$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: s1yqajjUrA6dqGYmCckry5vGbmFSDPqhmDHmtiOCO6s= Subject key identifier: 1A:01:FE:88:6A:F4:E8:A3:6D:2F:66:51:52:5C:18:CC:E2:5E:0A:7A Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 23C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 2393 Signing time: Sun 26 Oct 2025 15:56:32 +0000 Manifest this update: Sun 26 Oct 2025 15:56:32 +0000 Manifest next update: Sun 02 Nov 2025 15:56:32 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: 9FzN52qnFhn+iJcO1Yrfg8Zp+go2ROPy57xUuX2HYyU=) 2: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: 6zEasgx8d2eADPMA/likvG6cMgeT4lG28KVag9Ik7+Q=) 3: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: 1G385VTheI+atJyTdCrkaW87iv1psEE5oikWEVvtrgs=) 4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: 9r7t0Dck4/THU5FrLu9xD66nhtLPUTZJre8gizPVsbw=) 5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: tgzdjQtElpqaAs+NwGXD0CYNNYYww+x76UBm9x49LhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 15:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9154 (0x23c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: Oct 26 15:56:32 2025 GMT Not After : Nov 2 15:56:32 2025 GMT Subject: CN=68fe44b0-da06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ea:18:ff:46:2d:f1:56:20:64:90:d1:0a:b0: b2:02:d0:0c:8b:9b:c5:bb:f1:39:84:25:59:83:6d: 80:00:16:77:61:c1:cf:24:d7:6f:1a:cd:ae:b9:39: 1e:56:ed:25:45:9a:3c:2a:7f:f5:ca:bc:cd:21:5a: 8a:07:95:cd:17:41:16:ce:3e:f8:96:8b:b5:1e:55: a7:48:16:4a:3a:82:37:68:a5:c5:f6:11:6c:bf:1e: f7:8a:80:f5:75:36:3d:f4:5e:8f:31:78:59:6d:59: f0:fa:10:ef:e9:77:ec:d8:c1:22:d5:29:fa:4d:60: d4:c4:c6:55:48:c9:76:2d:2c:0a:3f:23:47:1d:8d: 33:80:95:36:1b:68:d9:78:8c:35:82:60:a1:ee:8f: 66:be:34:ac:6c:50:21:d1:8b:e6:5f:1b:69:d1:20: f9:bf:68:db:24:18:73:88:a8:c9:2e:07:7e:34:e8: bf:37:04:bd:eb:60:2a:03:3b:82:cd:36:10:e6:e3: c9:c8:8a:52:57:50:a7:5e:ce:a5:f4:86:fc:95:3a: 9b:f9:d9:19:f4:33:fc:42:75:01:a6:8a:5c:d4:71: 22:00:26:d8:8e:ce:98:7c:81:65:7d:b1:06:0a:dd: 9a:a9:e9:67:9e:f0:55:bf:fd:42:c6:70:d8:64:bf: fe:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:01:FE:88:6A:F4:E8:A3:6D:2F:66:51:52:5C:18:CC:E2:5E:0A:7A X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:f4:be:09:d8:7c:79:6c:4a:9f:6f:52:21:c1:07:15:47:7f: c0:d5:8b:e0:53:c6:a9:a3:0e:9b:b7:fe:34:52:53:2f:93:0a: 11:a5:7e:99:23:d9:17:19:90:9e:89:6f:27:47:99:2f:e6:db: 00:bb:13:a4:6f:1e:87:d8:52:2a:3f:fb:cb:58:bf:a2:2a:e6: 37:5a:bc:9c:46:f7:c6:b0:54:f5:82:58:05:1c:7c:19:2b:6e: 13:f5:8b:ec:bc:10:f7:d4:a5:1d:1b:b7:09:c7:31:64:f0:5d: 6c:5f:51:bb:a5:4a:3b:8d:83:81:b9:3c:aa:8d:bf:4d:58:45: 09:c3:53:ed:76:a4:ad:1d:ca:f8:46:f4:4e:fb:9e:60:85:1b: d9:c0:29:77:73:2c:41:89:7b:66:84:88:cb:aa:3e:59:6a:92: a9:b5:cb:3d:0c:d1:5e:ae:f8:54:9f:b1:39:81:5c:c4:04:ea: fa:b8:8d:e1:84:be:88:04:08:3e:d8:ba:23:bf:41:51:04:5d: 87:a2:5a:4b:35:21:28:5e:c7:35:27:24:ce:15:48:7c:b4:2a: b0:e6:76:13:0b:e8:c1:f9:b5:09:36:a6:8f:64:f7:df:83:fd: e2:c9:6d:54:a7:4f:ab:7e:38:4a:a0:8e:4e:85:e2:38:eb:3d: 3f:1c:f6:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjUxMDI2MTU1NjMyWhcNMjUxMTAyMTU1NjMyWjAYMRYwFAYD VQQDEw02OGZlNDRiMC1kYTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+oY/0Yt8VYgZJDRCrCyAtAMi5vFu/E5hCVZg22AABZ3YcHPJNdvGs2uuTke Vu0lRZo8Kn/1yrzNIVqKB5XNF0EWzj74lou1HlWnSBZKOoI3aKXF9hFsvx73ioD1 dTY99F6PMXhZbVnw+hDv6Xfs2MEi1Sn6TWDUxMZVSMl2LSwKPyNHHY0zgJU2G2jZ eIw1gmCh7o9mvjSsbFAh0YvmXxtp0SD5v2jbJBhziKjJLgd+NOi/NwS962AqAzuC zTYQ5uPJyIpSV1CnXs6l9Ib8lTqb+dkZ9DP8QnUBpopc1HEiACbYjs6YfIFlfbEG Ct2aqelnnvBVv/1CxnDYZL/+8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoB/ohq 9OijbS9mUVJcGMziXgp6MB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw9L4J2Hx5bEqfb1IhwQcVR3/A1YvgU8apow6bt/40UlMvkwoRpX6Z I9kXGZCeiW8nR5kv5tsAuxOkbx6H2FIqP/vLWL+iKuY3WrycRvfGsFT1glgFHHwZ K24T9YvsvBD31KUdG7cJxzFk8F1sX1G7pUo7jYOBuTyqjb9NWEUJw1PtdqStHcr4 RvRO+55ghRvZwCl3cyxBiXtmhIjLqj5ZapKptcs9DNFervhUn7E5gVzEBOr6uI3h hL6IBAg+2Lojv0FRBF2HolpLNSEoXsc1JyTOFUh8tCqw5nYTC+jB+bUJNqaPZPff g/3iyW1Up0+rfjhKoI5OheI46z0/HPZ2 -----END CERTIFICATE-----Generated at Mon Oct 27 09:16:03 2025 by rpki-client