$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft File: mlZqEuG8RjUyb14CrunbcYHdO94.mft (raw, json) Hash identifier: JqvpylL6Eh9k4Yxkj2+3BhwHeHM6+IurbDYId4ehp5w= Subject key identifier: 5C:A2:9B:3E:10:33:AE:8D:B7:12:C1:18:52:4A:41:84:1A:34:64:E6 Authority key identifier: 9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE Certificate issuer: /CN=A9142B64/serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Certificate serial: 34BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft Manifest number: 34B9 Signing time: Sun 24 Aug 2025 14:54:24 +0000 Manifest this update: Sun 24 Aug 2025 14:54:24 +0000 Manifest next update: Sun 31 Aug 2025 14:54:24 +0000 Files and hashes: 1: mlZqEuG8RjUyb14CrunbcYHdO94.crl (hash: RS9fulZ5HVUbrQy/kUKvbDLIKvV14wCJ/bezNHF3ypw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13499 (0x34bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B64, serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Validity Not Before: Aug 24 14:54:24 2025 GMT Not After : Aug 31 14:54:24 2025 GMT Subject: CN=68ab27a0-e78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:0c:8d:63:78:04:51:87:e4:36:6b:7c:a0: 5e:bb:37:df:09:dd:04:53:cc:dc:a5:ff:d8:5e:1b: 07:c6:a7:2f:57:86:92:76:00:a8:24:e6:17:cb:e9: a9:78:0d:3e:44:9d:a8:9e:ee:b2:2d:2f:2d:e0:dd: 2e:9d:b3:66:9a:65:7b:73:fc:1d:7d:85:82:a8:27: 58:5b:2f:99:e3:65:f8:30:6d:40:d9:03:30:86:31: 77:30:c6:c4:ef:1b:b4:15:a6:a2:5c:7b:4a:87:07: 22:6e:e9:51:ef:fc:27:22:56:80:11:c7:08:0c:6d: d5:3c:fa:b7:f5:51:00:42:cb:58:33:6e:bf:61:97: 7e:ef:53:31:5a:6c:09:ea:d0:2a:a0:8e:b2:fe:d4: 4b:bb:75:72:9f:b3:5c:39:23:1d:69:e5:80:4e:6d: 35:dc:ab:0d:f6:5c:36:f6:f1:b7:6e:2c:46:b6:d6: bb:3d:18:a1:8c:2c:e0:c5:25:68:9d:c1:e4:c7:7a: 3b:ec:31:00:d3:d2:f0:59:85:f4:97:fd:5a:6c:a5: 5a:8c:28:38:55:50:91:6a:05:52:eb:3e:06:9d:02: fa:96:49:51:ab:84:8c:2d:64:4c:6f:95:3b:8a:98: 06:61:f4:ce:fd:62:f1:e8:6c:11:c1:03:39:58:dc: 74:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A2:9B:3E:10:33:AE:8D:B7:12:C1:18:52:4A:41:84:1A:34:64:E6 X509v3 Authority Key Identifier: keyid:9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:3e:ae:e6:38:56:46:6f:0d:89:7d:04:91:4a:fa:a3:95:c7: 3c:54:6d:fe:47:07:f6:c0:74:4c:ac:63:4e:b7:d8:48:b0:aa: cb:61:c3:ca:e6:7d:ad:43:01:4f:d8:34:30:68:19:33:9a:68: 72:80:ee:51:64:c2:fa:c9:39:0e:d4:87:d8:9a:06:63:2e:a1: c5:f0:3f:b9:98:99:a0:59:86:19:27:14:2d:2e:0b:06:fd:34: ed:3c:c7:6c:57:f5:97:c7:0d:9e:98:f0:9f:3d:ec:4d:e6:5b: 4c:ad:e5:c7:2f:b6:4e:81:8e:d4:a3:93:52:04:25:12:c3:a2: 65:a0:28:8c:29:99:32:44:ae:7b:1f:27:46:28:2d:b8:67:fe: bc:7a:e0:6d:8b:d7:7d:99:46:13:3d:61:fe:19:33:0f:33:e4: 82:14:b4:0c:a9:f9:18:48:9a:5f:00:c3:6d:b8:be:4e:10:c2: 27:72:39:32:2e:4b:41:ce:9b:83:57:cc:60:49:d8:40:99:f6: cc:9a:66:9f:67:4c:44:5b:f2:ff:f9:ec:d3:ab:62:e9:9e:e9: e1:26:f3:71:f5:49:b5:3a:e2:55:55:6c:9d:8b:e6:22:ad:9b: 14:94:5d:2b:50:81:64:8a:de:ee:54:c1:90:2a:5a:a8:b1:e5: 11:88:a8:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNjQxMTAvBgNVBAUTKDlBNTY2QTEyRTFCQzQ2MzUzMjZGNUUwMkFFRTlEQjcx ODFERDNCREUwHhcNMjUwODI0MTQ1NDI0WhcNMjUwODMxMTQ1NDI0WjAYMRYwFAYD VQQDEw02OGFiMjdhMC1lNzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCIMjWN4BFGH5DZrfKBeuzffCd0EU8zcpf/YXhsHxqcvV4aSdgCoJOYXy+mp eA0+RJ2onu6yLS8t4N0unbNmmmV7c/wdfYWCqCdYWy+Z42X4MG1A2QMwhjF3MMbE 7xu0FaaiXHtKhwcibulR7/wnIlaAEccIDG3VPPq39VEAQstYM26/YZd+71MxWmwJ 6tAqoI6y/tRLu3Vyn7NcOSMdaeWATm013KsN9lw29vG3bixGtta7PRihjCzgxSVo ncHkx3o77DEA09LwWYX0l/1abKVajCg4VVCRagVS6z4GnQL6lklRq4SMLWRMb5U7 ipgGYfTO/WLx6GwRwQM5WNx0oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyimz4Q M66NtxLBGFJKQYQaNGTmMB8GA1UdIwQYMBaAFJpWahLhvEY1Mm9eAq7p23GB3Tve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI2NC9FQTU5QTg1QTFE OTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJqVXliMTRDcnVuYmNZSGRP OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sWnFFdUc4UmpVeWIxNENydW5iY1lIZE85NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI2NC9FQTU5QTg1QTFEOTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJq VXliMTRDcnVuYmNZSGRPOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkPq7mOFZGbw2JfQSRSvqjlcc8VG3+Rwf2wHRMrGNOt9hIsKrLYcPK 5n2tQwFP2DQwaBkzmmhygO5RZML6yTkO1IfYmgZjLqHF8D+5mJmgWYYZJxQtLgsG /TTtPMdsV/WXxw2emPCfPexN5ltMreXHL7ZOgY7Uo5NSBCUSw6JloCiMKZkyRK57 HydGKC24Z/68euBti9d9mUYTPWH+GTMPM+SCFLQMqfkYSJpfAMNtuL5OEMIncjky LktBzpuDV8xgSdhAmfbMmmafZ0xEW/L/+ezTq2LpnunhJvNx9Um1OuJVVWydi+Yi rZsUlF0rUIFkit7uVMGQKlqoseURiKib -----END CERTIFICATE-----Generated at Sun Aug 24 21:46:25 2025 by rpki-client