$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft File: mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json) Hash identifier: Zhj48BSHjjdmCdXjqQmRwNXN/A4h65XcuywYb5Glzo4= Subject key identifier: 3E:3F:D6:2B:32:7B:40:83:87:A4:E9:79:CC:02:BF:1C:B4:A2:DB:20 Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01 Certificate issuer: /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01 Certificate serial: 0725 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft Manifest number: 0718 Signing time: Tue 04 Nov 2025 21:57:12 +0000 Manifest this update: Tue 04 Nov 2025 21:57:12 +0000 Manifest next update: Tue 11 Nov 2025 21:57:12 +0000 Files and hashes: 1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: 4FxoZs7zBDo7NKvF4cRhTYcKRk+ggzSNpU5hMv/dGKc=) 2: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: t/jzVO6L3wgo+QH7mzqB0zSXy5Nwbra0pOtYvgiFmIs=) 3: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: bMetSmWwjzP6LMILwQp0327+1V3svzhvOdiLjBriktI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1829 (0x725) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01 Validity Not Before: Nov 4 21:57:12 2025 GMT Not After : Nov 11 21:57:12 2025 GMT Subject: CN=690a76b8-f75e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dc:be:a9:c5:65:78:ec:2e:32:15:e0:ac:0a: 7e:d6:b2:6e:89:fc:2d:a6:50:2e:8e:4f:aa:d4:60: 25:f3:3c:de:44:09:0f:58:6f:64:b1:be:00:a9:8c: ef:fd:bc:61:80:e2:49:82:d8:27:3a:97:aa:47:4b: 54:e0:5e:4d:5a:70:a3:bc:8f:65:f9:26:7e:9f:b3: e5:27:c7:c3:65:4c:ba:c1:e6:f3:3d:79:2f:28:a5: f5:79:fa:af:8b:cf:c8:71:5a:a0:1a:c0:bb:a5:99: f8:a9:93:79:bc:da:6e:19:6d:8e:ae:75:7c:f8:55: 94:98:3d:6d:db:e3:9a:c6:0b:32:57:c9:8b:df:0d: d4:62:8c:ef:0f:c7:83:44:f3:55:39:58:ae:2d:60: 29:16:ea:52:4d:ae:84:10:dc:9f:0d:a5:91:b6:09: cb:92:80:cc:f1:c6:c9:42:a1:f9:2a:7a:12:04:67: 04:c1:26:50:2a:23:c3:97:f6:98:44:9d:32:91:b0: ce:f0:dc:61:5e:ab:54:c2:a5:e5:cf:06:48:b0:0f: 86:ab:7c:c9:da:d4:17:64:fa:16:22:17:78:55:0c: 2f:a1:f6:93:43:bd:cc:84:3b:10:dc:14:e6:d8:e9: d9:c5:45:fc:17:a9:86:27:b0:cf:85:9a:5e:37:2b: 5e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3F:D6:2B:32:7B:40:83:87:A4:E9:79:CC:02:BF:1C:B4:A2:DB:20 X509v3 Authority Key Identifier: keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4a:ac:d2:a6:1f:31:ca:a1:a6:90:e3:26:9f:a3:50:67:ef: 2e:9f:06:17:51:a7:6e:e9:47:fe:f9:b7:e0:dc:ba:b9:11:5f: bb:e5:8b:49:0e:5e:72:3e:6a:26:ff:e5:04:fc:42:3e:28:65: be:15:2b:25:c6:c3:97:1d:90:21:ac:04:2c:48:2a:fc:ee:27: 2f:60:3a:95:0f:18:c8:ba:d2:1e:ab:c7:5e:95:6c:68:c9:06: 0b:04:25:d4:a9:be:25:30:65:c9:8c:6c:1b:c7:57:bb:be:91: 10:08:30:78:9d:a8:c8:8d:5b:af:9f:e4:5b:3c:1f:96:58:4f: 50:c4:63:e9:8a:80:25:ad:df:5e:4a:85:c1:e6:d0:40:d1:50: 52:eb:3d:f6:56:e5:23:6b:db:cf:cb:2e:9e:96:0b:f8:f5:02: d2:d8:58:e8:07:bc:7e:2d:8a:91:e5:dd:3c:e4:31:c1:16:26: 38:52:da:2b:e1:2a:c2:64:6f:8b:42:4b:6e:05:f4:5e:35:12: f0:db:85:3c:8b:67:e5:88:e6:a5:d0:98:2e:a6:ad:c8:62:bb: 2b:ac:eb:b0:28:58:b9:07:71:1f:e8:d8:ce:67:cf:c7:3a:f4: 55:59:66:fa:a7:dc:d5:ea:81:2a:c8:34:ab:00:83:58:b2:e5: 12:99:45:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0MzUxMTAvBgNVBAUTKDk4Qzk3RTA1MkQ3RDlBRDUzNjA5NTlCOUQzRTA3NkRB REQ3NkVBMDEwHhcNMjUxMTA0MjE1NzEyWhcNMjUxMTExMjE1NzEyWjAYMRYwFAYD VQQDEw02OTBhNzZiOC1mNzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9y+qcVleOwuMhXgrAp+1rJuifwtplAujk+q1GAl8zzeRAkPWG9ksb4AqYzv /bxhgOJJgtgnOpeqR0tU4F5NWnCjvI9l+SZ+n7PlJ8fDZUy6webzPXkvKKX1efqv i8/IcVqgGsC7pZn4qZN5vNpuGW2OrnV8+FWUmD1t2+OaxgsyV8mL3w3UYozvD8eD RPNVOViuLWApFupSTa6EENyfDaWRtgnLkoDM8cbJQqH5KnoSBGcEwSZQKiPDl/aY RJ0ykbDO8NxhXqtUwqXlzwZIsA+Gq3zJ2tQXZPoWIhd4VQwvofaTQ73MhDsQ3BTm 2OnZxUX8F6mGJ7DPhZpeNytecwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4/1isy e0CDh6TpecwCvxy0otsgMB8GA1UdIwQYMBaAFJjJfgUtfZrVNglZudPgdtrdduoB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9FQzA1OTA0NjVC RTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10VTJDVm01MC1CMjJ0MTI2 Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL21NbC1CUzE5bXRVMkNWbTUwLUIyMnQxMjZnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjQzNS9FQzA1OTA0NjVCRTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10 VTJDVm01MC1CMjJ0MTI2Z0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOSqzSph8xyqGmkOMmn6NQZ+8unwYXUadu6Uf++bfg3Lq5EV+75YtJ Dl5yPmom/+UE/EI+KGW+FSslxsOXHZAhrAQsSCr87icvYDqVDxjIutIeq8delWxo yQYLBCXUqb4lMGXJjGwbx1e7vpEQCDB4najIjVuvn+RbPB+WWE9QxGPpioAlrd9e SoXB5tBA0VBS6z32VuUja9vPyy6elgv49QLS2FjoB7x+LYqR5d085DHBFiY4Utor 4SrCZG+LQktuBfReNRLw24U8i2fliOal0Jgupq3IYrsrrOuwKFi5B3Ef6NjOZ8/H OvRVWWb6p9zV6oEqyDSrAINYsuUSmUUQ -----END CERTIFICATE-----Generated at Wed Nov 5 13:03:13 2025 by rpki-client