$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft File: mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json) Hash identifier: qjS9wJlIMuFA3sXd5G2jN0PPSq9k3yanL4DK3m2vOt8= Subject key identifier: 48:82:F5:08:C9:61:16:5D:61:2A:CB:EC:78:02:88:0E:28:3C:DD:EF Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01 Certificate issuer: /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01 Certificate serial: 071D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft Manifest number: 0710 Signing time: Sat 18 Oct 2025 23:18:10 +0000 Manifest this update: Sat 18 Oct 2025 23:18:10 +0000 Manifest next update: Sat 25 Oct 2025 23:18:10 +0000 Files and hashes: 1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: +nqxvVpyv0N+qi4XtczyoJFgC9Ws/k1X+gkFCWJdAfU=) 2: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: t/jzVO6L3wgo+QH7mzqB0zSXy5Nwbra0pOtYvgiFmIs=) 3: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: bMetSmWwjzP6LMILwQp0327+1V3svzhvOdiLjBriktI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1821 (0x71d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01 Validity Not Before: Oct 18 23:18:10 2025 GMT Not After : Oct 25 23:18:10 2025 GMT Subject: CN=68f42032-97af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:d8:fa:1e:7a:22:8a:d7:d8:d0:fd:84:a4:df: 87:7b:1e:f9:37:fc:c8:f6:ab:30:55:78:bb:c7:3e: 24:ec:36:fd:de:1a:1d:4e:79:97:af:ac:74:16:49: 28:9b:30:62:b9:d9:a2:0e:b5:a0:15:d7:21:4d:28: cb:29:de:bd:29:79:1e:fe:33:b5:5a:8b:a1:da:28: 21:64:e2:18:0b:7a:01:52:06:3e:72:de:37:80:a6: e3:0b:47:16:38:ed:78:09:91:d8:f9:4d:8f:d3:0e: d8:b3:b8:67:51:c3:00:01:a9:2f:6b:9d:b4:7d:76: 41:8a:e3:91:a0:45:4c:1a:15:48:c6:13:98:f2:51: b9:af:c6:b7:0f:b6:ce:4d:34:3b:4d:6c:01:fc:18: 0b:fe:eb:94:b8:a1:03:c8:96:75:b0:6d:93:4d:29: 5e:a9:4d:33:26:c8:b3:e3:cd:fc:bf:7c:f5:94:8c: 77:89:af:0c:c4:b0:b1:5c:f3:73:ab:f9:5c:3f:aa: 18:18:90:9e:61:34:95:8e:bf:cd:07:bc:1f:be:0d: b8:b3:2a:e5:b9:32:ec:ac:7d:65:55:09:c1:3b:d1: c7:d5:64:4b:3e:fa:41:15:fe:8a:ff:77:29:ea:27: 01:be:52:1f:4a:34:04:d7:63:63:90:f2:5b:d7:5d: e7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:82:F5:08:C9:61:16:5D:61:2A:CB:EC:78:02:88:0E:28:3C:DD:EF X509v3 Authority Key Identifier: keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ff:ef:21:83:87:36:b0:c4:f5:53:66:9c:78:49:73:cb:0a: c5:14:d2:6f:51:97:94:45:5d:f8:1f:db:09:d8:95:36:2f:f4: f3:69:20:b9:40:71:b1:cf:89:12:b5:b6:34:fb:8d:c4:b1:eb: c9:63:84:41:87:b0:cc:cf:d8:4b:f1:28:ed:b9:0d:00:d0:28: 1f:92:cc:3d:7e:87:b9:02:02:23:fe:15:b9:a7:a7:52:a0:fa: 96:55:2c:25:34:d5:2c:74:f6:5f:16:0a:a0:7a:c6:a1:ef:a6: 94:2a:05:19:c5:bd:f3:88:35:d7:b5:52:60:9e:e2:7d:56:82: bc:5c:ae:e1:23:3c:e0:98:a2:4c:34:2e:0f:21:4c:61:97:8a: 95:aa:5b:11:7d:3e:10:cd:1b:56:72:14:f2:24:1b:8c:6f:59: 10:b3:d0:d3:e7:fe:13:1b:0d:79:99:66:df:58:1d:90:5b:84: 2f:84:d7:81:35:73:87:8c:8f:c2:02:de:aa:5f:8e:a7:12:ea: 4b:6f:22:3f:12:17:6d:ed:75:ba:e8:22:ef:3a:55:89:a2:c6: 0f:7b:39:25:b2:51:4f:27:cd:5d:ce:d7:13:b3:a6:a7:58:ec: ee:76:ea:91:0e:13:31:cc:b2:40:f1:34:e9:cf:b7:8d:86:2b: ff:4f:0e:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0MzUxMTAvBgNVBAUTKDk4Qzk3RTA1MkQ3RDlBRDUzNjA5NTlCOUQzRTA3NkRB REQ3NkVBMDEwHhcNMjUxMDE4MjMxODEwWhcNMjUxMDI1MjMxODEwWjAYMRYwFAYD VQQDEw02OGY0MjAzMi05N2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/tj6HnoiitfY0P2EpN+Hex75N/zI9qswVXi7xz4k7Db93hodTnmXr6x0Fkko mzBiudmiDrWgFdchTSjLKd69KXke/jO1Wouh2ighZOIYC3oBUgY+ct43gKbjC0cW OO14CZHY+U2P0w7Ys7hnUcMAAakva520fXZBiuORoEVMGhVIxhOY8lG5r8a3D7bO TTQ7TWwB/BgL/uuUuKEDyJZ1sG2TTSleqU0zJsiz4838v3z1lIx3ia8MxLCxXPNz q/lcP6oYGJCeYTSVjr/NB7wfvg24syrluTLsrH1lVQnBO9HH1WRLPvpBFf6K/3cp 6icBvlIfSjQE12NjkPJb113nOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiC9QjJ YRZdYSrL7HgCiA4oPN3vMB8GA1UdIwQYMBaAFJjJfgUtfZrVNglZudPgdtrdduoB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9FQzA1OTA0NjVC RTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10VTJDVm01MC1CMjJ0MTI2 Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL21NbC1CUzE5bXRVMkNWbTUwLUIyMnQxMjZnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjQzNS9FQzA1OTA0NjVCRTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10 VTJDVm01MC1CMjJ0MTI2Z0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd/+8hg4c2sMT1U2aceElzywrFFNJvUZeURV34H9sJ2JU2L/TzaSC5 QHGxz4kStbY0+43EsevJY4RBh7DMz9hL8SjtuQ0A0Cgfksw9foe5AgIj/hW5p6dS oPqWVSwlNNUsdPZfFgqgesah76aUKgUZxb3ziDXXtVJgnuJ9VoK8XK7hIzzgmKJM NC4PIUxhl4qVqlsRfT4QzRtWchTyJBuMb1kQs9DT5/4TGw15mWbfWB2QW4QvhNeB NXOHjI/CAt6qX46nEupLbyI/Ehdt7XW66CLvOlWJosYPezklslFPJ81dztcTs6an WOzuduqRDhMxzLJA8TTpz7eNhiv/Tw67 -----END CERTIFICATE-----Generated at Mon Oct 20 04:24:20 2025 by rpki-client