$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json) Hash identifier: +/DFi6sSGxHlNka07H3hednp6LqHDRi9a9yDx81+Gek= Subject key identifier: A4:D0:90:4E:F4:AD:C5:0C:95:12:BD:59:4C:60:86:AD:8B:A0:DF:BB Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft Manifest number: 0224 Signing time: Sun 19 Oct 2025 04:34:07 +0000 Manifest this update: Sun 19 Oct 2025 04:34:06 +0000 Manifest next update: Sun 26 Oct 2025 04:34:06 +0000 Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: oLg/Ao23PuXrP6PnS+jSDLNjo6Ap9FSrMFUiKGo6C4Y=) 2: 42C28C36A80711F0A622350DC4F9AE02.roa (hash: 7yzpPSeDBKG0ILP0wLSPkWToi/S3lPqOvxrezWtdGKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: Oct 19 04:34:06 2025 GMT Not After : Oct 26 04:34:06 2025 GMT Subject: CN=68f46a3f-9e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:34:2a:68:8a:5a:b4:bf:9f:c1:58:b9:63:e6: c6:a4:52:8a:0a:ca:4a:5a:69:88:1d:b9:4f:e9:f9: ad:09:93:05:e4:e0:6e:39:30:01:6f:3d:28:74:9a: 09:39:d8:f1:01:d1:2a:03:92:d5:a3:23:e0:e8:ed: 3c:3e:7d:71:26:68:27:de:16:74:44:c4:3a:93:d3: 1e:46:5c:e6:04:d4:7f:1d:95:2a:13:87:76:31:45: c5:6b:30:1e:e1:01:d2:26:3a:39:e0:ca:4e:1b:df: 1f:c8:fc:96:51:58:84:cd:2d:c3:4d:49:d2:3b:25: c4:0c:d3:0c:7f:86:e7:05:e4:cf:01:25:13:ec:b9: b5:98:16:59:7d:2c:18:b4:f2:e7:ea:e4:15:ba:56: ab:e3:7c:92:51:19:4d:be:9d:f7:fd:82:4e:4c:c5: 95:99:e7:b8:2d:06:99:0f:3c:9f:d8:84:0b:bd:74: 72:28:12:db:63:7e:1d:28:42:98:33:26:1c:8d:28: 38:77:5d:b6:d0:54:f9:59:ba:85:f4:48:7c:3f:02: 1a:d3:70:ab:e2:0d:f1:50:86:5f:7b:4a:a1:ea:4d: f8:8f:45:bc:a5:a4:68:58:48:be:da:db:73:74:e8: 7e:37:7d:b6:da:51:fb:31:23:53:d5:8c:7e:4c:67: 42:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D0:90:4E:F4:AD:C5:0C:95:12:BD:59:4C:60:86:AD:8B:A0:DF:BB X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:95:d9:5c:d0:1b:55:19:f9:88:6c:87:bc:e0:bb:7e:06:13: ad:1f:46:52:f5:83:2d:4c:95:31:f4:46:3a:f8:2c:23:87:a5: e9:96:f7:e1:e3:7e:fb:a6:76:e7:31:75:b3:3d:0b:b4:8d:ca: 0b:29:43:cc:e8:63:77:5b:2c:1f:0b:29:e5:2f:0e:60:cf:14: dd:1d:8a:3b:8e:37:6a:90:10:5d:82:3f:41:e0:16:00:37:ee: 2f:c6:8c:10:be:66:04:60:ab:05:34:f1:49:5d:af:21:ef:10: fc:ab:85:a5:26:75:a6:d9:10:86:a3:49:e1:ad:b2:9c:62:09: 17:6d:14:7e:6c:d6:03:b8:b5:24:c8:2b:b1:bd:f0:38:b7:94: 6f:3a:79:36:7b:04:22:51:0e:3d:21:c2:d5:18:ba:3e:fe:08: bc:49:0e:87:07:f4:d7:ce:3c:93:04:e7:25:18:e3:6d:8c:c2: 9f:b3:2a:be:5f:ab:03:ac:98:a6:97:cd:17:8c:39:46:a6:1d: 76:da:42:e2:02:8c:7f:29:05:05:64:4e:c5:df:2f:b9:0d:0e: 6d:35:2f:37:66:80:23:7c:c4:b6:00:09:72:b4:22:e8:72:02: 1a:cd:c4:af:b8:6a:54:01:64:9d:24:0d:55:4d:62:35:3d:1a: 6d:6b:09:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjUxMDE5MDQzNDA2WhcNMjUxMDI2MDQzNDA2WjAYMRYwFAYD VQQDEw02OGY0NmEzZi05ZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzQqaIpatL+fwVi5Y+bGpFKKCspKWmmIHblP6fmtCZMF5OBuOTABbz0odJoJ OdjxAdEqA5LVoyPg6O08Pn1xJmgn3hZ0RMQ6k9MeRlzmBNR/HZUqE4d2MUXFazAe 4QHSJjo54MpOG98fyPyWUViEzS3DTUnSOyXEDNMMf4bnBeTPASUT7Lm1mBZZfSwY tPLn6uQVular43ySURlNvp33/YJOTMWVmee4LQaZDzyf2IQLvXRyKBLbY34dKEKY MyYcjSg4d1220FT5WbqF9Eh8PwIa03Cr4g3xUIZfe0qh6k34j0W8paRoWEi+2ttz dOh+N3222lH7MSNT1Yx+TGdCkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTQkE70 rcUMlRK9WUxghq2LoN+7MB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz WGhaSnVpVVBhWF8wZXNCajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLldlc0BtVGfmIbIe84Lt+BhOtH0ZS9YMtTJUx9EY6+Cwjh6Xplvfh 4377pnbnMXWzPQu0jcoLKUPM6GN3WywfCynlLw5gzxTdHYo7jjdqkBBdgj9B4BYA N+4vxowQvmYEYKsFNPFJXa8h7xD8q4WlJnWm2RCGo0nhrbKcYgkXbRR+bNYDuLUk yCuxvfA4t5RvOnk2ewQiUQ49IcLVGLo+/gi8SQ6HB/TXzjyTBOclGONtjMKfsyq+ X6sDrJiml80XjDlGph122kLiAox/KQUFZE7F3y+5DQ5tNS83ZoAjfMS2AAlytCLo cgIazcSvuGpUAWSdJA1VTWI1PRptawkb -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:59 2025 by rpki-client