$ rpki-client -vvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft File: ML4eudOsSdCv7hNTw_nRFnoAexc.mft (raw, json) Hash identifier: 0JmgqPy8tPygv3eaEkGT2acsMIsOTT/9cTQVUxmc/O0= Subject key identifier: D6:54:C0:87:75:8D:EB:AC:91:0E:41:94:84:60:5D:CB:1C:58:C4:AF Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17 Certificate issuer: /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft Manifest number: CA Signing time: Sun 19 Oct 2025 08:56:16 +0000 Manifest this update: Sun 19 Oct 2025 08:56:16 +0000 Manifest next update: Sun 26 Oct 2025 08:56:16 +0000 Files and hashes: 1: ML4eudOsSdCv7hNTw_nRFnoAexc.crl (hash: Wgc6scVz+7NyjSSXnFwqUi/bwk5wufJhtU+AMaU9nfc=) 2: A8F4AE389D7E11EF91A24C73C4F9AE02.roa (hash: cqlcdGiLqE3aY+b7c71D9qJhiS/wi/pJbFxJk9OTyQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B736, serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17 Validity Not Before: Oct 19 08:56:16 2025 GMT Not After : Oct 26 08:56:16 2025 GMT Subject: CN=68f4a7b0-d09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:26:b0:98:dd:de:94:0b:87:68:5f:29:cd: 38:6e:a9:e4:4e:a0:57:a6:c9:59:19:e0:ee:99:92: b4:ec:a1:aa:da:3d:33:03:a3:f4:45:f4:28:14:39: 31:a8:a9:29:45:77:35:76:47:2f:f8:a8:90:b8:3c: 18:e7:ec:4f:bf:9f:b9:2e:4e:2a:69:12:90:19:80: 19:cd:a7:df:60:b2:75:69:90:93:30:2a:62:d1:85: 41:c9:ed:08:08:9a:86:8f:08:09:c6:59:22:9a:53: 69:a1:51:5a:4b:e5:e6:e4:e3:37:0b:47:35:61:61: df:e4:0f:ac:52:c3:4b:74:0b:bb:c8:a9:7c:a1:b8: 2e:78:f0:c0:3b:44:eb:b4:d3:ba:5f:0c:83:73:1c: 02:64:49:90:35:58:db:dd:ba:45:02:25:77:db:a0: 58:92:d9:98:f0:70:18:df:aa:5c:9f:83:e4:6d:8a: 86:50:36:00:0a:ec:35:90:87:3a:d9:7f:79:18:b9: 73:a4:ba:66:43:74:5e:d7:a1:a7:d8:3c:df:ea:09: d1:2e:a0:e4:2c:60:db:35:c4:ac:5f:b8:bd:33:4f: 63:12:1b:27:63:e2:37:11:06:40:8c:57:4f:cc:ec: a8:16:5a:e8:25:1d:f6:59:ca:13:e1:15:55:ef:2c: 8b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:54:C0:87:75:8D:EB:AC:91:0E:41:94:84:60:5D:CB:1C:58:C4:AF X509v3 Authority Key Identifier: keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fb:a3:89:4c:70:56:8b:f7:2d:72:d0:f9:85:22:e2:cb:20: cd:00:4e:6b:a7:86:07:fd:0f:ce:5a:e9:e4:bd:ab:e0:94:26: 96:f4:1a:fa:43:27:e4:11:33:e7:d7:32:42:59:25:e5:19:77: 27:d0:18:88:f3:f6:b2:03:8c:b8:b0:e9:33:8b:fb:7d:a4:e9: 59:85:e2:95:ee:e6:59:d4:9f:8f:e0:8f:e7:bb:c7:5b:ef:59: 94:e1:90:8f:0b:b7:34:5e:a7:c7:c4:aa:91:f3:5e:42:2d:cb: fa:f1:06:39:e5:99:09:00:38:3e:37:32:28:9b:08:bc:b8:bd: 18:f5:a9:88:19:52:b6:50:74:53:e3:00:8f:f3:e8:46:62:6d: f4:75:16:5f:70:32:eb:73:af:a1:00:c9:8c:1c:12:f3:90:88: f4:a1:41:c5:4a:55:d4:d0:bf:7e:fb:53:86:45:27:44:a8:a9: 17:1c:ab:5c:c1:4e:45:c7:e8:65:cb:48:05:20:b0:f8:12:f6: 63:29:17:b6:96:02:91:c9:08:d9:d7:bc:b5:8f:bb:d2:2c:e2: dc:71:7c:e2:cf:c4:df:ed:f6:90:80:63:3c:d5:ac:5a:f3:09: 0d:44:83:f8:32:fa:ee:fa:d5:46:a8:0f:bc:51:8b:41:18:f5: 38:14:62:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I3MzYxMTAvBgNVBAUTKDMwQkUxRUI5RDNBQzQ5RDBBRkVFMTM1M0MzRjlEMTE2 N0EwMDdCMTcwHhcNMjUxMDE5MDg1NjE2WhcNMjUxMDI2MDg1NjE2WjAYMRYwFAYD VQQDEw02OGY0YTdiMC1kMDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPAmsJjd3pQLh2hfKc04bqnkTqBXpslZGeDumZK07KGq2j0zA6P0RfQoFDkx qKkpRXc1dkcv+KiQuDwY5+xPv5+5Lk4qaRKQGYAZzaffYLJ1aZCTMCpi0YVBye0I CJqGjwgJxlkimlNpoVFaS+Xm5OM3C0c1YWHf5A+sUsNLdAu7yKl8obguePDAO0Tr tNO6XwyDcxwCZEmQNVjb3bpFAiV326BYktmY8HAY36pcn4PkbYqGUDYACuw1kIc6 2X95GLlzpLpmQ3Re16Gn2Dzf6gnRLqDkLGDbNcSsX7i9M09jEhsnY+I3EQZAjFdP zOyoFlroJR32WcoT4RVV7yyLkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZUwId1 jeuskQ5BlIRgXcscWMSvMB8GA1UdIwQYMBaAFDC+HrnTrEnQr+4TU8P50RZ6AHsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjczNi9GMTMzRUYwQzg0 MkQxMUVGOTlFODNEODRDNEY5QUUwMi9NTDRldWRPc1NkQ3Y3aE5Ud19uUkZub0Fl eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01MNGV1ZE9zU2RDdjdoTlR3X25SRm5vQWV4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjczNi9GMTMzRUYwQzg0MkQxMUVGOTlFODNEODRDNEY5QUUwMi9NTDRldWRPc1Nk Q3Y3aE5Ud19uUkZub0FleGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs+6OJTHBWi/ctctD5hSLiyyDNAE5rp4YH/Q/OWunkvavglCaW9Br6 QyfkETPn1zJCWSXlGXcn0BiI8/ayA4y4sOkzi/t9pOlZheKV7uZZ1J+P4I/nu8db 71mU4ZCPC7c0XqfHxKqR815CLcv68QY55ZkJADg+NzIomwi8uL0Y9amIGVK2UHRT 4wCP8+hGYm30dRZfcDLrc6+hAMmMHBLzkIj0oUHFSlXU0L9++1OGRSdEqKkXHKtc wU5Fx+hly0gFILD4EvZjKRe2lgKRyQjZ17y1j7vSLOLccXziz8Tf7faQgGM81axa 8wkNRIP4Mvru+tVGqA+8UYtBGPU4FGL1 -----END CERTIFICATE-----Generated at Mon Oct 20 19:28:07 2025 by rpki-client