$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft File: MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json) Hash identifier: IbLXOZOzTcfl9kpRshS7joyT+wz1lD2GTQRhQGfrtNc= Subject key identifier: 4A:97:AA:E1:22:75:45:AD:75:15:B3:AE:40:18:14:3C:1E:2E:CA:F7 Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB Certificate serial: 06FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft Manifest number: 06D8 Signing time: Sat 18 Oct 2025 23:34:55 +0000 Manifest this update: Sat 18 Oct 2025 23:34:54 +0000 Manifest next update: Sat 25 Oct 2025 23:34:54 +0000 Files and hashes: 1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: 8w2nQc4cx2JBjHrWkssLqKSV3B0r6S9947/cU3zetfc=) 2: E99C5D78999011F09D326581C4F9AE02.roa (hash: KRc5l8wxQAY0kmCFWdslvfP8E+810yOkcCnLCwPkREQ=) 3: D9D6FFE098E311F08722B635C4F9AE02.roa (hash: qO4LFdT1EadkD19RKE3omNNtTDwPak7fiDqGAZIdlvc=) 4: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: Ng5tUT5XtWth/UeVCj9UP+U8A5SqwEGWBOOoygGvFMc=) 5: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: ecb64YVTHrU3z12q4OTbq4blJYoHWP6/Sh6BnZVtvcQ=) 6: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: FFJCcbR2xaawUKSL+usbkIr74Y7s8fy0PX5AM1LQSnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1786 (0x6fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB Validity Not Before: Oct 18 23:34:54 2025 GMT Not After : Oct 25 23:34:54 2025 GMT Subject: CN=68f4241e-aa64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dc:89:20:cf:44:f3:6b:e0:ba:36:4a:58:e1: 89:33:da:b6:41:dd:c7:2c:fd:97:a0:9c:a4:d0:90: af:25:79:fd:71:2c:5e:be:1b:7b:bc:46:27:4f:b7: ed:89:fa:e3:20:4a:fb:8e:97:3e:d3:23:0e:5a:27: 7a:6f:c2:c2:67:37:b0:ae:3a:8c:b7:c4:8b:32:6e: f1:df:d6:66:1f:fd:04:e2:ff:4a:ae:e8:10:f4:a3: 4a:dd:ca:88:da:65:fc:07:2f:25:e2:b6:32:a8:d2: 44:7e:24:c0:ef:3f:62:35:bc:6f:e9:cd:64:a6:bf: f8:92:30:2f:6c:4f:c9:db:76:c0:f7:40:f3:0a:88: 77:34:8a:18:35:98:25:c8:25:ee:2b:79:cd:5d:c6: 02:d3:82:1d:5e:f8:89:e1:29:71:73:9c:ad:47:7c: d0:93:3b:a0:97:ff:93:27:29:88:5c:0d:dc:98:c1: 7f:ad:03:c6:e9:b8:e8:36:77:c3:46:6f:cd:b6:d3: 02:31:ef:18:32:11:12:49:b0:28:c9:c3:8a:54:25: 6c:b1:c6:8d:b3:50:85:3a:97:46:15:06:aa:96:ac: a2:53:89:3e:2e:9c:37:4e:1f:38:f2:a3:8c:7e:5b: 89:d9:e1:cc:03:3d:3c:aa:68:39:da:7c:5c:86:bd: 31:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:97:AA:E1:22:75:45:AD:75:15:B3:AE:40:18:14:3C:1E:2E:CA:F7 X509v3 Authority Key Identifier: keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:ef:68:9b:e5:92:05:24:fe:1e:0a:4f:87:6c:57:29:6c:8e: 4c:9c:76:35:05:36:60:36:e7:fc:82:a4:ac:60:e5:6c:fa:f9: 0d:29:0f:c0:c7:83:dc:18:a1:49:84:46:cc:50:36:99:9a:8a: 7c:3f:db:8b:3e:8d:9a:30:56:a1:20:7c:40:9f:d5:07:e1:b9: d2:44:ff:ed:1f:16:66:d9:4f:0c:74:19:cb:86:94:41:db:b2: 54:a0:62:f3:d8:5c:70:40:9d:2b:d9:63:7b:71:8d:ed:64:92: 35:81:31:e2:6e:83:0f:5d:55:cf:3e:9d:e4:28:36:57:2f:99: 27:a7:7a:40:4d:78:dc:b1:be:f5:6b:e2:8f:e4:49:89:c5:fe: a9:75:e7:9f:f4:47:06:a2:5e:f3:65:2e:22:8a:d8:b0:9c:31: 4a:4e:7b:c0:e6:b5:d2:c3:00:24:19:d3:09:00:cc:08:e4:38: fc:7b:f2:ea:e2:49:09:d2:5f:d9:b0:2a:42:4d:7b:d3:16:7a: 65:cb:a6:0d:8a:b7:b3:64:84:2e:a9:6f:77:45:53:cb:ef:90: 72:30:89:fa:12:44:42:06:9f:7a:42:c2:2a:7a:47:9b:3e:37: ed:24:51:69:22:0f:f7:b6:5f:e0:67:20:3d:f2:0e:c7:c8:78: d1:4a:bf:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRTYxMTAvBgNVBAUTKDMzMTk1Rjk2QzQ2RDREMjg1RDVCREU0QjBCMDMwRTM4 MzE0RThGQ0IwHhcNMjUxMDE4MjMzNDU0WhcNMjUxMDI1MjMzNDU0WjAYMRYwFAYD VQQDEw02OGY0MjQxZS1hYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19yJIM9E82vgujZKWOGJM9q2Qd3HLP2XoJyk0JCvJXn9cSxevht7vEYnT7ft ifrjIEr7jpc+0yMOWid6b8LCZzewrjqMt8SLMm7x39ZmH/0E4v9KrugQ9KNK3cqI 2mX8By8l4rYyqNJEfiTA7z9iNbxv6c1kpr/4kjAvbE/J23bA90DzCoh3NIoYNZgl yCXuK3nNXcYC04IdXviJ4Slxc5ytR3zQkzugl/+TJymIXA3cmMF/rQPG6bjoNnfD Rm/NttMCMe8YMhESSbAoycOKVCVsscaNs1CFOpdGFQaqlqyiU4k+Lpw3Th848qOM fluJ2eHMAz08qmg52nxchr0x7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqXquEi dUWtdRWzrkAYFDweLsr3MB8GA1UdIwQYMBaAFDMZX5bEbU0oXVveSwsDDjgxTo/L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wRThFMjc4MDdC RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRTaGRXOTVMQ3dNT09ERk9q OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014bGZsc1J0VFNoZFc5NUxDd01PT0RGT2o4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NFNi8wRThFMjc4MDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRT aGRXOTVMQ3dNT09ERk9qOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW72ib5ZIFJP4eCk+HbFcpbI5MnHY1BTZgNuf8gqSsYOVs+vkNKQ/A x4PcGKFJhEbMUDaZmop8P9uLPo2aMFahIHxAn9UH4bnSRP/tHxZm2U8MdBnLhpRB 27JUoGLz2FxwQJ0r2WN7cY3tZJI1gTHiboMPXVXPPp3kKDZXL5knp3pATXjcsb71 a+KP5EmJxf6pdeef9EcGol7zZS4iitiwnDFKTnvA5rXSwwAkGdMJAMwI5Dj8e/Lq 4kkJ0l/ZsCpCTXvTFnply6YNirezZIQuqW93RVPL75ByMIn6EkRCBp96QsIqekeb PjftJFFpIg/3tl/gZyA98g7HyHjRSr8k -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:32 2025 by rpki-client