$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: r7ZvaIzuRlc8IvTXxU1yKccJ4O/Nx/FO+cjadaLQdqk= Subject key identifier: 8D:67:02:7F:BE:76:29:86:94:E8:B6:1A:90:65:64:52:86:B1:63:E8 Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 23BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 238F Signing time: Sat 18 Oct 2025 16:04:09 +0000 Manifest this update: Sat 18 Oct 2025 16:04:09 +0000 Manifest next update: Sat 25 Oct 2025 16:04:09 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: xXsMdfXk++/Y7ZGCDCgOl8q47L2WqHgTIA9PWAZuQac=) 2: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: 6zEasgx8d2eADPMA/likvG6cMgeT4lG28KVag9Ik7+Q=) 3: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: 1G385VTheI+atJyTdCrkaW87iv1psEE5oikWEVvtrgs=) 4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: 9r7t0Dck4/THU5FrLu9xD66nhtLPUTZJre8gizPVsbw=) 5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: tgzdjQtElpqaAs+NwGXD0CYNNYYww+x76UBm9x49LhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9150 (0x23be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: Oct 18 16:04:09 2025 GMT Not After : Oct 25 16:04:09 2025 GMT Subject: CN=68f3ba79-a1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b0:2e:01:6c:96:d8:bb:a7:c8:39:63:b3:3e: 5e:25:39:02:d5:77:07:0c:8e:f2:6b:3a:cc:01:11: a1:65:8a:71:27:f1:98:8a:19:ae:57:d6:02:c5:58: 22:72:2f:fa:30:7e:ef:e9:8d:e6:42:34:d2:11:2a: f9:97:e4:df:74:4a:fd:dc:95:50:6b:cc:11:ac:3e: e1:68:4c:21:20:41:87:46:0a:df:4b:57:ee:ba:24: 32:03:a4:c4:26:ce:3a:72:7f:c0:6a:c9:b1:5c:74: 9b:2e:74:ac:87:cb:a9:b3:37:bb:ad:69:cc:24:d3: ab:49:6e:37:9b:2e:30:4f:71:50:94:f9:33:b3:bf: 95:93:c4:a6:57:01:01:49:15:f7:b7:b2:ef:63:f7: 3e:c4:40:2c:95:66:96:e1:0d:63:3d:20:9d:16:45: 1e:84:b2:d7:5f:af:cc:f1:e0:c0:5c:53:b5:06:5d: 3e:ac:21:13:ec:26:95:98:33:8d:9a:dd:db:8c:a3: 19:8f:81:8d:f6:3d:c7:ea:6f:b7:a4:65:24:5f:46: 49:59:d1:cb:d1:ab:d2:7d:cb:58:85:51:1e:30:1e: 8f:cc:d8:09:14:ae:ab:83:a0:28:2d:08:5e:d3:9e: 86:bd:ef:1a:cb:4f:17:3c:fb:41:8b:26:24:e8:9e: 82:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:67:02:7F:BE:76:29:86:94:E8:B6:1A:90:65:64:52:86:B1:63:E8 X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c4:0e:89:f7:e4:78:0b:80:1e:b7:2e:d6:73:ae:48:bd:26: fa:41:bb:8c:25:4c:d9:6a:12:70:1f:1f:1e:b4:30:88:d4:8e: 4e:71:a5:d6:a4:db:c2:da:b9:b4:c7:53:a6:ef:88:ae:c1:05: 0a:70:b2:75:f4:ad:28:e3:02:46:88:8e:3f:3a:ee:e4:48:f0: 40:b2:f3:26:a0:ae:2e:67:2c:66:38:1d:ab:85:9f:06:8e:dc: 02:d0:93:ac:d7:10:e7:4b:ed:e8:18:d1:32:c3:37:16:b1:c1: ca:b5:f3:ef:e8:ba:3a:7a:4e:86:41:e2:81:06:5d:d5:cd:31: 4d:da:28:a1:12:d3:22:a3:ce:c4:aa:1d:08:f7:00:07:d5:a3: 71:eb:c9:c4:2b:07:78:b2:9b:4b:b9:28:9b:6d:0b:1e:13:80: 27:8a:de:b7:c4:c8:91:94:62:05:1e:54:3b:1a:f4:a8:a6:b8: cd:e9:5f:5e:58:c4:47:d6:6a:e5:65:c3:d8:ec:bc:6b:79:a8: 30:e5:6a:f3:a3:cd:08:45:f3:1c:e4:5d:d6:b0:03:3a:d7:35: 66:ff:74:28:51:77:b9:30:a8:fe:9c:63:fb:21:70:3d:30:6b: 56:af:94:f7:69:7f:f3:13:2a:d3:3f:da:10:9b:b3:fa:75:71: 43:5f:0b:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjUxMDE4MTYwNDA5WhcNMjUxMDI1MTYwNDA5WjAYMRYwFAYD VQQDEw02OGYzYmE3OS1hMWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37AuAWyW2LunyDljsz5eJTkC1XcHDI7yazrMARGhZYpxJ/GYihmuV9YCxVgi ci/6MH7v6Y3mQjTSESr5l+TfdEr93JVQa8wRrD7haEwhIEGHRgrfS1fuuiQyA6TE Js46cn/AasmxXHSbLnSsh8upsze7rWnMJNOrSW43my4wT3FQlPkzs7+Vk8SmVwEB SRX3t7LvY/c+xEAslWaW4Q1jPSCdFkUehLLXX6/M8eDAXFO1Bl0+rCET7CaVmDON mt3bjKMZj4GN9j3H6m+3pGUkX0ZJWdHL0avSfctYhVEeMB6PzNgJFK6rg6AoLQhe 056Gve8ay08XPPtBiyYk6J6CnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1nAn++ dimGlOi2GpBlZFKGsWPoMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8xA6J9+R4C4Aety7Wc65IvSb6QbuMJUzZahJwHx8etDCI1I5OcaXW pNvC2rm0x1Om74iuwQUKcLJ19K0o4wJGiI4/Ou7kSPBAsvMmoK4uZyxmOB2rhZ8G jtwC0JOs1xDnS+3oGNEywzcWscHKtfPv6Lo6ek6GQeKBBl3VzTFN2iihEtMio87E qh0I9wAH1aNx68nEKwd4sptLuSibbQseE4Anit63xMiRlGIFHlQ7GvSoprjN6V9e WMRH1mrlZcPY7Lxreagw5Wrzo80IRfMc5F3WsAM61zVm/3QoUXe5MKj+nGP7IXA9 MGtWr5T3aX/zEyrTP9oQm7P6dXFDXwum -----END CERTIFICATE-----Generated at Sun Oct 19 23:02:24 2025 by rpki-client