$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft File: MjnArILZQnKmoJ37KpCmZzCbOHM.mft (raw, json) Hash identifier: 1VkitNcDitW8u8eSxK+3Vrkx4u4fPXZTV26C6t7rr7M= Subject key identifier: D5:02:E0:F1:02:DA:36:3C:6E:7A:DE:55:FD:AA:02:19:4D:B1:AC:8E Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 Certificate issuer: /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Certificate serial: 0497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft Manifest number: 0492 Signing time: Sun 19 Oct 2025 01:52:11 +0000 Manifest this update: Sun 19 Oct 2025 01:52:10 +0000 Manifest next update: Sun 26 Oct 2025 01:52:10 +0000 Files and hashes: 1: MjnArILZQnKmoJ37KpCmZzCbOHM.crl (hash: tshjyK/gpy1SMcHGKhHX9xR1LYFipm/hGJ5qg8MC22c=) 2: 36837F32574A11EC911FAC86C4F9AE02.roa (hash: 6hHqiNfY5NbXq0rHoOBfddkoknOt7EsTJSIiNwSogKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1175 (0x497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152643, serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Validity Not Before: Oct 19 01:52:10 2025 GMT Not After : Oct 26 01:52:10 2025 GMT Subject: CN=68f4444b-7910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ec:7a:f3:f4:17:1a:a4:61:e9:ed:2c:1c:b2: 3b:d4:e1:c2:e1:8e:99:ff:46:55:f9:82:e4:26:e4: 71:4f:2b:c7:74:75:a3:94:e7:7c:1c:a5:9f:44:2b: 83:af:ae:58:db:1d:cc:a2:3e:0b:d1:78:57:06:fc: 89:91:0d:05:dc:d3:b5:51:46:36:16:fa:89:ef:5d: 63:bf:5f:1a:a2:43:6d:44:50:9b:2c:f1:5e:22:45: e2:fe:8a:be:17:59:25:84:c4:07:0b:e1:8f:84:09: ca:7a:74:30:77:71:7a:d4:4d:03:c4:af:2f:6a:6f: c9:f6:8f:12:31:ac:cf:f9:94:24:85:34:d1:e7:80: a6:c1:dc:d0:62:6f:64:20:33:e1:36:59:b9:b8:bc: f6:de:bd:1d:98:8e:52:0b:a1:9b:c3:17:d1:70:0a: 2e:f8:c7:85:0b:af:18:98:71:5b:fe:49:ee:54:68: e6:4b:16:62:78:7c:dc:51:e8:0f:86:f0:64:ff:16: 9d:05:50:e4:df:ac:ca:23:5a:d9:9d:b1:7a:b1:58: 5b:54:c7:8b:7a:76:b9:8d:1c:c2:bb:23:87:3c:70: 88:17:6e:f9:f4:b3:bf:2f:e6:bf:9e:11:56:04:1d: b5:b1:c6:d9:70:63:99:68:b3:f4:4d:d7:1e:dd:a6: d7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:02:E0:F1:02:DA:36:3C:6E:7A:DE:55:FD:AA:02:19:4D:B1:AC:8E X509v3 Authority Key Identifier: keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f5:f0:9c:97:97:47:aa:4d:b3:d2:95:b1:dc:e2:28:bb:d9: c8:bb:1c:91:48:91:c2:a1:fe:0e:27:95:70:a0:0a:81:b2:2b: d6:d0:06:18:0b:73:e3:35:7f:e0:64:e5:4e:9f:79:35:1e:52: 37:a5:81:3c:4c:68:4e:bc:7a:bc:64:c4:ff:60:67:14:09:9a: 77:0e:0c:3a:69:62:c5:7a:6a:87:c4:59:e8:7a:58:05:7f:72: 78:df:04:eb:df:b5:38:ee:fd:01:2a:c2:90:cf:01:42:6f:6f: 33:e5:44:4f:ed:11:d6:55:3f:03:39:e7:07:49:a6:11:f1:37: 85:3f:ce:97:72:5b:09:e4:cd:e9:5f:16:35:4b:25:10:d6:67: 07:e8:b2:91:99:96:85:50:02:02:e3:4c:b6:83:07:f4:cc:71: 70:56:2d:76:ba:26:d6:b8:29:49:04:4c:b4:38:f6:a4:bc:88: a6:e3:46:9a:e1:f7:02:da:4c:e5:8c:2f:4b:0f:dc:e6:0b:64: 4e:4a:d1:12:e8:11:b0:ab:6a:68:74:ff:29:05:17:f3:6d:c0: 8c:4a:35:6f:ae:13:bb:80:89:d2:3b:a6:3e:2b:56:2e:d2:43: 33:82:1b:20:52:91:33:1d:9e:6b:2f:bb:f1:46:98:7f:cc:3c: 08:ff:a7:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2NDMxMTAvBgNVBAUTKDMyMzlDMEFDODJEOTQyNzJBNkEwOURGQjJBOTBBNjY3 MzA5QjM4NzMwHhcNMjUxMDE5MDE1MjEwWhcNMjUxMDI2MDE1MjEwWjAYMRYwFAYD VQQDEw02OGY0NDQ0Yi03OTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqex68/QXGqRh6e0sHLI71OHC4Y6Z/0ZV+YLkJuRxTyvHdHWjlOd8HKWfRCuD r65Y2x3Moj4L0XhXBvyJkQ0F3NO1UUY2FvqJ711jv18aokNtRFCbLPFeIkXi/oq+ F1klhMQHC+GPhAnKenQwd3F61E0DxK8vam/J9o8SMazP+ZQkhTTR54CmwdzQYm9k IDPhNlm5uLz23r0dmI5SC6GbwxfRcAou+MeFC68YmHFb/knuVGjmSxZieHzcUegP hvBk/xadBVDk36zKI1rZnbF6sVhbVMeLena5jRzCuyOHPHCIF2759LO/L+a/nhFW BB21scbZcGOZaLP0Tdce3abXrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUC4PEC 2jY8bnreVf2qAhlNsayOMB8GA1UdIwQYMBaAFDI5wKyC2UJypqCd+yqQpmcwmzhz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY0My83MzgwNTJBRTU3 NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFuS21vSjM3S3BDbVp6Q2JP SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01qbkFySUxaUW5LbW9KMzdLcENtWnpDYk9ITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY0My83MzgwNTJBRTU3NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFu S21vSjM3S3BDbVp6Q2JPSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX9fCcl5dHqk2z0pWx3OIou9nIuxyRSJHCof4OJ5VwoAqBsivW0AYY C3PjNX/gZOVOn3k1HlI3pYE8TGhOvHq8ZMT/YGcUCZp3Dgw6aWLFemqHxFnoelgF f3J43wTr37U47v0BKsKQzwFCb28z5URP7RHWVT8DOecHSaYR8TeFP86XclsJ5M3p XxY1SyUQ1mcH6LKRmZaFUAIC40y2gwf0zHFwVi12uibWuClJBEy0OPakvIim40aa 4fcC2kzljC9LD9zmC2ROStES6BGwq2podP8pBRfzbcCMSjVvrhO7gInSO6Y+K1Yu 0kMzghsgUpEzHZ5rL7vxRph/zDwI/6fj -----END CERTIFICATE-----Generated at Mon Oct 20 21:38:54 2025 by rpki-client