$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json) Hash identifier: b350qRcjomgaaQVNGrdoGmbgjsAeac89ivzZ7U6Cf9A= Subject key identifier: 9C:33:FE:35:69:63:94:66:FD:A6:FE:24:76:07:7E:9C:57:EC:F3:F9 Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft Manifest number: 022A Signing time: Wed 05 Nov 2025 02:04:07 +0000 Manifest this update: Wed 05 Nov 2025 02:04:07 +0000 Manifest next update: Wed 12 Nov 2025 02:04:07 +0000 Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: ipIZ4ZbUdl4wl47RTe4NHolfsdxx31eJVy1CIc/5JeM=) 2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: U2IhKx29cFb2HRrMdKByFOSugmOt/xf7Hgnc2t5fDH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Validity Not Before: Nov 5 02:04:07 2025 GMT Not After : Nov 12 02:04:07 2025 GMT Subject: CN=690ab097-f1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:57:88:2c:4b:49:f1:33:c7:72:a3:39:d2:cf: 2d:eb:02:87:f5:67:c2:a1:0e:07:68:59:65:fa:a5: 00:58:d5:9b:9a:b9:e2:d3:66:12:00:80:79:e2:e0: 2b:a1:39:dc:d1:b5:b0:cc:de:0e:8e:ff:50:75:0a: d5:45:16:f0:d9:c0:2f:c0:0f:9a:d7:91:a9:df:7d: d8:bb:ed:60:f5:3c:0f:8e:64:26:d0:14:81:b3:72: ed:a5:ac:7f:da:21:cb:e5:17:0b:1a:a3:d2:84:11: 59:99:f7:b2:99:d0:18:21:6a:39:81:2d:9e:18:d3: 13:4f:5f:0e:ce:5f:8f:f1:06:a2:94:05:53:69:1f: dd:6f:41:c8:c5:ef:dc:19:1e:b5:0c:31:b0:18:2a: fd:a3:3f:79:f2:7d:83:2c:81:2c:0c:23:d3:f1:fc: 62:4c:de:e4:7b:30:fd:e3:e5:24:7f:17:37:ef:33: 1a:56:69:e7:50:ab:a5:a6:f8:8a:61:f1:95:f4:70: 36:1c:3a:f0:80:29:95:d1:d0:1d:cb:d7:83:77:bf: 6b:ed:c6:9f:77:63:0d:7d:76:22:3d:03:1e:61:b1: f1:d6:dd:79:b9:09:0c:aa:79:ee:d3:39:ec:f8:4a: e3:7f:a5:5e:27:a4:e0:e5:72:d5:d9:46:bd:55:60: 91:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:33:FE:35:69:63:94:66:FD:A6:FE:24:76:07:7E:9C:57:EC:F3:F9 X509v3 Authority Key Identifier: keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f1:e4:37:21:6c:f9:6f:7a:4a:92:1a:63:2c:db:41:aa:e4: ca:76:cf:7f:b4:b1:4f:dc:a6:21:a6:4b:ab:1b:94:0e:1b:c7: 88:04:1c:13:d8:fb:ef:66:2e:0d:78:f0:46:d6:3b:cd:79:bb: 85:4b:29:46:08:e3:cb:72:a0:7f:70:63:c5:bf:4b:62:8b:8e: 4d:c2:61:73:ee:eb:f6:fb:84:b9:1f:c2:8e:74:0d:a9:5d:ec: fb:69:89:7a:d3:4d:74:07:76:d5:97:d9:f9:0f:c8:ed:9b:3b: 4f:11:0b:36:5d:db:d4:d7:01:80:74:97:90:ae:db:e4:dc:12: d2:87:78:cc:ba:66:b0:09:22:61:8c:c5:a4:91:56:1f:94:32: 8e:85:0a:96:ca:d5:9e:0a:3b:ff:91:f8:b8:72:4d:5b:ae:32: f7:3c:13:1b:1f:8a:3a:6b:2d:fe:77:a7:da:5f:af:d0:e1:39: cd:2a:14:3f:d9:ee:6c:74:eb:59:fa:c7:63:9d:25:25:25:e9: fb:f7:a8:ca:53:c3:4d:04:46:6d:c9:25:51:64:83:ed:0c:03: c8:27:59:d7:27:81:73:56:2b:42:60:99:64:59:49:b1:85:86: 73:87:61:a9:24:2e:a4:d1:05:ca:fc:df:ef:4d:c8:be:ab:41: 4c:0d:47:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4QzIxMTAvBgNVBAUTKEY0QzRGQzc1QTUwNjhDOTI1ODk5NjQxM0FFQjdCNzM5 MTUwMkYwOUUwHhcNMjUxMTA1MDIwNDA3WhcNMjUxMTEyMDIwNDA3WjAYMRYwFAYD VQQDEw02OTBhYjA5Ny1mMWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFeILEtJ8TPHcqM50s8t6wKH9WfCoQ4HaFll+qUAWNWbmrni02YSAIB54uAr oTnc0bWwzN4Ojv9QdQrVRRbw2cAvwA+a15Gp333Yu+1g9TwPjmQm0BSBs3Ltpax/ 2iHL5RcLGqPShBFZmfeymdAYIWo5gS2eGNMTT18Ozl+P8QailAVTaR/db0HIxe/c GR61DDGwGCr9oz958n2DLIEsDCPT8fxiTN7kezD94+Ukfxc37zMaVmnnUKulpviK YfGV9HA2HDrwgCmV0dAdy9eDd79r7cafd2MNfXYiPQMeYbHx1t15uQkMqnnu0zns +Erjf6VeJ6Tg5XLV2Ua9VWCR+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwz/jVp Y5Rm/ab+JHYHfpxX7PP5MB8GA1UdIwQYMBaAFPTE/HWlBoySWJlkE663tzkVAvCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDhDMi9DRUQ3RDNBNjY0 QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pKSlltV1FUcnJlM09SVUM4 SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNVDhkYVVHakpKWW1XUVRycmUzT1JVQzhKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDhDMi9DRUQ3RDNBNjY0QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pK SlltV1FUcnJlM09SVUM4SjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ8eQ3IWz5b3pKkhpjLNtBquTKds9/tLFP3KYhpkurG5QOG8eIBBwT 2PvvZi4NePBG1jvNebuFSylGCOPLcqB/cGPFv0tii45NwmFz7uv2+4S5H8KOdA2p Xez7aYl60010B3bVl9n5D8jtmztPEQs2XdvU1wGAdJeQrtvk3BLSh3jMumawCSJh jMWkkVYflDKOhQqWytWeCjv/kfi4ck1brjL3PBMbH4o6ay3+d6faX6/Q4TnNKhQ/ 2e5sdOtZ+sdjnSUlJen796jKU8NNBEZtySVRZIPtDAPIJ1nXJ4FzVitCYJlkWUmx hYZzh2GpJC6k0QXK/N/vTci+q0FMDUct -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:20 2025 by rpki-client