$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft File: MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft (raw, json) Hash identifier: ndOSJadgMES8FSWqPP+McnxRKmHZfgLTw2ITW2f4Bbo= Subject key identifier: AF:FF:0F:7B:1A:0A:42:1B:D1:F6:EB:B9:1D:D5:E2:66:C5:AF:8D:CA Authority key identifier: 30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE Certificate issuer: /CN=A91D560D/serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE Certificate serial: 0B53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft Manifest number: 141C Signing time: Sat 18 Oct 2025 20:02:39 +0000 Manifest this update: Sat 18 Oct 2025 20:02:38 +0000 Manifest next update: Sat 25 Oct 2025 20:02:38 +0000 Files and hashes: 1: MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl (hash: Jh39Qc10JONLE9rxyAlUTgsnRbf03jOwCJMe3nhv4TA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2899 (0xb53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE Validity Not Before: Oct 18 20:02:38 2025 GMT Not After : Oct 25 20:02:38 2025 GMT Subject: CN=68f3f25e-5816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3b:d7:7a:8b:b2:55:74:a2:2d:b8:35:43:ed: 30:c0:6a:e4:98:5f:d8:46:0f:aa:54:b9:56:a2:b0: d8:04:19:c6:67:9b:01:e6:9b:ff:4b:9e:5d:2d:b8: 96:4e:20:1e:73:e7:ad:37:72:9a:05:88:74:91:86: 9c:3e:ba:88:49:5e:14:4d:81:11:36:56:9d:3d:2c: 73:29:f4:36:17:a5:8b:a9:0e:62:1c:92:53:f0:9e: e1:7e:a1:d7:1b:5c:e7:2a:87:c6:7c:18:da:97:55: 92:f1:63:8b:36:cf:05:0c:f1:aa:12:a9:27:3a:9b: 5c:4d:76:94:dc:f1:f3:73:f3:35:f7:6f:e8:6c:7d: 81:ad:9b:3e:63:d7:38:a3:1d:55:99:cc:07:bb:5c: e9:83:69:de:eb:d8:ac:88:e3:a9:6e:94:20:08:6f: 89:c5:06:9c:20:11:2f:2f:35:15:05:b3:b6:9f:b9: 88:3e:c3:b0:ae:f4:43:ac:04:54:7b:c1:a2:03:4d: 0a:91:5c:f0:13:0a:ac:9e:e3:46:07:59:02:a7:9d: 21:e8:af:d2:0a:6b:e3:61:65:28:8d:b5:e5:6b:a7: d7:c0:be:7d:59:b9:77:f9:a0:20:c7:4f:f5:f1:3c: 96:cd:f8:bd:af:e9:bb:65:9d:de:0b:e5:e6:cb:48: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FF:0F:7B:1A:0A:42:1B:D1:F6:EB:B9:1D:D5:E2:66:C5:AF:8D:CA X509v3 Authority Key Identifier: keyid:30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:75:f0:79:92:55:0a:cb:80:bf:5c:aa:63:19:a8:7e:05:a4: ae:91:13:86:c9:77:db:22:f4:43:1a:fc:7a:e3:19:04:5f:84: 58:7d:14:51:78:2a:ef:44:0a:2c:ad:25:ea:07:fd:46:d9:1b: 65:73:69:5d:00:4b:90:87:cb:f2:62:f1:0d:6d:1f:65:d8:b2: 8e:d3:3a:2b:8e:6e:7f:8b:84:5e:8d:5c:ed:a5:70:df:63:16: af:db:d7:8d:46:eb:d1:7d:5c:b4:0e:e3:b0:82:0b:cc:1c:29: 40:71:97:50:bf:95:64:11:d4:62:14:c1:d8:34:8f:ff:81:8a: 9b:95:b2:09:12:0e:5c:92:31:99:0e:9f:b6:ca:07:04:b9:42: 75:5c:11:89:0c:69:49:5d:2b:41:74:11:89:77:20:e3:50:39: 5b:d3:7b:70:aa:b7:04:33:18:e8:58:e3:86:c3:f9:fb:11:97: c0:73:73:68:e2:3c:c1:48:61:a4:c2:ea:c8:84:16:e7:78:b9: 7b:d5:64:81:aa:40:7f:14:af:1b:e7:dd:ca:5c:35:35:5e:1c: 05:23:52:37:92:0e:e9:76:0b:e2:7d:f7:76:27:3c:ff:11:20: c6:6c:28:8f:1a:8d:af:70:49:ab:32:6b:6e:63:c9:25:94:c1: 62:20:5f:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKDMwQjVERTVFODc4NjI4ODJGOEZEQTJCNjkwQzJGMzA3 MDk5NUY1RkUwHhcNMjUxMDE4MjAwMjM4WhcNMjUxMDI1MjAwMjM4WjAYMRYwFAYD VQQDEw02OGYzZjI1ZS01ODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDvXeouyVXSiLbg1Q+0wwGrkmF/YRg+qVLlWorDYBBnGZ5sB5pv/S55dLbiW TiAec+etN3KaBYh0kYacPrqISV4UTYERNladPSxzKfQ2F6WLqQ5iHJJT8J7hfqHX G1znKofGfBjal1WS8WOLNs8FDPGqEqknOptcTXaU3PHzc/M192/obH2BrZs+Y9c4 ox1VmcwHu1zpg2ne69isiOOpbpQgCG+JxQacIBEvLzUVBbO2n7mIPsOwrvRDrARU e8GiA00KkVzwEwqsnuNGB1kCp50h6K/SCmvjYWUojbXla6fXwL59Wbl3+aAgx0/1 8TyWzfi9r+m7ZZ3eC+Xmy0hy+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK//D3sa CkIb0fbruR3V4mbFr43KMB8GA1UdIwQYMBaAFDC13l6HhiiC+P2itpDC8wcJlfX+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi9NTFhlWG9lR0tJTDRfYUsya01MekJ3bVY5 ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01MWGVYb2VHS0lMNF9hSzJrTUx6QndtVjlmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi9NTFhlWG9lR0tJ TDRfYUsya01MekJ3bVY5ZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwdfB5klUKy4C/XKpjGah+BaSukROGyXfbIvRDGvx64xkEX4RYfRRR eCrvRAosrSXqB/1G2Rtlc2ldAEuQh8vyYvENbR9l2LKO0zorjm5/i4RejVztpXDf Yxav29eNRuvRfVy0DuOwggvMHClAcZdQv5VkEdRiFMHYNI//gYqblbIJEg5ckjGZ Dp+2ygcEuUJ1XBGJDGlJXStBdBGJdyDjUDlb03twqrcEMxjoWOOGw/n7EZfAc3No 4jzBSGGkwurIhBbneLl71WSBqkB/FK8b593KXDU1XhwFI1I3kg7pdgviffd2Jzz/ ESDGbCiPGo2vcEmrMmtuY8kllMFiIF+s -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:37 2025 by rpki-client