$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft File: 9R3GadtZYYTQv5SqHkHl3hWejaU.mft (raw, json) Hash identifier: YqRtIcyybaiuVuQYmG9wwyNZUOjT3wQhQGoLq1Hv3ao= Subject key identifier: 7D:FA:FB:9E:D2:D9:FE:52:DA:95:F7:C9:95:7E:E6:60:C0:A8:33:7B Authority key identifier: F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 Certificate issuer: /CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Certificate serial: 0CA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft Manifest number: 0C9C Signing time: Tue 04 Nov 2025 18:24:46 +0000 Manifest this update: Tue 04 Nov 2025 18:24:45 +0000 Manifest next update: Tue 11 Nov 2025 18:24:45 +0000 Files and hashes: 1: 9R3GadtZYYTQv5SqHkHl3hWejaU.crl (hash: CqzNsv6fHw3Gn8J+suk7RQFMpW7sPK68XxlhxbzebJk=) 2: 2DE1069C050311EA93648E33C4F9AE02.roa (hash: lPRimtAIP991qjg2zYQ9MB+u2MSznOVIg7X2f5y/SnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3238 (0xca6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D50, serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Validity Not Before: Nov 4 18:24:45 2025 GMT Not After : Nov 11 18:24:45 2025 GMT Subject: CN=690a44ee-c381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:71:1c:0f:5b:b3:4f:2b:af:54:71:74:97: d6:d7:f3:77:ed:ae:12:16:10:a1:53:0f:84:ba:f7: 84:8d:3c:9b:63:21:c8:bb:13:d8:4c:db:4f:a2:b9: 52:01:1a:63:2f:65:c0:8a:f2:ad:d1:8d:d7:58:aa: 98:86:54:a6:38:a4:a7:f9:2f:28:a2:35:02:e7:ec: 2b:a3:cf:68:5b:15:e7:28:f0:df:ac:fa:dc:41:ce: 80:db:85:0c:8e:1c:dd:a6:2b:fc:06:d6:49:ff:0c: 30:ca:40:e6:5d:75:d0:38:74:d9:e6:4a:bf:a4:41: 82:e0:8f:1d:17:f7:37:8e:ff:b3:a8:ea:39:dd:cd: c2:6e:1f:ef:ac:71:5c:18:a9:66:db:f5:26:33:b8: 6c:5c:e8:c4:87:c3:3a:50:45:c0:d9:28:6f:cb:76: b3:d0:51:32:36:1b:27:81:b0:e3:54:78:33:bc:c9: f2:12:74:52:92:3d:7d:62:0e:36:df:27:ec:a5:40: 1a:01:23:a6:56:42:cd:b2:38:6d:c6:25:f7:35:d8: 1e:d3:43:41:3c:cb:7f:5e:23:4f:d0:91:10:9b:84: 1b:14:f8:dd:47:18:3c:a8:c4:a8:89:5e:72:1c:a8: a4:f6:f5:2e:f8:4f:7d:80:65:b8:77:a2:b0:1a:79: a2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FA:FB:9E:D2:D9:FE:52:DA:95:F7:C9:95:7E:E6:60:C0:A8:33:7B X509v3 Authority Key Identifier: keyid:F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:9a:3c:30:a5:99:68:cc:3e:b8:ed:2a:25:92:2e:d8:01:ec: 08:64:3c:e4:e8:63:d9:0d:11:11:c3:6b:82:93:30:16:e2:30: 07:af:28:05:cf:28:6f:60:a7:35:65:dc:cf:b3:56:45:43:13: 1f:49:77:cf:3e:bc:59:46:dc:6a:50:ee:c3:5d:b9:ac:5f:c1: 19:8c:ce:44:a8:a8:43:94:ad:dc:14:c3:80:87:5b:ba:f7:bd: 4e:df:b1:18:a0:2f:b8:df:2d:af:87:50:6d:b9:44:5d:50:9e: a2:d6:2e:59:b6:ec:cd:65:c1:55:e3:75:f0:27:49:b8:e2:cc: c8:00:5f:26:7b:cd:58:56:80:bf:51:ac:07:4d:17:23:ce:5e: e4:22:b7:f1:4c:61:d7:78:9a:d9:de:81:a3:3d:4e:fd:ae:4f: c9:bd:0c:3f:81:39:5f:01:a4:c8:1a:0f:14:8b:47:26:c4:f0: 7a:26:c0:e2:3f:c9:c1:2b:eb:16:ea:97:27:b9:82:df:0c:83: 25:01:7c:f1:12:b7:92:d6:2c:8a:49:b3:28:b3:30:0d:be:f7: d6:3c:8d:3d:73:b1:d0:1f:b8:cb:64:46:d4:09:c1:10:12:38: 22:20:10:a1:21:a9:1e:b1:7c:62:5d:a1:10:ab:19:46:c9:7f: 6a:0c:3b:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNENTAxMTAvBgNVBAUTKEY1MURDNjY5REI1OTYxODREMEJGOTRBQTFFNDFFNURF MTU5RThEQTUwHhcNMjUxMTA0MTgyNDQ1WhcNMjUxMTExMTgyNDQ1WjAYMRYwFAYD VQQDEw02OTBhNDRlZS1jMzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJBxHA9bs08rr1RxdJfW1/N37a4SFhChUw+EuveEjTybYyHIuxPYTNtPorlS ARpjL2XAivKt0Y3XWKqYhlSmOKSn+S8oojUC5+wro89oWxXnKPDfrPrcQc6A24UM jhzdpiv8BtZJ/wwwykDmXXXQOHTZ5kq/pEGC4I8dF/c3jv+zqOo53c3Cbh/vrHFc GKlm2/UmM7hsXOjEh8M6UEXA2Shvy3az0FEyNhsngbDjVHgzvMnyEnRSkj19Yg42 3yfspUAaASOmVkLNsjhtxiX3Ndge00NBPMt/XiNP0JEQm4QbFPjdRxg8qMSoiV5y HKik9vUu+E99gGW4d6KwGnmiEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH36+57S 2f5S2pX3yZV+5mDAqDN7MB8GA1UdIwQYMBaAFPUdxmnbWWGE0L+Uqh5B5d4Vno2l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q1MC8xNTQ2NEZENjA1 MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZVFF2NVNxSGtIbDNoV2Vq YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSM0dhZHRaWVlUUXY1U3FIa0hsM2hXZWphVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q1MC8xNTQ2NEZENjA1MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZ VFF2NVNxSGtIbDNoV2VqYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2mjwwpZlozD647Solki7YAewIZDzk6GPZDRERw2uCkzAW4jAHrygF zyhvYKc1ZdzPs1ZFQxMfSXfPPrxZRtxqUO7DXbmsX8EZjM5EqKhDlK3cFMOAh1u6 971O37EYoC+43y2vh1BtuURdUJ6i1i5ZtuzNZcFV43XwJ0m44szIAF8me81YVoC/ UawHTRcjzl7kIrfxTGHXeJrZ3oGjPU79rk/JvQw/gTlfAaTIGg8Ui0cmxPB6JsDi P8nBK+sW6pcnuYLfDIMlAXzxEreS1iyKSbMoszANvvfWPI09c7HQH7jLZEbUCcEQ EjgiIBChIakesXxiXaEQqxlGyX9qDDt2 -----END CERTIFICATE-----Generated at Wed Nov 5 15:33:58 2025 by rpki-client