$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft File: trtjZLzkhc7AbTOZSRWHpIJZHLw.mft (raw, json) Hash identifier: FA4WY3TjOt09Wq0ldQvyJ0hUnksizcjSYwERq9PfOtE= Subject key identifier: 72:3A:80:40:EE:51:B6:58:43:CD:AB:75:EA:91:70:07:0E:5F:A6:25 Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC Certificate issuer: /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Certificate serial: 09A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft Manifest number: 099B Signing time: Tue 04 Nov 2025 20:09:19 +0000 Manifest this update: Tue 04 Nov 2025 20:09:19 +0000 Manifest next update: Tue 11 Nov 2025 20:09:19 +0000 Files and hashes: 1: trtjZLzkhc7AbTOZSRWHpIJZHLw.crl (hash: W1BYrInYzromp+pwFvNihhzquoo/GKSJKt/zZoNxDKc=) 2: 25295764036811ED9D8E5F3EC4F9AE02.roa (hash: tZaPoTXH9PYuZmi5WQPi/UkCOHiXWsrwkIuE69EcCaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2469 (0x9a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123B8B, serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Validity Not Before: Nov 4 20:09:19 2025 GMT Not After : Nov 11 20:09:19 2025 GMT Subject: CN=690a5d6f-e3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:cf:9e:bd:03:db:29:f4:b8:6b:81:d2:ec: 6c:1c:54:c9:08:d9:47:ad:a8:ac:05:9d:b0:32:4e: fa:05:5d:b3:c3:de:f7:fe:ba:2e:98:64:76:80:51: 49:37:62:e8:2e:22:26:23:d4:ff:c5:60:64:ba:f4: 9b:fd:73:4a:3c:45:5d:2e:7e:28:6b:54:f2:05:62: c7:07:49:db:ed:54:da:c5:64:33:44:1e:37:f8:dc: 13:19:bd:05:3a:c9:22:de:7d:15:3a:5c:f7:ba:69: dc:7e:f3:3e:71:de:07:e8:47:78:f5:dd:16:d5:31: d9:89:5f:0f:5f:7c:1c:b3:d8:84:d2:ac:3d:7b:06: 65:0d:23:fe:a6:65:9c:9b:56:de:f3:ee:20:e2:65: d6:a6:61:6d:c2:9c:66:ec:86:a2:e1:15:a0:f2:f8: 4e:0b:3d:af:e9:60:6f:3b:04:e7:15:9f:01:1e:70: b9:17:c2:49:f8:5e:60:05:22:55:c2:ac:4b:79:72: 93:bf:60:7a:06:94:ea:55:36:ff:50:62:34:ff:6f: 84:a8:da:1b:53:8a:03:37:81:1a:27:eb:4d:48:3f: 23:2e:2a:76:fc:f5:6d:b9:a7:ef:5a:50:b2:f9:5e: bd:cf:a8:49:60:92:70:b7:a9:e6:0f:bb:ac:01:0e: 4d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3A:80:40:EE:51:B6:58:43:CD:AB:75:EA:91:70:07:0E:5F:A6:25 X509v3 Authority Key Identifier: keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6f:54:71:85:8b:b4:17:a3:31:ac:8a:d5:d2:7a:6a:f5:cd: 1a:4d:35:1e:76:df:e1:9a:42:65:1a:7c:8b:c4:4a:9b:9f:32: 48:8e:f6:dc:69:69:9f:c3:cd:1a:13:e9:eb:39:8a:97:e8:8c: f5:e5:20:63:82:de:7a:37:2a:29:ac:d0:a4:25:bb:f6:65:72: 80:db:22:8a:3d:6c:37:4d:c8:2f:c2:c4:aa:2a:22:a5:a5:7d: 23:94:3a:62:6e:94:c9:1c:80:8e:3c:8b:e6:c4:26:9b:7d:f1: c1:69:9a:95:4e:bc:53:12:2a:e2:b0:11:9b:f4:a4:24:95:84: 92:44:8a:84:3e:35:1f:7c:73:03:0f:14:62:de:ca:f6:2b:62: 91:2c:f0:6b:88:e2:e8:05:a3:c7:09:b2:01:7a:3a:5c:a0:49: 5a:53:a8:9c:71:9f:30:30:12:f9:d0:5d:b7:5a:c8:ef:d5:38: c2:27:50:43:19:86:70:58:da:12:fc:16:42:2e:9a:56:1c:e2: da:b7:2f:94:61:3e:28:fc:51:69:e3:59:51:aa:7a:65:3e:c0: fc:5e:db:13:c2:41:5d:73:bf:75:c5:57:11:91:58:30:28:57: 74:95:6f:61:aa:09:fa:fc:8b:08:ed:e6:23:c9:e4:60:8d:59: f6:ef:30:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCOEIxMTAvBgNVBAUTKEI2QkI2MzY0QkNFNDg1Q0VDMDZEMzM5OTQ5MTU4N0E0 ODI1OTFDQkMwHhcNMjUxMTA0MjAwOTE5WhcNMjUxMTExMjAwOTE5WjAYMRYwFAYD VQQDEw02OTBhNWQ2Zi1lM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0nPnr0D2yn0uGuB0uxsHFTJCNlHraisBZ2wMk76BV2zw973/roumGR2gFFJ N2LoLiImI9T/xWBkuvSb/XNKPEVdLn4oa1TyBWLHB0nb7VTaxWQzRB43+NwTGb0F Oski3n0VOlz3umncfvM+cd4H6Ed49d0W1THZiV8PX3wcs9iE0qw9ewZlDSP+pmWc m1be8+4g4mXWpmFtwpxm7Iai4RWg8vhOCz2v6WBvOwTnFZ8BHnC5F8JJ+F5gBSJV wqxLeXKTv2B6BpTqVTb/UGI0/2+EqNobU4oDN4EaJ+tNSD8jLip2/PVtuafvWlCy +V69z6hJYJJwt6nmD7usAQ5NhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHI6gEDu UbZYQ82rdeqRcAcOX6YlMB8GA1UdIwQYMBaAFLa7Y2S85IXOwG0zmUkVh6SCWRy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0I4Qi83QUNDQ0I0MDlD NkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hjN0FiVE9aU1JXSHBJSlpI THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RydGpaTHpraGM3QWJUT1pTUldIcElKWkhMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0I4Qi83QUNDQ0I0MDlDNkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hj N0FiVE9aU1JXSHBJSlpITHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeb1RxhYu0F6MxrIrV0npq9c0aTTUedt/hmkJlGnyLxEqbnzJIjvbc aWmfw80aE+nrOYqX6Iz15SBjgt56NyoprNCkJbv2ZXKA2yKKPWw3TcgvwsSqKiKl pX0jlDpibpTJHICOPIvmxCabffHBaZqVTrxTEirisBGb9KQklYSSRIqEPjUffHMD DxRi3sr2K2KRLPBriOLoBaPHCbIBejpcoElaU6iccZ8wMBL50F23Wsjv1TjCJ1BD GYZwWNoS/BZCLppWHOLaty+UYT4o/FFp41lRqnplPsD8XtsTwkFdc791xVcRkVgw KFd0lW9hqgn6/IsI7eYjyeRgjVn27zAw -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:27 2025 by rpki-client