$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: vtQVSrJ775MHhARgRYMASQOnueQw50kDg5pljDmkw7A= Subject key identifier: FD:E5:E7:6E:FD:3D:3A:12:84:80:25:03:82:31:62:7C:52:DA:0E:0B Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0C4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0C45 Signing time: Thu 18 Sep 2025 18:47:34 +0000 Manifest this update: Thu 18 Sep 2025 18:47:33 +0000 Manifest next update: Thu 25 Sep 2025 18:47:33 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: YNEIazRHs6nSaazQTtiN3oAMtCTMy7LIJLPqzWpvZRI=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: DL4w0jdh6arH3ZaUufUuEs12A9UV6IxUUOEelp+erPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3149 (0xc4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: Sep 18 18:47:33 2025 GMT Not After : Sep 25 18:47:33 2025 GMT Subject: CN=68cc53c6-f5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bb:97:a0:90:71:98:55:74:4e:f6:23:83:9a: a1:0b:62:8d:83:72:67:9b:b0:5c:3e:c3:c1:4c:b4: 15:7c:0a:4c:a9:23:b3:69:33:0d:0d:cc:ce:c8:86: 4e:06:8e:3f:d8:2a:8c:92:d2:9a:6d:bd:9c:23:65: 44:af:41:94:e6:9f:5f:17:81:3d:65:07:ce:82:0f: dd:15:f3:29:ec:07:96:4c:19:7c:9e:f5:d9:69:83: 81:26:57:bb:07:32:74:19:b6:47:ab:66:b0:fd:06: e4:24:cc:d1:34:46:27:8f:a3:c9:af:14:2a:36:fe: 5c:03:df:30:2e:91:20:c3:08:21:e3:16:67:26:39: ba:df:33:e1:c5:65:86:94:5d:6a:eb:a3:0d:82:91: 2e:12:14:eb:14:b4:7b:ab:85:fd:4f:26:cf:a0:44: 24:32:67:23:0a:c2:d5:cc:7d:0e:0a:4e:05:42:8b: 19:00:fc:ea:7b:37:95:bc:f2:b9:2d:86:7c:06:42: a0:dd:e0:e9:18:d9:6e:cc:51:de:b0:f7:4f:29:ab: 16:75:bb:ff:f9:26:7c:19:bf:17:d6:47:d8:25:03: 08:2a:20:cf:c5:5a:28:dd:1f:54:ae:48:40:c9:4c: 00:6b:63:ae:cc:17:aa:d5:ff:3b:15:8c:ce:8d:02: 5e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E5:E7:6E:FD:3D:3A:12:84:80:25:03:82:31:62:7C:52:DA:0E:0B X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9a:ad:3e:f4:66:d4:b1:c1:20:59:39:36:2b:1f:f1:80:a8: 24:90:84:a4:c5:dc:5f:c0:6b:6f:a7:e3:a0:c6:9f:62:2a:2d: 09:24:54:04:11:47:b6:9d:c4:4a:80:8e:f5:22:88:92:19:e9: fa:4e:8c:33:e6:bd:b6:f0:68:59:6f:48:09:df:04:83:30:64: bc:43:1e:24:f3:8b:61:6e:f1:dd:90:ea:33:8c:52:15:ad:9a: b0:67:c1:31:7d:3c:48:a1:dc:9f:f1:95:fe:55:e8:8b:e3:4b: 84:d3:d4:fb:43:ea:98:06:ec:a9:02:60:21:0a:f3:29:05:08: 68:72:6c:77:c3:bd:bf:78:c1:90:d0:b6:3e:21:25:aa:93:d9: 1c:5c:2e:f8:3c:9c:7a:06:f5:22:78:d7:82:bf:c6:5c:d6:88: 74:a1:e3:ba:61:90:6f:36:ba:ff:e6:0f:88:6f:0d:b6:f0:91: e9:5b:d8:b3:92:4d:a5:50:92:87:f8:8e:a4:77:48:72:19:b7: ef:4f:c8:5d:41:21:19:a9:0f:f1:32:23:d1:bb:c2:cd:d5:62: c1:6f:39:9f:27:f1:27:2f:93:d4:54:91:09:06:f5:47:ce:78: 52:28:0d:60:d0:90:53:eb:e7:04:9a:c0:3d:55:ac:17:e3:c2: 4d:4b:38:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjUwOTE4MTg0NzMzWhcNMjUwOTI1MTg0NzMzWjAYMRYwFAYD VQQDEw02OGNjNTNjNi1mNWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlruXoJBxmFV0TvYjg5qhC2KNg3Jnm7BcPsPBTLQVfApMqSOzaTMNDczOyIZO Bo4/2CqMktKabb2cI2VEr0GU5p9fF4E9ZQfOgg/dFfMp7AeWTBl8nvXZaYOBJle7 BzJ0GbZHq2aw/QbkJMzRNEYnj6PJrxQqNv5cA98wLpEgwwgh4xZnJjm63zPhxWWG lF1q66MNgpEuEhTrFLR7q4X9TybPoEQkMmcjCsLVzH0OCk4FQosZAPzqezeVvPK5 LYZ8BkKg3eDpGNluzFHesPdPKasWdbv/+SZ8Gb8X1kfYJQMIKiDPxVoo3R9UrkhA yUwAa2OuzBeq1f87FYzOjQJe1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3l5279 PToShIAlA4IxYnxS2g4LMB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOmq0+9GbUscEgWTk2Kx/xgKgkkISkxdxfwGtvp+Ogxp9iKi0JJFQE EUe2ncRKgI71IoiSGen6Towz5r228GhZb0gJ3wSDMGS8Qx4k84thbvHdkOozjFIV rZqwZ8ExfTxIodyf8ZX+VeiL40uE09T7Q+qYBuypAmAhCvMpBQhocmx3w72/eMGQ 0LY+ISWqk9kcXC74PJx6BvUieNeCv8Zc1oh0oeO6YZBvNrr/5g+Ibw228JHpW9iz kk2lUJKH+I6kd0hyGbfvT8hdQSEZqQ/xMiPRu8LN1WLBbzmfJ/EnL5PUVJEJBvVH znhSKA1g0JBT6+cEmsA9VawX48JNSzhf -----END CERTIFICATE-----Generated at Thu Sep 18 23:30:10 2025 by rpki-client