$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft File: mlZqEuG8RjUyb14CrunbcYHdO94.mft (raw, json) Hash identifier: YeaAFKwBus6xs08tYQGkzoK9qmNlKWt2m6RjV1260do= Subject key identifier: A0:25:29:66:46:D7:3F:07:9B:38:2F:FF:B5:C9:53:32:2E:40:3E:13 Authority key identifier: 9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE Certificate issuer: /CN=A9142B64/serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Certificate serial: 34D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft Manifest number: 34D6 Signing time: Sat 18 Oct 2025 15:01:46 +0000 Manifest this update: Sat 18 Oct 2025 15:01:45 +0000 Manifest next update: Sat 25 Oct 2025 15:01:45 +0000 Files and hashes: 1: mlZqEuG8RjUyb14CrunbcYHdO94.crl (hash: 3oEQ4+6EmOMeNtJo+OeRP1RLu/pGHpsIRGCBNLefWMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13528 (0x34d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B64, serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Validity Not Before: Oct 18 15:01:45 2025 GMT Not After : Oct 25 15:01:45 2025 GMT Subject: CN=68f3abd9-0c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:61:40:7f:a0:9b:c0:5a:f2:ab:99:bf:b0: e8:fd:ce:cc:43:51:ed:d9:be:53:0f:10:78:a2:15: 36:64:e3:39:56:fa:77:99:33:40:24:ea:b9:ec:49: 75:e7:50:1b:c3:a2:3d:cc:03:15:28:99:d2:7c:0e: 58:da:1d:6a:5d:52:f8:b8:3d:a6:d3:7a:f9:f5:31: 76:7c:02:ac:13:42:ec:b3:a0:dd:3e:e6:9a:b1:63: 42:4e:6e:a4:60:c3:8b:90:73:ab:01:37:fb:cc:1d: 45:5c:32:1c:79:d3:d3:32:e0:28:08:8c:cc:24:61: 55:18:46:22:68:8c:9d:6b:b4:cd:96:e6:83:ae:91: df:38:aa:8e:72:64:a3:44:3f:13:45:26:6c:8e:07: d8:b4:99:f6:1f:fd:c6:bb:98:8d:5f:de:d7:ac:47: d8:1a:91:0d:2c:16:b7:fb:90:44:d6:c8:40:ae:4e: a5:15:a4:6e:c0:17:45:ed:55:26:c0:9d:11:12:ba: f5:33:98:a5:9b:5a:62:f9:b8:ed:0e:d5:76:9f:b2: e0:a4:48:8f:00:13:24:ff:20:00:78:5a:ba:ee:be: b7:d0:64:55:90:88:4e:7b:5a:10:2a:d4:c5:31:4a: 8a:f4:8e:66:05:8a:e1:b5:91:05:a0:eb:c4:ff:a5: cc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:25:29:66:46:D7:3F:07:9B:38:2F:FF:B5:C9:53:32:2E:40:3E:13 X509v3 Authority Key Identifier: keyid:9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:87:7f:38:47:8e:2e:fe:5c:42:bb:3d:51:db:05:62:7f:dc: fc:77:bb:56:b6:c5:88:1b:b1:0b:7e:10:35:06:a9:0e:62:ac: 3f:6f:cb:3d:d9:1f:4e:4f:5b:61:84:ad:fc:78:58:84:9f:8e: ca:b8:58:a3:92:4e:53:86:d1:d8:70:38:7a:82:ed:d4:93:86: a9:8d:56:1f:57:e2:21:d5:c7:a2:51:82:57:37:06:64:f7:2c: 56:02:6a:7e:af:e2:13:69:67:3b:bb:67:6b:c4:a7:28:df:e8: b1:ac:5c:9e:49:cd:26:c2:40:c1:87:aa:6f:65:94:73:d5:12: 8f:8f:ce:a2:ef:62:4e:d7:58:27:d7:c4:e2:bb:63:7e:39:4f: 28:2d:87:a9:11:18:5d:58:12:00:3e:03:65:e9:c3:fe:bb:34: 57:b2:ff:49:58:6c:63:fd:b1:91:76:03:fe:ed:a0:a9:69:e0: d7:54:56:f9:3a:6c:59:6a:7d:2e:5a:37:b5:70:d8:07:1e:8f: 30:29:d8:94:7b:a2:35:99:f5:e8:69:16:d0:be:2a:82:1a:fd: d1:57:5d:51:5d:f7:70:e5:dc:23:0d:db:12:7e:1c:82:5c:17: 95:dd:19:09:5f:d4:ac:66:d5:da:56:97:ab:bc:82:89:71:69: ed:37:d6:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNjQxMTAvBgNVBAUTKDlBNTY2QTEyRTFCQzQ2MzUzMjZGNUUwMkFFRTlEQjcx ODFERDNCREUwHhcNMjUxMDE4MTUwMTQ1WhcNMjUxMDI1MTUwMTQ1WjAYMRYwFAYD VQQDEw02OGYzYWJkOS0wYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqphQH+gm8Ba8quZv7Do/c7MQ1Ht2b5TDxB4ohU2ZOM5Vvp3mTNAJOq57El1 51Abw6I9zAMVKJnSfA5Y2h1qXVL4uD2m03r59TF2fAKsE0Lss6DdPuaasWNCTm6k YMOLkHOrATf7zB1FXDIcedPTMuAoCIzMJGFVGEYiaIyda7TNluaDrpHfOKqOcmSj RD8TRSZsjgfYtJn2H/3Gu5iNX97XrEfYGpENLBa3+5BE1shArk6lFaRuwBdF7VUm wJ0RErr1M5ilm1pi+bjtDtV2n7LgpEiPABMk/yAAeFq67r630GRVkIhOe1oQKtTF MUqK9I5mBYrhtZEFoOvE/6XMNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAlKWZG 1z8Hmzgv/7XJUzIuQD4TMB8GA1UdIwQYMBaAFJpWahLhvEY1Mm9eAq7p23GB3Tve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI2NC9FQTU5QTg1QTFE OTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJqVXliMTRDcnVuYmNZSGRP OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sWnFFdUc4UmpVeWIxNENydW5iY1lIZE85NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI2NC9FQTU5QTg1QTFEOTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJq VXliMTRDcnVuYmNZSGRPOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6h384R44u/lxCuz1R2wVif9z8d7tWtsWIG7ELfhA1BqkOYqw/b8s9 2R9OT1thhK38eFiEn47KuFijkk5ThtHYcDh6gu3Uk4apjVYfV+Ih1ceiUYJXNwZk 9yxWAmp+r+ITaWc7u2drxKco3+ixrFyeSc0mwkDBh6pvZZRz1RKPj86i72JO11gn 18Tiu2N+OU8oLYepERhdWBIAPgNl6cP+uzRXsv9JWGxj/bGRdgP+7aCpaeDXVFb5 OmxZan0uWje1cNgHHo8wKdiUe6I1mfXoaRbQviqCGv3RV11RXfdw5dwjDdsSfhyC XBeV3RkJX9SsZtXaVpervIKJcWntN9aD -----END CERTIFICATE-----Generated at Mon Oct 20 11:18:15 2025 by rpki-client