$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft File: MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json) Hash identifier: V851qeqQRwgjunDWKWPVu3XBGb5hkJa4Hd/pkDDWWzc= Subject key identifier: 9C:0F:0F:F9:D6:3F:47:1A:53:52:C6:C8:E8:18:D3:A7:35:49:C5:3B Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB Certificate serial: 0701 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft Manifest number: 06DF Signing time: Sun 02 Nov 2025 22:05:38 +0000 Manifest this update: Sun 02 Nov 2025 22:05:37 +0000 Manifest next update: Sun 09 Nov 2025 22:05:37 +0000 Files and hashes: 1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: 0iR4okpk1rl62K8xkwd5qg8vr+6FCIPylatnCkmL9po=) 2: E99C5D78999011F09D326581C4F9AE02.roa (hash: KRc5l8wxQAY0kmCFWdslvfP8E+810yOkcCnLCwPkREQ=) 3: D9D6FFE098E311F08722B635C4F9AE02.roa (hash: qO4LFdT1EadkD19RKE3omNNtTDwPak7fiDqGAZIdlvc=) 4: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: Ng5tUT5XtWth/UeVCj9UP+U8A5SqwEGWBOOoygGvFMc=) 5: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: ecb64YVTHrU3z12q4OTbq4blJYoHWP6/Sh6BnZVtvcQ=) 6: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: FFJCcbR2xaawUKSL+usbkIr74Y7s8fy0PX5AM1LQSnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1793 (0x701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB Validity Not Before: Nov 2 22:05:37 2025 GMT Not After : Nov 9 22:05:37 2025 GMT Subject: CN=6907d5b1-18de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:fb:b9:78:f8:be:13:6f:96:6d:54:6c:f9: 37:98:8b:ac:e6:5a:81:a8:af:36:7c:ca:e4:25:d2: bd:9b:6e:b7:75:13:e4:60:6e:eb:d8:03:99:78:1c: bc:d0:ac:9f:df:16:71:a6:32:df:be:0c:8f:b6:52: 27:0b:12:e7:7a:2d:64:23:f7:75:5c:e8:51:02:6d: 56:32:21:16:cf:5c:9a:e8:0a:42:03:26:10:e1:58: b6:1a:e4:fa:a1:02:e5:18:1b:11:2e:4f:02:a6:7d: 4e:21:30:8b:d6:0e:e7:7d:e1:28:ec:4b:70:c1:7c: 31:a0:b7:d3:88:59:84:df:9e:28:ad:30:3d:3f:1d: ac:0b:21:fa:0e:4c:ef:29:3e:32:54:5f:cc:d0:4e: 18:7a:5b:2c:72:46:7d:3d:3a:a1:38:61:57:94:7d: 7e:f0:bd:4b:a9:29:a6:51:3e:7c:90:39:ec:0c:c8: fe:fa:d5:b3:e6:b7:9e:30:fe:1f:96:68:08:24:50: d0:8a:be:53:63:fc:7b:93:5b:a4:2f:84:3a:34:96: 55:d8:bb:63:4e:0d:33:3c:3e:f8:71:78:ce:b4:18: 06:3f:de:73:0f:50:c2:8b:b9:35:05:93:4d:e9:c6: f0:db:ee:56:2f:2e:9f:15:a3:39:cb:0e:8b:00:43: 82:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0F:0F:F9:D6:3F:47:1A:53:52:C6:C8:E8:18:D3:A7:35:49:C5:3B X509v3 Authority Key Identifier: keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:55:fc:07:b7:97:ee:c5:3e:43:60:86:cb:f1:d1:90:8c:43: 3e:c2:68:bf:12:4b:ed:1e:df:db:62:0e:7e:ed:9d:88:5c:d3: f0:2f:15:2c:fb:63:9e:67:d7:05:f8:ed:3c:d6:7d:5f:87:14: 32:57:99:bf:49:4a:2f:fa:35:3d:a6:85:0c:3e:c7:14:24:c4: 76:47:d2:2c:47:7e:03:a2:4e:b9:d5:4f:25:32:26:50:e5:88: 91:90:ab:cc:68:aa:0d:61:8e:22:e4:b3:14:89:35:1a:58:95: 36:68:05:1a:59:99:4a:3c:a3:5d:ff:35:9a:98:cb:b6:c7:67: 28:eb:a3:50:52:21:5c:8e:be:38:7d:80:a2:56:f4:57:50:75: 08:c0:f9:b8:ae:30:46:81:07:53:c7:81:00:e2:e7:de:3e:43: fa:43:6e:3c:9b:8f:0a:e1:d4:63:a5:96:40:af:f2:d7:cc:95: 90:87:94:be:95:4d:65:bd:ac:d2:c6:31:b7:87:36:31:39:c4: 83:67:1c:f4:a0:fb:5e:98:27:7c:5d:63:a4:30:fc:58:26:cc: 91:c7:6b:e3:2a:ea:f3:01:c5:7b:a8:54:21:2e:f5:b2:43:fc: 2c:07:4d:10:9a:2c:4c:c3:ee:65:bb:9a:cf:85:67:0d:a1:3a: a4:00:05:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRTYxMTAvBgNVBAUTKDMzMTk1Rjk2QzQ2RDREMjg1RDVCREU0QjBCMDMwRTM4 MzE0RThGQ0IwHhcNMjUxMTAyMjIwNTM3WhcNMjUxMTA5MjIwNTM3WjAYMRYwFAYD VQQDEw02OTA3ZDViMS0xOGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+n7uXj4vhNvlm1UbPk3mIus5lqBqK82fMrkJdK9m263dRPkYG7r2AOZeBy8 0Kyf3xZxpjLfvgyPtlInCxLnei1kI/d1XOhRAm1WMiEWz1ya6ApCAyYQ4Vi2GuT6 oQLlGBsRLk8Cpn1OITCL1g7nfeEo7EtwwXwxoLfTiFmE354orTA9Px2sCyH6Dkzv KT4yVF/M0E4YelssckZ9PTqhOGFXlH1+8L1LqSmmUT58kDnsDMj++tWz5reeMP4f lmgIJFDQir5TY/x7k1ukL4Q6NJZV2LtjTg0zPD74cXjOtBgGP95zD1DCi7k1BZNN 6cbw2+5WLy6fFaM5yw6LAEOCuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwPD/nW P0caU1LGyOgY06c1ScU7MB8GA1UdIwQYMBaAFDMZX5bEbU0oXVveSwsDDjgxTo/L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wRThFMjc4MDdC RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRTaGRXOTVMQ3dNT09ERk9q OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014bGZsc1J0VFNoZFc5NUxDd01PT0RGT2o4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NFNi8wRThFMjc4MDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRT aGRXOTVMQ3dNT09ERk9qOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQVfwHt5fuxT5DYIbL8dGQjEM+wmi/EkvtHt/bYg5+7Z2IXNPwLxUs +2OeZ9cF+O081n1fhxQyV5m/SUov+jU9poUMPscUJMR2R9IsR34Dok651U8lMiZQ 5YiRkKvMaKoNYY4i5LMUiTUaWJU2aAUaWZlKPKNd/zWamMu2x2co66NQUiFcjr44 fYCiVvRXUHUIwPm4rjBGgQdTx4EA4ufePkP6Q248m48K4dRjpZZAr/LXzJWQh5S+ lU1lvazSxjG3hzYxOcSDZxz0oPtemCd8XWOkMPxYJsyRx2vjKurzAcV7qFQhLvWy Q/wsB00QmixMw+5lu5rPhWcNoTqkAAVX -----END CERTIFICATE-----Generated at Tue Nov 4 01:05:15 2025 by rpki-client