$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft File: MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json) Hash identifier: aAWVNPtWt5U/Jjd9CU5dn13riJxaxHh9jz4vn9CFvQI= Subject key identifier: 65:90:98:3E:F3:48:54:6A:C2:CA:07:27:70:7C:2C:49:01:C0:E2:ED Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 Certificate issuer: /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Certificate serial: 0CA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft Manifest number: 0C9D Signing time: Sun 26 Oct 2025 18:39:33 +0000 Manifest this update: Sun 26 Oct 2025 18:39:32 +0000 Manifest next update: Sun 02 Nov 2025 18:39:32 +0000 Files and hashes: 1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: 346ykaGOFgy6njCkaoig3wjhpF+fpZl5voGKoNEePdA=) 2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: LXTrgQN3T+0OVcDzvaM6T5a0p0NXB+0zRwSrfQRhFSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 18:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3236 (0xca4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CAC7, serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Validity Not Before: Oct 26 18:39:32 2025 GMT Not After : Nov 2 18:39:32 2025 GMT Subject: CN=68fe6ae5-747d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:36:7a:7f:d4:b0:62:26:a8:17:a8:42:ed:b4: bc:ce:cd:c9:24:a5:01:fe:e3:5f:c0:2c:a6:5e:fb: 86:c5:db:d6:a8:5f:d4:95:6d:0d:42:ed:a9:d1:4b: e9:25:20:9a:1f:9b:6c:65:77:49:a5:f6:ed:38:82: af:e6:6f:cd:ac:db:7e:1a:44:56:c4:8e:1a:f4:2f: af:de:ec:a8:dc:5c:8a:2d:a3:3c:a0:79:76:6e:28: 56:ed:d7:05:64:84:aa:ed:00:b6:b5:bd:5c:c2:02: 91:e4:55:72:df:a4:43:27:91:f2:23:e0:0e:5c:9e: fc:14:8d:8a:ba:d0:12:03:ca:8f:6c:e0:61:bb:ee: 3c:80:af:83:6f:6e:b2:8b:fe:6b:cc:c3:dd:f1:47: e3:b9:67:07:00:d8:72:57:16:46:d9:25:00:a2:f5: 86:71:de:00:1b:ed:c8:8f:a6:e9:cb:ad:54:5f:c9: 36:10:7b:86:09:58:9e:89:9a:d7:ad:2d:c0:e7:a3: 8b:64:c6:49:96:fa:fe:c5:aa:58:9e:0b:ea:c9:06: 8f:dc:39:59:db:d5:72:67:cb:5a:7c:cf:45:43:06: bb:87:9b:48:9b:6b:3d:a9:54:84:3e:17:fb:aa:f3: e3:bb:68:1f:4c:31:12:42:da:4d:21:ed:fc:72:4b: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:90:98:3E:F3:48:54:6A:C2:CA:07:27:70:7C:2C:49:01:C0:E2:ED X509v3 Authority Key Identifier: keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:d3:1e:c0:38:6b:af:cd:fb:e8:f8:9e:13:cd:f3:f3:94:16: a5:48:04:8d:7d:a5:21:6c:60:46:98:b9:8c:00:8c:11:34:01: e0:cd:60:7e:55:61:81:24:b1:68:5e:3e:b6:59:a6:1a:3e:04: 7c:66:8f:4e:75:14:19:1d:0e:55:2e:a1:c8:fa:9c:5e:43:c2: 64:b7:b4:3b:6d:f0:6f:b1:54:aa:10:3f:c5:88:8b:18:fc:6c: 37:f1:ad:51:90:9e:ff:6f:95:f4:eb:eb:dd:1b:51:bc:67:43: 85:ea:20:56:a2:06:5b:f3:07:46:40:cb:e6:0c:6f:ff:cc:25: 20:6f:34:e5:e3:78:37:ae:7d:73:18:f5:56:96:c8:6b:f0:60: 52:67:e3:19:a7:24:7f:ae:1c:45:5a:27:2e:98:b9:4c:d6:8e: d6:f3:d3:ff:24:62:33:2f:49:53:fa:3e:10:c8:aa:21:89:fa: 13:39:0e:14:8f:18:b5:1d:9e:4c:a9:22:27:c3:e6:9f:4b:fd: 4c:0c:c3:1a:a8:74:5d:d9:57:0f:60:72:2e:72:6d:09:c4:a7: d8:a5:7c:6d:cc:8e:66:97:78:2c:16:e2:a4:30:49:ad:f6:6b: 1f:14:90:ac:fa:c1:1b:bd:80:f4:9b:83:32:09:6f:b0:84:64: e8:0c:0e:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBQzcxMTAvBgNVBAUTKDMwQkMyRUU1Qjc1NjRGRTBGREYyMDBFNzg5QjIzQTJD MEQ4RTkyMjQwHhcNMjUxMDI2MTgzOTMyWhcNMjUxMTAyMTgzOTMyWjAYMRYwFAYD VQQDEw02OGZlNmFlNS03NDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjZ6f9SwYiaoF6hC7bS8zs3JJKUB/uNfwCymXvuGxdvWqF/UlW0NQu2p0Uvp JSCaH5tsZXdJpfbtOIKv5m/NrNt+GkRWxI4a9C+v3uyo3FyKLaM8oHl2bihW7dcF ZISq7QC2tb1cwgKR5FVy36RDJ5HyI+AOXJ78FI2KutASA8qPbOBhu+48gK+Db26y i/5rzMPd8UfjuWcHANhyVxZG2SUAovWGcd4AG+3Ij6bpy61UX8k2EHuGCVieiZrX rS3A56OLZMZJlvr+xapYngvqyQaP3DlZ29VyZ8tafM9FQwa7h5tIm2s9qVSEPhf7 qvPju2gfTDESQtpNIe38cktJGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWQmD7z SFRqwsoHJ3B8LEkBwOLtMB8GA1UdIwQYMBaAFDC8LuW3Vk/g/fIA54myOiwNjpIk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0FDNy9DMTM5REFCQTAy MkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1QtRDk4Z0RuaWJJNkxBMk9r aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Md3U1YmRXVC1EOThnRG5pYkk2TEEyT2tpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0FDNy9DMTM5REFCQTAyMkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1Qt RDk4Z0RuaWJJNkxBMk9raVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI0x7AOGuvzfvo+J4TzfPzlBalSASNfaUhbGBGmLmMAIwRNAHgzWB+ VWGBJLFoXj62WaYaPgR8Zo9OdRQZHQ5VLqHI+pxeQ8Jkt7Q7bfBvsVSqED/FiIsY /Gw38a1RkJ7/b5X06+vdG1G8Z0OF6iBWogZb8wdGQMvmDG//zCUgbzTl43g3rn1z GPVWlshr8GBSZ+MZpyR/rhxFWicumLlM1o7W89P/JGIzL0lT+j4QyKohifoTOQ4U jxi1HZ5MqSInw+afS/1MDMMaqHRd2VcPYHIucm0JxKfYpXxtzI5ml3gsFuKkMEmt 9msfFJCs+sEbvYD0m4MyCW+whGToDA70 -----END CERTIFICATE-----Generated at Mon Oct 27 04:41:00 2025 by rpki-client