$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft File: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json) Hash identifier: jOHrzSNynpxtzPop00cojw8GKuvdZgIACKKcgAFHeJI= Subject key identifier: 5A:E2:A7:43:B5:2C:D4:EB:35:48:64:D7:10:8A:4C:FA:4A:11:E2:5C Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Certificate serial: 05F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft Manifest number: 05D9 Signing time: Sun 19 Oct 2025 00:45:35 +0000 Manifest this update: Sun 19 Oct 2025 00:45:34 +0000 Manifest next update: Sun 26 Oct 2025 00:45:34 +0000 Files and hashes: 1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: KVRTAmuU/7BdObLrJl85PHdNNmTA12+3Q1fVoaWnFXc=) 2: E9C2CC6C29CC11F086897744C4F9AE02.roa (hash: hA/qYpYBMY/Kd41Yn5++b5Q+qTaDQ7FCreW/lO2fSUE=) 3: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (hash: +jBGaqvKM/p3gFY9j31Ktn8G8q5l2wqpkIruownzwFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1522 (0x5f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Validity Not Before: Oct 19 00:45:34 2025 GMT Not After : Oct 26 00:45:34 2025 GMT Subject: CN=68f434af-d88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:88:85:f6:bd:0c:67:2f:bd:19:25:ff:58: d1:b7:9d:3f:92:8a:27:fa:28:f1:85:61:b7:1d:64: f8:24:be:82:62:c0:c8:7a:97:78:12:d6:78:31:63: fa:1f:11:5d:68:77:16:da:5f:d9:2d:2d:30:67:83: 98:66:28:3d:67:15:26:8f:d1:84:42:bd:89:2e:ac: be:ff:90:5e:94:09:af:18:ed:4a:a5:72:ca:ef:97: 85:ef:6d:b7:4f:9d:c3:c1:8b:1c:1b:b4:ed:bb:51: 86:da:cd:be:23:c2:96:57:74:9f:64:cf:27:9b:d6: a9:3a:ef:dc:da:22:8b:18:b3:88:4d:d0:58:f2:2d: e5:ff:d9:e6:a4:fc:e7:6d:78:ed:3a:5a:12:f0:11: 73:11:a6:0b:85:91:0b:e1:00:7c:3f:6f:8f:fa:6b: a2:d8:52:40:05:8d:87:a7:b5:3d:4b:e0:1e:80:11: 8b:fd:b1:c0:88:26:bf:7e:2c:b5:c4:58:9b:ac:c8: d1:62:b5:d7:54:a2:32:93:68:f6:d3:ba:5b:36:3e: e6:3f:3f:91:3b:b7:b0:c5:08:bc:f9:be:ac:0e:37: 6e:f6:f4:d2:56:07:26:d0:04:29:b5:f7:57:e5:cf: 34:71:1c:8e:5d:56:cd:f7:61:91:1d:3f:7a:7a:b3: 05:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E2:A7:43:B5:2C:D4:EB:35:48:64:D7:10:8A:4C:FA:4A:11:E2:5C X509v3 Authority Key Identifier: keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:74:1a:06:5f:70:b3:2c:a6:1e:91:b1:8e:ea:54:3f:88:6b: db:93:b2:e3:95:85:47:ab:b8:d3:24:19:02:53:32:fd:b9:13: 4d:4a:f8:92:53:d0:81:44:86:82:bf:bc:ec:b3:4b:bd:84:13: 16:d3:11:de:c5:fa:da:79:75:f8:54:05:8e:f3:34:cf:c6:48: 71:15:51:f9:f9:c5:1e:c9:60:3c:28:a8:52:8f:f6:24:7d:ab: 05:eb:7b:ba:d4:7a:91:2d:ae:83:1b:38:c2:20:21:50:1d:fa: 75:ab:d9:b3:59:22:95:c9:bc:45:74:20:84:74:46:7c:31:04: a2:f9:2e:83:d6:45:e3:92:eb:a5:48:53:9b:9e:c1:95:cb:15: 75:25:c0:17:a0:14:08:5e:a1:4e:10:a7:02:87:19:46:9e:b3: a8:48:ae:f6:1b:7e:9c:89:2f:0e:13:eb:ba:56:57:98:6b:1b: aa:04:77:ff:3e:80:45:c3:87:4c:2f:fa:52:06:1c:e3:e5:bc: b1:6c:8d:40:e0:6d:0b:f9:30:78:d2:25:d7:d5:15:8e:fd:0a: 78:49:13:fa:20:38:be:96:7e:d0:03:0b:aa:4e:7c:46:a3:21: f6:e9:63:78:db:63:0d:da:16:a5:f2:dd:24:8b:19:5b:c5:ac: 8d:87:6f:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4QkMxMTAvBgNVBAUTKDk4QjVDNjE0NzYxOEZDQjY0QzIxNERDQ0MwNzc3NDEz MDg3RTk3NzAwHhcNMjUxMDE5MDA0NTM0WhcNMjUxMDI2MDA0NTM0WjAYMRYwFAYD VQQDEw02OGY0MzRhZi1kODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueCIhfa9DGcvvRkl/1jRt50/koon+ijxhWG3HWT4JL6CYsDIepd4EtZ4MWP6 HxFdaHcW2l/ZLS0wZ4OYZig9ZxUmj9GEQr2JLqy+/5BelAmvGO1KpXLK75eF7223 T53DwYscG7Ttu1GG2s2+I8KWV3SfZM8nm9apOu/c2iKLGLOITdBY8i3l/9nmpPzn bXjtOloS8BFzEaYLhZEL4QB8P2+P+mui2FJABY2Hp7U9S+AegBGL/bHAiCa/fiy1 xFibrMjRYrXXVKIyk2j207pbNj7mPz+RO7ewxQi8+b6sDjdu9vTSVgcm0AQptfdX 5c80cRyOXVbN92GRHT96erMFRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrip0O1 LNTrNUhk1xCKTPpKEeJcMB8GA1UdIwQYMBaAFJi1xhR2GPy2TCFNzMB3dBMIfpdw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhCQy8wRTdENjRENkRG MEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9MWk1JVTNNd0hkMEV3aC1s M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MWEdGSFlZX0xaTUlVM013SGQwRXdoLWwzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjhCQy8wRTdENjRENkRGMEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9M Wk1JVTNNd0hkMEV3aC1sM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxdBoGX3CzLKYekbGO6lQ/iGvbk7LjlYVHq7jTJBkCUzL9uRNNSviS U9CBRIaCv7zss0u9hBMW0xHexfraeXX4VAWO8zTPxkhxFVH5+cUeyWA8KKhSj/Yk fasF63u61HqRLa6DGzjCICFQHfp1q9mzWSKVybxFdCCEdEZ8MQSi+S6D1kXjkuul SFObnsGVyxV1JcAXoBQIXqFOEKcChxlGnrOoSK72G36ciS8OE+u6VleYaxuqBHf/ PoBFw4dML/pSBhzj5byxbI1A4G0L+TB40iXX1RWO/Qp4SRP6IDi+ln7QAwuqTnxG oyH26WN422MN2hal8t0kixlbxayNh28V -----END CERTIFICATE-----Generated at Mon Oct 20 11:31:00 2025 by rpki-client