$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft File: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft (raw, json) Hash identifier: 4rQlQmoXM7vFwVRgJra3QYLVHe0+kiAyzoPEF3EBBEI= Subject key identifier: 26:4B:ED:BF:89:F8:E8:9E:7B:A8:C4:D7:32:1C:7C:64:B5:BA:CC:74 Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39 Certificate issuer: /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft Manifest number: 41 Signing time: Sun 19 Oct 2025 10:53:40 +0000 Manifest this update: Sun 19 Oct 2025 10:53:39 +0000 Manifest next update: Sun 26 Oct 2025 10:53:39 +0000 Files and hashes: 1: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl (hash: /2Pq+7aALnO4qHlFz2kZAjJcrga/4IBypP8eqNUDDG8=) 2: 1E008B864B7411F09B3DF33BC4F9AE02.roa (hash: ev5mDZ6XFmJ+ji01cNK3sq1eGbo1TIpqJN2vMLDyQBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939 Validity Not Before: Oct 19 10:53:39 2025 GMT Not After : Oct 26 10:53:39 2025 GMT Subject: CN=68f4c333-72af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:50:2c:db:6b:c4:be:62:16:a1:1d:5c:4a:0c: 9a:4e:2e:65:9a:e0:dd:40:ff:ae:e7:66:3a:22:b1: 53:06:c4:7d:9c:5e:be:4c:5f:aa:a9:56:89:6b:76: 1b:71:d1:d8:cd:ce:82:2c:ac:a7:b0:bd:a1:8c:b3: 52:70:e4:b0:f2:69:a8:f9:b1:93:6b:0e:be:03:2d: 1a:f6:b7:4c:e4:73:4a:2b:90:05:fc:f4:c3:da:a2: 74:82:44:63:f7:b1:bf:d7:dc:51:73:3e:d4:23:bc: 26:b5:8b:df:b9:07:1d:a0:56:1b:fe:6d:de:68:10: bc:87:1e:05:05:df:0e:a5:62:83:af:24:94:a8:e6: f2:25:8a:b5:14:71:99:36:57:f9:0a:bf:ec:c6:3d: 4d:65:2b:5c:63:3a:df:1d:c5:b2:fa:12:74:7f:16: 24:5f:0b:38:63:9f:a3:29:5e:9b:5c:8d:25:e7:1e: df:bb:9a:6b:ec:bf:26:6a:74:4b:84:5e:cb:9a:c1: ab:61:5d:7b:d3:03:db:1d:e0:31:ec:45:ce:3d:b1: 9f:2b:8d:4d:3e:0e:22:ae:04:2e:04:7f:b9:52:7e: f4:e9:36:ea:72:1b:a8:ec:39:e5:a8:22:7f:d7:5f: cb:0a:fc:fd:6c:f9:1a:83:17:b4:66:28:57:93:3f: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4B:ED:BF:89:F8:E8:9E:7B:A8:C4:D7:32:1C:7C:64:B5:BA:CC:74 X509v3 Authority Key Identifier: keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:d8:8c:7b:4f:94:e9:57:de:8a:d9:a4:1c:1f:8f:f4:f2:30: 5c:65:22:ba:69:15:1e:d2:10:8a:7d:eb:01:5c:02:82:13:c4: 94:9e:d7:7a:b3:f8:97:c9:b2:59:db:ce:e7:95:ad:2e:27:71: 65:80:c4:ae:a7:49:dd:af:eb:bc:d4:b8:4b:c2:ed:74:1c:3b: 03:9a:57:00:be:e3:bb:a3:73:5a:b3:e8:29:34:ed:44:f7:43: b2:8a:b0:6b:a0:56:d7:95:7f:71:50:a6:f0:28:b6:b2:60:0d: f4:a4:30:8c:e2:9a:40:4d:b7:01:56:3e:9e:7a:a6:fe:1d:4a: 2b:3d:23:40:3f:6d:f5:ac:fb:74:14:fb:28:01:9d:b1:9d:4c: 58:ee:0a:a0:44:9b:84:2e:50:47:02:1a:b8:70:af:2d:c6:7c: 3e:c9:5b:da:4c:5a:20:cc:dd:9e:e9:c9:6b:fa:59:43:de:9a: 28:6a:0e:25:25:2f:e3:e2:f6:9c:d5:f1:eb:b8:79:df:f5:82: fa:3c:04:f4:4f:0c:34:39:bb:fa:38:4e:d6:d9:07:c2:09:a8: 9e:3c:e3:b9:93:73:9e:a9:58:a6:ba:95:93:a7:82:ae:02:21: 22:ee:ad:e2:87:ad:16:6a:c2:65:68:b4:53:74:2d:86:f8:46: af:2b:55:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0U4MDExMC8GA1UEBRMoOUE1ODdFNEVDRjY4RUM3NzI5RDhERTQzNUZGREFBRENF QTVCNDkzOTAeFw0yNTEwMTkxMDUzMzlaFw0yNTEwMjYxMDUzMzlaMBgxFjAUBgNV BAMTDTY4ZjRjMzMzLTcyYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClUCzba8S+YhahHVxKDJpOLmWa4N1A/67nZjoisVMGxH2cXr5MX6qpVolrdhtx 0djNzoIsrKewvaGMs1Jw5LDyaaj5sZNrDr4DLRr2t0zkc0orkAX89MPaonSCRGP3 sb/X3FFzPtQjvCa1i9+5Bx2gVhv+bd5oELyHHgUF3w6lYoOvJJSo5vIlirUUcZk2 V/kKv+zGPU1lK1xjOt8dxbL6EnR/FiRfCzhjn6MpXptcjSXnHt+7mmvsvyZqdEuE XsuawathXXvTA9sd4DHsRc49sZ8rjU0+DiKuBC4Ef7lSfvTpNupyG6jsOeWoIn/X X8sK/P1s+RqDF7RmKFeTP6uxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJkvtv4n4 6J57qMTXMhx8ZLW6zHQwHwYDVR0jBBgwFoAUmlh+Ts9o7Hcp2N5DX/2q3OpbSTkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRTgwLzM1NDMzRjIyNEI2 NjExRjBCODg1MjQzOUM0RjlBRTAyL21saC1UczlvN0hjcDJONURYXzJxM09wYlNU ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbWxoLVRzOW83SGNwMk41RFhfMnEzT3BiU1RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RTgwLzM1NDMzRjIyNEI2NjExRjBCODg1MjQzOUM0RjlBRTAyL21saC1UczlvN0hj cDJONURYXzJxM09wYlNUay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIPYjHtPlOlX3orZpBwfj/TyMFxlIrppFR7SEIp96wFcAoITxJSe13qz +JfJslnbzueVrS4ncWWAxK6nSd2v67zUuEvC7XQcOwOaVwC+47ujc1qz6Ck07UT3 Q7KKsGugVteVf3FQpvAotrJgDfSkMIzimkBNtwFWPp56pv4dSis9I0A/bfWs+3QU +ygBnbGdTFjuCqBEm4QuUEcCGrhwry3GfD7JW9pMWiDM3Z7pyWv6WUPemihqDiUl L+Pi9pzV8eu4ed/1gvo8BPRPDDQ5u/o4TtbZB8IJqJ4847mTc56pWKa6lZOngq4C ISLureKHrRZqwmVotFN0LYb4Rq8rVeo= -----END CERTIFICATE-----Generated at Mon Oct 20 18:22:54 2025 by rpki-client