$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft File: 0l-HlucNZw6YbGwkdz5rd4w2BXc.mft (raw, json) Hash identifier: 5gsliJBfGIP14qqhRD1EVQPK9er2XyIG64HckywOU0U= Subject key identifier: D7:A7:6E:B6:1F:6A:0A:6D:02:4A:CE:90:E8:2C:A8:A6:3B:AD:6A:97 Authority key identifier: D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77 Certificate issuer: /CN=A914FD01/serialNumber=D25F8796E70D670E986C6C24773E6B778C360577 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft Manifest number: 29 Signing time: Mon 03 Nov 2025 07:41:17 +0000 Manifest this update: Mon 03 Nov 2025 07:41:17 +0000 Manifest next update: Mon 10 Nov 2025 07:41:17 +0000 Files and hashes: 1: 0l-HlucNZw6YbGwkdz5rd4w2BXc.crl (hash: isMB9LQyF6mHmZHOo4PnQtI2bSRi3lvhRf5xl6y+V4U=) 2: 442749147D6311F0BC413466C4F9AE02.roa (hash: U/qMD7uylhtZUr24KZzqo+D5k35qqAvh49xpiigrEd0=) 3: 44AA60D87D6311F0BC413466C4F9AE02.roa (hash: E4IkE6FRMTE0lAhudQztXcTO2n4pZjttFwQTGBoNBn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD01, serialNumber=D25F8796E70D670E986C6C24773E6B778C360577 Validity Not Before: Nov 3 07:41:17 2025 GMT Not After : Nov 10 07:41:17 2025 GMT Subject: CN=69085c9d-df7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f8:01:d4:d5:29:fa:7e:a5:cc:44:4d:d8:f8: 00:9f:9f:07:59:35:f0:30:2b:db:d2:7e:63:0d:56: 67:c8:d9:f0:c4:7f:5f:90:f4:08:51:88:79:d9:17: 2d:0a:02:95:fb:40:ba:6a:16:86:77:d4:f6:1f:1a: 8c:04:0d:1e:a7:8a:88:36:56:19:09:a3:08:db:ef: 2b:e2:69:75:32:05:91:8c:c3:8b:a8:fb:b1:73:c9: 8b:8d:df:db:3f:fc:53:23:29:e1:a1:b1:70:38:9b: 29:e7:9d:38:62:20:c2:6f:1a:4c:ec:20:12:1e:4f: 89:c2:7e:00:d5:d9:58:53:bc:ef:26:62:d0:b4:0b: 49:03:2b:d1:45:1e:f6:d9:15:d4:db:87:dd:cf:2a: d4:e8:ca:1b:88:e3:bf:eb:74:e0:51:c5:b7:ce:5a: ce:28:36:38:97:48:bb:ca:5e:cc:cd:6a:a7:e8:ec: 73:66:4d:c7:2e:6a:2a:de:0b:cc:6c:52:a2:fb:b0: dc:27:59:0a:e7:d7:fc:16:ad:c6:9a:38:46:e8:41: ab:e8:36:a8:47:0a:fd:ce:e8:4c:90:73:1e:7a:4d: 1a:df:3d:db:0c:9c:a7:e1:cc:a3:3a:c6:b9:2f:15: c2:12:a5:8e:d3:bc:5d:b1:81:3f:97:cc:03:59:8d: c3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A7:6E:B6:1F:6A:0A:6D:02:4A:CE:90:E8:2C:A8:A6:3B:AD:6A:97 X509v3 Authority Key Identifier: keyid:D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:7f:bf:cd:00:4c:d3:a7:5c:3a:ee:4f:b3:f6:d3:d5:12:ff: c5:25:5f:df:6e:04:3c:6f:4e:95:ae:5a:bd:d6:40:6a:72:dd: