$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: I0Bb9kRAap23L4zGAQozEF5Xt7j3qsrVPSpyYS0eEro= Subject key identifier: AE:2B:4A:1E:14:C5:9A:E7:1A:94:A0:C6:E8:EA:32:6D:77:39:39:24 Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 23AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 237C Signing time: Wed 10 Sep 2025 15:53:59 +0000 Manifest this update: Wed 10 Sep 2025 15:53:58 +0000 Manifest next update: Wed 17 Sep 2025 15:53:58 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: 9jeOH6Kfs2vBOL+WGI/UGjL24WmACwJ9nfSOPL2a4HU=) 2: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: 6zEasgx8d2eADPMA/likvG6cMgeT4lG28KVag9Ik7+Q=) 3: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: 1G385VTheI+atJyTdCrkaW87iv1psEE5oikWEVvtrgs=) 4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: 9r7t0Dck4/THU5FrLu9xD66nhtLPUTZJre8gizPVsbw=) 5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: tgzdjQtElpqaAs+NwGXD0CYNNYYww+x76UBm9x49LhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 15:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9131 (0x23ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: Sep 10 15:53:58 2025 GMT Not After : Sep 17 15:53:58 2025 GMT Subject: CN=68c19f16-f2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:35:de:bf:fa:f0:f0:64:bc:94:00:87:68:84: a6:45:c4:45:dc:ba:e6:24:a7:e4:be:8b:15:41:f7: e9:f1:95:b3:75:8c:4d:1d:e0:d9:72:69:67:ce:95: 98:5e:8b:a6:9d:68:f6:fa:8c:87:23:c8:fb:a1:10: 3e:54:7e:01:2f:6c:bd:76:d8:9d:88:53:db:f1:a0: 35:ba:9f:28:ce:2d:4b:cf:97:b1:3d:3c:0e:b6:b9: 5f:f5:98:d3:99:ec:53:3f:41:c5:71:87:7f:63:4c: 3a:96:d6:db:1e:e2:21:69:dd:10:a6:dd:5e:ed:b4: 80:42:16:35:65:57:46:5b:2c:d1:f8:dc:82:bc:64: c7:e8:af:e0:52:06:39:6c:3b:14:62:3d:57:ef:56: c0:df:b3:da:58:8f:93:b6:29:6c:f9:87:f1:5b:76: 07:b9:ae:ba:52:44:3b:de:50:35:48:a3:41:2b:99: c9:f8:7a:55:4a:c4:c1:11:1a:d0:27:4d:f5:a1:0e: c0:8b:9f:c3:de:da:37:66:e0:12:19:0d:5b:22:5e: d5:55:63:b0:75:93:4d:a8:3c:85:c8:cf:fa:03:0d: 6b:3f:b2:f0:ef:45:ff:95:1f:31:74:df:2e:ed:6c: 31:cb:03:54:58:ac:82:75:63:ec:56:8f:54:02:c9: de:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2B:4A:1E:14:C5:9A:E7:1A:94:A0:C6:E8:EA:32:6D:77:39:39:24 X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:51:ec:0c:eb:06:bf:7e:54:bb:88:bc:45:c3:28:3b:09:9f: ff:3f:f0:24:c2:91:49:22:a7:2d:83:93:33:2e:f4:cc:e5:60: ba:43:16:90:39:3b:b1:8a:0f:f9:a2:d0:f4:51:08:62:a1:31: a6:f2:bb:cb:49:f4:e6:ba:44:a5:11:9c:ae:07:78:34:0c:43: 72:ee:01:09:39:50:2d:49:1b:c9:6e:82:79:31:7b:7a:69:a4: ec:8d:07:73:16:46:b1:3e:6a:11:81:93:ae:21:de:64:af:2f: 8c:03:42:a8:f4:c7:9e:08:6d:2a:3d:00:3a:b2:9d:b5:a2:56: cf:62:07:04:7e:b9:06:2b:be:bc:d7:71:18:fc:8b:e8:80:6c: 50:b4:4b:fd:16:a2:94:ad:ea:c4:eb:a6:77:ee:2d:a2:01:55: 50:45:e1:d4:fc:5c:ab:ad:cf:d2:c3:70:5a:b9:bf:24:d8:28: ff:f3:fc:31:50:c5:20:2e:f3:cf:75:43:33:5c:0f:b9:98:88: 72:d6:c3:09:d2:b0:50:df:e5:96:10:a3:36:d4:fb:be:53:42: 30:b2:7a:8b:ce:98:c6:26:6c:a2:0a:0b:be:fc:5c:46:27:ab: 53:83:ed:d8:aa:e3:74:dd:63:3c:3e:9c:80:cb:30:a7:79:fd: dc:ef:ae:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjUwOTEwMTU1MzU4WhcNMjUwOTE3MTU1MzU4WjAYMRYwFAYD VQQDEw02OGMxOWYxNi1mMmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAljXev/rw8GS8lACHaISmRcRF3LrmJKfkvosVQffp8ZWzdYxNHeDZcmlnzpWY XoumnWj2+oyHI8j7oRA+VH4BL2y9dtidiFPb8aA1up8ozi1Lz5exPTwOtrlf9ZjT mexTP0HFcYd/Y0w6ltbbHuIhad0Qpt1e7bSAQhY1ZVdGWyzR+NyCvGTH6K/gUgY5 bDsUYj1X71bA37PaWI+Ttils+YfxW3YHua66UkQ73lA1SKNBK5nJ+HpVSsTBERrQ J031oQ7Ai5/D3to3ZuASGQ1bIl7VVWOwdZNNqDyFyM/6Aw1rP7Lw70X/lR8xdN8u 7WwxywNUWKyCdWPsVo9UAsneXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4rSh4U xZrnGpSgxujqMm13OTkkMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiUewM6wa/flS7iLxFwyg7CZ//P/AkwpFJIqctg5MzLvTM5WC6QxaQ OTuxig/5otD0UQhioTGm8rvLSfTmukSlEZyuB3g0DENy7gEJOVAtSRvJboJ5MXt6 aaTsjQdzFkaxPmoRgZOuId5kry+MA0Ko9MeeCG0qPQA6sp21olbPYgcEfrkGK768 13EY/IvogGxQtEv9FqKUrerE66Z37i2iAVVQReHU/Fyrrc/Sw3Baub8k2Cj/8/wx UMUgLvPPdUMzXA+5mIhy1sMJ0rBQ3+WWEKM21Pu+U0IwsnqLzpjGJmyiCgu+/FxG J6tTg+3YquN03WM8PpyAyzCnef3c764s -----END CERTIFICATE-----Generated at Thu Sep 11 11:42:18 2025 by rpki-client