$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft File: -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json) Hash identifier: ODSiHGrju8QI3i9X2zprZb9sTrZScUbfVJc7nJt1BJ8= Subject key identifier: 54:51:56:6C:1A:20:56:9F:F0:E8:F0:BB:1B:86:75:58:18:02:34:61 Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Certificate serial: 060F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft Manifest number: 0609 Signing time: Sun 02 Nov 2025 22:52:10 +0000 Manifest this update: Sun 02 Nov 2025 22:52:09 +0000 Manifest next update: Sun 09 Nov 2025 22:52:09 +0000 Files and hashes: 1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: cmCwCVE+dteiho6TzgjQDCqwd+n8U5VLjVkOI5noSI0=) 2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: wddyNGfZbP1BkMwAL9n/nAwszGpqRHSZopoWbtzoiYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1551 (0x60f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Validity Not Before: Nov 2 22:52:09 2025 GMT Not After : Nov 9 22:52:09 2025 GMT Subject: CN=6907e099-daa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ec:ff:a7:03:ef:e5:2b:c9:9b:3e:9e:b4:47: 51:a3:9a:3b:4c:00:a9:df:ad:8a:64:0d:e7:1d:94: 30:20:af:cf:63:ce:81:e7:bb:64:4d:e0:24:a8:81: a1:68:7a:28:dc:fb:f5:ca:59:3f:4b:5c:9b:87:41: 64:43:66:10:17:6d:9e:b4:31:aa:3e:ec:88:ab:b2: df:35:b6:45:a3:fd:ea:be:6e:66:76:7b:fb:03:e8: 66:b1:1d:92:98:f9:37:c6:eb:f7:a8:f1:f7:62:0e: 11:21:f1:f7:55:82:08:98:d5:d0:a7:54:c5:8c:86: 59:cb:47:26:a0:43:c4:61:ad:45:5f:cb:bd:89:a7: 65:20:cd:cf:cc:9f:76:47:48:e4:f5:4b:2d:83:67: 89:27:3d:0f:55:4c:df:d3:4a:ce:43:b0:a4:59:30: f7:dd:79:9f:a7:78:d0:a7:32:94:13:e1:71:57:be: 4e:5e:bb:55:c9:a0:b9:9b:5e:8f:7c:3f:ec:72:94: 5a:2b:30:a8:95:31:6d:6a:bc:99:79:0d:91:7c:eb: 38:30:04:dc:fe:fb:46:da:e5:84:57:cb:5c:cc:49: 25:56:53:ba:fe:3d:f9:2d:4b:cc:6a:2c:73:95:9b: 3d:6d:3e:89:10:0c:78:57:0f:11:06:c8:dd:26:41: 9c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:51:56:6C:1A:20:56:9F:F0:E8:F0:BB:1B:86:75:58:18:02:34:61 X509v3 Authority Key Identifier: keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:34:58:45:41:4d:78:1c:28:3c:28:a3:b7:71:a1:29:de:6d: e2:8c:04:72:6d:1e:ce:cb:4a:bc:5b:8b:f3:47:ae:1f:a7:1c: f5:cb:ca:85:fc:43:1b:b3:e8:9b:74:5e:c4:73:15:48:ac:27: a9:4d:72:c4:83:97:ca:71:a7:97:25:01:b0:79:63:7d:a5:3d: 99:07:d1:4f:18:38:e9:65:0c:2b:e9:87:aa:a2:9c:2d:4d:37: 7a:75:98:82:c1:0c:62:35:f7:c1:38:cb:bd:96:1c:91:27:97: c8:8b:29:47:01:6c:90:94:26:a4:41:49:c8:98:b3:70:7b:7a: 1c:0d:c3:d5:32:58:41:5e:ad:3b:9d:7c:3c:d0:62:02:74:bb: 56:fc:ec:a5:a8:fc:8c:ca:8e:e9:a5:49:99:ad:d6:cb:16:e1: 38:63:fa:0d:64:39:22:ba:f6:79:cb:36:1e:c7:ab:1f:64:b3: 02:a6:cf:3c:e9:dc:2a:83:19:80:fb:4c:f0:a8:b9:83:e9:db: 36:df:72:a8:ce:b6:08:27:86:bd:07:ba:19:af:2b:2f:c3:b0: a3:16:13:b7:ec:73:84:70:09:d5:bb:a1:15:07:40:bd:d4:34: d8:cc:2c:15:f2:08:aa:bd:bc:4c:e1:50:4d:98:b4:72:f3:06: 4e:bb:1a:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMzIxMTAvBgNVBAUTKEZBRENCOTU1QTNBQzE0NjU5OTdEMDhGMjQ4QkY4NkM0 MzM0NEZCNzgwHhcNMjUxMTAyMjI1MjA5WhcNMjUxMTA5MjI1MjA5WjAYMRYwFAYD VQQDEw02OTA3ZTA5OS1kYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Oz/pwPv5SvJmz6etEdRo5o7TACp362KZA3nHZQwIK/PY86B57tkTeAkqIGh aHoo3Pv1ylk/S1ybh0FkQ2YQF22etDGqPuyIq7LfNbZFo/3qvm5mdnv7A+hmsR2S mPk3xuv3qPH3Yg4RIfH3VYIImNXQp1TFjIZZy0cmoEPEYa1FX8u9iadlIM3PzJ92 R0jk9Ustg2eJJz0PVUzf00rOQ7CkWTD33Xmfp3jQpzKUE+FxV75OXrtVyaC5m16P fD/scpRaKzColTFtaryZeQ2RfOs4MATc/vtG2uWEV8tczEklVlO6/j35LUvMaixz lZs9bT6JEAx4Vw8RBsjdJkGc7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRRVmwa IFaf8OjwuxuGdVgYAjRhMB8GA1UdIwQYMBaAFPrcuVWjrBRlmX0I8ki/hsQzRPt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYzMi9FMDY0NzVDRUM1 NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZHV1pmUWp5U0wtR3hETkUt M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eTVWYU9zRkdXWmZRanlTTC1HeERORS0zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYzMi9FMDY0NzVDRUM1NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZH V1pmUWp5U0wtR3hETkUtM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiNFhFQU14HCg8KKO3caEp3m3ijARybR7Oy0q8W4vzR64fpxz1y8qF /EMbs+ibdF7EcxVIrCepTXLEg5fKcaeXJQGweWN9pT2ZB9FPGDjpZQwr6Yeqopwt TTd6dZiCwQxiNffBOMu9lhyRJ5fIiylHAWyQlCakQUnImLNwe3ocDcPVMlhBXq07 nXw80GICdLtW/OylqPyMyo7ppUmZrdbLFuE4Y/oNZDkiuvZ5yzYex6sfZLMCps88 6dwqgxmA+0zwqLmD6ds233KozrYIJ4a9B7oZrysvw7CjFhO37HOEcAnVu6EVB0C9 1DTYzCwV8giqvbxM4VBNmLRy8wZOuxoB -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:05 2025 by rpki-client