$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft File: mlZqEuG8RjUyb14CrunbcYHdO94.mft (raw, json) Hash identifier: FNttGq8ecoqIJ8K4QsihFnNvMVwX0ndTy0roZHl9XLI= Subject key identifier: 43:16:34:E9:E2:79:B5:DC:05:F0:2C:5B:FB:9A:3F:88:BC:07:45:7B Authority key identifier: 9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE Certificate issuer: /CN=A9142B64/serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Certificate serial: 34BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft Manifest number: 34B8 Signing time: Fri 22 Aug 2025 14:56:29 +0000 Manifest this update: Fri 22 Aug 2025 14:56:28 +0000 Manifest next update: Fri 29 Aug 2025 14:56:28 +0000 Files and hashes: 1: mlZqEuG8RjUyb14CrunbcYHdO94.crl (hash: 9twpF2fe/9gmBD7CGerLCCaGr2pZOtCNYVzF29KUdd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13498 (0x34ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B64, serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Validity Not Before: Aug 22 14:56:28 2025 GMT Not After : Aug 29 14:56:28 2025 GMT Subject: CN=68a8851d-0a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:13:f4:26:0c:d2:51:aa:fe:13:26:79:99:88: b7:b1:ac:d6:63:1f:60:79:83:9f:c6:f4:59:df:f5: 68:11:4a:dd:1c:c6:c9:a3:1c:11:d5:79:86:59:46: d1:79:23:15:1e:07:ce:50:3f:c4:47:54:43:89:4d: e4:e2:33:6a:3c:64:41:19:ef:ab:6b:92:9c:e7:a9: 54:f0:80:7a:1e:39:63:07:1a:5d:28:b2:d9:cf:ad: 4c:dd:08:a6:6e:12:ac:45:09:31:fb:cf:e6:42:4b: 17:23:d5:95:7a:a0:55:9d:84:9e:eb:c8:12:bb:16: eb:e9:47:8e:7a:cf:65:a8:e8:8a:8b:f1:8e:7d:4f: 58:6c:9c:15:a8:d5:ed:9a:aa:ba:1c:6b:ab:76:3f: 51:12:55:a4:dd:ea:39:bb:b2:89:a8:bc:2e:e0:ea: 0a:34:a1:0f:8d:98:7b:08:91:b9:68:23:00:c4:cb: 31:bf:fd:b1:e3:b3:62:14:c5:e8:be:3e:e4:35:63: 0e:c5:8b:d5:3f:a6:69:f9:5e:d3:0f:b6:c9:1a:7f: c6:eb:7d:e0:cf:e5:40:8f:b8:e2:f2:dd:ac:52:e0: 5d:23:5f:18:c8:32:d5:13:be:c0:2a:a5:d0:a6:a8: 07:5b:09:a8:b7:b3:78:86:53:66:69:d9:29:65:6d: 0b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:16:34:E9:E2:79:B5:DC:05:F0:2C:5B:FB:9A:3F:88:BC:07:45:7B X509v3 Authority Key Identifier: keyid:9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:39:9f:9a:53:d8:3c:53:51:ad:5a:ea:54:fb:10:6d:1e:5a: 17:00:eb:f9:76:2c:8d:50:f8:d6:ba:57:5b:5d:72:9c:7f:a8: 71:57:e3:8f:99:d8:ca:6e:4e:36:62:dc:6f:02:b2:aa:0b:d7: 47:93:4e:76:2a:ee:31:29:64:10:60:17:df:d1:a0:a9:fa:5d: d9:72:60:9e:d9:74:3b:d5:6c:2c:db:8c:8d:39:67:fa:76:df: c7:7f:66:0b:0d:fb:25:66:f1:b8:10:bc:a4:12:6e:f6:b3:af: 82:3e:05:2d:c9:f5:f7:a2:60:42:e0:3c:ab:c5:b9:8c:0a:22: 55:85:c8:1a:b3:08:b0:ba:96:c2:c6:b9:0b:a8:8c:da:0c:de: 78:c5:e7:2b:03:da:4e:ab:f7:99:7a:eb:47:42:b0:1c:84:83: c5:a0:4e:cc:3d:94:f8:f8:e7:b8:7f:dd:da:3d:1b:13:eb:7a: b0:ce:71:80:cf:8b:aa:75:a6:28:66:a4:8b:f3:23:e8:f6:1b: bb:ad:de:23:ef:09:11:72:36:2f:49:e1:d1:c3:da:b5:49:f6: 47:d7:9a:56:bb:d7:ec:74:71:ed:21:4c:09:fd:bb:67:02:0a: f5:e2:be:0a:7b:c5:f0:96:2e:ac:18:3c:ef:87:43:5a:64:48: f8:29:0c:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNjQxMTAvBgNVBAUTKDlBNTY2QTEyRTFCQzQ2MzUzMjZGNUUwMkFFRTlEQjcx ODFERDNCREUwHhcNMjUwODIyMTQ1NjI4WhcNMjUwODI5MTQ1NjI4WjAYMRYwFAYD VQQDEw02OGE4ODUxZC0wYTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRP0JgzSUar+EyZ5mYi3sazWYx9geYOfxvRZ3/VoEUrdHMbJoxwR1XmGWUbR eSMVHgfOUD/ER1RDiU3k4jNqPGRBGe+ra5Kc56lU8IB6HjljBxpdKLLZz61M3Qim bhKsRQkx+8/mQksXI9WVeqBVnYSe68gSuxbr6UeOes9lqOiKi/GOfU9YbJwVqNXt mqq6HGurdj9RElWk3eo5u7KJqLwu4OoKNKEPjZh7CJG5aCMAxMsxv/2x47NiFMXo vj7kNWMOxYvVP6Zp+V7TD7bJGn/G633gz+VAj7ji8t2sUuBdI18YyDLVE77AKqXQ pqgHWwmot7N4hlNmadkpZW0LuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMWNOni ebXcBfAsW/uaP4i8B0V7MB8GA1UdIwQYMBaAFJpWahLhvEY1Mm9eAq7p23GB3Tve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI2NC9FQTU5QTg1QTFE OTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJqVXliMTRDcnVuYmNZSGRP OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sWnFFdUc4UmpVeWIxNENydW5iY1lIZE85NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI2NC9FQTU5QTg1QTFEOTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJq VXliMTRDcnVuYmNZSGRPOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHOZ+aU9g8U1GtWupU+xBtHloXAOv5diyNUPjWuldbXXKcf6hxV+OP mdjKbk42YtxvArKqC9dHk052Ku4xKWQQYBff0aCp+l3ZcmCe2XQ71Wws24yNOWf6 dt/Hf2YLDfslZvG4ELykEm72s6+CPgUtyfX3omBC4DyrxbmMCiJVhcgaswiwupbC xrkLqIzaDN54xecrA9pOq/eZeutHQrAchIPFoE7MPZT4+Oe4f93aPRsT63qwznGA z4uqdaYoZqSL8yPo9hu7rd4j7wkRcjYvSeHRw9q1SfZH15pWu9fsdHHtIUwJ/btn Agr14r4Ke8Xwli6sGDzvh0NaZEj4KQwM -----END CERTIFICATE-----Generated at Sun Aug 24 04:55:49 2025 by rpki-client