd86N4orWLqfEKHg2Rg39MZWNlp3iBPeDapycGJkhRMo T6Q7pVv6BV/VGwkW2ptLBKmkHkz+dLKC+a+SfHAu7v3FtJzqZmCKc5a7dfoqPq1P 9jpl/5P6JmdjD3LYMugUpfqVAJeGZ4U0DV0IpK2lzVpo6FXJ+1Gx8gqybnH25K9g ZXEJ0h9Rn3v+ycpfck8u3OpjqDV5AvXdemOCuIskPmzXxZfP3N/7tKcuOmA9DkqJ 5153BDYYwn6PK0WKhOWeA9ADHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMvqW4d akZ6PHzjx6haWmg1bZ70MB8GA1UdIwQYMBaAFJeX94UnBu4cQsaKXkULVy+O5QgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTA2My82ODg5QURGMjc0 QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdoeEN4b3BlUlF0WEw0N2xD QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1ZjNoU2NHN2h4Q3hvcGVSUXRYTDQ3bENCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTA2My82ODg5QURGMjc0QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdo eEN4b3BlUlF0WEw0N2xDQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4nqCjkcDo5xqwdYQ5UuQx/BzopSc5QsTYUWOgPAH2OGUtbIgO52Wk 71FbAeChQRdFqADVr9ijA/iVArnJEmPRhyaOJFpxklkWVVeK/5bZMr3RlPc3whhG jg6SBdn2d+q2K+SYulsWGLtVgdwYBOcY9rFfppXbLzk2JYkY1nhrhFlJGEM48Ozd 3QealLDKtq6EoI9lMIswEXIL10onBxc5ejE1I/3Mq1mL5BNURvmh3URO+sOwB4Lj S/Z29rC/OvOyc55ilhkL179vgyLgWsT/hdWtIJXYKfkYlnFLqmXK94LCogItCTqm QodLgYMPlWJn9ZU6UQxYq+jlUbrwiUpS -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:48 2025 by rpki-client