$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft File: tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft (raw, json) Hash identifier: fY/uqqQTE2PsTyPSHQABNW9JV/eaUeoZ2wbTCJlCSgY= Subject key identifier: 9F:85:8B:3C:AF:7C:15:A7:7A:D2:68:6C:A0:45:CB:10:63:48:0E:15 Authority key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD Certificate issuer: /CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft Manifest number: 03DD Signing time: Mon 03 Nov 2025 01:36:03 +0000 Manifest this update: Mon 03 Nov 2025 01:36:03 +0000 Manifest next update: Mon 10 Nov 2025 01:36:03 +0000 Files and hashes: 1: tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl (hash: tO2NgH2bH9YMb01GgpDanJCofe1iQXByveu2l06qvgo=) 2: FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa (hash: 9Glg+FZVnuYVbnpDUoXkmTWX1UGlCmh3veSk6hQSk2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF3, serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD Validity Not Before: Nov 3 01:36:03 2025 GMT Not After : Nov 10 01:36:03 2025 GMT Subject: CN=69080703-9f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:c2:ab:1f:19:93:f9:0b:05:c2:e5:54:79: 39:5e:f4:11:e9:d1:df:5a:90:09:fe:41:85:84:f5: 3f:cf:ef:de:48:cb:23:c1:57:46:1b:5f:52:19:f2: 0b:68:bf:35:3a:36:8a:7b:54:ef:cc:e4:eb:62:4f: 26:87:6a:fe:95:96:b4:f1:80:a3:fb:b7:7a:b5:1f: e1:1e:87:33:12:4e:b7:92:cd:d2:61:d8:b9:d1:ed: 5f:f6:2f:4b:b3:42:cb:13:83:d9:b1:57:a6:3e:8f: bf:6d:b1:b7:ad:74:22:16:db:0c:d2:cb:7b:6a:2b: 6a:05:3b:b8:18:18:8a:e6:7e:23:b7:e3:92:6b:a3: 69:ba:08:5d:21:ff:6c:4d:f5:26:70:16:af:a3:a8: 43:c6:66:19:59:03:55:20:96:48:8e:2d:ce:29:fb: aa:a8:29:89:d1:3c:76:3a:d1:1f:71:3b:38:27:c6: 1c:3f:6d:e9:50:a5:67:d5:9b:1b:ad:07:76:c1:1e: 10:b8:9f:71:86:b4:a6:bf:6c:c4:1d:26:1f:8c:71: be:5e:de:49:7a:25:03:2a:f1:33:15:26:f4:74:76: 60:d9:4d:58:75:6e:30:50:e3:d8:fc:68:11:2d:f3: 02:ee:4e:fb:4c:6d:a5:fb:f9:f8:11:4c:a5:98:22: c7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:85:8B:3C:AF:7C:15:A7:7A:D2:68:6C:A0:45:CB:10:63:48:0E:15 X509v3 Authority Key Identifier: keyid:B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:d4:82:8d:03:b6:0c:d3:cf:ef:18:92:78:c4:d2:ce:38:48: d8:03:31:05:4c:29:a2:73:ac:5b:96:b0:2d:0e:fa:48:5f:78: b6:b3:98:1c:36:55:00:31:b6:af:40:4f:c7:54:04:3a:7f:fe: d3:b2:c3:39:e7:9e:25:27:8b:85:18:fb:5c:38:60:9d:e7:ee: 2f:95:9c:a2:8d:11:49:e7:6d:81:fe:70:e5:e7:7a:ed:8c:32: bd:fc:44:da:d8:3b:b0:f5:68:1f:97:a3:a5:db:57:1f:72:08: 40:ab:2a:0a:42:80:98:f2:21:e9:9a:90:65:23:3b:1b:2f:40: 20:b2:a6:7c:c0:b9:b2:70:20:38:42:52:e1:e0:ba:4d:71:be: 0a:01:4c:0a:36:96:17:10:e3:3a:c7:74:f6:72:79:73:d1:35: 9d:35:9c:db:18:f9:32:40:fd:c0:3b:0f:a0:e0:4c:49:22:79: f4:d4:e7:22:2a:c3:88:59:13:bc:e7:07:48:5f:6a:51:d2:ff: 5f:80:a3:49:15:1f:9d:e7:e8:e7:3b:2d:43:fd:8e:b5:84:f9: 0f:bb:ac:82:d2:9d:9c:cf:3b:ad:72:31:9f:78:70:16:60:ab: 66:11:71:99:ce:ee:11:29:f3:7a:55:69:00:d3:98:63:09:a5: 3c:63:95:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjMxMTAvBgNVBAUTKEI0OENCMTgwODI2MkI4MDk5Qjg3MjcyQTU3NkZGRURD MTlBMzk2QkQwHhcNMjUxMTAzMDEzNjAzWhcNMjUxMTEwMDEzNjAzWjAYMRYwFAYD VQQDEw02OTA4MDcwMy05ZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybTCqx8Zk/kLBcLlVHk5XvQR6dHfWpAJ/kGFhPU/z+/eSMsjwVdGG19SGfIL aL81OjaKe1TvzOTrYk8mh2r+lZa08YCj+7d6tR/hHoczEk63ks3SYdi50e1f9i9L s0LLE4PZsVemPo+/bbG3rXQiFtsM0st7aitqBTu4GBiK5n4jt+OSa6NpughdIf9s TfUmcBavo6hDxmYZWQNVIJZIji3OKfuqqCmJ0Tx2OtEfcTs4J8YcP23pUKVn1Zsb rQd2wR4QuJ9xhrSmv2zEHSYfjHG+Xt5JeiUDKvEzFSb0dHZg2U1YdW4wUOPY/GgR LfMC7k77TG2l+/n4EUylmCLHkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+Fizyv fBWnetJobKBFyxBjSA4VMB8GA1UdIwQYMBaAFLSMsYCCYrgJm4cnKldv/twZo5a9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMy8wMjhGOUVGRTJF ODYxMUVEOUQyRURDNERDNEY5QUUwMi90SXl4Z0lKaXVBbWJoeWNxVjJfLTNCbWps cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJeXhnSUppdUFtYmh5Y3FWMl8tM0JtamxyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMy8wMjhGOUVGRTJFODYxMUVEOUQyRURDNERDNEY5QUUwMi90SXl4Z0lKaXVB bWJoeWNxVjJfLTNCbWpscjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj1IKNA7YM08/vGJJ4xNLOOEjYAzEFTCmic6xblrAtDvpIX3i2s5gc NlUAMbavQE/HVAQ6f/7TssM5554lJ4uFGPtcOGCd5+4vlZyijRFJ522B/nDl53rt jDK9/ETa2Duw9Wgfl6Ol21cfcghAqyoKQoCY8iHpmpBlIzsbL0AgsqZ8wLmycCA4 QlLh4LpNcb4KAUwKNpYXEOM6x3T2cnlz0TWdNZzbGPkyQP3AOw+g4ExJInn01Oci KsOIWRO85wdIX2pR0v9fgKNJFR+d5+jnOy1D/Y61hPkPu6yC0p2czzutcjGfeHAW YKtmEXGZzu4RKfN6VWkA05hjCaU8Y5WS -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:42 2025 by rpki-client