$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft File: MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft (raw, json) Hash identifier: qwDcFTskrK7J0qFDSkewHqFmOOg3K1MSUyGx9qxlmxQ= Subject key identifier: 8F:35:9D:51:4A:7A:0A:AD:5A:7F:EB:C2:69:AB:E1:5E:E2:75:C8:57 Authority key identifier: 30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE Certificate issuer: /CN=A91D560D/serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE Certificate serial: 0B44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft Manifest number: 13FE Signing time: Thu 18 Sep 2025 19:23:36 +0000 Manifest this update: Thu 18 Sep 2025 19:23:36 +0000 Manifest next update: Thu 25 Sep 2025 19:23:36 +0000 Files and hashes: 1: MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl (hash: FSjRb2IMpeJVMDB5wYBjnxBOurFVRbUXhNOfOAhdTps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2884 (0xb44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE Validity Not Before: Sep 18 19:23:36 2025 GMT Not After : Sep 25 19:23:36 2025 GMT Subject: CN=68cc5c38-91ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:67:80:97:fe:1f:36:e3:dd:c6:6c:f8:0c:83: 09:b6:f0:3f:2b:d1:0d:cd:07:2e:23:72:cc:e2:e0: bd:98:31:86:f3:1f:de:e4:da:d5:fc:74:dd:a3:69: 14:5b:99:8a:ba:79:93:81:ce:9a:4f:fd:4c:0f:89: 03:d9:0c:0e:a3:3f:b5:ec:2f:24:d3:89:f5:c9:6b: ec:9d:37:de:b4:df:d4:e4:14:3e:90:77:8a:c1:ca: b5:24:ea:3d:6d:9c:49:7f:d7:02:65:9d:ce:b0:0f: 65:32:95:f6:c1:c9:2a:24:eb:b9:f7:79:16:89:10: 44:95:1c:b9:92:63:73:c0:be:90:0f:b0:1b:70:5b: 14:02:26:04:95:1b:5e:a7:1f:02:67:51:dc:f2:82: 9e:ba:44:de:f6:3a:2c:bf:57:a3:de:99:37:6a:a9: 6c:4a:0c:1b:13:39:5a:fb:f7:7d:d2:62:00:29:e9: 33:33:d6:03:f4:53:5b:dc:1f:e3:63:bf:c5:85:4d: 47:d4:7d:eb:0b:4c:f7:11:bd:9a:53:20:3a:fa:3f: 6b:10:93:f5:48:1d:e1:2e:4a:f7:46:1c:08:e5:92: 15:9c:31:a5:e7:d2:f3:14:7d:97:2d:cf:86:4e:ac: c3:cb:39:cb:c1:d7:24:56:48:d7:ac:20:53:20:fe: 89:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:35:9D:51:4A:7A:0A:AD:5A:7F:EB:C2:69:AB:E1:5E:E2:75:C8:57 X509v3 Authority Key Identifier: keyid:30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a3:b7:de:a4:46:e7:ed:d3:7f:dc:77:74:b8:d0:8f:ee:48: c5:c1:6a:83:7c:a4:ef:61:0e:62:48:fc:4b:50:24:4a:08:dc: 08:0f:85:78:ce:37:cd:7a:d8:e5:60:18:dd:7c:88:05:2c:46: dd:d2:cd:39:97:ec:4a:b5:d8:d5:bd:12:d7:05:35:e8:3a:77: 2c:30:52:6b:c3:89:7b:6b:0e:37:11:23:59:70:18:ce:bf:ad: 70:8e:b0:b0:1e:f7:54:8b:f2:a5:d9:57:6a:d9:e5:5b:92:73: df:5c:3c:5f:69:ea:42:ca:51:b8:58:1e:0c:4b:59:b4:cd:6c: 92:c0:4f:81:fc:f5:9a:d7:c3:10:e4:7e:d3:71:af:28:c6:0a: f2:1b:0c:46:ed:ca:b9:d6:b9:83:ab:e6:01:8d:ae:42:34:b4: 29:96:f3:35:1f:74:9b:96:92:7e:17:b3:4e:e5:15:cd:ea:f1: 1d:86:d1:71:9a:1a:b8:21:c8:c2:ee:17:6a:ee:c8:49:90:a8: 7d:da:7e:fc:a3:46:02:25:74:90:f0:72:f0:1d:f2:fa:56:52: f8:37:68:61:8d:1b:aa:d0:7c:bd:19:71:e7:aa:4f:8e:be:9c: 97:e0:cb:98:49:cb:d9:cc:94:77:e4:9a:19:c8:2b:e3:dd:f5: b0:76:22:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKDMwQjVERTVFODc4NjI4ODJGOEZEQTJCNjkwQzJGMzA3 MDk5NUY1RkUwHhcNMjUwOTE4MTkyMzM2WhcNMjUwOTI1MTkyMzM2WjAYMRYwFAYD VQQDEw02OGNjNWMzOC05MWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmeAl/4fNuPdxmz4DIMJtvA/K9ENzQcuI3LM4uC9mDGG8x/e5NrV/HTdo2kU W5mKunmTgc6aT/1MD4kD2QwOoz+17C8k04n1yWvsnTfetN/U5BQ+kHeKwcq1JOo9 bZxJf9cCZZ3OsA9lMpX2wckqJOu593kWiRBElRy5kmNzwL6QD7AbcFsUAiYElRte px8CZ1Hc8oKeukTe9josv1ej3pk3aqlsSgwbEzla+/d90mIAKekzM9YD9FNb3B/j Y7/FhU1H1H3rC0z3Eb2aUyA6+j9rEJP1SB3hLkr3RhwI5ZIVnDGl59LzFH2XLc+G TqzDyznLwdckVkjXrCBTIP6JPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI81nVFK egqtWn/rwmmr4V7idchXMB8GA1UdIwQYMBaAFDC13l6HhiiC+P2itpDC8wcJlfX+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi9NTFhlWG9lR0tJTDRfYUsya01MekJ3bVY5 ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01MWGVYb2VHS0lMNF9hSzJrTUx6QndtVjlmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi9NTFhlWG9lR0tJ TDRfYUsya01MekJ3bVY5ZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqo7fepEbn7dN/3Hd0uNCP7kjFwWqDfKTvYQ5iSPxLUCRKCNwID4V4 zjfNetjlYBjdfIgFLEbd0s05l+xKtdjVvRLXBTXoOncsMFJrw4l7aw43ESNZcBjO v61wjrCwHvdUi/Kl2Vdq2eVbknPfXDxfaepCylG4WB4MS1m0zWySwE+B/PWa18MQ 5H7Tca8oxgryGwxG7cq51rmDq+YBja5CNLQplvM1H3SblpJ+F7NO5RXN6vEdhtFx mhq4IcjC7hdq7shJkKh92n78o0YCJXSQ8HLwHfL6VlL4N2hhjRuq0Hy9GXHnqk+O vpyX4MuYScvZzJR35JoZyCvj3fWwdiJS -----END CERTIFICATE-----Generated at Fri Sep 19 05:20:01 2025 by rpki-client