$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json) Hash identifier: cL9GaOHfxNF7Lrd5cDI6E4eeR0/NpweAUXOrl58hBRk= Subject key identifier: 33:25:FD:0C:6A:9D:8E:F1:9F:82:28:8F:91:B9:AA:23:B6:B4:F2:A3 Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Certificate serial: 0CBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft Manifest number: 0CB4 Signing time: Tue 04 Nov 2025 18:16:23 +0000 Manifest this update: Tue 04 Nov 2025 18:16:22 +0000 Manifest next update: Tue 11 Nov 2025 18:16:22 +0000 Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: GCJFRdykyKzIKUZT+j+yIX76lgaE0woEACtPptKxs5Y=) 2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: UjvCEDYZnGIMs7cUk//riKADIcRlVC/6WW+32mEJgZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3259 (0xcbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Validity Not Before: Nov 4 18:16:22 2025 GMT Not After : Nov 11 18:16:22 2025 GMT Subject: CN=690a42f6-b571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:04:6f:79:ff:74:4d:9b:8f:43:dc:44:d5: eb:00:17:33:13:d8:a5:52:39:de:da:2c:00:70:a4: 4f:4d:3f:4a:d7:bb:d9:44:87:93:3b:78:4b:fe:14: 0f:fa:46:b6:b8:61:f7:0e:e8:95:1b:ff:3f:87:1e: 58:22:d0:46:0e:ec:81:7c:ab:14:c2:a2:a5:48:76: be:cb:16:3d:c0:57:cc:a6:1a:64:aa:a0:94:29:a9: 1f:30:6f:31:29:ab:15:c9:6e:1e:f2:b6:75:6b:93: c7:72:98:70:0c:61:a1:03:31:ad:7f:5d:a6:4d:b6: 19:c3:37:50:b5:56:fb:7a:a6:be:5d:c5:56:08:7e: da:af:8e:6b:c1:3e:84:12:fe:31:19:ec:56:61:f4: a5:ee:e6:dd:a8:3d:7d:26:40:7b:95:a4:ee:b7:0f: 88:d0:16:9e:0e:66:71:1b:8a:ba:5c:2c:17:96:f1: 3a:1e:ad:37:6d:13:78:ee:15:1f:3d:e3:10:42:4d: f8:de:8c:f4:48:54:da:84:1f:ce:f5:7c:96:c6:06: f9:da:df:a9:19:0f:a7:74:b5:5d:e6:81:92:b8:b7: 74:dd:56:0b:2f:34:bf:1e:f0:c6:4b:b1:d7:3a:f6: cf:4e:ca:76:71:3b:2f:e8:97:ea:58:58:b8:9c:7d: 3e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:25:FD:0C:6A:9D:8E:F1:9F:82:28:8F:91:B9:AA:23:B6:B4:F2:A3 X509v3 Authority Key Identifier: keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:4a:23:df:0c:56:9c:ba:35:4e:1a:78:99:0f:f6:0a:c7:fe: 75:29:2c:a1:c6:bd:10:85:fd:f4:ae:39:86:59:8b:27:e0:d9: 50:0a:b1:e8:e9:1d:1c:92:78:a4:92:2a:62:c1:10:8d:da:ee: f7:3d:17:38:b7:cf:fa:9f:e0:df:14:87:a2:4c:7f:27:42:79: a6:24:69:a3:39:28:fe:dc:47:06:2b:80:0f:53:30:71:41:75: 4f:8b:eb:f2:93:d8:5b:bf:77:b9:69:f6:da:23:0b:8d:22:92: d6:bc:57:e6:55:57:89:a8:4c:e3:ab:9b:9a:b3:3b:30:03:e9: 7a:87:ac:bf:1e:a2:a6:8f:c4:f0:05:7f:b9:81:52:ab:9e:ed: 1b:99:56:f1:14:87:f0:e5:b9:00:2f:e6:c3:48:b1:04:8f:ef: 13:8c:10:13:86:0b:cd:8c:99:84:24:2b:67:a5:2c:2a:20:2b: cb:0f:78:38:91:2d:12:1e:9c:24:45:83:fc:83:ba:86:2d:52: e4:66:d4:14:2a:86:b9:7a:22:a0:8e:fa:a4:de:0d:a4:e4:9d: 24:0e:23:10:ee:f4:2d:b7:16:9c:1f:39:9b:05:52:24:34:9b: a7:1b:9f:e3:35:c4:62:70:79:0b:48:57:08:cd:14:e5:84:0c: 51:18:c7:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhGNTcxMTAvBgNVBAUTKDRGRUQzRDM3MjFBNzhBQjIwNDg2Q0RBRjM0QTNBRTY5 MTdEODdDQkUwHhcNMjUxMTA0MTgxNjIyWhcNMjUxMTExMTgxNjIyWjAYMRYwFAYD VQQDEw02OTBhNDJmNi1iNTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudIEb3n/dE2bj0PcRNXrABczE9ilUjne2iwAcKRPTT9K17vZRIeTO3hL/hQP +ka2uGH3DuiVG/8/hx5YItBGDuyBfKsUwqKlSHa+yxY9wFfMphpkqqCUKakfMG8x KasVyW4e8rZ1a5PHcphwDGGhAzGtf12mTbYZwzdQtVb7eqa+XcVWCH7ar45rwT6E Ev4xGexWYfSl7ubdqD19JkB7laTutw+I0BaeDmZxG4q6XCwXlvE6Hq03bRN47hUf PeMQQk343oz0SFTahB/O9XyWxgb52t+pGQ+ndLVd5oGSuLd03VYLLzS/HvDGS7HX OvbPTsp2cTsv6JfqWFi4nH0+3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMl/Qxq nY7xn4Ioj5G5qiO2tPKjMB8GA1UdIwQYMBaAFE/tPTchp4qyBIbNrzSjrmkX2Hy+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEY1Ny80QzU5Rjk2NkZF QkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmlySUVoczJ2TktPdWFSZllm TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtMDlOeUduaXJJRWhzMnZOS091YVJmWWZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEY1Ny80QzU5Rjk2NkZFQkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmly SUVoczJ2TktPdWFSZllmTDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJSiPfDFacujVOGniZD/YKx/51KSyhxr0Qhf30rjmGWYsn4NlQCrHo 6R0cknikkipiwRCN2u73PRc4t8/6n+DfFIeiTH8nQnmmJGmjOSj+3EcGK4APUzBx QXVPi+vyk9hbv3e5afbaIwuNIpLWvFfmVVeJqEzjq5uaszswA+l6h6y/HqKmj8Tw BX+5gVKrnu0bmVbxFIfw5bkAL+bDSLEEj+8TjBAThgvNjJmEJCtnpSwqICvLD3g4 kS0SHpwkRYP8g7qGLVLkZtQUKoa5eiKgjvqk3g2k5J0kDiMQ7vQttxacHzmbBVIk NJunG5/jNcRicHkLSFcIzRTlhAxRGMdN -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:04 2025 by rpki-client