$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json) Hash identifier: /ZdbRBNkTdJrgQP/4aNlzzrDxrRQ6I6ZNa0fQRFWdI8= Subject key identifier: C2:E4:9E:3D:66:79:E6:70:38:C5:E2:E8:04:93:D4:26:72:E4:7B:6E Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 0412 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft Manifest number: 0409 Signing time: Mon 03 Nov 2025 00:23:16 +0000 Manifest this update: Mon 03 Nov 2025 00:23:16 +0000 Manifest next update: Mon 10 Nov 2025 00:23:16 +0000 Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: 1P+epf537S+cjX5kKcewWKPlPjU7lT6jwbim0OdJMag=) 2: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: pzFsMxICRta3jJZNRRm+xGcV3VPmmyQWY3sDErTiCgo=) 3: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: J9o/h2HcCF6AGcDij2ORSiNowMdc+62JwdcPSLdmYdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1042 (0x412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: Nov 3 00:23:16 2025 GMT Not After : Nov 10 00:23:16 2025 GMT Subject: CN=6907f5f4-bef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a3:00:10:32:0d:1d:31:48:41:f9:eb:57:c1: 7b:42:0e:a8:73:71:0f:1e:77:8f:0f:78:91:5f:14: b0:92:7b:3c:70:f4:3a:97:90:db:ef:d6:0e:33:af: 1b:3e:4a:72:e0:21:77:19:2f:c9:8e:04:08:0a:9c: 3d:d0:a7:0e:1a:9f:d4:33:c6:3a:21:ae:c7:67:22: 7b:1b:80:bf:7b:c3:e3:a8:fe:ed:89:02:2c:aa:db: ef:e5:ca:cf:18:03:f7:5e:b3:20:3a:7d:01:5f:57: 3d:d8:57:d3:bc:e7:57:b6:6a:1c:3f:7c:23:3b:7b: 7b:bc:46:34:af:8c:c5:e8:be:00:49:6a:d6:a7:cc: 53:74:7b:c9:83:a0:dd:07:d6:a2:5a:55:32:0a:f7: 63:a9:0e:ef:35:08:f0:e6:b9:a0:b4:69:47:91:e0: f1:31:0b:0c:48:5d:4a:1f:e1:3b:02:a0:51:b8:11: fe:a0:4b:0f:a4:32:dc:5a:2a:ca:7b:da:fd:e0:9d: b2:de:ea:59:04:4d:21:30:70:b6:79:7c:8a:55:0b: 13:e5:29:34:37:46:cd:37:6e:47:b7:32:bc:13:73: 83:22:66:eb:ec:87:4d:bd:90:76:9d:9e:4e:3e:aa: 4d:20:d5:bc:a5:6e:a1:96:43:62:8b:32:74:ce:fc: ec:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E4:9E:3D:66:79:E6:70:38:C5:E2:E8:04:93:D4:26:72:E4:7B:6E X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:38:71:78:c8:c9:62:ca:62:57:07:27:37:fe:24:37:8e:0b: 1f:71:61:94:d0:38:b0:91:b2:c2:98:23:82:df:5d:3e:0a:dc: 16:ca:5a:8d:fa:f3:bb:31:32:b1:4f:f6:12:59:d8:56:6f:4e: 1b:6c:07:a5:d5:65:9b:d5:26:19:c2:43:cd:20:11:fd:d3:68: e7:3c:59:42:97:28:9d:7c:f1:46:b6:fa:d8:5b:3f:3f:8a:5b: 73:d9:14:6a:2f:e4:44:ff:d5:e9:cd:9b:d7:e1:78:9b:e8:c8: da:ff:2e:98:f5:e3:b7:6d:ac:96:ef:6d:f5:d4:ee:81:2c:90: ce:64:18:cc:1c:5e:f9:d9:3b:e3:a1:6a:04:d9:97:8a:31:d7: 23:df:02:04:4b:c5:06:17:cf:8d:3c:4a:b5:4e:9c:3f:0e:f4: f7:31:51:1f:a0:10:66:3d:1e:93:dc:35:84:9a:75:6e:e9:5b: 4b:71:c7:33:f3:ca:42:6a:29:4f:01:29:2b:32:ae:83:02:fc: d5:a9:3e:57:f4:a9:3c:25:a3:fa:c2:19:9c:90:2c:ae:e8:fc: 32:3e:85:4a:99:94:89:27:ab:8b:89:35:3a:0b:9e:37:eb:bb: 3e:24:16:aa:29:b3:f6:9b:71:17:9b:4f:86:0f:37:5d:ee:9d: 7b:1d:f4:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjUxMTAzMDAyMzE2WhcNMjUxMTEwMDAyMzE2WjAYMRYwFAYD VQQDEw02OTA3ZjVmNC1iZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaMAEDINHTFIQfnrV8F7Qg6oc3EPHnePD3iRXxSwkns8cPQ6l5Db79YOM68b Pkpy4CF3GS/JjgQICpw90KcOGp/UM8Y6Ia7HZyJ7G4C/e8PjqP7tiQIsqtvv5crP GAP3XrMgOn0BX1c92FfTvOdXtmocP3wjO3t7vEY0r4zF6L4ASWrWp8xTdHvJg6Dd B9aiWlUyCvdjqQ7vNQjw5rmgtGlHkeDxMQsMSF1KH+E7AqBRuBH+oEsPpDLcWirK e9r94J2y3upZBE0hMHC2eXyKVQsT5Sk0N0bNN25HtzK8E3ODImbr7IdNvZB2nZ5O PqpNINW8pW6hlkNiizJ0zvzsvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLknj1m eeZwOMXi6AST1CZy5HtuMB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIOHF4yMliymJXByc3/iQ3jgsfcWGU0DiwkbLCmCOC310+CtwWylqN +vO7MTKxT/YSWdhWb04bbAel1WWb1SYZwkPNIBH902jnPFlClyidfPFGtvrYWz8/ iltz2RRqL+RE/9XpzZvX4Xib6Mja/y6Y9eO3bayW72311O6BLJDOZBjMHF752Tvj oWoE2ZeKMdcj3wIES8UGF8+NPEq1Tpw/DvT3MVEfoBBmPR6T3DWEmnVu6VtLcccz 88pCailPASkrMq6DAvzVqT5X9Kk8JaP6whmckCyu6PwyPoVKmZSJJ6uLiTU6C543 67s+JBaqKbP2m3EXm0+GDzdd7p17HfQj -----END CERTIFICATE-----Generated at Tue Nov 4 04:01:08 2025 by rpki-client