$ rpki-client -vvf rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft File: MPLcABvWWM0WPiN3H0FHaXLg0U8.mft (raw, json) Hash identifier: v+8Rw3AdTM8n8XMyzbuXDnIp/srPc1BDFp+6VFooTTU= Subject key identifier: 53:38:91:F1:79:4F:2D:F8:5D:6D:67:9F:58:6F:E4:25:9A:48:FE:BF Authority key identifier: 30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F Certificate issuer: /CN=A91283E7/serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F Certificate serial: 052D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft Manifest number: 0528 Signing time: Sun 19 Oct 2025 01:16:42 +0000 Manifest this update: Sun 19 Oct 2025 01:16:42 +0000 Manifest next update: Sun 26 Oct 2025 01:16:42 +0000 Files and hashes: 1: MPLcABvWWM0WPiN3H0FHaXLg0U8.crl (hash: 4/W0P25w5EiYppjaXPhQZgXaoca1c1vc7HziY3IO+ko=) 2: 9F7C20921ADD11EC80226B61C4F9AE02.roa (hash: bsEiEpYevuZ2yI/lTaWJ4XTDfNWpo5EoBNfwBtnxRKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1325 (0x52d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91283E7, serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F Validity Not Before: Oct 19 01:16:42 2025 GMT Not After : Oct 26 01:16:42 2025 GMT Subject: CN=68f43bfa-0cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4c:ae:7e:da:15:95:44:f1:93:29:98:2f:8d: 8a:ca:76:9d:ec:e0:dc:cd:1b:58:84:8e:3d:b9:ed: d5:e7:63:dd:81:25:cc:92:33:3a:85:47:cb:58:de: d0:30:96:c0:56:cb:61:5c:7d:bb:46:3c:c8:9e:45: 0c:a5:05:da:d5:04:c3:e2:f1:cd:7e:c8:71:35:f2: f2:1d:2c:b0:5a:c1:70:d8:7c:74:f5:a2:f2:fd:7b: ae:58:ba:00:8a:39:22:a7:e0:61:c4:af:a4:42:50: 4b:46:b4:8e:1a:6b:b5:64:20:42:7b:a1:0d:7d:c3: 46:b8:2b:5a:97:a2:74:7f:95:da:3c:3b:0f:ea:66: cc:10:52:74:5a:98:30:87:51:3a:88:e6:bd:ed:af: 9f:a1:75:c1:8c:36:6b:e5:7e:08:4d:76:c3:41:b5: 8a:69:13:02:43:77:fb:fe:d1:fd:97:6b:03:25:7c: db:ed:4a:43:c3:29:d6:8a:a0:84:19:0f:0d:9d:be: 9c:aa:8e:d0:97:c8:57:ed:51:a8:2e:ca:65:9d:8a: 79:77:c4:cf:84:ee:fb:83:e6:66:46:a8:78:a9:6d: 33:63:2a:75:02:81:32:fe:60:d7:30:54:77:42:a2: e8:da:f0:4e:fe:39:20:d4:f5:94:9d:b1:ab:80:11: 57:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:38:91:F1:79:4F:2D:F8:5D:6D:67:9F:58:6F:E4:25:9A:48:FE:BF X509v3 Authority Key Identifier: keyid:30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:3b:bb:75:c5:88:5f:2e:56:cf:63:9b:36:4d:cc:8e:1f:a5: 54:7e:cf:2c:b9:40:65:69:31:bf:16:75:f5:d7:40:a8:70:a9: 4e:ac:e0:75:32:83:15:47:56:c2:a1:e7:43:4b:e6:bc:e2:85: 7e:c5:d7:82:54:26:4b:56:c7:e6:37:47:85:37:51:ad:45:d5: f9:8f:a9:92:81:cc:cb:66:3d:a9:01:5d:76:f1:92:a9:ed:69: c9:18:68:dc:53:56:72:a7:46:b1:8b:25:6a:74:e3:c6:b3:c6: e0:d2:5e:42:99:84:a5:4d:f8:dc:f0:70:79:55:36:48:2f:c3: a7:1c:9e:b7:86:e6:70:0f:78:d7:8e:01:49:44:08:ef:b0:cc: 0c:be:60:c5:51:23:aa:c0:d0:af:ff:27:5e:93:8b:2f:a1:17: e0:8f:d0:02:a9:fb:73:4a:14:5c:62:86:e6:52:8d:7f:81:3b: 2f:50:d7:2b:d4:ca:b4:c1:43:73:9c:56:07:ff:fb:23:bf:f4: fc:bb:57:09:d4:00:89:fe:bb:c0:79:58:e0:b3:34:36:3e:6c: 79:40:0f:51:f7:fb:6c:b0:0a:cb:10:fa:90:69:2b:76:37:d7: de:10:46:76:44:68:5f:7b:65:15:95:72:7e:f2:9c:d4:80:ad: 27:ea:58:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgzRTcxMTAvBgNVBAUTKDMwRjJEQzAwMUJENjU4Q0QxNjNFMjM3NzFGNDE0NzY5 NzJFMEQxNEYwHhcNMjUxMDE5MDExNjQyWhcNMjUxMDI2MDExNjQyWjAYMRYwFAYD VQQDEw02OGY0M2JmYS0wY2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEyuftoVlUTxkymYL42Kynad7ODczRtYhI49ue3V52PdgSXMkjM6hUfLWN7Q MJbAVsthXH27RjzInkUMpQXa1QTD4vHNfshxNfLyHSywWsFw2Hx09aLy/XuuWLoA ijkip+BhxK+kQlBLRrSOGmu1ZCBCe6ENfcNGuCtal6J0f5XaPDsP6mbMEFJ0Wpgw h1E6iOa97a+foXXBjDZr5X4ITXbDQbWKaRMCQ3f7/tH9l2sDJXzb7UpDwynWiqCE GQ8Nnb6cqo7Ql8hX7VGoLsplnYp5d8TPhO77g+ZmRqh4qW0zYyp1AoEy/mDXMFR3 QqLo2vBO/jkg1PWUnbGrgBFXeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFM4kfF5 Ty34XW1nn1hv5CWaSP6/MB8GA1UdIwQYMBaAFDDy3AAb1ljNFj4jdx9BR2ly4NFP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODNFNy83Mzk2MENDNDFB REIxMUVDOTNEMDZDNjBDNEY5QUUwMi9NUExjQUJ2V1dNMFdQaU4zSDBGSGFYTGcw VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01QTGNBQnZXV00wV1BpTjNIMEZIYVhMZzBVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODNFNy83Mzk2MENDNDFBREIxMUVDOTNEMDZDNjBDNEY5QUUwMi9NUExjQUJ2V1dN MFdQaU4zSDBGSGFYTGcwVTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxO7t1xYhfLlbPY5s2TcyOH6VUfs8suUBlaTG/FnX110CocKlOrOB1 MoMVR1bCoedDS+a84oV+xdeCVCZLVsfmN0eFN1GtRdX5j6mSgczLZj2pAV128ZKp 7WnJGGjcU1Zyp0axiyVqdOPGs8bg0l5CmYSlTfjc8HB5VTZIL8OnHJ63huZwD3jX jgFJRAjvsMwMvmDFUSOqwNCv/ydek4svoRfgj9ACqftzShRcYobmUo1/gTsvUNcr 1Mq0wUNznFYH//sjv/T8u1cJ1ACJ/rvAeVjgszQ2Pmx5QA9R9/tssArLEPqQaSt2 N9feEEZ2RGhfe2UVlXJ+8pzUgK0n6lgs -----END CERTIFICATE-----Generated at Tue Oct 21 04:46:15 2025 by rpki-client