$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft File: 1mk-41xy689CY8aYRW2C9o5xT1w.mft (raw, json) Hash identifier: G0Vw8zhAt1yPJj5jZ3FAoOU0RxWaKDhmvu91xuKCPpU= Subject key identifier: A5:4C:7D:7A:6F:B8:A2:9D:A8:D9:F4:28:9C:43:A5:96:E4:B7:91:0C Authority key identifier: D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C Certificate issuer: /CN=A916EF5E/serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Certificate serial: 09A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft Manifest number: 09A9 Signing time: Fri 22 Aug 2025 16:48:50 +0000 Manifest this update: Fri 22 Aug 2025 16:48:49 +0000 Manifest next update: Fri 29 Aug 2025 16:48:49 +0000 Files and hashes: 1: 1mk-41xy689CY8aYRW2C9o5xT1w.crl (hash: EjyXrM82mmtM0s17XrhRN35fo8+kVsI3nMhHv45k6TI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2473 (0x9a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Validity Not Before: Aug 22 16:48:49 2025 GMT Not After : Aug 29 16:48:49 2025 GMT Subject: CN=68a89f71-5987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:95:c6:3d:82:ea:83:79:a8:ec:92:1e:68: 39:43:2a:44:e9:e4:40:f6:8c:cb:6e:b8:fd:89:2e: 18:fa:1d:21:d5:67:78:60:bb:8a:79:5e:a6:e1:5b: 7b:41:7f:fd:ee:0f:03:b5:21:33:19:ce:f2:58:7b: 68:f5:6e:13:e6:67:7c:a8:b7:2c:aa:3e:22:7f:24: 7f:96:b7:d8:db:49:80:4f:58:08:2d:e2:c3:a9:7a: 78:9b:4b:c0:6a:6e:7d:6c:20:9b:4b:64:17:58:c6: fc:5e:b9:0a:7d:70:d5:28:ca:6c:03:8d:a0:b0:56: ca:5c:db:db:5c:89:56:19:6d:9c:f0:8c:98:4c:73: a0:ad:e9:6f:f2:5b:4a:99:f7:9f:83:99:20:d5:da: 3a:d0:39:1e:3b:cd:65:f1:3c:f4:fb:10:38:56:81: 0d:1c:c0:80:45:c2:d4:83:0f:ab:c7:58:10:0b:ac: 1a:16:c4:3e:9e:a1:b1:60:99:80:95:6f:33:df:63: 73:b3:67:1b:0d:8e:22:59:61:15:18:10:bd:55:50: 28:9d:5f:37:66:b5:63:27:67:ff:10:2f:44:f0:4c: 42:36:b6:ef:f4:be:43:78:4f:6c:44:d2:f3:c1:8e: cd:fb:8a:b7:83:dc:7c:71:e9:ae:39:3a:8a:8b:4c: 3f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4C:7D:7A:6F:B8:A2:9D:A8:D9:F4:28:9C:43:A5:96:E4:B7:91:0C X509v3 Authority Key Identifier: keyid:D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:9f:d0:07:1a:cc:8d:cd:d0:7b:be:1b:60:36:b1:b1:a6:f5: 99:1a:eb:26:e1:67:c1:27:90:6a:40:bb:24:7a:2d:71:54:a7: ff:64:96:28:e9:79:1e:a1:28:b2:34:78:d5:dc:8e:4d:a4:d8: 70:d3:17:9e:0e:68:e3:3a:ed:43:ee:41:32:00:61:3e:7d:ed: 04:2b:63:06:e6:d5:1d:7a:a2:f1:d4:6c:f7:77:36:7c:6c:a0: 60:7f:56:5c:e1:54:62:57:e8:9d:5b:16:80:f7:ca:b5:a5:42: 1e:eb:cd:ce:d2:d5:f4:2f:2b:0a:63:7e:3b:d0:e4:1a:97:b2: e1:7d:69:b0:fb:92:07:c4:66:6c:11:76:2a:f8:0f:56:f2:61: 92:25:b9:27:42:32:71:38:eb:a7:ac:3c:39:cf:c6:3b:be:c5: a3:9b:2c:7b:02:d9:d9:89:5b:e2:78:44:7b:99:da:05:d6:24: ec:81:48:e5:66:5d:6a:be:e3:8a:94:38:dc:02:cc:bb:ef:43: 83:49:69:b9:98:a1:76:45:0d:55:7e:43:96:10:58:f0:5a:a1: 25:54:10:4b:98:c8:d9:96:c9:a3:d2:2e:98:b2:bf:99:d0:16: e6:48:65:4d:9f:40:ea:b8:96:34:98:2c:08:9f:29:84:76:0d: b6:f2:4f:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKEQ2NjkzRUUzNUM3MkVCQ0Y0MjYzQzY5ODQ1NkQ4MkY2 OEU3MTRGNUMwHhcNMjUwODIyMTY0ODQ5WhcNMjUwODI5MTY0ODQ5WjAYMRYwFAYD VQQDEw02OGE4OWY3MS01OTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6CVxj2C6oN5qOySHmg5QypE6eRA9ozLbrj9iS4Y+h0h1Wd4YLuKeV6m4Vt7 QX/97g8DtSEzGc7yWHto9W4T5md8qLcsqj4ifyR/lrfY20mAT1gILeLDqXp4m0vA am59bCCbS2QXWMb8XrkKfXDVKMpsA42gsFbKXNvbXIlWGW2c8IyYTHOgrelv8ltK mfefg5kg1do60DkeO81l8Tz0+xA4VoENHMCARcLUgw+rx1gQC6waFsQ+nqGxYJmA lW8z32Nzs2cbDY4iWWEVGBC9VVAonV83ZrVjJ2f/EC9E8ExCNrbv9L5DeE9sRNLz wY7N+4q3g9x8cemuOTqKi0w/WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVMfXpv uKKdqNn0KJxDpZbkt5EMMB8GA1UdIwQYMBaAFNZpPuNccuvPQmPGmEVtgvaOcU9c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS8yQ0U0OTRDMDhG OTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4OUNZOGFZUlcyQzlvNXhU MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFtay00MXh5Njg5Q1k4YVlSVzJDOW81eFQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS8yQ0U0OTRDMDhGOTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4 OUNZOGFZUlcyQzlvNXhUMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBn9AHGsyNzdB7vhtgNrGxpvWZGusm4WfBJ5BqQLskei1xVKf/ZJYo 6XkeoSiyNHjV3I5NpNhw0xeeDmjjOu1D7kEyAGE+fe0EK2MG5tUdeqLx1Gz3dzZ8 bKBgf1Zc4VRiV+idWxaA98q1pUIe683O0tX0LysKY3470OQal7LhfWmw+5IHxGZs EXYq+A9W8mGSJbknQjJxOOunrDw5z8Y7vsWjmyx7AtnZiVvieER7mdoF1iTsgUjl Zl1qvuOKlDjcAsy770ODSWm5mKF2RQ1VfkOWEFjwWqElVBBLmMjZlsmj0i6Ysr+Z 0BbmSGVNn0DquJY0mCwInymEdg228k/H -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:12 2025 by rpki-client