dc:40:37:45:3b:ca:c0:15:ee:cc:bd:3a:a0:49:3f:df:94:3a: 70:2e:19:44:0e:f8:c5:ce:7b:41:d6:c4:39:b3:f6:56:a7:80: 12:65:e8:61:5e:d8:f8:4b:6f:10:92:91:f3:61:66:a0:a5:cf: 86:25:43:ee:da:f8:c4:97:1e:32:69:20:20:f2:73:84:b9:dc: 06:a6:35:34:dd:1a:a9:55:ae:98:43:4f:b8:94:57:78:0d:69: e5:51:fc:5a:58:0f:e4:98:05:13:92:b5:12:06:90:05:27:c8: f4:8f:54:a1:7f:69:d2:4d:76:c5:1c:9a:8a:25:2d:04:48:c0: 5e:b5:ff:a7:4e:57:68:87:5f:c9:11:22:88:11:76:d5:45:56: 30:a1:7b:6c:36:8f:54:51:fe:a3:69:1d:8d:71:69:f9:1e:99: a0:4c:31:e7:35:d1:ac:e7:ef:1d:46:c3:82:18:82:c5:15:44: 6d:56:c2:53:a8:8e:3d:76:f3:e4:3c:9d:35:ee:47:68:c5:ef: fe:f7:d7:c3:b5:30:89:63:c3:f4:57:48:76:d3:db:32:e6:d9: 5d:32:ea:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RkQwMTExMC8GA1UEBRMoRDI1Rjg3OTZFNzBENjcwRTk4NkM2QzI0NzczRTZCNzc4 QzM2MDU3NzAeFw0yNTExMDMwNzQxMTdaFw0yNTExMTAwNzQxMTdaMBgxFjAUBgNV BAMTDTY5MDg1YzlkLWRmN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd+AHU1Sn6fqXMRE3Y+ACfnwdZNfAwK9vSfmMNVmfI2fDEf1+Q9AhRiHnZFy0K ApX7QLpqFoZ31PYfGowEDR6niog2VhkJowjb7yviaXUyBZGMw4uo+7FzyYuN39s/ /FMjKeGhsXA4mynnnThiIMJvGkzsIBIeT4nCfgDV2VhTvO8mYtC0C0kDK9FFHvbZ FdTbh93PKtToyhuI47/rdOBRxbfOWs4oNjiXSLvKXszNaqfo7HNmTccuaireC8xs UqL7sNwnWQrn1/wWrcaaOEboQavoNqhHCv3O6EyQcx56TRrfPdsMnKfhzKM6xrkv FcISpY7TvF2xgT+XzANZjcMRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU16duth9q Cm0CSs6Q6CyopjutapcwHwYDVR0jBBgwFoAU0l+HlucNZw6YbGwkdz5rd4w2BXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGRDAxLzM2QTcxRTRFN0Q1 RjExRjA5RUM5QzkzOEM0RjlBRTAyLzBsLUhsdWNOWnc2WWJHd2tkejVyZDR3MkJY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMGwtSGx1Y05adzZZYkd3a2R6NXJkNHcyQlhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG RDAxLzM2QTcxRTRFN0Q1RjExRjA5RUM5QzkzOEM0RjlBRTAyLzBsLUhsdWNOWnc2 WWJHd2tkejVyZDR3MkJYYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABl/v80ATNOnXDruT7P209US/8UlX99uBDxvTpWuWr3WQGpy3dxAN0U7 ysAV7sy9OqBJP9+UOnAuGUQO+MXOe0HWxDmz9langBJl6GFe2PhLbxCSkfNhZqCl z4YlQ+7a+MSXHjJpICDyc4S53AamNTTdGqlVrphDT7iUV3gNaeVR/FpYD+SYBROS tRIGkAUnyPSPVKF/adJNdsUcmoolLQRIwF61/6dOV2iHX8kRIogRdtVFVjChe2w2 j1RR/qNpHY1xafkemaBMMec10azn7x1Gw4IYgsUVRG1WwlOojj128+Q8nTXuR2jF 7/7318O1MIljw/RXSHbT2zLm2V0y6vw= -----END CERTIFICATE-----Generated at Tue Nov 4 01:08:29 2025 by rpki-client