$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft File: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft (raw, json) Hash identifier: eaRYqu/gHD2feTlhVEVQvNbf9i1uZDlr8uQeP9cPcXA= Subject key identifier: BB:B6:DB:6E:65:17:B5:95:89:B6:D0:23:1F:D5:26:5F:FD:6F:A8:1A Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39 Certificate issuer: /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft Manifest number: 0A Signing time: Thu 03 Jul 2025 08:24:29 +0000 Manifest this update: Thu 03 Jul 2025 08:24:29 +0000 Manifest next update: Thu 10 Jul 2025 08:24:29 +0000 Files and hashes: 1: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl (hash: EyqWuuxbBdtbmzLdl0H2Z9tQJsUCtN7/09FVsP7ZatU=) 2: 1E008B864B7411F09B3DF33BC4F9AE02.roa (hash: ev5mDZ6XFmJ+ji01cNK3sq1eGbo1TIpqJN2vMLDyQBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939 Validity Not Before: Jul 3 08:24:29 2025 GMT Not After : Jul 10 08:24:29 2025 GMT Subject: CN=68663e3d-ebf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:22:b8:d8:77:94:28:9d:4b:a8:2f:a8:6b: aa:f9:7c:e3:c1:b2:ea:41:f7:78:c2:64:7d:04:21: 6c:22:76:31:25:a5:ee:f8:70:0f:0a:d2:16:b5:23: f0:1b:c9:50:74:bb:8e:83:60:bf:e0:f8:10:16:31: b8:47:41:f8:4b:ad:c7:81:f3:e2:74:71:0f:92:f6: fd:ea:08:35:a4:91:c0:46:2b:12:38:cb:05:10:a6: aa:fb:90:43:70:88:0f:37:da:33:aa:a1:2f:b5:ff: d7:a2:96:13:5d:a9:81:42:a1:3d:c5:ee:9d:f4:f4: fe:ac:15:c4:ac:2c:74:ee:e1:de:88:89:eb:a8:94: e8:b1:36:c2:4e:c7:ce:34:16:11:e4:97:d2:32:c4: 6d:1e:68:2f:c7:2f:16:a9:c7:ca:38:4e:6a:f9:bc: 19:e9:e7:8f:6a:af:ef:4c:42:46:35:5b:69:3e:7d: 22:20:93:24:9f:fd:8e:8f:b1:51:cd:20:6d:41:06: 2a:41:7a:d1:e1:35:8d:27:db:a2:a1:f7:5a:94:1d: 7e:a9:a5:b8:f9:3c:84:df:f2:ac:fa:3b:01:49:15: a2:8d:1b:64:95:62:a3:fa:63:f0:f0:f4:21:7f:dc: af:fa:b1:2a:70:0b:15:4e:cc:de:7d:bd:d8:d7:ee: 02:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B6:DB:6E:65:17:B5:95:89:B6:D0:23:1F:D5:26:5F:FD:6F:A8:1A X509v3 Authority Key Identifier: keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:42:5e:83:6e:dc:49:34:01:2e:e0:28:6d:1d:17:94:5b:01: ba:ab:48:ec:b5:fd:c7:08:d6:f2:a3:e1:2c:03:43:07:e1:06: df:f6:3c:24:60:1b:b0:e8:85:e3:cd:76:5d:5e:dc:b7:98:95: ff:14:db:c7:ae:58:06:a8:e7:b8:8f:f2:05:5c:f5:28:84:d3: ee:10:3b:77:a2:4c:5e:6f:86:8e:a0:68:69:43:1a:1f:0d:66: d4:ee:0d:e6:2d:86:78:30:5e:a2:7e:5d:51:7d:1c:a9:65:ce: 2d:4c:4f:d3:35:6f:ef:29:b6:e8:0a:d0:a8:90:04:ff:50:d7: 6f:3f:07:6b:c9:db:4d:d5:d5:e8:d8:30:21:c2:14:ba:e4:80: 39:a5:9d:07:d6:57:c1:27:9c:a5:5e:b9:54:29:52:03:7c:6d: 8e:cd:c5:65:c5:6a:4d:d2:c6:fc:df:fe:47:99:30:db:72:17: 5c:d5:67:c3:ae:49:f7:a5:3c:0f:e2:79:be:4b:c1:6f:eb:57: 92:a1:78:71:85:08:87:11:22:89:d5:a9:d9:04:e4:c4:5e:e7: b6:30:33:5b:68:b7:1a:d0:e2:85:f5:e9:be:44:d1:1d:cb:65: 01:89:14:3c:1f:9e:5f:54:f1:f6:b6:02:1b:a1:22:a1:82:45: 8b:c6:b5:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0U4MDExMC8GA1UEBRMoOUE1ODdFNEVDRjY4RUM3NzI5RDhERTQzNUZGREFBRENF QTVCNDkzOTAeFw0yNTA3MDMwODI0MjlaFw0yNTA3MTAwODI0MjlaMBgxFjAUBgNV BAMTDTY4NjYzZTNkLWViZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwXSK42HeUKJ1LqC+oa6r5fOPBsupB93jCZH0EIWwidjElpe74cA8K0ha1I/Ab yVB0u46DYL/g+BAWMbhHQfhLrceB8+J0cQ+S9v3qCDWkkcBGKxI4ywUQpqr7kENw iA832jOqoS+1/9eilhNdqYFCoT3F7p309P6sFcSsLHTu4d6IieuolOixNsJOx840 FhHkl9IyxG0eaC/HLxapx8o4Tmr5vBnp549qr+9MQkY1W2k+fSIgkySf/Y6PsVHN IG1BBipBetHhNY0n26Kh91qUHX6ppbj5PITf8qz6OwFJFaKNG2SVYqP6Y/Dw9CF/ 3K/6sSpwCxVOzN59vdjX7gL1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu7bbbmUX tZWJttAjH9UmX/1vqBowHwYDVR0jBBgwFoAUmlh+Ts9o7Hcp2N5DX/2q3OpbSTkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRTgwLzM1NDMzRjIyNEI2 NjExRjBCODg1MjQzOUM0RjlBRTAyL21saC1UczlvN0hjcDJONURYXzJxM09wYlNU ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbWxoLVRzOW83SGNwMk41RFhfMnEzT3BiU1RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RTgwLzM1NDMzRjIyNEI2NjExRjBCODg1MjQzOUM0RjlBRTAyL21saC1UczlvN0hj cDJONURYXzJxM09wYlNUay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIFCXoNu3Ek0AS7gKG0dF5RbAbqrSOy1/ccI1vKj4SwDQwfhBt/2PCRg G7DohePNdl1e3LeYlf8U28euWAao57iP8gVc9SiE0+4QO3eiTF5vho6gaGlDGh8N ZtTuDeYthngwXqJ+XVF9HKllzi1MT9M1b+8ptugK0KiQBP9Q128/B2vJ203V1ejY MCHCFLrkgDmlnQfWV8EnnKVeuVQpUgN8bY7NxWXFak3Sxvzf/keZMNtyF1zVZ8Ou SfelPA/ieb5LwW/rV5KheHGFCIcRIonVqdkE5MRe57YwM1totxrQ4oX16b5E0R3L ZQGJFDwfnl9U8fa2AhuhIqGCRYvGtWI= -----END CERTIFICATE-----Generated at Fri Jul 4 10:03:47 2025 by rpki-client