$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: yuXKKnUX/BDh62gTN23Ctm52+EC/TUDCy/BpcAk0Krw= Subject key identifier: D2:90:8D:23:8B:44:9A:99:50:6F:AC:D8:EC:52:69:91:DE:E5:A8:43 Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 23A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 2372 Signing time: Fri 22 Aug 2025 15:52:34 +0000 Manifest this update: Fri 22 Aug 2025 15:52:34 +0000 Manifest next update: Fri 29 Aug 2025 15:52:34 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: R+JKstpHP2A+Pu7qRnUKsCfz6OaB9pLiEXh9/pqDtRw=) 2: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: 6zEasgx8d2eADPMA/likvG6cMgeT4lG28KVag9Ik7+Q=) 3: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: 1G385VTheI+atJyTdCrkaW87iv1psEE5oikWEVvtrgs=) 4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: 9r7t0Dck4/THU5FrLu9xD66nhtLPUTZJre8gizPVsbw=) 5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: tgzdjQtElpqaAs+NwGXD0CYNNYYww+x76UBm9x49LhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9121 (0x23a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: Aug 22 15:52:34 2025 GMT Not After : Aug 29 15:52:34 2025 GMT Subject: CN=68a89242-b442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:20:8a:de:e3:4d:b4:b8:b4:b4:99:de:6b:6c: 17:a2:ae:0d:19:99:81:e0:a2:ec:0d:bf:99:b3:c0: b9:32:fe:ae:13:78:24:79:f0:8b:d7:90:24:54:12: 68:b4:71:ec:4c:c2:22:64:80:f2:b8:30:90:6b:06: e8:bf:1c:e4:1d:ae:a6:9c:50:ee:f0:00:bb:1b:68: 44:f4:74:02:6c:7c:8e:34:85:de:92:e5:24:c5:6b: 1a:ac:29:51:61:7d:21:2c:b6:a8:40:63:c8:a4:42: 21:32:ac:9b:c0:78:6f:fc:e1:70:e0:98:f8:91:24: 32:ae:9d:03:4e:db:1c:f9:82:a9:a2:ad:95:bd:0c: ba:cd:a2:57:02:2d:57:03:28:2d:cb:29:25:04:a5: 61:8b:10:97:35:7b:83:49:e1:9f:6d:a4:6c:46:46: fb:67:f6:5b:50:18:8e:ed:fc:1c:f2:cf:af:ca:ec: 78:e6:b3:a3:2d:c0:95:48:48:45:ce:1a:50:17:4d: 43:59:9b:2d:47:58:5e:05:c3:b8:99:3c:b4:0f:d1: e0:1c:55:ed:44:c5:b4:54:49:c3:53:1a:3f:e1:1c: a3:8c:ad:0f:f9:38:67:69:d6:97:45:1c:ba:f5:b6: 69:d8:0d:f7:03:73:0d:66:cf:80:7a:d3:1e:c0:07: 87:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:90:8D:23:8B:44:9A:99:50:6F:AC:D8:EC:52:69:91:DE:E5:A8:43 X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:e2:05:92:98:0b:24:7d:63:96:86:f7:9a:c2:39:11:53:32: a1:22:a9:71:44:d5:2a:dc:27:0a:05:6c:55:a6:d1:d7:d6:3d: d2:f4:5b:35:16:13:10:22:bf:aa:1a:88:ed:02:7f:b8:d6:64: 87:7e:7f:b8:44:04:f5:98:7b:4b:11:29:28:78:d2:57:13:e9: eb:c7:a4:f7:e2:d1:e5:d8:f7:e5:0e:2b:c1:55:39:5a:f5:27: 77:92:8b:2f:38:be:aa:c6:b3:65:6d:1f:33:7f:00:9f:9c:8e: 70:9b:10:2b:27:75:26:96:39:d3:4f:65:f8:16:33:2e:79:8f: e0:5b:c5:88:08:83:c5:a6:a7:f6:29:a3:8f:e2:f2:5a:93:a2: 87:af:25:ab:e0:01:23:91:56:6f:91:35:a8:d3:7a:71:ba:31: 59:9b:32:75:ba:1f:eb:a8:fc:4b:af:d7:73:25:d7:ed:1c:db: de:03:d0:da:a0:07:4b:5f:25:ec:04:d9:0f:83:ed:13:f7:87: 2c:cd:e5:fb:29:b1:8b:cd:9b:12:27:82:91:aa:c4:60:b5:af: 1a:6d:44:88:90:59:1b:66:05:cb:2f:8b:44:c8:b5:7c:13:76: ff:8e:bd:d4:f6:86:1b:25:45:ef:f7:ff:6b:89:6c:fe:c4:1e: f1:8a:3c:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjUwODIyMTU1MjM0WhcNMjUwODI5MTU1MjM0WjAYMRYwFAYD VQQDEw02OGE4OTI0Mi1iNDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCCK3uNNtLi0tJnea2wXoq4NGZmB4KLsDb+Zs8C5Mv6uE3gkefCL15AkVBJo tHHsTMIiZIDyuDCQawbovxzkHa6mnFDu8AC7G2hE9HQCbHyONIXekuUkxWsarClR YX0hLLaoQGPIpEIhMqybwHhv/OFw4Jj4kSQyrp0DTtsc+YKpoq2VvQy6zaJXAi1X AygtyyklBKVhixCXNXuDSeGfbaRsRkb7Z/ZbUBiO7fwc8s+vyux45rOjLcCVSEhF zhpQF01DWZstR1heBcO4mTy0D9HgHFXtRMW0VEnDUxo/4RyjjK0P+ThnadaXRRy6 9bZp2A33A3MNZs+AetMewAeHPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKQjSOL RJqZUG+s2OxSaZHe5ahDMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU4gWSmAskfWOWhveawjkRUzKhIqlxRNUq3CcKBWxVptHX1j3S9Fs1 FhMQIr+qGojtAn+41mSHfn+4RAT1mHtLESkoeNJXE+nrx6T34tHl2PflDivBVTla 9Sd3kosvOL6qxrNlbR8zfwCfnI5wmxArJ3UmljnTT2X4FjMueY/gW8WICIPFpqf2 KaOP4vJak6KHryWr4AEjkVZvkTWo03pxujFZmzJ1uh/rqPxLr9dzJdftHNveA9Da oAdLXyXsBNkPg+0T94cszeX7KbGLzZsSJ4KRqsRgta8abUSIkFkbZgXLL4tEyLV8 E3b/jr3U9oYbJUXv9/9riWz+xB7xijz6 -----END CERTIFICATE-----Generated at Sat Aug 23 17:45:19 2025 by rpki-client