$ rpki-client -vvf rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft File: rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft (raw, json) Hash identifier: EkyF1VmIwZ7EP5WondoCg/rHYNF058XMQ4Ugyz06GnQ= Subject key identifier: 44:BD:1C:48:27:F2:7E:F2:95:ED:AD:E8:06:2B:AA:36:D1:A4:D3:0B Authority key identifier: AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7 Certificate issuer: /CN=A9171155/serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft Manifest number: 1C Signing time: Mon 03 Nov 2025 07:50:12 +0000 Manifest this update: Mon 03 Nov 2025 07:50:12 +0000 Manifest next update: Mon 10 Nov 2025 07:50:12 +0000 Files and hashes: 1: rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl (hash: 4P24pal7Hjovzxtmeb30YGG7Z0cmXVu5HkV8u5PLj/4=) 2: 134623AC931511F092E28818C4F9AE02.roa (hash: iROhbsxSxTl+6rqtSvLAjrMVa4sfvVVCQefqUmfddwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171155, serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7 Validity Not Before: Nov 3 07:50:12 2025 GMT Not After : Nov 10 07:50:12 2025 GMT Subject: CN=69085eb4-4842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3b:62:ca:cb:54:2e:81:c3:2a:a5:76:f4:1f: 04:05:0e:51:98:9e:17:31:12:64:66:3a:4b:0c:ff: 8f:b3:02:84:7a:21:ca:c0:1a:f1:54:eb:41:7d:7b: 23:07:c4:5f:35:9d:56:eb:16:f4:27:45:94:8d:02: 07:c7:b1:61:e1:5a:1a:d6:3a:68:da:51:9b:0a:1b: 5f:0a:ea:15:a1:16:44:47:5c:56:43:ad:7b:fc:8c: 5a:77:25:fe:1f:4a:30:48:17:f1:be:4f:5c:e9:13: 3b:ce:7b:71:66:6d:97:c3:8f:46:37:76:10:d1:8a: 6f:a5:f4:08:96:b1:2e:9f:5e:e8:0d:c3:33:59:87: 99:ff:44:70:b0:07:67:d1:6e:a5:b6:23:c8:4b:3f: d9:39:a7:48:80:99:3e:8c:e7:14:ee:30:bd:e3:de: 59:30:2b:90:6d:51:86:a7:0f:ee:02:f9:72:ba:3d: 0c:03:4a:36:6e:3c:be:c9:6e:be:3a:95:64:a6:5d: bf:22:77:9d:de:74:de:32:43:a7:12:c6:41:d6:10: fe:ae:78:2d:16:7e:4e:43:1f:a6:8d:11:7a:7b:5d: cf:5a:b9:a8:0e:da:b7:ee:cc:e5:bd:8a:83:1e:f6: 82:1f:63:84:02:c4:e1:b5:e9:a2:d9:54:43:0a:6f: 36:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BD:1C:48:27:F2:7E:F2:95:ED:AD:E8:06:2B:AA:36:D1:A4:D3:0B X509v3 Authority Key Identifier: keyid:AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:9d:30:15:77:b2:34:01:c7:da:40:9e:3b:4d:99:0b:88:43: 43:a0:5d:a4:fa:06:65:57:36:53:7d:99:7f:45:bd:d5:64:99: 96:18:3a:54:e2:9c:23:d5:c0:41:e1:e5:d3:7f:74:fb:43:d9: 39:e3:20:a6:90:06:0f:d1:c5:ca:36:08:8f:26:42:75:99:67: 79:f9:fe:37:39:ba:09:2d:b8:a5:15:ff:9e:35:65:9d:f5:59: 7a:19:a1:7b:a1:08:09:6f:4f:e3:46:cb:2e:86:34:af:61:46: 09:97:8c:58:52:8b:e0:0b:6e:ef:db:02:1b:de:80:61:ff:8e: 3b:d3:ef:e4:c0:8d:6a:da:1f:76:9b:d3:e0:ca:6a:58:6f:a8: 8b:02:73:f5:6c:f2:76:80:cd:21:f7:8c:30:f3:30:28:b5:3b: f0:42:92:50:7b:55:5e:ae:3b:66:f7:e7:d8:01:9d:cf:c0:15: 5c:96:6c:1f:da:14:82:fc:12:a2:4a:7e:32:d8:28:93:70:be: 60:5c:36:7a:0a:bd:1b:41:55:f8:19:8b:de:b7:22:9d:7f:42: b4:06:c6:06:b8:1e:07:d4:02:3e:f1:c6:bd:e6:a2:e1:03:c7: 6e:18:13:cf:be:71:67:54:64:b3:e0:34:e6:79:6c:7e:3d:6d: c4:ab:37:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MTE1NTExMC8GA1UEBRMoQUQzRkE2QUY4MEUzNzMxMUQwQjNBRUM5NEE3NTdFNTQ0 NjNDNDlCNzAeFw0yNTExMDMwNzUwMTJaFw0yNTExMTAwNzUwMTJaMBgxFjAUBgNV BAMTDTY5MDg1ZWI0LTQ4NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfO2LKy1QugcMqpXb0HwQFDlGYnhcxEmRmOksM/4+zAoR6IcrAGvFU60F9eyMH xF81nVbrFvQnRZSNAgfHsWHhWhrWOmjaUZsKG18K6hWhFkRHXFZDrXv8jFp3Jf4f SjBIF/G+T1zpEzvOe3FmbZfDj0Y3dhDRim+l9AiWsS6fXugNwzNZh5n/RHCwB2fR bqW2I8hLP9k5p0iAmT6M5xTuML3j3lkwK5BtUYanD+4C+XK6PQwDSjZuPL7Jbr46 lWSmXb8id53edN4yQ6cSxkHWEP6ueC0Wfk5DH6aNEXp7Xc9auagO2rfuzOW9ioMe 9oIfY4QCxOG16aLZVEMKbzaLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURL0cSCfy fvKV7a3oBiuqNtGk0wswHwYDVR0jBBgwFoAUrT+mr4DjcxHQs67JSnV+VEY8Sbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxMTU1LzA5RDM2QzkwOTMw NTExRjBCRUVBQzYxMUM0RjlBRTAyL3JULW1yNERqY3hIUXM2N0pTblYtVkVZOFNi Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclQtbXI0RGpjeEhRczY3SlNuVi1WRVk4U2JjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx MTU1LzA5RDM2QzkwOTMwNTExRjBCRUVBQzYxMUM0RjlBRTAyL3JULW1yNERqY3hI UXM2N0pTblYtVkVZOFNiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAGdMBV3sjQBx9pAnjtNmQuIQ0OgXaT6BmVXNlN9mX9FvdVkmZYYOlTi nCPVwEHh5dN/dPtD2TnjIKaQBg/Rxco2CI8mQnWZZ3n5/jc5ugktuKUV/541ZZ31 WXoZoXuhCAlvT+NGyy6GNK9hRgmXjFhSi+ALbu/bAhvegGH/jjvT7+TAjWraH3ab 0+DKalhvqIsCc/Vs8naAzSH3jDDzMCi1O/BCklB7VV6uO2b359gBnc/AFVyWbB/a FIL8EqJKfjLYKJNwvmBcNnoKvRtBVfgZi963Ip1/QrQGxga4HgfUAj7xxr3mouED x24YE8++cWdUZLPgNOZ5bH49bcSrN20= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:43 2025 by rpki-client