$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: 6FtT8LZgej+gK0Ji12Rko6Nsr9rEk3YW2FOTg6QgfXk= Subject key identifier: D9:80:71:AC:8E:2E:C6:E5:67:A0:7F:C3:11:68:BB:88:D9:11:FD:90 Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 23C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 2397 Signing time: Sun 02 Nov 2025 15:49:56 +0000 Manifest this update: Sun 02 Nov 2025 15:49:56 +0000 Manifest next update: Sun 09 Nov 2025 15:49:56 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: m3CjUq64Zi3WrnqbWmv8cShZja+5Lwk8RvzF08SzhLU=) 2: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: 6zEasgx8d2eADPMA/likvG6cMgeT4lG28KVag9Ik7+Q=) 3: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: 1G385VTheI+atJyTdCrkaW87iv1psEE5oikWEVvtrgs=) 4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: 9r7t0Dck4/THU5FrLu9xD66nhtLPUTZJre8gizPVsbw=) 5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: tgzdjQtElpqaAs+NwGXD0CYNNYYww+x76UBm9x49LhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9158 (0x23c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: Nov 2 15:49:56 2025 GMT Not After : Nov 9 15:49:56 2025 GMT Subject: CN=69077da4-1676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1b:ff:cd:6e:3b:26:3c:c6:86:99:3b:58:56: dd:c4:63:84:ff:60:20:df:8a:5f:40:a8:33:90:2b: dd:69:f2:4f:17:ea:b0:40:60:58:ce:b8:6d:98:49: f6:ae:09:c8:32:e4:6e:11:13:ac:0a:71:b4:d1:f8: 8a:38:44:f4:15:cf:88:42:81:c0:8d:56:88:14:41: 45:fd:23:4d:db:a1:25:05:9e:d5:7b:a8:a0:4f:3b: d2:0c:b3:02:bb:ad:c6:40:58:aa:e0:31:54:5b:07: 3a:90:eb:de:d9:38:b8:6c:72:51:30:2c:ff:fe:d7: 97:82:d2:9f:c8:60:6e:88:07:a3:96:b3:38:f2:d8: 48:c0:2c:0c:f1:aa:98:92:ee:81:07:10:20:6e:06: 56:8f:03:63:7e:a5:4e:68:b9:61:d7:39:9a:16:21: 43:8d:53:55:e7:fe:31:78:ce:24:d9:e6:0c:7d:55: 45:45:7b:49:fb:b9:42:53:3f:09:b0:8b:ea:62:8d: 08:58:c7:10:54:34:5c:c6:3f:15:ac:6e:ca:e3:b0: 03:5c:4c:21:b2:fb:04:3e:ac:71:67:ac:51:6c:9a: 5d:4f:8c:87:37:2a:a7:9c:5b:72:13:ce:41:85:bf: 08:a4:10:f0:89:0b:e8:ec:30:da:32:12:02:89:17: 7b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:80:71:AC:8E:2E:C6:E5:67:A0:7F:C3:11:68:BB:88:D9:11:FD:90 X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7c:98:9e:ba:6c:26:3a:df:55:54:73:fd:da:d1:a2:dd:f9: da:f1:6f:38:65:80:c4:86:1d:a4:45:82:87:3f:fd:53:e3:1f: 94:bf:48:ff:50:e5:1e:9c:e8:0d:94:d9:3b:fc:62:d3:2c:44: 19:32:2a:5f:1c:a4:a4:2b:3f:2e:fe:f5:be:c2:8f:00:a5:90: 66:59:8c:6b:9b:90:33:56:ba:7c:d2:3e:64:ab:61:33:26:2d: b0:7c:d6:6d:be:f5:27:db:f7:bd:e0:02:25:0d:37:10:23:39: ea:1d:05:cb:5e:bb:3d:5a:c3:d1:82:6b:55:af:8f:6a:68:64: c7:0a:cd:86:5c:1e:ef:9f:c1:ea:d9:7a:24:dc:02:e8:8c:47: 72:e6:9a:c1:d8:fb:89:98:60:10:29:dc:69:12:82:14:de:23: 5f:aa:b7:1d:f9:37:46:b6:0c:05:3b:bd:33:a0:9d:1d:96:4d: 3a:e2:bc:a9:82:cc:39:04:4d:d7:e6:17:cf:7b:75:71:a7:0f: dd:a5:49:68:43:96:5d:a2:b5:e6:39:4f:0b:00:bf:37:c1:e7: d6:76:9d:e0:b9:6f:ae:f6:12:6a:14:cc:93:5d:49:5f:f3:d2: 9f:73:c6:29:df:4f:25:96:fe:f9:d0:68:44:7b:d6:b5:04:0f: c3:bc:0e:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjUxMTAyMTU0OTU2WhcNMjUxMTA5MTU0OTU2WjAYMRYwFAYD VQQDEw02OTA3N2RhNC0xNjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xv/zW47JjzGhpk7WFbdxGOE/2Ag34pfQKgzkCvdafJPF+qwQGBYzrhtmEn2 rgnIMuRuEROsCnG00fiKOET0Fc+IQoHAjVaIFEFF/SNN26ElBZ7Ve6igTzvSDLMC u63GQFiq4DFUWwc6kOve2Ti4bHJRMCz//teXgtKfyGBuiAejlrM48thIwCwM8aqY ku6BBxAgbgZWjwNjfqVOaLlh1zmaFiFDjVNV5/4xeM4k2eYMfVVFRXtJ+7lCUz8J sIvqYo0IWMcQVDRcxj8VrG7K47ADXEwhsvsEPqxxZ6xRbJpdT4yHNyqnnFtyE85B hb8IpBDwiQvo7DDaMhICiRd7tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmAcayO LsblZ6B/wxFou4jZEf2QMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbfJieumwmOt9VVHP92tGi3fna8W84ZYDEhh2kRYKHP/1T4x+Uv0j/ UOUenOgNlNk7/GLTLEQZMipfHKSkKz8u/vW+wo8ApZBmWYxrm5AzVrp80j5kq2Ez Ji2wfNZtvvUn2/e94AIlDTcQIznqHQXLXrs9WsPRgmtVr49qaGTHCs2GXB7vn8Hq 2Xok3ALojEdy5prB2PuJmGAQKdxpEoIU3iNfqrcd+TdGtgwFO70zoJ0dlk064ryp gsw5BE3X5hfPe3Vxpw/dpUloQ5ZdorXmOU8LAL83wefWdp3guW+u9hJqFMyTXUlf 89Kfc8Yp308llv750GhEe9a1BA/DvA59 -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:42 2025 by rpki-client