$ rpki-client -vvf rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft File: T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft (raw, json) Hash identifier: P5TTaS475vHmQgfRSAiWvCBFCn/+OKi8AGriv+mCh04= Subject key identifier: 5A:46:C3:62:AD:CA:36:E9:0D:06:F2:FB:D9:6E:60:DC:5B:5B:E8:AB Authority key identifier: 4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 Certificate issuer: /CN=A9194815/serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Certificate serial: 0665 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft Manifest number: 0660 Signing time: Tue 04 Nov 2025 22:41:31 +0000 Manifest this update: Tue 04 Nov 2025 22:41:31 +0000 Manifest next update: Tue 11 Nov 2025 22:41:30 +0000 Files and hashes: 1: T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl (hash: KJJYe+FE/xp2S9cNRBg/jFvheT39bPtiyN8CXgcbiyg=) 2: 873D9ADEA1C411EB9F4FE15EC4F9AE02.roa (hash: Fr5NAXSgAa9hVkhIVMm09Qkrw1we8d2exICvkLCxNcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1637 (0x665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194815, serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Validity Not Before: Nov 4 22:41:31 2025 GMT Not After : Nov 11 22:41:30 2025 GMT Subject: CN=690a811b-f812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9f:a9:aa:b4:d5:e9:05:8b:08:2e:18:39:36: c2:48:c3:af:89:19:12:01:25:27:bf:95:85:29:ac: a1:3f:e8:20:e0:e6:f0:03:d5:fa:d2:8e:4b:0d:66: be:60:83:c4:a7:22:64:9b:92:57:cb:34:d2:6b:80: d0:c2:d3:79:53:2a:ff:57:b3:8a:cb:69:66:7b:c2: 1a:07:db:74:54:da:3f:68:c0:18:44:47:c2:52:34: d6:81:df:83:88:07:21:d0:52:3d:de:4f:ce:6d:ea: 87:55:59:11:15:55:c8:6e:a5:4a:d1:48:dd:44:ee: c1:cc:3b:33:a6:72:01:5c:08:ce:71:8d:9f:13:b4: cc:6a:46:33:27:04:3b:ab:01:26:7d:3e:57:ba:f1: ab:69:d2:b6:3f:e5:46:26:77:c2:57:d2:55:61:0b: 0c:ce:47:5c:ee:51:c2:80:19:f4:de:7c:61:9f:4e: 92:4a:8a:73:af:ed:5b:7b:3d:09:4b:51:32:5f:52: a0:24:8a:cb:60:39:73:da:e6:d5:7e:4e:0c:4a:f7: 98:19:a9:48:39:98:e1:ca:03:74:88:d1:90:5d:75: 87:13:9a:7a:5a:00:fa:e8:55:49:86:0e:d6:ca:69: ca:18:5a:7a:dd:26:15:c3:9f:46:42:cd:8e:7c:f9: 95:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:46:C3:62:AD:CA:36:E9:0D:06:F2:FB:D9:6E:60:DC:5B:5B:E8:AB X509v3 Authority Key Identifier: keyid:4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:47:3d:42:99:54:3b:9e:3e:8e:cb:f3:41:18:ec:94:c4:e0: f4:b9:55:29:9a:fa:05:c5:39:9d:15:dd:9e:aa:be:2a:d5:6d: bb:24:67:b4:58:87:d0:72:da:9a:ed:3a:b6:36:6b:59:1a:6b: 1b:0c:8a:b6:c0:04:9a:3d:6d:d8:f1:de:20:7c:c9:92:e0:1b: e5:0b:f7:08:ba:58:56:9a:45:a9:a9:2f:c2:29:8d:85:1e:e3: 32:56:66:0b:e6:57:fa:34:99:4b:8b:f5:c6:8c:b9:76:3b:d7: 0d:83:91:25:e7:b4:cd:d9:7c:c7:c4:07:f5:b1:97:7e:a9:e7: 45:73:98:e4:9e:8f:a1:ef:bc:e2:b4:56:a1:27:d8:6b:58:2e: af:5d:e2:d6:ec:f7:01:6b:8d:d5:ca:e4:2f:b7:1d:11:f4:f1: 6b:d3:e1:c3:0f:76:dc:82:63:e1:8a:84:85:67:04:95:19:f6: f3:01:5b:18:a3:14:cd:18:7f:34:8e:1d:d3:9c:82:42:47:be: 8c:af:db:27:fd:a7:7d:de:25:1e:8b:f2:53:a1:41:c7:32:54: 88:ee:56:b2:7c:c4:fe:8c:b0:04:75:31:38:f8:43:db:fe:13: 7e:d9:6b:79:34:53:83:f5:2e:24:e0:e1:9c:f7:4f:ad:c1:b2: 9f:9f:05:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4MTUxMTAvBgNVBAUTKDRGNzQ0QzNDMEFBNzk3OUE4NTg0OUY1NkVFQjdCOTg3 QUIyM0QyNTgwHhcNMjUxMTA0MjI0MTMxWhcNMjUxMTExMjI0MTMwWjAYMRYwFAYD VQQDEw02OTBhODExYi1mODEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05+pqrTV6QWLCC4YOTbCSMOviRkSASUnv5WFKayhP+gg4ObwA9X60o5LDWa+ YIPEpyJkm5JXyzTSa4DQwtN5Uyr/V7OKy2lme8IaB9t0VNo/aMAYREfCUjTWgd+D iAch0FI93k/ObeqHVVkRFVXIbqVK0UjdRO7BzDszpnIBXAjOcY2fE7TMakYzJwQ7 qwEmfT5XuvGradK2P+VGJnfCV9JVYQsMzkdc7lHCgBn03nxhn06SSopzr+1bez0J S1EyX1KgJIrLYDlz2ubVfk4MSveYGalIOZjhygN0iNGQXXWHE5p6WgD66FVJhg7W ymnKGFp63SYVw59GQs2OfPmVcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpGw2Kt yjbpDQby+9luYNxbW+irMB8GA1UdIwQYMBaAFE90TDwKp5eahYSfVu63uYerI9JY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDgxNS8xQjYzRTdEOEEx QzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1cUZoSjlXN3JlNWg2c2ow bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QzUk1QQXFubDVxRmhKOVc3cmU1aDZzajBsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDgxNS8xQjYzRTdEOEExQzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1 cUZoSjlXN3JlNWg2c2owbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRRz1CmVQ7nj6Oy/NBGOyUxOD0uVUpmvoFxTmdFd2eqr4q1W27JGe0 WIfQctqa7Tq2NmtZGmsbDIq2wASaPW3Y8d4gfMmS4BvlC/cIulhWmkWpqS/CKY2F HuMyVmYL5lf6NJlLi/XGjLl2O9cNg5El57TN2XzHxAf1sZd+qedFc5jkno+h77zi tFahJ9hrWC6vXeLW7PcBa43VyuQvtx0R9PFr0+HDD3bcgmPhioSFZwSVGfbzAVsY oxTNGH80jh3TnIJCR76Mr9sn/ad93iUei/JToUHHMlSI7layfMT+jLAEdTE4+EPb /hN+2Wt5NFOD9S4k4OGc90+twbKfnwW5 -----END CERTIFICATE-----Generated at Wed Nov 5 20:07:56 2025 by rpki-client