$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json) Hash identifier: dtH4rLPbGev1eT4TRL9jD21uOJkz6Jvq1kIs8Rj/YpQ= Subject key identifier: 2C:35:C8:42:58:9D:EE:58:96:1B:8E:40:93:CF:06:51:DF:8F:0A:20 Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 03FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft Manifest number: 03F2 Signing time: Wed 17 Sep 2025 00:56:42 +0000 Manifest this update: Wed 17 Sep 2025 00:56:42 +0000 Manifest next update: Wed 24 Sep 2025 00:56:42 +0000 Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: hDOlariDmRKYoDD9wFOYyHCxCwDY36/aDBwOuoxnVbk=) 2: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: pzFsMxICRta3jJZNRRm+xGcV3VPmmyQWY3sDErTiCgo=) 3: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: J9o/h2HcCF6AGcDij2ORSiNowMdc+62JwdcPSLdmYdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1019 (0x3fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: Sep 17 00:56:42 2025 GMT Not After : Sep 24 00:56:42 2025 GMT Subject: CN=68ca074a-12e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4a:6f:ba:18:97:bc:d4:d8:90:57:71:1c:b4: b0:a9:c1:e4:31:a0:96:c8:da:d1:4b:38:e2:30:ac: 2c:7c:62:24:f9:3d:8f:7d:78:87:c2:61:5b:7a:80: 59:99:c9:08:5e:d7:06:2b:e3:05:63:ea:fa:9d:2d: c5:9c:16:c9:c3:87:c3:25:88:79:3e:00:8c:29:cf: 85:8f:93:98:03:d8:55:29:90:a2:e5:79:f2:11:01: a0:c5:c3:01:d6:ae:75:89:3b:19:bf:6f:c2:6b:23: 8a:36:80:ae:59:eb:da:a1:06:3e:60:bd:b5:23:71: e4:9e:32:a5:e7:bb:e2:01:e0:43:6d:c9:90:29:af: 13:1f:85:99:6c:81:31:9c:c5:d5:78:c1:10:95:18: 5a:35:54:de:cb:c1:f5:db:48:c3:42:8a:61:c1:23: a1:55:d8:1f:ec:c8:08:59:0d:00:d0:85:e1:e5:52: 34:0c:ab:1a:00:11:d4:db:51:bc:49:0f:78:22:33: 8e:2c:41:a7:22:9a:93:00:1d:e2:5f:b5:c0:60:75: bd:25:5c:97:8d:96:55:e6:09:c8:17:60:28:8c:ea: af:20:fe:c0:fd:8b:32:9f:e8:d4:c4:5c:b6:31:3d: 47:3f:8d:f0:3c:ee:ef:4d:c3:b2:63:22:26:e4:b6: b0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:35:C8:42:58:9D:EE:58:96:1B:8E:40:93:CF:06:51:DF:8F:0A:20 X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ba:b8:5d:b3:bb:51:1f:74:19:6f:8a:12:eb:0b:ba:e7:dd: ab:ec:78:48:ab:0f:ea:1d:07:85:ff:0c:ae:67:15:9e:a4:4b: aa:c5:ee:fa:db:51:77:5c:10:b6:ac:bb:00:03:db:d9:3e:d4: 92:6e:a5:02:22:ce:36:c6:c3:52:d4:2e:20:8e:ef:f7:4a:fc: 65:4f:91:b2:d0:d0:e1:86:39:ca:ef:c0:b8:5d:e5:e5:a5:16: bd:e3:12:b2:e1:15:ae:97:ad:8f:bf:89:b4:2b:f6:12:db:7f: 51:48:3a:41:80:83:42:89:19:e4:7f:f4:06:fe:53:c9:30:a1: 5b:d2:e6:cc:ef:18:2e:92:b2:fd:fb:42:23:c4:89:7d:dd:a9: 5f:3c:28:1b:8b:e9:68:f8:80:52:01:e5:20:b5:c9:f7:34:be: 7b:a6:51:4c:f3:93:69:54:41:bf:35:c5:6d:3b:0d:0a:de:ce: 8c:56:a2:01:f4:c8:2b:05:8d:cf:0b:20:91:0d:83:4c:cf:ec: 6d:67:63:db:06:ef:bc:ec:52:f9:bc:9a:80:a2:92:a9:42:23: 8b:22:96:19:ba:e0:a3:4b:18:59:9b:c6:4f:a4:8f:51:68:49: e1:08:f8:e6:3c:a5:8b:c7:58:85:79:7e:f5:3d:06:54:2f:66: 71:f7:d5:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjUwOTE3MDA1NjQyWhcNMjUwOTI0MDA1NjQyWjAYMRYwFAYD VQQDEw02OGNhMDc0YS0xMmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkpvuhiXvNTYkFdxHLSwqcHkMaCWyNrRSzjiMKwsfGIk+T2PfXiHwmFbeoBZ mckIXtcGK+MFY+r6nS3FnBbJw4fDJYh5PgCMKc+Fj5OYA9hVKZCi5XnyEQGgxcMB 1q51iTsZv2/CayOKNoCuWevaoQY+YL21I3HknjKl57viAeBDbcmQKa8TH4WZbIEx nMXVeMEQlRhaNVTey8H120jDQophwSOhVdgf7MgIWQ0A0IXh5VI0DKsaABHU21G8 SQ94IjOOLEGnIpqTAB3iX7XAYHW9JVyXjZZV5gnIF2AojOqvIP7A/Ysyn+jUxFy2 MT1HP43wPO7vTcOyYyIm5Law5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCw1yEJY ne5YlhuOQJPPBlHfjwogMB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6urhds7tRH3QZb4oS6wu6592r7HhIqw/qHQeF/wyuZxWepEuqxe76 21F3XBC2rLsAA9vZPtSSbqUCIs42xsNS1C4gju/3SvxlT5Gy0NDhhjnK78C4XeXl pRa94xKy4RWul62Pv4m0K/YS239RSDpBgINCiRnkf/QG/lPJMKFb0ubM7xgukrL9 +0IjxIl93alfPCgbi+lo+IBSAeUgtcn3NL57plFM85NpVEG/NcVtOw0K3s6MVqIB 9MgrBY3PCyCRDYNMz+xtZ2PbBu+87FL5vJqAopKpQiOLIpYZuuCjSxhZm8ZPpI9R aEnhCPjmPKWLx1iFeX71PQZUL2Zx99UF -----END CERTIFICATE-----Generated at Thu Sep 18 21:43:05 2025 by rpki-client