$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json) Hash identifier: 40XvNu0rg3nSmoiyrio5aMMfZ/3fdKX9+hckot3debk= Subject key identifier: 29:31:C0:2B:40:14:94:78:64:E9:54:28:7A:F4:F1:D4:BC:9D:D1:AB Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0CBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft Manifest number: 0CA3 Signing time: Sun 02 Nov 2025 18:23:37 +0000 Manifest this update: Sun 02 Nov 2025 18:23:37 +0000 Manifest next update: Sun 09 Nov 2025 18:23:37 +0000 Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: axvzAR7CK1rgVtaMg9t6Ro2kr1K3OB53njx+HoKhzLk=) 2: FB170730324211EFA9B5F949C4F9AE02.roa (hash: yYm1dMIQ816DxBHWaOlKO9yBaX3TNCa5zS93/rSk5Bg=) 3: B430443A324211EFB14FB614C4F9AE02.roa (hash: mSmKdhP1dOumHc/59nE808KhJQxB4mVR7KUP5N0koRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3261 (0xcbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: Nov 2 18:23:37 2025 GMT Not After : Nov 9 18:23:37 2025 GMT Subject: CN=6907a1a9-17f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:2e:12:bc:83:b6:6d:2d:f6:9b:36:ea:7a: 37:d1:83:1b:cf:f8:bf:0f:5f:68:06:3f:bd:66:31: cf:1d:40:00:86:17:ff:19:dd:7e:89:fa:d6:4e:43: 31:ce:8f:3d:28:dd:9b:a6:3b:4f:54:fa:8d:4b:d0: 9a:77:fe:9f:49:9a:e3:03:37:94:6a:e0:ad:63:b7: 14:ff:ba:03:e8:fc:3d:c0:0b:92:dc:fc:9b:06:8b: 5a:a1:51:7c:7d:68:bd:c9:ba:e6:39:bd:8b:ca:86: 55:e2:3a:c1:00:a0:43:21:5c:94:66:be:a0:ba:7a: cd:a0:1b:67:f5:2c:1c:d9:44:c0:d5:56:a5:fa:f6: 45:75:60:cd:d5:00:f6:98:e8:e2:ac:b2:7b:43:92: 6a:ea:96:8a:fc:f5:fc:28:1c:db:ee:ca:4b:1f:7e: ae:0c:41:b5:98:e6:dc:35:92:d5:9a:cb:18:3f:74: 65:a8:44:98:23:d9:eb:c4:b1:81:6a:fd:b0:97:f7: ba:27:4f:30:5e:30:bd:93:6b:22:f8:21:17:be:8a: c8:76:bc:55:01:ea:53:1a:b1:2a:f8:4c:30:2a:28: 97:3a:c9:c8:13:f3:08:e2:e7:58:94:09:ef:a0:2e: a9:91:f8:92:be:23:55:d7:0b:5a:15:27:ee:20:b2: 9f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:31:C0:2B:40:14:94:78:64:E9:54:28:7A:F4:F1:D4:BC:9D:D1:AB X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:29:a6:c2:9b:d5:76:c3:3f:2f:7a:af:89:b2:05:95:92:4d: 53:f2:ed:b1:fe:5f:e9:8c:02:e6:6c:42:9f:38:75:87:ae:00: 11:a8:71:19:9e:56:e6:03:ce:5e:bc:5b:2c:1e:4f:07:6c:6a: 89:a1:d8:c6:a5:ab:93:6a:2b:c2:a3:4b:45:6d:53:a7:b1:94: 56:fd:4e:cf:71:e7:3a:7c:af:43:59:84:63:25:3b:30:ef:d1: af:95:a7:ed:23:b3:0b:57:d0:2e:2b:54:ff:94:76:6a:70:7b: 2b:b5:da:92:fd:3c:d7:48:4b:d1:14:3a:b4:64:31:89:44:67: 8b:e9:87:00:0e:c0:da:d2:16:be:32:0b:38:7c:a6:4d:c9:8c: a2:7f:6a:b9:eb:f0:9e:28:88:30:d5:2b:52:11:81:0f:de:18: d1:a6:65:d0:14:0d:2f:2a:5c:77:f8:f9:63:c3:fd:3c:09:1a: b1:f3:9f:8b:f9:87:e6:80:47:eb:41:81:8d:b5:61:11:3a:9f: e8:97:f0:14:30:6b:ec:15:9f:bd:1c:f5:8c:a8:fe:bf:df:21: b7:c8:c2:e4:03:ac:06:97:46:1e:fb:33:8d:b7:f3:38:ba:77: ef:e4:0a:4e:68:40:e7:8d:ea:20:ac:c6:4c:a1:32:e8:55:c0: 9f:14:b3:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjUxMTAyMTgyMzM3WhcNMjUxMTA5MTgyMzM3WjAYMRYwFAYD VQQDEw02OTA3YTFhOS0xN2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+QuEryDtm0t9ps26no30YMbz/i/D19oBj+9ZjHPHUAAhhf/Gd1+ifrWTkMx zo89KN2bpjtPVPqNS9Cad/6fSZrjAzeUauCtY7cU/7oD6Pw9wAuS3PybBotaoVF8 fWi9ybrmOb2LyoZV4jrBAKBDIVyUZr6gunrNoBtn9Swc2UTA1Val+vZFdWDN1QD2 mOjirLJ7Q5Jq6paK/PX8KBzb7spLH36uDEG1mObcNZLVmssYP3RlqESYI9nrxLGB av2wl/e6J08wXjC9k2si+CEXvorIdrxVAepTGrEq+EwwKiiXOsnIE/MI4udYlAnv oC6pkfiSviNV1wtaFSfuILKfdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkxwCtA FJR4ZOlUKHr08dS8ndGrMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4 TFpFRUtBaThyZnpiYzBkVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCKabCm9V2wz8veq+JsgWVkk1T8u2x/l/pjALmbEKfOHWHrgARqHEZ nlbmA85evFssHk8HbGqJodjGpauTaivCo0tFbVOnsZRW/U7Pcec6fK9DWYRjJTsw 79GvlaftI7MLV9AuK1T/lHZqcHsrtdqS/TzXSEvRFDq0ZDGJRGeL6YcADsDa0ha+ Mgs4fKZNyYyif2q56/CeKIgw1StSEYEP3hjRpmXQFA0vKlx3+Pljw/08CRqx85+L +YfmgEfrQYGNtWEROp/ol/AUMGvsFZ+9HPWMqP6/3yG3yMLkA6wGl0Ye+zONt/M4 unfv5ApOaEDnjeogrMZMoTLoVcCfFLPj -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:11 2025 by rpki-client