$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json) Hash identifier: 8XLrGJ0KZ5OC7E2r3ztJLoMQxtsoRItjQPOK3F2mujw= Subject key identifier: 79:97:E4:2A:55:E1:69:18:36:30:31:06:31:B2:BB:BB:11:9E:D1:DD Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Certificate serial: 02DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft Manifest number: 02D5 Signing time: Sat 23 Aug 2025 01:36:02 +0000 Manifest this update: Sat 23 Aug 2025 01:36:02 +0000 Manifest next update: Sat 30 Aug 2025 01:36:02 +0000 Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: 6B+rIJyANRzzOLaZ2Mu3o8rFbKItm4Br1HWTr6RvSKE=) 2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: mXf2uQ5mcSdD+NErxrFlghuWQs3NGoZkupDcd+zBXVE=) 3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: M9uQ6pPxIBbjIwPVgVR3Gml4RjG64rh15R2Po2BA/0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 733 (0x2dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Validity Not Before: Aug 23 01:36:02 2025 GMT Not After : Aug 30 01:36:02 2025 GMT Subject: CN=68a91b02-214a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:53:aa:73:0b:91:96:89:f3:8a:fd:11:4e:c1: bd:1b:bf:7b:3a:eb:95:df:4c:e7:80:18:7a:72:cd: c4:ef:33:8a:38:11:02:59:93:ee:8c:c0:39:15:33: ed:2e:b1:ea:38:6b:96:21:74:c6:00:da:84:90:8f: da:a1:87:f5:c3:57:ce:7c:6b:23:1d:0e:4d:d6:c3: 80:74:66:32:a8:43:af:57:87:9b:ad:5a:18:14:a4: 03:9b:96:28:56:e9:5d:60:c0:27:19:5d:e2:66:7c: aa:a9:42:92:da:1c:ac:c2:41:d5:6e:c0:68:7f:c7: da:1b:17:ff:8c:96:f0:0e:22:65:ee:bb:70:bd:0a: 47:7e:48:8d:03:23:83:d9:64:13:9c:04:c6:c2:fb: 7d:50:b3:8d:94:91:06:96:56:31:27:ce:28:8d:9d: 5c:62:89:e3:a0:29:5b:e3:55:b7:71:6a:01:5a:68: 4a:75:51:1b:88:4f:85:9c:0d:49:30:07:bb:70:b9: 6d:2e:16:27:af:5a:6c:1f:4f:5a:82:ef:76:df:2d: 59:1c:04:35:bc:9e:c1:95:22:81:1c:c7:bb:63:61: fd:af:e6:fd:c3:ad:f4:3c:c6:55:8e:36:62:8e:df: d2:e4:35:8f:5d:55:f5:68:44:36:d2:38:57:17:43: e3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:97:E4:2A:55:E1:69:18:36:30:31:06:31:B2:BB:BB:11:9E:D1:DD X509v3 Authority Key Identifier: keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:4b:60:ed:a0:ff:a3:73:f7:13:90:cc:bb:e7:fb:bb:7b:98: 17:2b:89:e2:6a:d8:b0:4b:ee:3d:4e:3a:1a:d5:83:2e:07:f0: 73:50:c8:2f:40:bf:e5:50:ef:6d:e0:b3:44:c3:14:be:cc:fc: e7:44:ec:f3:c1:67:8c:55:86:a1:7d:94:bb:bb:ae:bc:d3:4e: 86:77:f6:0c:19:5d:89:64:f6:0b:f8:6f:22:d3:00:6b:67:50: c7:82:31:13:fe:52:a2:09:bc:b3:21:56:bc:f9:1c:67:a3:71: 3b:c5:eb:db:fd:21:0b:b5:a0:25:a5:03:b5:71:ab:2e:8b:4d: e3:d5:f3:5e:80:77:e6:24:22:3d:88:90:6c:af:4f:0b:ca:9b: f5:ff:60:6e:0e:39:4f:03:01:c2:b5:c4:63:00:1f:be:f1:7b: 51:7f:d9:1b:91:3b:8e:fb:46:5c:52:dc:32:50:e8:47:61:b0: 25:8e:9a:5f:ab:ce:12:ce:61:3e:3f:6d:c3:7d:e8:44:dd:26: 57:48:88:ea:f2:d9:7d:03:63:06:b5:5a:87:83:6e:b8:03:ac: 72:51:f2:ff:17:bc:6e:04:3d:02:0e:b3:9e:c5:49:f1:fa:7b: 3b:60:98:d6:48:6e:02:64:76:b7:e4:b3:2c:b4:95:90:5a:d7: 91:f0:53:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QzkxMTAvBgNVBAUTKDlBNTREMTAxNzUwMTlDRjgwODZCMzBCMzFFNjUyQUUw NjAyRkY2QkMwHhcNMjUwODIzMDEzNjAyWhcNMjUwODMwMDEzNjAyWjAYMRYwFAYD VQQDEw02OGE5MWIwMi0yMTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FOqcwuRlonziv0RTsG9G797OuuV30zngBh6cs3E7zOKOBECWZPujMA5FTPt LrHqOGuWIXTGANqEkI/aoYf1w1fOfGsjHQ5N1sOAdGYyqEOvV4ebrVoYFKQDm5Yo VuldYMAnGV3iZnyqqUKS2hyswkHVbsBof8faGxf/jJbwDiJl7rtwvQpHfkiNAyOD 2WQTnATGwvt9ULONlJEGllYxJ84ojZ1cYonjoClb41W3cWoBWmhKdVEbiE+FnA1J MAe7cLltLhYnr1psH09agu923y1ZHAQ1vJ7BlSKBHMe7Y2H9r+b9w630PMZVjjZi jt/S5DWPXVX1aEQ20jhXF0PjiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmX5CpV 4WkYNjAxBjGyu7sRntHdMB8GA1UdIwQYMBaAFJpU0QF1AZz4CGswsx5lKuBgL/a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdDOS85QzZFRjc0RUY5 RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5QZ0lhekN6SG1VcTRHQXY5 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sVFJBWFVCblBnSWF6Q3pIbVVxNEdBdjlydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdDOS85QzZFRjc0RUY5RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5Q Z0lhekN6SG1VcTRHQXY5cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwS2DtoP+jc/cTkMy75/u7e5gXK4niatiwS+49Tjoa1YMuB/BzUMgv QL/lUO9t4LNEwxS+zPznROzzwWeMVYahfZS7u668006Gd/YMGV2JZPYL+G8i0wBr Z1DHgjET/lKiCbyzIVa8+Rxno3E7xevb/SELtaAlpQO1casui03j1fNegHfmJCI9 iJBsr08Lypv1/2BuDjlPAwHCtcRjAB++8XtRf9kbkTuO+0ZcUtwyUOhHYbAljppf q84SzmE+P23DfehE3SZXSIjq8tl9A2MGtVqHg264A6xyUfL/F7xuBD0CDrOexUnx +ns7YJjWSG4CZHa35LMstJWQWteR8FOA -----END CERTIFICATE-----Generated at Sat Aug 23 20:18:26 2025 by rpki-client