$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json) Hash identifier: gS/AbI12UdwHdTHtxSW1vglA55fICQiZvJLqhq+BszQ= Subject key identifier: 0C:1D:A9:B0:EF:06:11:F9:42:FB:62:01:83:C7:90:CD:70:15:30:D3 Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 0413 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft Manifest number: 040A Signing time: Wed 05 Nov 2025 00:30:57 +0000 Manifest this update: Wed 05 Nov 2025 00:30:57 +0000 Manifest next update: Wed 12 Nov 2025 00:30:57 +0000 Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: 8NUKQpfEOXWhHJa9cppfVUlZNOHAGKwjptBnVJdhkjU=) 2: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: pzFsMxICRta3jJZNRRm+xGcV3VPmmyQWY3sDErTiCgo=) 3: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: J9o/h2HcCF6AGcDij2ORSiNowMdc+62JwdcPSLdmYdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1043 (0x413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: Nov 5 00:30:57 2025 GMT Not After : Nov 12 00:30:57 2025 GMT Subject: CN=690a9ac1-9447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:45:48:63:28:00:60:a6:86:13:18:58:83:5e: 57:ab:7e:4b:50:93:28:de:4a:22:0c:1f:25:62:6b: 43:24:08:69:a7:ce:d0:e9:ee:a2:ce:f7:10:3b:0f: 8b:9b:93:f5:15:53:01:05:0f:c8:79:bd:c6:33:f0: 26:e5:e1:bc:bb:eb:6e:97:c3:74:e7:71:bb:1e:8e: 42:c0:9a:91:25:b4:6f:4e:61:c9:39:fc:19:65:19: 66:28:14:9c:dd:8d:ad:32:d9:dd:40:e3:db:85:c2: 03:e6:aa:72:88:eb:52:5e:fc:ad:2b:25:c9:1c:9d: 3f:09:24:ad:20:6b:ff:e9:fd:3b:9b:5f:8d:59:43: 02:78:8d:38:ab:d1:a4:c4:a4:81:39:80:4a:0f:8b: 55:76:e3:1d:45:d1:5a:6a:44:3e:8e:cb:97:af:1c: 3f:4d:48:57:5c:1f:02:66:68:22:32:61:c1:35:2f: db:b8:eb:75:bc:35:4f:e8:93:5a:0e:fb:0c:33:f8: 5f:ed:c0:7b:0c:d0:ca:9b:56:2e:2a:c5:58:10:c7: 27:a6:7b:d9:95:79:65:d1:d1:cc:d7:53:63:5e:ee: df:e0:6e:c7:a4:f9:85:62:4c:a4:68:0a:49:e7:8a: 1c:5d:3a:5d:d5:c2:7e:2c:20:a8:4f:c3:bd:88:f0: 39:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1D:A9:B0:EF:06:11:F9:42:FB:62:01:83:C7:90:CD:70:15:30:D3 X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:cb:f8:d8:4e:92:38:2c:af:fc:46:18:16:1b:dd:4b:63:97: ac:89:24:2f:52:19:ae:5c:3d:7b:27:cc:f4:59:a1:cb:bb:8d: 7c:11:e1:a7:7e:31:44:27:56:a0:10:cb:91:24:03:a0:d4:6f: fe:21:d1:fb:4d:b0:5f:6b:17:4d:7b:c4:e1:0c:ab:a9:83:d3: d5:53:85:d9:73:04:8d:62:26:21:54:b1:5d:77:36:58:b6:8d: 31:ba:ab:ac:53:40:62:ab:ef:e2:bd:37:81:1a:d2:84:27:02: e4:a0:18:69:0c:bd:dc:51:06:2f:dd:f5:03:b2:73:c9:0d:62: ce:20:61:42:4b:67:cc:d3:5b:18:cb:70:75:65:5a:38:cd:35: 59:0e:c9:b8:fb:e2:5f:ed:76:2b:f5:aa:fb:2b:a4:18:34:c5: 47:af:3e:fd:2b:54:42:df:53:0f:47:b6:6c:77:36:f8:8b:a6: d7:07:1e:f1:3f:9d:70:99:2b:ce:41:93:d1:fc:14:74:10:25: ce:a6:c7:fd:bb:fa:7b:d6:07:8c:e8:fc:ae:64:e6:d6:4c:cb: 65:1b:7d:06:ba:3c:ea:61:31:15:e4:25:1b:fe:37:b8:0c:64: 54:7f:ee:6e:9a:7e:f3:25:ae:6d:74:74:b5:3b:7a:5d:ed:f1: b1:dd:a1:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjUxMTA1MDAzMDU3WhcNMjUxMTEyMDAzMDU3WjAYMRYwFAYD VQQDEw02OTBhOWFjMS05NDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEVIYygAYKaGExhYg15Xq35LUJMo3koiDB8lYmtDJAhpp87Q6e6izvcQOw+L m5P1FVMBBQ/Ieb3GM/Am5eG8u+tul8N053G7Ho5CwJqRJbRvTmHJOfwZZRlmKBSc 3Y2tMtndQOPbhcID5qpyiOtSXvytKyXJHJ0/CSStIGv/6f07m1+NWUMCeI04q9Gk xKSBOYBKD4tVduMdRdFaakQ+jsuXrxw/TUhXXB8CZmgiMmHBNS/buOt1vDVP6JNa DvsMM/hf7cB7DNDKm1YuKsVYEMcnpnvZlXll0dHM11NjXu7f4G7HpPmFYkykaApJ 54ocXTpd1cJ+LCCoT8O9iPA5fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwdqbDv BhH5QvtiAYPHkM1wFTDTMB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJy/jYTpI4LK/8RhgWG91LY5esiSQvUhmuXD17J8z0WaHLu418EeGn fjFEJ1agEMuRJAOg1G/+IdH7TbBfaxdNe8ThDKupg9PVU4XZcwSNYiYhVLFddzZY to0xuqusU0Biq+/ivTeBGtKEJwLkoBhpDL3cUQYv3fUDsnPJDWLOIGFCS2fM01sY y3B1ZVo4zTVZDsm4++Jf7XYr9ar7K6QYNMVHrz79K1RC31MPR7Zsdzb4i6bXBx7x P51wmSvOQZPR/BR0ECXOpsf9u/p71geM6PyuZObWTMtlG30GujzqYTEV5CUb/je4 DGRUf+5umn7zJa5tdHS1O3pd7fGx3aFw -----END CERTIFICATE-----Generated at Wed Nov 5 16:31:18 2025 by rpki-client