$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft File: l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json) Hash identifier: uh41t91woe5PMGP/Atoo51d6+lDRAGj+YWKerTqc52E= Subject key identifier: 59:ED:14:16:39:E4:9D:EF:17:AA:B6:A0:71:B1:EC:13:7B:96:FB:29 Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 Certificate issuer: /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Certificate serial: 0A47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft Manifest number: 0A40 Signing time: Thu 18 Sep 2025 19:57:08 +0000 Manifest this update: Thu 18 Sep 2025 19:57:08 +0000 Manifest next update: Thu 25 Sep 2025 19:57:08 +0000 Files and hashes: 1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: aQdyWWWwunixLTsN2S+I0URG5POv0F9GNVueTLW31bU=) 2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: v31hx7pnoT1x1labmZhnEXrmOdmMDEQ40w+RQf8muiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2631 (0xa47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Validity Not Before: Sep 18 19:57:08 2025 GMT Not After : Sep 25 19:57:08 2025 GMT Subject: CN=68cc6414-2585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:77:6f:12:83:aa:26:1a:2e:5d:24:de:a2:7b: 91:c9:fc:2d:7e:4e:50:c0:8b:0e:6d:36:56:14:8e: ec:58:6d:66:ad:ce:85:42:31:5e:8e:6f:a4:48:0f: 44:89:1c:88:f7:0b:7e:59:04:17:a2:ce:6a:7e:22: 42:24:03:dc:57:6d:87:ca:be:d0:82:13:61:37:13: 5d:94:c0:4c:4e:6a:f3:79:13:f5:f8:b6:ce:ed:be: de:62:ac:e1:c7:b0:25:6e:b8:fc:2a:40:f5:cd:c5: 5d:b3:85:53:1c:73:ac:bd:45:30:b0:71:e1:6b:22: 70:03:a8:29:f9:b9:d2:2d:b7:98:50:ea:a4:fc:f6: 0f:97:71:79:ad:98:80:a2:84:55:27:10:56:f5:45: 7d:7a:e8:21:c1:0e:7d:04:57:e9:fb:53:dd:c7:e5: 29:d6:35:73:f4:d2:c4:85:b2:8a:ec:ab:3c:61:9a: 05:e6:9f:31:a8:e0:b7:10:b5:3a:4d:0e:db:f8:65: 69:4e:71:45:16:12:95:18:26:03:ec:a8:7a:f1:2b: d4:b1:cb:49:be:40:29:5b:64:18:18:69:c3:fe:f5: 06:0c:54:c9:79:e8:ba:89:0f:51:73:2b:ca:03:19: f2:e6:3f:d8:17:b5:a2:66:b7:4f:91:0f:91:0a:93: 7a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:ED:14:16:39:E4:9D:EF:17:AA:B6:A0:71:B1:EC:13:7B:96:FB:29 X509v3 Authority Key Identifier: keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:63:33:a9:a2:1b:7b:45:3c:88:b3:a6:4b:25:f9:7a:0b:3c: 19:09:3e:a5:f6:7b:1f:24:e7:11:b0:53:99:68:ab:2b:cf:35: f6:76:f9:28:f3:7f:d6:38:b1:11:5a:2a:59:14:14:bf:57:b8: d1:44:8e:79:fc:c5:20:01:6e:e3:36:68:13:77:a8:23:cb:11: 31:cc:49:a6:9c:a2:3e:11:1e:e8:29:21:40:08:12:4b:33:09: 7c:a0:d8:f3:e9:50:c3:47:b7:bd:10:b7:29:76:de:08:8d:d1: b9:3e:d4:69:56:15:54:94:82:98:bf:eb:0b:d3:f2:66:4c:22: 90:9c:9c:dd:5a:6d:8e:41:f4:ce:25:75:17:cb:1c:ec:92:03: ea:de:50:0e:bb:6d:94:9a:28:56:98:ed:39:cc:da:d3:78:27: e8:ce:3c:e3:51:81:95:fd:37:bd:4a:f9:07:63:27:4b:25:dd: 4e:42:62:a4:b4:4a:4d:e9:23:d9:88:cf:01:46:ec:d9:cf:6e: ab:e5:3c:67:ff:f1:ea:e2:02:17:98:28:36:5b:db:e7:6d:5e: bc:51:48:c3:92:44:7d:3f:97:2d:e8:c4:a4:f0:4b:5f:a7:ac: 26:ed:ab:bf:96:7f:2c:21:3a:76:bc:3a:c5:0b:35:d2:38:06: ee:94:71:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwNjMxMTAvBgNVBAUTKDk3OTdGNzg1MjcwNkVFMUM0MkM2OEE1RTQ1MEI1NzJG OEVFNTA4MTgwHhcNMjUwOTE4MTk1NzA4WhcNMjUwOTI1MTk1NzA4WjAYMRYwFAYD VQQDEw02OGNjNjQxNC0yNTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ndvEoOqJhouXSTeonuRyfwtfk5QwIsObTZWFI7sWG1mrc6FQjFejm+kSA9E iRyI9wt+WQQXos5qfiJCJAPcV22Hyr7QghNhNxNdlMBMTmrzeRP1+LbO7b7eYqzh x7Albrj8KkD1zcVds4VTHHOsvUUwsHHhayJwA6gp+bnSLbeYUOqk/PYPl3F5rZiA ooRVJxBW9UV9eughwQ59BFfp+1Pdx+Up1jVz9NLEhbKK7Ks8YZoF5p8xqOC3ELU6 TQ7b+GVpTnFFFhKVGCYD7Kh68SvUsctJvkApW2QYGGnD/vUGDFTJeei6iQ9RcyvK Axny5j/YF7WiZrdPkQ+RCpN69wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFntFBY5 5J3vF6q2oHGx7BN7lvspMB8GA1UdIwQYMBaAFJeX94UnBu4cQsaKXkULVy+O5QgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTA2My82ODg5QURGMjc0 QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdoeEN4b3BlUlF0WEw0N2xD QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1ZjNoU2NHN2h4Q3hvcGVSUXRYTDQ3bENCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTA2My82ODg5QURGMjc0QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdo eEN4b3BlUlF0WEw0N2xDQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBYzOpoht7RTyIs6ZLJfl6CzwZCT6l9nsfJOcRsFOZaKsrzzX2dvko 83/WOLERWipZFBS/V7jRRI55/MUgAW7jNmgTd6gjyxExzEmmnKI+ER7oKSFACBJL Mwl8oNjz6VDDR7e9ELcpdt4IjdG5PtRpVhVUlIKYv+sL0/JmTCKQnJzdWm2OQfTO JXUXyxzskgPq3lAOu22UmihWmO05zNrTeCfozjzjUYGV/Te9SvkHYydLJd1OQmKk tEpN6SPZiM8BRuzZz26r5Txn//Hq4gIXmCg2W9vnbV68UUjDkkR9P5ct6MSk8Etf p6wm7au/ln8sITp2vDrFCzXSOAbulHFG -----END CERTIFICATE-----Generated at Fri Sep 19 02:53:09 2025 by rpki-client