$ rpki-client -vvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft File: ML4eudOsSdCv7hNTw_nRFnoAexc.mft (raw, json) Hash identifier: H7eyjFcknmahg24sZG5ealUauQm6IEcwuTuBF8B2coE= Subject key identifier: AF:D7:6E:1D:07:DF:DE:D8:BB:F7:31:D7:6E:51:EC:75:B1:02:08:82 Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17 Certificate issuer: /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft Manifest number: D2 Signing time: Wed 05 Nov 2025 05:54:06 +0000 Manifest this update: Wed 05 Nov 2025 05:54:05 +0000 Manifest next update: Wed 12 Nov 2025 05:54:05 +0000 Files and hashes: 1: ML4eudOsSdCv7hNTw_nRFnoAexc.crl (hash: 42JWme5ZbMUI4aq2O8Se6SrEqs/yF01X392wITYOq2s=) 2: A8F4AE389D7E11EF91A24C73C4F9AE02.roa (hash: cqlcdGiLqE3aY+b7c71D9qJhiS/wi/pJbFxJk9OTyQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B736, serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17 Validity Not Before: Nov 5 05:54:05 2025 GMT Not After : Nov 12 05:54:05 2025 GMT Subject: CN=690ae67d-6c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:33:92:7c:d5:9f:ce:60:31:5f:40:dc:77:26: 69:cb:bf:e7:cb:0d:53:df:01:93:87:fe:33:f5:c1: 5a:79:51:28:91:b2:a1:1d:a2:e0:20:2b:c5:55:a1: 4d:a7:cf:41:f7:24:af:cc:bf:96:4a:b0:9b:3d:a4: b2:07:47:54:37:be:0e:95:7b:a6:54:90:4f:73:ce: f5:62:b3:33:b0:22:80:87:62:5a:8e:74:33:35:d2: 66:6a:75:5f:5d:2e:e6:51:ab:9a:9a:bd:f4:f3:f8: 75:0c:07:6a:b8:bb:d9:93:e8:6a:00:3d:e9:ae:ae: 31:76:79:0b:0e:32:a4:8c:3a:e0:f7:a6:60:ab:e4: 63:58:d3:84:36:83:ba:9a:04:e9:42:9f:a8:ff:92: 88:ba:d8:0d:0d:4c:b6:e6:c0:07:11:f1:83:10:ee: 0f:19:07:49:f5:5d:78:62:f7:94:a5:dc:d1:04:b2: 0c:ef:ac:6b:57:fe:1c:9d:6b:86:3e:db:e5:48:f0: 3c:1f:cd:a5:1c:d9:d5:07:ef:3b:1d:74:7a:94:3a: 28:bd:d5:c9:1a:38:a7:13:8c:74:8b:09:c7:e1:a6: 36:a3:d6:bc:a8:7a:87:55:e2:3a:1d:84:1d:72:ae: 9a:4e:45:ab:2e:22:7e:d1:34:94:72:1a:88:11:b6: 4c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D7:6E:1D:07:DF:DE:D8:BB:F7:31:D7:6E:51:EC:75:B1:02:08:82 X509v3 Authority Key Identifier: keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:e9:2c:20:f7:8a:6e:1b:75:61:c3:c2:d5:72:b2:78:a2:ff: e9:79:f6:e3:5a:75:bf:62:91:ae:c8:3c:5d:e4:cc:00:a3:d5: 52:08:e9:50:77:a6:1b:5b:23:e9:a6:ff:de:67:0d:68:6e:eb: 45:28:fe:ae:2c:73:59:7f:fa:f6:c6:63:09:3f:dc:b1:83:8f: bd:ac:3e:cf:fd:df:60:e6:5d:24:9c:71:76:2f:18:28:cd:51: 3d:f8:e5:07:b1:03:09:0d:42:1f:96:41:e6:d3:2b:72:93:7d: b0:83:39:ff:8c:56:b2:1c:d8:3b:a0:bd:61:45:0c:4b:2f:77: 72:d7:98:c1:c2:6e:da:7f:9e:91:3d:6d:ef:0c:2e:83:7a:ed: 4c:0f:5e:74:f3:f8:c2:2a:1b:3d:6e:08:54:0b:3e:e6:bd:70: 21:99:19:63:f1:0e:26:f1:de:8f:dd:33:ba:00:f5:8e:80:34: de:eb:2c:5e:4a:40:ba:be:bc:60:b0:29:9f:70:26:86:c7:16: 06:fd:6b:a8:35:c2:d6:cb:4f:48:45:2b:25:5e:12:36:2f:0e: 15:d9:13:5a:05:34:1c:8f:05:26:45:45:8d:73:46:f3:b8:84: 5e:b1:e7:cc:bf:db:13:e5:fa:b5:0e:ef:a0:03:d3:ff:f7:42: 6c:94:cf:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I3MzYxMTAvBgNVBAUTKDMwQkUxRUI5RDNBQzQ5RDBBRkVFMTM1M0MzRjlEMTE2 N0EwMDdCMTcwHhcNMjUxMTA1MDU1NDA1WhcNMjUxMTEyMDU1NDA1WjAYMRYwFAYD VQQDEw02OTBhZTY3ZC02YzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6TOSfNWfzmAxX0DcdyZpy7/nyw1T3wGTh/4z9cFaeVEokbKhHaLgICvFVaFN p89B9ySvzL+WSrCbPaSyB0dUN74OlXumVJBPc871YrMzsCKAh2JajnQzNdJmanVf XS7mUauamr308/h1DAdquLvZk+hqAD3prq4xdnkLDjKkjDrg96Zgq+RjWNOENoO6 mgTpQp+o/5KIutgNDUy25sAHEfGDEO4PGQdJ9V14YveUpdzRBLIM76xrV/4cnWuG PtvlSPA8H82lHNnVB+87HXR6lDoovdXJGjinE4x0iwnH4aY2o9a8qHqHVeI6HYQd cq6aTkWrLiJ+0TSUchqIEbZMUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/Xbh0H 397Yu/cx125R7HWxAgiCMB8GA1UdIwQYMBaAFDC+HrnTrEnQr+4TU8P50RZ6AHsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjczNi9GMTMzRUYwQzg0 MkQxMUVGOTlFODNEODRDNEY5QUUwMi9NTDRldWRPc1NkQ3Y3aE5Ud19uUkZub0Fl eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01MNGV1ZE9zU2RDdjdoTlR3X25SRm5vQWV4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjczNi9GMTMzRUYwQzg0MkQxMUVGOTlFODNEODRDNEY5QUUwMi9NTDRldWRPc1Nk Q3Y3aE5Ud19uUkZub0FleGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ6Swg94puG3Vhw8LVcrJ4ov/pefbjWnW/YpGuyDxd5MwAo9VSCOlQ d6YbWyPppv/eZw1obutFKP6uLHNZf/r2xmMJP9yxg4+9rD7P/d9g5l0knHF2Lxgo zVE9+OUHsQMJDUIflkHm0ytyk32wgzn/jFayHNg7oL1hRQxLL3dy15jBwm7af56R PW3vDC6Deu1MD1508/jCKhs9bghUCz7mvXAhmRlj8Q4m8d6P3TO6APWOgDTe6yxe SkC6vrxgsCmfcCaGxxYG/WuoNcLWy09IRSslXhI2Lw4V2RNaBTQcjwUmRUWNc0bz uIResefMv9sT5fq1Du+gA9P/90JslM9z -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:27 2025 by rpki-client