$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft File: T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json) Hash identifier: kYwv1CvnYrKTrTyxOMUULrwMMZn7h0rL+ixY8nQ2hJA= Subject key identifier: 71:E9:2F:D7:87:E9:12:3E:3F:1E:5D:04:77:0E:FD:99:20:2A:BE:B3 Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 Certificate issuer: /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Certificate serial: 0CEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft Manifest number: 0CE3 Signing time: Sun 02 Nov 2025 18:07:30 +0000 Manifest this update: Sun 02 Nov 2025 18:07:30 +0000 Manifest next update: Sun 09 Nov 2025 18:07:30 +0000 Files and hashes: 1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: +EXcRaRwux3Rkzvk9seykx6hK9Qo/CiHRO+bUJmo398=) 2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: oJosadtw5w9tpArhAwGt/EEeiGusbxI8nMtN4HfNB7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3306 (0xcea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Validity Not Before: Nov 2 18:07:30 2025 GMT Not After : Nov 9 18:07:30 2025 GMT Subject: CN=69079de2-f31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ff:d9:5d:d9:f2:b9:3b:93:fe:15:24:57:40: fc:54:ca:c8:e4:9c:34:30:6a:ff:c8:1a:d4:e1:f6: 59:13:45:14:44:05:e0:d0:1f:13:10:1b:d4:5e:61: fb:3b:b0:98:16:9c:cc:a3:1e:dd:c1:a3:a6:71:52: 65:8b:76:d7:77:17:5a:75:80:53:fd:50:2f:97:51: 3c:dd:4c:52:fe:84:2c:f4:71:eb:a1:a5:59:63:38: de:74:25:38:02:2b:e1:d5:0b:b4:d3:1d:16:53:97: c2:f0:b2:ad:f9:9e:27:ac:29:4e:48:31:11:6e:56: 51:6c:f1:fc:32:df:47:1f:21:f2:cb:e3:18:b8:15: 5a:66:75:98:00:fb:4f:d1:f0:c9:2b:e3:30:a4:1b: 76:eb:19:c5:5a:50:58:40:0e:59:c6:31:8c:eb:05: 01:28:45:c7:7a:cf:34:3a:8b:d5:67:89:42:c1:51: 94:dd:7f:68:5e:b3:8b:36:fd:2c:4d:78:85:e1:09: 9e:0a:e7:1d:9c:3e:e0:bd:24:57:b1:0c:28:67:ba: f7:15:3a:ea:72:81:b4:8c:43:c5:37:5f:3d:80:2f: 8e:02:d6:65:4e:55:f6:14:af:cf:db:ec:66:11:da: 2b:98:85:0a:db:19:72:39:e8:9b:93:3d:8e:03:b9: 72:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E9:2F:D7:87:E9:12:3E:3F:1E:5D:04:77:0E:FD:99:20:2A:BE:B3 X509v3 Authority Key Identifier: keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:52:b3:7e:6d:fa:f8:ce:8a:a6:e0:dc:f3:3d:18:d9:da:51: 13:22:11:c8:9a:ff:0f:6f:8c:0e:21:78:af:1e:d3:0a:74:2d: 9a:01:2a:fa:40:70:7e:40:d2:c0:b6:b3:bf:58:f6:0c:e5:8e: bf:a3:7a:c6:31:55:ee:c3:2d:8f:5a:a0:fa:3a:d4:8f:4d:85: fb:46:d4:a3:65:9f:8a:fa:32:20:1d:2c:9c:22:e2:b6:24:9e: b4:e4:66:a6:99:87:7b:b9:4f:da:9c:79:71:1b:4e:b1:eb:32: e9:56:be:89:40:c2:96:2d:b2:74:d2:c1:e9:a9:29:6a:59:75: be:fa:47:f0:6d:25:00:b1:ff:68:79:79:37:ab:e0:46:58:fc: ac:1d:09:09:18:2a:e5:17:5e:d0:93:1d:f0:41:70:52:6a:21: dd:8e:3a:7a:cc:d2:f1:f4:dd:94:0d:ae:16:37:0f:bb:32:7d: 75:e5:3b:b0:5e:d0:cb:57:c6:c7:fb:70:c9:67:0d:77:eb:db: f7:8d:a4:fe:92:bd:51:92:97:98:b2:53:77:79:bb:48:33:50: a7:e3:95:8b:58:75:f7:fd:1c:21:b3:41:42:51:77:18:a4:d8: 27:64:de:30:53:3c:b9:45:31:15:f8:c6:36:40:ce:e0:a7:e9: 80:4a:2f:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNDIxMTAvBgNVBAUTKDRGRUY2NTA3QjI1NUQ4MDY2QTBEQTNGRjI3RDM5NTQ2 OEIxNTJEMzgwHhcNMjUxMTAyMTgwNzMwWhcNMjUxMTA5MTgwNzMwWjAYMRYwFAYD VQQDEw02OTA3OWRlMi1mMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2f/ZXdnyuTuT/hUkV0D8VMrI5Jw0MGr/yBrU4fZZE0UURAXg0B8TEBvUXmH7 O7CYFpzMox7dwaOmcVJli3bXdxdadYBT/VAvl1E83UxS/oQs9HHroaVZYzjedCU4 Aivh1Qu00x0WU5fC8LKt+Z4nrClOSDERblZRbPH8Mt9HHyHyy+MYuBVaZnWYAPtP 0fDJK+MwpBt26xnFWlBYQA5ZxjGM6wUBKEXHes80OovVZ4lCwVGU3X9oXrOLNv0s TXiF4QmeCucdnD7gvSRXsQwoZ7r3FTrqcoG0jEPFN189gC+OAtZlTlX2FK/P2+xm EdormIUK2xlyOeibkz2OA7ly4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHpL9eH 6RI+Px5dBHcO/ZkgKr6zMB8GA1UdIwQYMBaAFE/vZQeyVdgGag2j/yfTlUaLFS04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M0Mi8zRkIzQjhEOEY1 NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJBWnFEYVBfSjlPVlJvc1ZM VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtOWxCN0pWMkFacURhUF9KOU9WUm9zVkxUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M0Mi8zRkIzQjhEOEY1NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJB WnFEYVBfSjlPVlJvc1ZMVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAUrN+bfr4zoqm4NzzPRjZ2lETIhHImv8Pb4wOIXivHtMKdC2aASr6 QHB+QNLAtrO/WPYM5Y6/o3rGMVXuwy2PWqD6OtSPTYX7RtSjZZ+K+jIgHSycIuK2 JJ605GammYd7uU/anHlxG06x6zLpVr6JQMKWLbJ00sHpqSlqWXW++kfwbSUAsf9o eXk3q+BGWPysHQkJGCrlF17Qkx3wQXBSaiHdjjp6zNLx9N2UDa4WNw+7Mn115Tuw XtDLV8bH+3DJZw1369v3jaT+kr1RkpeYslN3ebtIM1Cn45WLWHX3/Rwhs0FCUXcY pNgnZN4wUzy5RTEV+MY2QM7gp+mASi/h -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:48 2025 by rpki-client