$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft File: mlZqEuG8RjUyb14CrunbcYHdO94.mft (raw, json) Hash identifier: vSs8JOzVfvB3hrDE+s3L26qXDbxASQ04499pkkArlDc= Subject key identifier: B5:09:3D:76:76:F6:A0:12:77:22:42:9D:DB:40:91:C0:1C:74:52:AA Authority key identifier: 9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE Certificate issuer: /CN=A9142B64/serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Certificate serial: 34E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft Manifest number: 34DF Signing time: Tue 04 Nov 2025 14:58:22 +0000 Manifest this update: Tue 04 Nov 2025 14:58:21 +0000 Manifest next update: Tue 11 Nov 2025 14:58:21 +0000 Files and hashes: 1: mlZqEuG8RjUyb14CrunbcYHdO94.crl (hash: bYA+iP4t/odFK73JawOYm6Oa6Et4rh/ydpVSKLgWwow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13537 (0x34e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B64, serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Validity Not Before: Nov 4 14:58:21 2025 GMT Not After : Nov 11 14:58:21 2025 GMT Subject: CN=690a148e-d8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:70:5e:4b:ad:ab:fe:a6:f3:74:96:6d:23: 9b:5b:72:90:5f:51:55:09:93:95:a1:8c:17:57:a1: ad:24:5b:96:79:b5:14:91:02:84:01:c0:75:7e:00: 04:23:ca:43:4a:c9:04:00:53:52:39:ce:9b:e4:75: ec:06:1c:db:0a:f8:56:3f:66:df:4c:19:26:91:55: 23:1b:57:e4:c6:71:ca:59:9d:31:9d:2e:ce:6b:14: 73:f9:0f:e2:2a:9d:d3:e4:f1:2b:13:06:03:95:2a: 16:69:05:8a:dd:74:a6:29:5f:1e:41:7d:a7:82:1e: 23:67:66:86:37:42:d2:63:73:d9:8e:2f:48:2f:66: 0f:22:83:16:0a:69:f8:a8:f6:3f:72:0a:84:64:2b: a0:33:39:cc:da:59:f7:95:e8:64:1c:d5:5c:dd:ba: f1:fc:88:29:22:b4:5f:7e:3f:36:6c:79:38:79:d0: 8f:a4:2e:4c:6b:9e:33:9c:47:4a:16:4d:62:20:35: c0:45:f3:69:4f:b9:4e:f7:d9:05:e9:8f:9b:8a:fe: 5f:3a:5d:23:8c:3a:24:a1:3e:3c:b3:ac:86:53:b8: 7c:09:e2:6a:f6:1c:25:68:c0:e3:75:35:27:5e:e1: 39:2d:37:f0:e4:67:90:6e:f5:a0:49:7c:10:a7:c3: aa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:09:3D:76:76:F6:A0:12:77:22:42:9D:DB:40:91:C0:1C:74:52:AA X509v3 Authority Key Identifier: keyid:9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:10:4c:05:e8:02:99:e4:3c:de:37:c2:63:e4:81:30:8c:b3: e8:cb:25:31:ed:f5:f8:a8:f1:83:1d:2b:88:d0:11:d4:47:92: 29:d9:a6:1c:07:7f:89:7c:cc:40:7b:e3:99:fa:db:1d:86:e2: b3:26:0a:a5:29:05:d6:2b:00:8f:1a:d6:a7:94:ba:c7:22:28: 41:3e:9b:15:77:16:06:66:12:3d:ba:8b:8a:5b:16:57:d9:03: fd:8a:64:d5:df:c2:79:15:8c:bf:f0:90:8d:fd:e0:48:f6:40: 78:a7:fe:dd:9d:19:0c:c5:9d:1b:3f:b0:a6:47:46:c7:f3:38: f7:4c:72:4d:55:a7:ee:bd:2e:a8:1c:f2:2c:13:5d:3a:30:1f: 6d:e2:00:8b:a0:44:cf:b5:88:ef:93:4d:d2:0a:ed:61:d5:ef: 03:f9:a5:16:67:18:24:63:e9:31:05:fe:70:98:60:22:65:e3: 15:f8:df:14:03:64:80:48:70:b0:61:64:3a:d0:de:3d:e4:86: a4:df:41:61:02:f5:15:d5:dd:05:45:87:de:81:9d:ec:af:a5: 5b:a3:38:79:c7:79:35:7b:55:54:98:1c:86:a9:be:b4:f3:cb: f8:52:ba:ee:17:df:7e:bd:c9:8c:11:a5:1b:0a:60:fb:69:4f: e5:d1:45:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNjQxMTAvBgNVBAUTKDlBNTY2QTEyRTFCQzQ2MzUzMjZGNUUwMkFFRTlEQjcx ODFERDNCREUwHhcNMjUxMTA0MTQ1ODIxWhcNMjUxMTExMTQ1ODIxWjAYMRYwFAYD VQQDEw02OTBhMTQ4ZS1kOGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyVwXkutq/6m83SWbSObW3KQX1FVCZOVoYwXV6GtJFuWebUUkQKEAcB1fgAE I8pDSskEAFNSOc6b5HXsBhzbCvhWP2bfTBkmkVUjG1fkxnHKWZ0xnS7OaxRz+Q/i Kp3T5PErEwYDlSoWaQWK3XSmKV8eQX2ngh4jZ2aGN0LSY3PZji9IL2YPIoMWCmn4 qPY/cgqEZCugMznM2ln3lehkHNVc3brx/IgpIrRffj82bHk4edCPpC5Ma54znEdK Fk1iIDXARfNpT7lO99kF6Y+biv5fOl0jjDokoT48s6yGU7h8CeJq9hwlaMDjdTUn XuE5LTfw5GeQbvWgSXwQp8OqlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUJPXZ2 9qASdyJCndtAkcAcdFKqMB8GA1UdIwQYMBaAFJpWahLhvEY1Mm9eAq7p23GB3Tve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI2NC9FQTU5QTg1QTFE OTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJqVXliMTRDcnVuYmNZSGRP OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sWnFFdUc4UmpVeWIxNENydW5iY1lIZE85NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI2NC9FQTU5QTg1QTFEOTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJq VXliMTRDcnVuYmNZSGRPOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGEEwF6AKZ5DzeN8Jj5IEwjLPoyyUx7fX4qPGDHSuI0BHUR5Ip2aYc B3+JfMxAe+OZ+tsdhuKzJgqlKQXWKwCPGtanlLrHIihBPpsVdxYGZhI9uouKWxZX 2QP9imTV38J5FYy/8JCN/eBI9kB4p/7dnRkMxZ0bP7CmR0bH8zj3THJNVafuvS6o HPIsE106MB9t4gCLoETPtYjvk03SCu1h1e8D+aUWZxgkY+kxBf5wmGAiZeMV+N8U A2SASHCwYWQ60N495Iak30FhAvUV1d0FRYfegZ3sr6Vbozh5x3k1e1VUmByGqb60 88v4UrruF99+vcmMEaUbCmD7aU/l0UVe -----END CERTIFICATE-----Generated at Wed Nov 5 10:30:08 2025 by rpki-client