$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft File: mlZqEuG8RjUyb14CrunbcYHdO94.mft (raw, json) Hash identifier: IAP80/7TCxWELaz/cOhd0ivqyTj1KB898bn6oHuZYfQ= Subject key identifier: 9C:AC:72:D2:00:44:B4:97:F2:0C:5B:C3:B9:84:2C:70:16:6A:0F:19 Authority key identifier: 9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE Certificate issuer: /CN=A9142B64/serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Certificate serial: 34B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft Manifest number: 34B1 Signing time: Fri 08 Aug 2025 14:58:06 +0000 Manifest this update: Fri 08 Aug 2025 14:58:06 +0000 Manifest next update: Fri 15 Aug 2025 14:58:06 +0000 Files and hashes: 1: mlZqEuG8RjUyb14CrunbcYHdO94.crl (hash: jnI+NMysTNaxKO0Jd1kynqtR+sm4X0D2YqOHlGhX2p4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13491 (0x34b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B64, serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Validity Not Before: Aug 8 14:58:06 2025 GMT Not After : Aug 15 14:58:06 2025 GMT Subject: CN=6896107e-a813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2d:8f:bd:5c:1b:72:6c:00:0a:7e:11:87:c8: 97:86:02:11:c4:45:51:18:f1:80:fc:16:e7:66:66: 48:a9:b1:5c:ff:e1:d1:37:2a:cd:ab:4d:e1:10:ed: e8:47:a4:76:11:ed:9f:48:33:95:ce:38:74:56:10: 93:db:a4:6c:aa:cf:c8:09:03:49:a1:d3:81:a1:21: 08:26:13:e2:aa:de:06:c6:8a:d0:8a:24:89:0a:56: 42:fb:7a:0a:f8:5d:8a:58:cc:14:9e:e5:8d:cf:c4: dc:36:2a:9c:e8:ed:3a:d6:f1:f3:81:c5:56:2d:52: 76:cd:4c:00:b1:b1:9e:14:98:37:3d:09:5a:0b:6d: 31:23:9b:14:12:9b:ee:0b:3e:24:5c:f3:d0:6d:07: c3:7b:f3:fd:92:24:7e:f2:cf:2f:a8:ba:54:7b:a0: 50:47:c7:9b:65:ed:42:26:33:e7:2a:0d:ca:33:92: 3d:1b:2e:6f:d3:50:53:e6:84:dd:b2:72:9c:e0:c2: de:61:a5:82:a8:67:d0:1e:18:ac:76:1f:0f:b4:fa: a7:69:7b:d4:fe:12:c7:dc:29:5b:d8:33:a5:4e:40: 75:41:6b:bf:95:73:3c:13:89:bb:d9:b6:c0:e0:4b: 57:59:b9:4a:c5:64:e0:83:d3:15:7d:fb:37:5d:13: 46:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AC:72:D2:00:44:B4:97:F2:0C:5B:C3:B9:84:2C:70:16:6A:0F:19 X509v3 Authority Key Identifier: keyid:9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:d4:79:62:f4:96:67:82:00:5e:21:77:52:38:07:2e:ea:35: 3e:78:7a:cd:58:3f:e6:c1:94:fb:5c:6c:31:a9:d1:50:e4:c7: 42:cc:eb:8d:a2:ed:4b:dd:fd:02:4b:fd:5c:ab:a1:84:7a:14: 98:ea:3a:5c:30:6a:ba:7c:d0:1c:38:70:d3:da:78:1f:ae:08: b1:81:c9:0d:1e:3a:6d:4e:12:35:92:43:2f:9e:0d:49:6d:96: 54:d8:62:d9:e9:b2:ef:17:ca:50:cd:57:20:7e:36:3c:72:66: 60:c0:d1:57:6c:f9:08:09:26:e1:8a:d0:24:88:3d:cc:4c:28: 8f:c1:ae:27:f2:12:89:a0:52:8a:27:22:b7:bf:c8:6c:b9:c7: 35:ae:b4:69:87:b5:b9:6e:29:56:78:06:96:ed:c6:f3:73:c5: c8:b0:39:12:d0:9e:6a:3e:e1:ac:d4:d3:bd:d9:65:47:58:e1: 9c:62:6d:cc:e1:05:72:7e:f1:4e:aa:79:aa:dc:a4:82:58:95: 98:c4:7a:a0:29:18:f2:03:96:89:cf:ef:be:6a:19:a9:5d:8d: 07:0c:60:2d:ec:c3:ce:85:f9:49:3a:49:84:fe:a0:f4:dd:be: 19:e4:73:51:9a:83:a5:1a:a6:6e:5d:57:51:6a:51:b6:64:d0: b2:7e:37:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNjQxMTAvBgNVBAUTKDlBNTY2QTEyRTFCQzQ2MzUzMjZGNUUwMkFFRTlEQjcx ODFERDNCREUwHhcNMjUwODA4MTQ1ODA2WhcNMjUwODE1MTQ1ODA2WjAYMRYwFAYD VQQDEw02ODk2MTA3ZS1hODEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApi2PvVwbcmwACn4Rh8iXhgIRxEVRGPGA/BbnZmZIqbFc/+HRNyrNq03hEO3o R6R2Ee2fSDOVzjh0VhCT26Rsqs/ICQNJodOBoSEIJhPiqt4GxorQiiSJClZC+3oK +F2KWMwUnuWNz8TcNiqc6O061vHzgcVWLVJ2zUwAsbGeFJg3PQlaC20xI5sUEpvu Cz4kXPPQbQfDe/P9kiR+8s8vqLpUe6BQR8ebZe1CJjPnKg3KM5I9Gy5v01BT5oTd snKc4MLeYaWCqGfQHhisdh8PtPqnaXvU/hLH3Clb2DOlTkB1QWu/lXM8E4m72bbA 4EtXWblKxWTgg9MVffs3XRNGqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJysctIA RLSX8gxbw7mELHAWag8ZMB8GA1UdIwQYMBaAFJpWahLhvEY1Mm9eAq7p23GB3Tve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI2NC9FQTU5QTg1QTFE OTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJqVXliMTRDcnVuYmNZSGRP OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sWnFFdUc4UmpVeWIxNENydW5iY1lIZE85NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI2NC9FQTU5QTg1QTFEOTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJq VXliMTRDcnVuYmNZSGRPOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw1Hli9JZnggBeIXdSOAcu6jU+eHrNWD/mwZT7XGwxqdFQ5MdCzOuN ou1L3f0CS/1cq6GEehSY6jpcMGq6fNAcOHDT2ngfrgixgckNHjptThI1kkMvng1J bZZU2GLZ6bLvF8pQzVcgfjY8cmZgwNFXbPkICSbhitAkiD3MTCiPwa4n8hKJoFKK JyK3v8hsucc1rrRph7W5bilWeAaW7cbzc8XIsDkS0J5qPuGs1NO92WVHWOGcYm3M 4QVyfvFOqnmq3KSCWJWYxHqgKRjyA5aJz+++ahmpXY0HDGAt7MPOhflJOkmE/qD0 3b4Z5HNRmoOlGqZuXVdRalG2ZNCyfjcM -----END CERTIFICATE-----Generated at Sat Aug 9 14:29:35 2025 by rpki-client