$ rpki-client -vvf rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft File: AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft (raw, json) Hash identifier: L5I3p5y5JBl5q9ag2TJzlZQkgpNx1UyqDN7T2hPS77Q= Subject key identifier: 91:DF:1F:EC:5D:BB:24:39:BA:2B:5E:72:D7:E4:2C:72:02:6C:14:A7 Authority key identifier: 01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 Certificate issuer: /CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Certificate serial: 2437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft Manifest number: 2426 Signing time: Sun 02 Nov 2025 15:48:54 +0000 Manifest this update: Sun 02 Nov 2025 15:48:53 +0000 Manifest next update: Sun 09 Nov 2025 15:48:53 +0000 Files and hashes: 1: AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl (hash: sSUAQX8kt2dLU9CdlUnagmThbaC4L0lIICUb415I0kM=) 2: F26DAE0AB10D11E5894F4D1CC4F9AE02.roa (hash: ynqxjgpY/LcV5YgALtE8f4Xl7ViuJV7AKID6+ElR2jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9271 (0x2437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147259, serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Validity Not Before: Nov 2 15:48:53 2025 GMT Not After : Nov 9 15:48:53 2025 GMT Subject: CN=69077d66-2e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:fd:9a:cb:84:a2:63:a7:91:84:8e:9b:28: e6:81:98:6d:66:b9:8a:5e:62:9f:93:89:be:d3:33: a2:e2:2d:59:5c:96:3a:48:52:f1:3d:0f:5e:32:b5: 90:93:28:0b:2c:20:91:73:7f:62:09:5e:5c:b0:c3: ef:b6:cc:05:75:e7:58:24:90:09:30:d2:8e:bf:c2: 26:41:df:f8:1a:ec:4b:ce:bb:59:bc:26:58:07:81: 10:e4:af:6a:98:96:dc:16:3a:d0:c4:14:28:a8:98: 64:da:cb:3c:63:12:36:bc:94:94:97:59:7e:ee:af: 28:d7:0f:a5:dc:7c:df:91:9f:57:4b:2f:66:b7:a5: 6a:bf:38:93:66:ac:1d:e2:f8:50:ad:92:8c:20:ed: 41:79:41:ed:9a:58:9d:4f:f7:24:2a:eb:d8:04:24: 16:a0:93:c8:07:8d:49:0e:19:04:99:8e:bc:d8:4d: 6e:0b:68:57:7c:a5:3c:20:e4:4c:ba:03:86:8c:d3: 20:2e:9b:d2:24:87:e8:fe:cb:a1:c8:54:86:7e:6b: fa:97:dd:96:25:e1:75:32:4f:97:0f:24:be:30:8a: 33:fa:20:7e:63:7f:a8:26:6a:ad:77:21:a1:9f:dc: 12:27:94:55:2b:01:46:45:19:61:aa:1b:ab:c8:50: 9b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DF:1F:EC:5D:BB:24:39:BA:2B:5E:72:D7:E4:2C:72:02:6C:14:A7 X509v3 Authority Key Identifier: keyid:01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:fa:7d:e1:d9:3f:25:69:0e:de:dc:46:94:32:46:2d:cc:25: c2:0a:09:5f:27:cd:bd:74:b5:8c:cb:5f:a0:97:f5:9f:aa:41: 56:0e:68:8b:a4:59:a9:37:64:91:0b:e4:8e:e1:68:46:99:b0: b3:07:43:21:f8:8d:75:81:64:61:4a:3d:c8:eb:8a:ba:7c:1a: 35:66:31:1c:4d:db:ee:b6:30:3b:a6:df:a9:56:db:8b:99:99: bc:c7:88:59:cd:98:1b:ec:b6:dd:9c:67:64:ec:39:dc:fd:c3: b9:7f:fc:cf:67:ec:7e:f1:10:07:f0:a1:28:9d:cc:53:93:3d: aa:73:ac:b0:c0:de:80:99:2e:5d:a3:98:4a:40:92:81:c5:8e: 42:02:79:8a:92:16:da:c4:9d:88:fe:6e:5f:c6:b4:ab:87:52: 23:3e:a6:c3:a4:db:e5:68:df:ec:6f:da:ec:dd:96:37:6f:e3: 35:ed:dd:39:3d:f5:37:c7:7f:86:35:60:8a:35:16:6c:d3:df: e9:8b:c9:af:24:d9:d9:9c:c9:4d:72:d6:78:db:e4:04:de:e9: b6:83:c0:c4:66:b9:8b:28:a1:0b:22:34:fd:e3:d9:f2:91:87: 8c:5a:41:45:06:73:18:ef:56:e5:e9:4c:0c:71:8b:68:35:a5: f4:bc:89:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNTkxMTAvBgNVBAUTKDAxM0ZCN0I3QThDNzNFNTEzRjc2OThCQ0RBMURBM0M0 NUNDNjdGQTQwHhcNMjUxMTAyMTU0ODUzWhcNMjUxMTA5MTU0ODUzWjAYMRYwFAYD VQQDEw02OTA3N2Q2Ni0yZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3P9msuEomOnkYSOmyjmgZhtZrmKXmKfk4m+0zOi4i1ZXJY6SFLxPQ9eMrWQ kygLLCCRc39iCV5csMPvtswFdedYJJAJMNKOv8ImQd/4GuxLzrtZvCZYB4EQ5K9q mJbcFjrQxBQoqJhk2ss8YxI2vJSUl1l+7q8o1w+l3HzfkZ9XSy9mt6VqvziTZqwd 4vhQrZKMIO1BeUHtmlidT/ckKuvYBCQWoJPIB41JDhkEmY682E1uC2hXfKU8IORM ugOGjNMgLpvSJIfo/suhyFSGfmv6l92WJeF1Mk+XDyS+MIoz+iB+Y3+oJmqtdyGh n9wSJ5RVKwFGRRlhqhuryFCboQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHfH+xd uyQ5uitectfkLHICbBSnMB8GA1UdIwQYMBaAFAE/t7eoxz5RP3aYvNodo8Rcxn+k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI1OS9BODhDMUE4QTY3 NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBsRV9kcGk4MmgyanhGekdm NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FULTN0NmpIUGxFX2RwaTgyaDJqeEZ6R2Y2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI1OS9BODhDMUE4QTY3NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBs RV9kcGk4MmgyanhGekdmNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz+n3h2T8laQ7e3EaUMkYtzCXCCglfJ829dLWMy1+gl/WfqkFWDmiL pFmpN2SRC+SO4WhGmbCzB0Mh+I11gWRhSj3I64q6fBo1ZjEcTdvutjA7pt+pVtuL mZm8x4hZzZgb7LbdnGdk7Dnc/cO5f/zPZ+x+8RAH8KEoncxTkz2qc6ywwN6AmS5d o5hKQJKBxY5CAnmKkhbaxJ2I/m5fxrSrh1IjPqbDpNvlaN/sb9rs3ZY3b+M17d05 PfU3x3+GNWCKNRZs09/pi8mvJNnZnMlNctZ42+QE3um2g8DEZrmLKKELIjT949ny kYeMWkFFBnMY71bl6UwMcYtoNaX0vImW -----END CERTIFICATE-----Generated at Tue Nov 4 02:14:58 2025 by rpki-client