$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft File: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft (raw, json) Hash identifier: 2MALrg1q6a5qTlZR5X2W+w7mpryFdadGU7gTcAjMTk0= Subject key identifier: 83:23:A4:D4:4F:C4:DE:06:2C:D8:29:0B:C2:9D:8C:0C:48:04:83:AA Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39 Certificate issuer: /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft Manifest number: 24 Signing time: Sat 23 Aug 2025 08:03:10 +0000 Manifest this update: Sat 23 Aug 2025 08:03:09 +0000 Manifest next update: Sat 30 Aug 2025 08:03:09 +0000 Files and hashes: 1: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl (hash: 3d2AWqcbX0poCDZSob1RUTmwA8emiVe3OcRSBXdRRPo=) 2: 1E008B864B7411F09B3DF33BC4F9AE02.roa (hash: ev5mDZ6XFmJ+ji01cNK3sq1eGbo1TIpqJN2vMLDyQBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939 Validity Not Before: Aug 23 08:03:09 2025 GMT Not After : Aug 30 08:03:09 2025 GMT Subject: CN=68a975be-7d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d3:3a:da:50:8c:06:e5:13:6f:86:59:14:00: 4e:d5:e1:35:30:7f:45:48:d9:f4:cf:71:d9:40:fc: fc:1c:aa:ae:99:f3:70:c5:65:e7:3e:1a:f0:ff:d9: 63:f7:d7:25:17:b8:38:59:fb:25:b3:de:23:02:db: 24:b3:17:86:82:e1:c0:19:4d:31:8a:bf:08:8d:0f: 13:91:58:37:cd:51:0d:94:ec:ad:51:17:aa:b8:c5: 14:ce:9e:70:9a:77:64:0a:88:4a:ce:f9:1c:22:c9: cd:1b:fa:93:2f:33:2c:52:d1:22:cd:3f:69:be:ff: 2c:69:05:34:f6:13:be:2b:1b:45:bf:6c:42:70:8b: fe:63:cc:c8:75:fb:16:de:7c:2a:ee:92:e8:61:e2: b8:af:69:72:8f:fc:35:50:ae:65:84:6a:09:2f:18: ef:a9:81:79:e4:cb:73:4d:52:1f:65:46:4f:f2:06: 7c:be:6f:f3:b9:53:a5:75:8a:70:30:55:8b:75:ab: 40:e0:2c:f5:a9:27:d7:64:3c:5a:07:b8:9e:33:96: 35:28:1d:5a:1e:41:93:76:db:43:04:34:1e:a9:a1: 8b:67:49:99:2f:da:d4:a7:e6:23:1a:32:9d:42:4f: 6c:19:05:28:ea:1d:8c:67:b8:cd:0a:ca:fb:eb:d9: a6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:23:A4:D4:4F:C4:DE:06:2C:D8:29:0B:C2:9D:8C:0C:48:04:83:AA X509v3 Authority Key Identifier: keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:67:43:f6:61:13:e7:06:49:c3:3e:b7:bf:b9:a1:63:5d:d5: 8b:9d:e4:44:be:dc:02:3e:65:49:f9:e3:07:df:b3:37:10:d8: 4e:c4:70:59:12:26:55:ff:2e:a1:08:97:e1:af:12:1b:90:fd: f8:91:65:93:a7:f3:38:1e:ec:b4:63:04:58:ad:98:50:c8:15: 5d:2b:48:f0:72:89:08:4e:26:c7:08:9e:61:2f:59:1e:27:28: d3:eb:ed:c8:ba:0a:c0:9a:ef:a9:2f:45:38:ff:bd:8e:34:91: 1d:9b:47:28:c6:0a:19:cc:1f:d7:bf:cf:39:cc:66:7d:09:5d: 53:05:39:62:e1:65:e1:6e:d3:ec:7b:f7:22:bc:8d:82:55:ce: 07:e9:6b:21:da:58:30:b3:1b:ec:34:40:6f:63:57:b5:59:9c: 40:1d:76:a5:42:47:19:89:29:38:8d:ce:77:07:cd:0a:80:a6: ca:8f:9b:d2:50:5f:18:f3:73:1a:6c:fd:83:be:45:5a:5e:0a: 15:ed:d8:46:9f:8f:28:c5:f5:55:f4:f9:cb:a9:7e:5d:98:c0: 72:b5:8c:e8:34:f1:d7:b4:76:d5:ce:9b:c9:16:93:07:a0:33: 46:42:56:9f:da:7f:ef:ad:81:8b:b6:40:de:1a:7e:1e:9f:74: b6:77:55:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0U4MDExMC8GA1UEBRMoOUE1ODdFNEVDRjY4RUM3NzI5RDhERTQzNUZGREFBRENF QTVCNDkzOTAeFw0yNTA4MjMwODAzMDlaFw0yNTA4MzAwODAzMDlaMBgxFjAUBgNV BAMTDTY4YTk3NWJlLTdkMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh0zraUIwG5RNvhlkUAE7V4TUwf0VI2fTPcdlA/Pwcqq6Z83DFZec+GvD/2WP3 1yUXuDhZ+yWz3iMC2ySzF4aC4cAZTTGKvwiNDxORWDfNUQ2U7K1RF6q4xRTOnnCa d2QKiErO+Rwiyc0b+pMvMyxS0SLNP2m+/yxpBTT2E74rG0W/bEJwi/5jzMh1+xbe fCrukuhh4rivaXKP/DVQrmWEagkvGO+pgXnky3NNUh9lRk/yBny+b/O5U6V1inAw VYt1q0DgLPWpJ9dkPFoHuJ4zljUoHVoeQZN220MENB6poYtnSZkv2tSn5iMaMp1C T2wZBSjqHYxnuM0Kyvvr2aYvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgyOk1E/E 3gYs2CkLwp2MDEgEg6owHwYDVR0jBBgwFoAUmlh+Ts9o7Hcp2N5DX/2q3OpbSTkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRTgwLzM1NDMzRjIyNEI2 NjExRjBCODg1MjQzOUM0RjlBRTAyL21saC1UczlvN0hjcDJONURYXzJxM09wYlNU ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbWxoLVRzOW83SGNwMk41RFhfMnEzT3BiU1RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RTgwLzM1NDMzRjIyNEI2NjExRjBCODg1MjQzOUM0RjlBRTAyL21saC1UczlvN0hj cDJONURYXzJxM09wYlNUay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJnQ/ZhE+cGScM+t7+5oWNd1Yud5ES+3AI+ZUn54wffszcQ2E7EcFkS JlX/LqEIl+GvEhuQ/fiRZZOn8zge7LRjBFitmFDIFV0rSPByiQhOJscInmEvWR4n KNPr7ci6CsCa76kvRTj/vY40kR2bRyjGChnMH9e/zznMZn0JXVMFOWLhZeFu0+x7 9yK8jYJVzgfpayHaWDCzG+w0QG9jV7VZnEAddqVCRxmJKTiNzncHzQqApsqPm9JQ Xxjzcxps/YO+RVpeChXt2EafjyjF9VX0+cupfl2YwHK1jOg08de0dtXOm8kWkweg M0ZCVp/af++tgYu2QN4afh6fdLZ3VW8= -----END CERTIFICATE-----Generated at Sat Aug 23 16:18:49 2025 by rpki-client