$ rpki-client -vvf rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft File: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft (raw, json) Hash identifier: GXk8+oSN8A7BjKd8uj2qVE+qRRuYj23tglRuiU8WX4w= Subject key identifier: 27:53:E2:5A:63:0D:43:D3:4A:06:6C:5E:2B:89:28:02:FF:8E:00:FF Authority key identifier: F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D Certificate issuer: /CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Certificate serial: 0532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft Manifest number: 052C Signing time: Sat 09 Aug 2025 00:00:07 +0000 Manifest this update: Sat 09 Aug 2025 00:00:07 +0000 Manifest next update: Sat 16 Aug 2025 00:00:07 +0000 Files and hashes: 1: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl (hash: R0KbwlDaTgRgAuzZ2FyINlkZmqtaOHIEKukNVNuQOoA=) 2: 17679A100BCE11EC85811A0DC4F9AE02.roa (hash: GBlJBvL9mw9TcJgwkIpDEFzq0c16HJn6FF84wJKDCP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852BA, serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Validity Not Before: Aug 9 00:00:07 2025 GMT Not After : Aug 16 00:00:07 2025 GMT Subject: CN=68968f87-7cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:93:a3:0f:6d:30:34:a0:ab:db:53:49:b9: e4:8c:33:24:7b:be:66:8b:5a:3d:91:7d:cd:96:56: c2:a9:2d:41:8e:3a:a9:60:57:79:a0:a6:ac:73:12: 9d:ce:c1:7b:32:02:06:6d:80:06:81:53:e5:17:32: 85:8f:45:bf:1e:53:2a:28:e2:f4:2f:ab:27:12:67: bf:24:cb:e5:cc:be:d5:56:c5:70:69:b6:8a:54:b4: 82:37:4a:f9:87:cc:c3:fd:bf:5b:3a:0e:4f:68:4e: b0:f3:4b:17:98:26:50:39:7f:11:0d:ae:d9:b5:70: c1:1d:b1:65:a7:c1:7b:c8:10:90:bf:71:39:7a:ca: 4f:4b:7c:f3:2e:0f:6c:65:fb:9d:9f:cf:be:e0:40: 89:6f:c5:b8:60:d4:44:ea:1b:de:35:4a:c5:aa:fb: 76:3c:43:eb:26:4e:20:86:08:0a:9a:81:e3:ca:99: 93:32:a9:fe:4a:dd:7b:d7:2a:02:30:66:2f:44:18: fb:22:7c:80:e4:9a:01:fb:57:4b:a5:2b:7c:46:5b: 7f:b1:7f:a7:9e:93:44:9b:b9:81:18:c5:29:2c:aa: 8b:2f:29:1e:86:4d:93:ea:34:ee:13:a0:8a:07:96: 81:dc:4a:d5:fd:ff:15:1b:d1:79:f4:7e:dc:33:d4: 52:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:53:E2:5A:63:0D:43:D3:4A:06:6C:5E:2B:89:28:02:FF:8E:00:FF X509v3 Authority Key Identifier: keyid:F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:af:5b:7c:ec:df:f6:99:b0:9e:e7:77:54:17:20:1b:84:06: 5a:2c:98:60:d1:1b:d3:8f:35:ca:c0:68:18:9a:98:21:28:d5: 2d:1b:95:05:74:88:d9:9e:9a:2e:30:57:9d:42:d2:1e:6a:80: b7:3e:37:42:af:99:4d:51:a1:c2:a2:2f:8d:2a:ee:fd:4c:bd: ab:a4:40:e1:ac:bb:e6:8d:68:0c:cb:68:5d:42:16:f8:04:86: ba:7e:89:56:66:62:00:97:cb:ee:fd:c8:9d:55:c6:e6:eb:d1: d8:b3:36:b8:79:4a:58:3f:be:18:50:07:9f:f3:da:b5:d7:e0: ba:13:00:b0:3c:11:f5:4b:0b:3d:ca:a0:3a:12:af:91:6a:ce: 4e:2b:e1:83:6b:5e:de:a3:29:d2:b8:8f:fe:3d:d2:f7:b5:70: 80:5a:41:3b:92:b7:c8:51:62:5d:03:62:2a:08:10:63:d5:d2: 6e:ab:9c:d3:7d:77:1f:54:13:7d:b5:fd:21:a0:f8:20:26:91: ff:05:f7:f9:dd:bb:85:57:83:69:59:4f:ce:49:20:6a:43:34: 5f:b9:18:27:79:8f:44:f7:88:64:05:32:03:69:68:f4:7a:51: 23:1c:ec:a7:56:df:c7:9e:9f:6e:0f:4a:a7:9b:db:4b:f3:e1: 2a:59:61:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQkExMTAvBgNVBAUTKEY2Njk2NEY5OUJDODhEMzc3NjFEMzg5ODE1RDNDOUU5 RDBBMTdBNEQwHhcNMjUwODA5MDAwMDA3WhcNMjUwODE2MDAwMDA3WjAYMRYwFAYD VQQDEw02ODk2OGY4Ny03Y2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7qTow9tMDSgq9tTSbnkjDMke75mi1o9kX3NllbCqS1BjjqpYFd5oKascxKd zsF7MgIGbYAGgVPlFzKFj0W/HlMqKOL0L6snEme/JMvlzL7VVsVwabaKVLSCN0r5 h8zD/b9bOg5PaE6w80sXmCZQOX8RDa7ZtXDBHbFlp8F7yBCQv3E5espPS3zzLg9s Zfudn8++4ECJb8W4YNRE6hveNUrFqvt2PEPrJk4ghggKmoHjypmTMqn+St171yoC MGYvRBj7InyA5JoB+1dLpSt8Rlt/sX+nnpNEm7mBGMUpLKqLLykehk2T6jTuE6CK B5aB3ErV/f8VG9F59H7cM9RSzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdT4lpj DUPTSgZsXiuJKAL/jgD/MB8GA1UdIwQYMBaAFPZpZPmbyI03dh04mBXTyenQoXpN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJCQS84NTY1MTdDMDBC Q0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpUZDJIVGlZRmRQSjZkQ2hl azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbGstWnZJalRkMkhUaVlGZFBKNmRDaGVrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJCQS84NTY1MTdDMDBCQ0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpU ZDJIVGlZRmRQSjZkQ2hlazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2r1t87N/2mbCe53dUFyAbhAZaLJhg0RvTjzXKwGgYmpghKNUtG5UF dIjZnpouMFedQtIeaoC3PjdCr5lNUaHCoi+NKu79TL2rpEDhrLvmjWgMy2hdQhb4 BIa6folWZmIAl8vu/cidVcbm69HYsza4eUpYP74YUAef89q11+C6EwCwPBH1Sws9 yqA6Eq+Ras5OK+GDa17eoynSuI/+PdL3tXCAWkE7krfIUWJdA2IqCBBj1dJuq5zT fXcfVBN9tf0hoPggJpH/Bff53buFV4NpWU/OSSBqQzRfuRgneY9E94hkBTIDaWj0 elEjHOynVt/Hnp9uD0qnm9tL8+EqWWEH -----END CERTIFICATE-----Generated at Sat Aug 9 02:46:46 2025 by rpki-client