$ rpki-client -vvf rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft File: t9SqT11yMa9OdH93IkWsA3ECEPA.mft (raw, json) Hash identifier: JcmjQSjmtlZtVF3qITiDvzgNGtqp28eAc6xHLGy+cwo= Subject key identifier: 4A:AA:85:4D:83:BA:E1:B5:93:17:B3:84:28:80:7A:62:3E:F7:61:CA Authority key identifier: B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0 Certificate issuer: /CN=A91175F6/serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0 Certificate serial: 026A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft Manifest number: 0266 Signing time: Wed 05 Nov 2025 01:47:28 +0000 Manifest this update: Wed 05 Nov 2025 01:47:28 +0000 Manifest next update: Wed 12 Nov 2025 01:47:28 +0000 Files and hashes: 1: t9SqT11yMa9OdH93IkWsA3ECEPA.crl (hash: +6fpvdviKwyUPkke0Bpyz7Wf/SBrgZJNCsLqhU1QMMM=) 2: 5D5B0F7C34CA11EDA301482BC4F9AE02.roa (hash: 90Bhpdbkdnfedi3OPca5alDQUSOpnC2UaqisbVy8klY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 618 (0x26a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175F6, serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0 Validity Not Before: Nov 5 01:47:28 2025 GMT Not After : Nov 12 01:47:28 2025 GMT Subject: CN=690aacb0-2f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:ef:07:4a:78:9c:4f:a3:53:c2:b8:5f:15: 4a:9a:bf:51:07:75:f3:e1:74:8c:8f:27:83:11:ef: 76:e0:be:22:df:b0:fb:03:65:50:2b:bb:99:7c:7a: 68:2c:95:56:9b:14:12:ba:6e:a9:8d:6b:0a:78:6e: 6a:c1:d4:9c:b0:c1:ce:ef:c7:09:8b:25:f1:57:03: ef:86:2b:48:48:f8:e8:23:37:0d:4b:9b:43:03:bc: 48:b2:d3:bf:7f:df:ec:69:fc:70:7b:cc:27:15:ce: 03:10:88:96:19:61:18:d9:5e:23:00:9d:a9:68:98: 05:ce:57:63:b0:93:de:51:c5:72:95:35:b0:f2:75: 7e:f2:be:7c:1a:69:2c:c5:f5:1e:3b:3d:bf:15:76: a2:6f:7f:cf:2a:4e:76:77:47:7d:59:41:c3:a2:e1: c6:e8:f3:f9:ff:a3:77:68:ca:2f:30:4e:4b:02:b2: 93:f0:bb:95:7a:1c:fb:67:f6:73:23:27:99:5c:f9: 24:9b:cc:3f:0d:8a:8c:05:41:26:e1:ed:aa:dd:1d: eb:6c:d1:d2:27:5a:df:8e:db:9f:22:f2:f6:24:45: a0:36:fb:60:7a:4b:df:f8:d2:21:eb:63:9a:4f:64: 54:5d:48:07:b2:a4:84:54:45:63:d0:c4:b8:e7:75: 48:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AA:85:4D:83:BA:E1:B5:93:17:B3:84:28:80:7A:62:3E:F7:61:CA X509v3 Authority Key Identifier: keyid:B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:06:0c:a5:52:17:74:11:fc:44:c8:01:7d:c7:ba:f9:ec:8d: 50:9f:0f:31:dc:31:d0:78:d3:fb:54:29:6e:81:07:38:4a:56: 7f:2e:63:0f:f0:a6:f8:1d:ba:c5:33:39:c0:6b:39:3a:98:87: 21:af:d5:3e:59:cd:58:50:a4:09:87:7f:8f:8f:93:56:37:f3: e6:87:7c:f4:1c:f7:c7:9e:5e:ae:31:e9:bf:2c:f4:50:44:53: 66:58:c2:57:09:05:ec:6d:6a:a3:40:71:68:79:99:59:9d:e6: a8:04:e3:91:f2:b4:54:1e:a6:68:21:2d:24:5b:6c:e3:ce:74: 7b:e8:6c:89:e6:79:d3:8f:6f:86:ab:ac:de:91:d9:ae:8f:03: bf:42:5b:38:ca:5f:c1:2c:a0:c1:e0:65:fb:f3:28:53:c1:6e: 53:a7:38:c1:65:b6:b3:2c:90:6e:42:0b:23:bb:03:f1:38:81: 46:59:d5:dc:03:5c:9d:4a:ce:24:2a:d5:99:e0:12:04:e7:0e: c0:19:4c:bd:e0:14:7c:df:a7:90:ad:4e:72:dc:4e:a9:d9:1d: bf:ae:7e:34:0a:92:f7:00:f9:77:85:98:c1:67:c7:63:c7:e9: 02:b3:78:05:f6:7c:fe:8a:9a:dd:6b:c1:b9:5e:1f:43:4d:4a: 73:46:53:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1RjYxMTAvBgNVBAUTKEI3RDRBQTRGNUQ3MjMxQUY0RTc0N0Y3NzIyNDVBQzAz NzEwMjEwRjAwHhcNMjUxMTA1MDE0NzI4WhcNMjUxMTEyMDE0NzI4WjAYMRYwFAYD VQQDEw02OTBhYWNiMC0yZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2rvB0p4nE+jU8K4XxVKmr9RB3Xz4XSMjyeDEe924L4i37D7A2VQK7uZfHpo LJVWmxQSum6pjWsKeG5qwdScsMHO78cJiyXxVwPvhitISPjoIzcNS5tDA7xIstO/ f9/safxwe8wnFc4DEIiWGWEY2V4jAJ2paJgFzldjsJPeUcVylTWw8nV+8r58Gmks xfUeOz2/FXaib3/PKk52d0d9WUHDouHG6PP5/6N3aMovME5LArKT8LuVehz7Z/Zz IyeZXPkkm8w/DYqMBUEm4e2q3R3rbNHSJ1rfjtufIvL2JEWgNvtgekvf+NIh62Oa T2RUXUgHsqSEVEVj0MS453VI3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqqhU2D uuG1kxezhCiAemI+92HKMB8GA1UdIwQYMBaAFLfUqk9dcjGvTnR/dyJFrANxAhDw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVGNi8xM0E0MjBBODM0 MjAxMUVEODVFQ0JGMzNDNEY5QUUwMi90OVNxVDExeU1hOU9kSDkzSWtXc0EzRUNF UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q5U3FUMTF5TWE5T2RIOTNJa1dzQTNFQ0VQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzVGNi8xM0E0MjBBODM0MjAxMUVEODVFQ0JGMzNDNEY5QUUwMi90OVNxVDExeU1h OU9kSDkzSWtXc0EzRUNFUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5BgylUhd0EfxEyAF9x7r57I1Qnw8x3DHQeNP7VClugQc4SlZ/LmMP 8Kb4HbrFMznAazk6mIchr9U+Wc1YUKQJh3+Pj5NWN/Pmh3z0HPfHnl6uMem/LPRQ RFNmWMJXCQXsbWqjQHFoeZlZneaoBOOR8rRUHqZoIS0kW2zjznR76GyJ5nnTj2+G q6zekdmujwO/Qls4yl/BLKDB4GX78yhTwW5TpzjBZbazLJBuQgsjuwPxOIFGWdXc A1ydSs4kKtWZ4BIE5w7AGUy94BR836eQrU5y3E6p2R2/rn40CpL3APl3hZjBZ8dj x+kCs3gF9nz+iprda8G5Xh9DTUpzRlO0 -----END CERTIFICATE-----Generated at Wed Nov 5 20:48:00 2025 by rpki-client