$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json) Hash identifier: O6CYlDI+VAf6TVg2xPCY9SWoslzc6jFWM2o7hwQTWRI= Subject key identifier: AB:59:EC:7E:8E:29:21:11:F3:35:E1:9B:50:0D:48:33:C0:E2:EA:0E Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 040B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft Manifest number: 0402 Signing time: Sun 19 Oct 2025 02:23:16 +0000 Manifest this update: Sun 19 Oct 2025 02:23:16 +0000 Manifest next update: Sun 26 Oct 2025 02:23:16 +0000 Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: 2QHQFCyMrQnMpNVQxPOcPneIx3P7RSfdt2rq4ohFz8g=) 2: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: pzFsMxICRta3jJZNRRm+xGcV3VPmmyQWY3sDErTiCgo=) 3: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: J9o/h2HcCF6AGcDij2ORSiNowMdc+62JwdcPSLdmYdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1035 (0x40b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: Oct 19 02:23:16 2025 GMT Not After : Oct 26 02:23:16 2025 GMT Subject: CN=68f44b94-03d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bc:20:ef:3a:8b:25:18:1c:31:60:20:e9:96: c0:af:d9:74:ee:f7:22:34:74:10:1e:54:2f:1f:04: f6:e4:19:1d:da:93:f5:99:6b:65:58:83:bb:cc:22: e7:fe:97:e7:fa:e4:f6:28:40:ef:8d:0a:8b:94:48: 57:b6:1f:32:a8:44:13:1f:95:48:4c:e4:0b:fc:f9: 08:f7:f0:36:11:4f:df:c1:60:68:c1:cb:ed:bb:3c: 04:ed:d3:ed:a4:6c:26:a0:2c:1c:8c:6c:f4:2e:5a: 95:17:64:ed:d0:10:3d:31:9d:45:6d:69:22:b9:7d: b8:7f:04:7f:f1:d1:de:45:58:6a:18:0f:6d:80:b3: 28:59:f1:98:e6:eb:09:31:f1:b1:c8:74:9e:13:68: c3:28:8d:ad:4d:ab:53:a3:df:c9:51:94:09:19:cc: 1c:90:b9:95:c1:01:e6:75:dc:f9:85:8b:34:64:3c: 1b:12:54:91:14:75:b4:f6:6b:ef:9b:da:cd:3e:41: 4d:9e:86:88:0c:ab:92:73:a4:5c:5f:5e:07:7a:1d: 3f:c5:f1:f7:0c:34:fe:40:60:2f:60:12:d5:e4:d3: 7c:64:97:19:3e:2a:45:d0:09:d0:88:32:74:5a:30: 37:fe:d8:87:d2:9c:b4:c7:b8:70:06:d4:d0:12:e7: 0f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:59:EC:7E:8E:29:21:11:F3:35:E1:9B:50:0D:48:33:C0:E2:EA:0E X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:65:5a:84:5b:78:b3:ae:fa:f1:15:21:4e:61:30:bc:72:69: 74:37:fe:f0:df:53:53:cf:d3:13:c9:87:d7:ce:0c:52:d2:e6: a6:39:23:68:57:49:a2:3b:93:5a:32:87:b5:e6:39:06:35:14: eb:c4:20:e3:4e:4f:d3:c7:4f:1d:ca:5f:48:ec:16:1c:28:19: 01:09:5d:28:7b:10:60:cd:03:99:6f:d8:88:33:49:ab:2c:d8: 2e:12:53:f4:95:2a:c4:ef:e8:df:5b:10:f8:60:53:74:13:99: 49:2d:df:73:bb:b6:2d:9f:9d:3a:d3:84:59:d6:ba:06:cf:8f: 7f:25:f3:c6:93:60:f4:a9:73:8d:37:50:61:cf:4e:1f:05:9a: 48:62:c8:93:90:1b:31:c4:92:be:ce:1f:7a:9c:f0:d8:74:5d: c0:f0:ba:e4:e5:a9:c7:48:3b:5f:c0:73:79:77:0b:b2:77:83: b3:03:ed:77:a0:9d:c4:a0:6b:de:dc:4f:fc:b1:1c:54:c2:c7: 47:cb:de:01:f5:cb:dd:7c:65:1d:ba:a7:74:b9:b4:cc:45:51: 7e:76:ae:e6:21:81:a0:58:55:b7:ad:7a:23:01:38:59:0c:77: 5b:33:a9:03:68:d5:f2:2e:d8:2c:54:12:66:72:67:96:97:f7: ee:d3:38:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjUxMDE5MDIyMzE2WhcNMjUxMDI2MDIyMzE2WjAYMRYwFAYD VQQDEw02OGY0NGI5NC0wM2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rwg7zqLJRgcMWAg6ZbAr9l07vciNHQQHlQvHwT25Bkd2pP1mWtlWIO7zCLn /pfn+uT2KEDvjQqLlEhXth8yqEQTH5VITOQL/PkI9/A2EU/fwWBowcvtuzwE7dPt pGwmoCwcjGz0LlqVF2Tt0BA9MZ1FbWkiuX24fwR/8dHeRVhqGA9tgLMoWfGY5usJ MfGxyHSeE2jDKI2tTatTo9/JUZQJGcwckLmVwQHmddz5hYs0ZDwbElSRFHW09mvv m9rNPkFNnoaIDKuSc6RcX14Heh0/xfH3DDT+QGAvYBLV5NN8ZJcZPipF0AnQiDJ0 WjA3/tiH0py0x7hwBtTQEucPbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtZ7H6O KSER8zXhm1ANSDPA4uoOMB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2ZVqEW3izrvrxFSFOYTC8cml0N/7w31NTz9MTyYfXzgxS0uamOSNo V0miO5NaMoe15jkGNRTrxCDjTk/Tx08dyl9I7BYcKBkBCV0oexBgzQOZb9iIM0mr LNguElP0lSrE7+jfWxD4YFN0E5lJLd9zu7Ytn50604RZ1roGz49/JfPGk2D0qXON N1Bhz04fBZpIYsiTkBsxxJK+zh96nPDYdF3A8Lrk5anHSDtfwHN5dwuyd4OzA+13 oJ3EoGve3E/8sRxUwsdHy94B9cvdfGUduqd0ubTMRVF+dq7mIYGgWFW3rXojAThZ DHdbM6kDaNXyLtgsVBJmcmeWl/fu0zga -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:12 2025 by rpki-client