$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: ymZWOPb3d1a4KGwaB4I80BdlBBlDeljwVTYFn8P9rc0= Subject key identifier: 64:FC:56:CA:BA:9B:A8:7E:F5:09:8F:F9:3D:56:41:81:05:51:CC:79 Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0C64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0C5C Signing time: Sun 02 Nov 2025 18:33:25 +0000 Manifest this update: Sun 02 Nov 2025 18:33:24 +0000 Manifest next update: Sun 09 Nov 2025 18:33:24 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: Yt4QzCXXwaQYHO/sy0IINwXIGHiaKswqhgaSTAAvV+o=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: DL4w0jdh6arH3ZaUufUuEs12A9UV6IxUUOEelp+erPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: Nov 2 18:33:24 2025 GMT Not After : Nov 9 18:33:24 2025 GMT Subject: CN=6907a3f4-c336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:23:b8:63:e5:97:d9:cf:62:ec:cf:1b:a5:02: 38:e7:92:7f:5b:90:7a:58:4a:d4:0b:d5:cd:3b:73: c7:b2:1f:94:e3:36:6c:34:51:48:9e:5d:3e:aa:b7: a2:29:c8:af:79:29:b3:7d:cb:b7:08:38:31:cc:f8: 34:5a:7c:a8:e5:63:f3:b2:bb:02:65:b4:83:c3:ff: d9:85:3a:7c:74:77:e7:bd:7b:0a:b7:19:89:d0:73: 6a:be:a4:e5:5c:2c:d4:93:a2:cd:fa:4e:92:76:63: 23:94:da:6b:ae:b3:2d:94:1c:dd:51:13:e6:22:de: 11:b1:f9:3c:68:3f:74:fe:1f:c8:36:68:5a:d6:e6: 1d:b8:5c:77:fe:1d:3e:6c:e9:a9:f9:24:1a:87:1b: 9d:30:cb:e5:1f:f8:31:57:45:63:16:88:90:8e:ad: 32:e0:b5:38:6a:da:34:24:ec:3a:e3:ec:fb:03:6d: 68:5a:b5:6b:36:90:77:60:5c:1c:1b:b9:0e:6b:70: 8c:d0:9c:70:77:4b:cf:58:b7:05:a5:7b:fe:76:73: c1:c2:7a:9b:dc:b3:9f:16:eb:b8:20:05:99:83:fb: ee:fb:16:b0:d3:8f:c3:83:c7:a0:3d:fc:19:4a:0a: 33:cd:47:91:3f:c2:1b:77:1c:63:c0:5c:48:40:f8: d5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FC:56:CA:BA:9B:A8:7E:F5:09:8F:F9:3D:56:41:81:05:51:CC:79 X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:82:ba:72:1c:97:da:fb:5c:19:a6:9c:77:85:a6:86:fd:96: 60:10:ca:d6:66:45:ba:4f:bb:2a:1f:a7:2e:94:f4:06:5b:35: 35:ee:ba:61:45:27:e7:33:93:dc:92:c0:e2:e9:5d:d1:dc:ba: 99:70:75:c2:99:e2:b9:cd:29:ce:70:bd:00:de:6e:2e:3a:c4: 4c:b1:79:6e:cd:ec:fa:04:d8:62:07:89:f0:87:40:47:fe:5f: 39:98:ee:d2:62:29:87:d7:52:7c:28:da:8c:c6:f9:6d:c0:e5: 75:c2:ad:94:ac:a8:f0:50:97:5c:37:33:37:17:02:3e:4b:dd: 94:1f:a7:3b:ff:7f:aa:6f:0e:e0:ef:a4:80:93:0e:42:e1:e6: ee:73:8c:6e:2e:f0:6c:22:e5:70:14:09:d3:e2:5c:ec:ea:b7: cd:ad:b6:de:bb:16:dc:16:78:57:21:68:a4:d9:4d:a7:73:a6: 05:ed:7a:61:11:53:ac:22:ff:c3:c7:26:a0:72:90:ab:6d:37: 4c:f6:6a:8a:7d:fd:8f:d6:fd:fb:bd:e0:79:d2:96:14:ea:c1: f7:9f:85:44:ac:d3:4a:f3:ac:a6:90:6b:fc:b2:c1:3c:67:3c: a5:6f:ac:a1:e2:57:32:36:58:e1:0b:f7:aa:2f:7d:34:e5:4f: 4c:c3:4e:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjUxMTAyMTgzMzI0WhcNMjUxMTA5MTgzMzI0WjAYMRYwFAYD VQQDEw02OTA3YTNmNC1jMzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAriO4Y+WX2c9i7M8bpQI455J/W5B6WErUC9XNO3PHsh+U4zZsNFFInl0+qrei KciveSmzfcu3CDgxzPg0Wnyo5WPzsrsCZbSDw//ZhTp8dHfnvXsKtxmJ0HNqvqTl XCzUk6LN+k6SdmMjlNprrrMtlBzdURPmIt4Rsfk8aD90/h/INmha1uYduFx3/h0+ bOmp+SQahxudMMvlH/gxV0VjFoiQjq0y4LU4ato0JOw64+z7A21oWrVrNpB3YFwc G7kOa3CM0Jxwd0vPWLcFpXv+dnPBwnqb3LOfFuu4IAWZg/vu+xaw04/Dg8egPfwZ SgozzUeRP8IbdxxjwFxIQPjVRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGT8Vsq6 m6h+9QmP+T1WQYEFUcx5MB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpgrpyHJfa+1wZppx3haaG/ZZgEMrWZkW6T7sqH6culPQGWzU17rph RSfnM5PcksDi6V3R3LqZcHXCmeK5zSnOcL0A3m4uOsRMsXluzez6BNhiB4nwh0BH /l85mO7SYimH11J8KNqMxvltwOV1wq2UrKjwUJdcNzM3FwI+S92UH6c7/3+qbw7g 76SAkw5C4ebuc4xuLvBsIuVwFAnT4lzs6rfNrbbeuxbcFnhXIWik2U2nc6YF7Xph EVOsIv/DxyagcpCrbTdM9mqKff2P1v37veB50pYU6sH3n4VErNNK86ymkGv8ssE8 Zzylb6yh4lcyNljhC/eqL3005U9Mw061 -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:08 2025 by rpki-client