$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json) Hash identifier: 6+gPj5gzGUWdQrUnGVRS+YXqQO/H3jBHjwMC1eIzJG8= Subject key identifier: CF:AD:ED:1F:42:AC:C2:BC:58:F2:AD:F0:17:32:C3:58:DC:CC:C6:13 Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Certificate serial: 02D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft Manifest number: 02CD Signing time: Thu 07 Aug 2025 01:58:43 +0000 Manifest this update: Thu 07 Aug 2025 01:58:42 +0000 Manifest next update: Thu 14 Aug 2025 01:58:42 +0000 Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: N9sg6HPHn3tPC+vLTK4zSMpZiaabrQR+4qxYYmPUvtI=) 2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: mXf2uQ5mcSdD+NErxrFlghuWQs3NGoZkupDcd+zBXVE=) 3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: M9uQ6pPxIBbjIwPVgVR3Gml4RjG64rh15R2Po2BA/0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 725 (0x2d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Validity Not Before: Aug 7 01:58:42 2025 GMT Not After : Aug 14 01:58:42 2025 GMT Subject: CN=68940853-8a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:12:18:a4:da:07:18:7a:b5:43:bb:5b:89:7c: 9a:86:3a:5c:e5:b0:df:30:64:6c:de:49:92:e7:02: f2:dc:9e:a0:72:30:59:d6:64:4b:a5:26:ac:81:2d: 6f:4f:72:85:89:2f:87:b8:7e:9c:64:e8:54:f0:f3: 26:84:d1:f0:eb:1d:b2:42:c5:4d:bc:40:d4:20:11: 9d:48:c1:78:55:ca:0c:17:f7:c0:f3:ea:b1:aa:d6: ab:0b:0b:9c:e9:54:92:60:7f:e7:8b:d3:6d:d6:0f: a0:00:13:40:00:00:52:b4:05:14:fd:1e:78:bf:23: a0:b2:dd:29:19:53:dd:13:6b:ad:5b:37:bd:71:67: e7:e3:e9:a6:8c:aa:f8:1c:fe:2a:8d:89:04:5d:73: d8:9d:d9:42:c3:52:4e:72:48:ab:26:12:3f:1c:21: 09:2a:98:42:6f:34:4b:ac:f8:34:bb:94:55:ef:79: ab:60:8e:a5:01:97:ab:1c:82:7e:0b:90:09:a2:a8: e4:6c:ed:58:bd:63:e1:c4:c1:07:4b:5d:b8:71:de: 0c:c2:2e:4c:4e:c4:f4:2a:cd:3b:e1:19:01:45:db: f2:64:04:69:9e:08:2f:03:a0:a3:ac:24:ee:a7:00: dd:c6:fc:25:b6:7c:f7:a9:5d:ea:9d:95:fb:2d:94: 32:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AD:ED:1F:42:AC:C2:BC:58:F2:AD:F0:17:32:C3:58:DC:CC:C6:13 X509v3 Authority Key Identifier: keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:53:4b:4d:35:ab:5b:c9:e0:29:17:2f:cc:00:85:e5:70:09: ca:47:4e:cd:ba:b4:e0:2b:3e:48:33:7e:f3:d6:a6:03:d4:7b: 07:34:0a:24:c9:a5:6d:1b:d9:3d:23:77:35:63:00:7b:04:4a: c7:c2:e0:97:f1:c3:84:cb:ce:eb:59:5c:71:78:9e:41:27:73: 97:86:cb:75:0b:fe:5a:61:82:b0:c5:ad:7a:ce:a3:5e:5e:33: 9c:0f:6c:dd:14:36:66:aa:ad:9b:c8:e0:4d:77:6d:ed:d0:be: 8f:96:80:fe:e7:1f:a9:3b:be:9e:94:e7:ca:e9:42:44:cc:d4: 6e:a1:ab:16:33:7d:84:3f:7b:a5:23:fd:f2:1e:e7:e8:00:86: 40:de:9b:90:d4:c0:4a:4e:70:5e:30:d8:74:c8:f0:f2:b8:01: 89:7e:2c:c8:16:72:5f:7a:9c:6a:97:6e:0a:36:24:f0:ba:fd: 1d:49:82:8c:f2:50:8a:26:0c:d6:fa:4f:c3:7b:0c:4a:b9:08: d7:82:15:99:17:3f:54:84:07:ac:9c:6f:d6:9e:3a:83:63:d7: 4b:43:2e:4b:0a:37:3f:d1:1e:72:4a:16:d8:a8:56:e4:35:e9: 0a:46:04:bf:c7:c3:4a:a2:fd:1d:2c:69:2e:65:83:54:48:e8: d4:64:99:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QzkxMTAvBgNVBAUTKDlBNTREMTAxNzUwMTlDRjgwODZCMzBCMzFFNjUyQUUw NjAyRkY2QkMwHhcNMjUwODA3MDE1ODQyWhcNMjUwODE0MDE1ODQyWjAYMRYwFAYD VQQDEw02ODk0MDg1My04YTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxIYpNoHGHq1Q7tbiXyahjpc5bDfMGRs3kmS5wLy3J6gcjBZ1mRLpSasgS1v T3KFiS+HuH6cZOhU8PMmhNHw6x2yQsVNvEDUIBGdSMF4VcoMF/fA8+qxqtarCwuc 6VSSYH/ni9Nt1g+gABNAAABStAUU/R54vyOgst0pGVPdE2utWze9cWfn4+mmjKr4 HP4qjYkEXXPYndlCw1JOckirJhI/HCEJKphCbzRLrPg0u5RV73mrYI6lAZerHIJ+ C5AJoqjkbO1YvWPhxMEHS124cd4Mwi5MTsT0Ks074RkBRdvyZARpnggvA6CjrCTu pwDdxvwltnz3qV3qnZX7LZQy2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+t7R9C rMK8WPKt8Bcyw1jczMYTMB8GA1UdIwQYMBaAFJpU0QF1AZz4CGswsx5lKuBgL/a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdDOS85QzZFRjc0RUY5 RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5QZ0lhekN6SG1VcTRHQXY5 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sVFJBWFVCblBnSWF6Q3pIbVVxNEdBdjlydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdDOS85QzZFRjc0RUY5RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5Q Z0lhekN6SG1VcTRHQXY5cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7U0tNNatbyeApFy/MAIXlcAnKR07NurTgKz5IM37z1qYD1HsHNAok yaVtG9k9I3c1YwB7BErHwuCX8cOEy87rWVxxeJ5BJ3OXhst1C/5aYYKwxa16zqNe XjOcD2zdFDZmqq2byOBNd23t0L6PloD+5x+pO76elOfK6UJEzNRuoasWM32EP3ul I/3yHufoAIZA3puQ1MBKTnBeMNh0yPDyuAGJfizIFnJfepxql24KNiTwuv0dSYKM 8lCKJgzW+k/DewxKuQjXghWZFz9UhAesnG/WnjqDY9dLQy5LCjc/0R5yShbYqFbk NekKRgS/x8NKov0dLGkuZYNUSOjUZJnb -----END CERTIFICATE-----Generated at Fri Aug 8 19:37:26 2025 by rpki-client