$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft File: tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json) Hash identifier: 0/O5dGx2xIBMm4ES9w9tFNCIhcSspgoz29f+tO8LPrU= Subject key identifier: 2F:9B:C0:DA:03:EC:F5:F5:5B:83:99:DB:B6:54:B0:AD:69:E1:18:29 Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA Certificate issuer: /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft Manifest number: F9 Signing time: Wed 05 Nov 2025 05:22:42 +0000 Manifest this update: Wed 05 Nov 2025 05:22:42 +0000 Manifest next update: Wed 12 Nov 2025 05:22:42 +0000 Files and hashes: 1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: T4WRjU1qMc/IuHPwhpu3Aq0wlb7mnxoY1t/2kbANC+8=) 2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: qvhByE3oiLELsQTu9SaN/ARZ+azzx+zT+u1j1qLqciY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1A9C, serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Validity Not Before: Nov 5 05:22:42 2025 GMT Not After : Nov 12 05:22:42 2025 GMT Subject: CN=690adf22-c9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:41:e2:8c:71:af:66:c1:05:ce:0a:5e:be:e0: 57:e1:0d:57:16:49:e1:a1:14:de:9c:1b:4e:95:b3: 83:95:6a:3a:8f:b6:4e:a3:e5:34:4a:f3:9f:d2:a9: 27:9e:b7:70:a4:76:18:4f:57:65:d1:e2:b7:e3:fa: 0b:27:7c:cf:47:ee:05:ff:3f:46:38:80:ae:01:c6: f9:07:93:1e:20:8d:f6:5e:55:d5:1d:7d:d2:92:24: 14:fa:e9:f0:91:41:66:0a:93:09:c3:bd:09:8b:99: 57:ba:d0:ab:de:40:dc:53:3e:e8:70:56:6c:d7:e6: b1:6f:d6:0a:d9:88:b0:7e:21:38:3b:22:d9:47:62: 79:e8:bd:ac:94:98:a1:52:b7:08:a0:6c:f6:ec:70: 99:ee:97:d7:17:81:e3:44:69:00:81:27:28:5a:eb: 2f:3c:0d:a5:f8:01:0b:9e:99:4a:db:8a:b1:be:aa: 78:46:d3:2e:5b:dd:3e:9a:99:68:c0:55:98:3e:07: ce:37:0d:ce:5b:88:43:e9:4d:0f:a8:53:58:3d:1b: 2a:15:79:3f:5d:80:80:cc:21:92:75:6a:d6:96:f4: f7:2a:0a:d4:37:3a:55:9b:81:71:29:31:2c:e4:d7: 36:d5:db:d2:37:56:03:a0:35:2e:c2:38:1f:a9:4f: 0a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9B:C0:DA:03:EC:F5:F5:5B:83:99:DB:B6:54:B0:AD:69:E1:18:29 X509v3 Authority Key Identifier: keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:78:60:11:0c:02:95:ec:0a:ee:0f:62:d1:a2:a6:2d:13:b9: 13:27:3b:43:95:f1:8d:bd:b2:c6:f2:5d:0d:b5:33:5c:39:7f: c7:25:05:d9:81:f9:c5:55:a2:59:28:e1:05:7f:db:c3:68:f3: 1a:89:52:a6:4f:b2:e1:b8:08:6b:d5:bf:71:21:07:af:0d:0e: ac:f9:75:e5:e9:b7:35:5c:e9:b6:93:0b:f3:9d:43:06:fc:86: e4:50:b1:8b:5f:db:f4:5c:80:79:5e:49:f4:d1:c7:12:a0:e9: 06:d6:d6:67:ae:7a:05:88:a1:21:b7:b6:c9:fb:78:b6:db:85: 95:ea:3f:44:49:8f:27:ad:ca:a2:f5:8a:d8:22:08:0c:af:24: ea:70:d9:77:c8:43:2f:3c:1f:4b:df:8d:bd:58:c4:1d:3c:e1: 88:34:5b:9e:22:33:91:0f:99:79:10:ae:b0:85:0b:4a:dc:6c: ea:cd:4b:10:43:11:84:4c:fa:25:1b:d8:d4:87:c6:1c:ab:e1: 07:9e:67:fb:0f:f2:87:88:90:f6:93:aa:48:1b:26:ec:8c:52: 2d:df:c7:cc:fa:8f:08:83:a1:be:b4:d3:ab:ad:2d:97:f0:e1: c2:18:3b:15:7b:cc:9a:59:b6:f3:ec:3b:57:7b:26:aa:cc:3d: ba:3d:b5:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBOUMxMTAvBgNVBAUTKEI1OURGREI1MDhBOUJBQkRDRjhEQUFBRkUzRjNERTY5 NTlGQjEzQUEwHhcNMjUxMTA1MDUyMjQyWhcNMjUxMTEyMDUyMjQyWjAYMRYwFAYD VQQDEw02OTBhZGYyMi1jOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEHijHGvZsEFzgpevuBX4Q1XFknhoRTenBtOlbODlWo6j7ZOo+U0SvOf0qkn nrdwpHYYT1dl0eK34/oLJ3zPR+4F/z9GOICuAcb5B5MeII32XlXVHX3SkiQU+unw kUFmCpMJw70Ji5lXutCr3kDcUz7ocFZs1+axb9YK2YiwfiE4OyLZR2J56L2slJih UrcIoGz27HCZ7pfXF4HjRGkAgScoWusvPA2l+AELnplK24qxvqp4RtMuW90+mplo wFWYPgfONw3OW4hD6U0PqFNYPRsqFXk/XYCAzCGSdWrWlvT3KgrUNzpVm4FxKTEs 5Nc21dvSN1YDoDUuwjgfqU8K+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+bwNoD 7PX1W4OZ27ZUsK1p4RgpMB8GA1UdIwQYMBaAFLWd/bUIqbq9z42qr+Pz3mlZ+xOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUE5Qy84RThCM0U3RTQw NzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVyM1BqYXF2NF9QZWFWbjdF Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RaMzl0UWlwdXIzUGphcXY0X1BlYVZuN0U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUE5Qy84RThCM0U3RTQwNzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVy M1BqYXF2NF9QZWFWbjdFNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7eGARDAKV7AruD2LRoqYtE7kTJztDlfGNvbLG8l0NtTNcOX/HJQXZ gfnFVaJZKOEFf9vDaPMaiVKmT7LhuAhr1b9xIQevDQ6s+XXl6bc1XOm2kwvznUMG /IbkULGLX9v0XIB5Xkn00ccSoOkG1tZnrnoFiKEht7bJ+3i224WV6j9ESY8nrcqi 9YrYIggMryTqcNl3yEMvPB9L3429WMQdPOGINFueIjORD5l5EK6whQtK3GzqzUsQ QxGETPolG9jUh8Ycq+EHnmf7D/KHiJD2k6pIGybsjFIt38fM+o8Ig6G+tNOrrS2X 8OHCGDsVe8yaWbbz7DtXeyaqzD26PbWI -----END CERTIFICATE-----Generated at Wed Nov 5 17:17:09 2025 by rpki-client