$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft File: T9EeLMzVFBlTCsBKFCWPEahXfq0.mft (raw, json) Hash identifier: TvpCfMubflfL4SiZDzDlAxorjiFCxBXiDArmHfGulqA= Subject key identifier: DA:D0:BD:F5:76:3A:E2:5D:91:1A:2B:0C:56:7F:D3:EA:0E:A6:3A:BC Authority key identifier: 4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD Certificate issuer: /CN=A9172B65/serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft Manifest number: F3 Signing time: Wed 05 Nov 2025 05:26:13 +0000 Manifest this update: Wed 05 Nov 2025 05:26:12 +0000 Manifest next update: Wed 12 Nov 2025 05:26:12 +0000 Files and hashes: 1: T9EeLMzVFBlTCsBKFCWPEahXfq0.crl (hash: 66WS2u958gvE9/H4DA1DY0i0JpU/b9S9HzgXJt+b4uY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B65, serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD Validity Not Before: Nov 5 05:26:12 2025 GMT Not After : Nov 12 05:26:12 2025 GMT Subject: CN=690adff5-f92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5d:cf:9d:f3:6b:55:59:29:05:d6:42:5a:b8: 54:54:06:8a:ef:33:a7:33:be:2b:b0:03:a4:9e:12: b3:f4:03:3d:a8:62:3e:77:bd:03:0d:f3:94:5f:ab: de:96:45:de:67:43:f7:29:d1:18:bb:58:cf:28:41: 2e:03:d4:2f:41:41:b9:58:21:05:5c:53:39:87:ea: e7:57:43:3a:7c:17:51:42:2f:0a:5f:38:bf:67:bc: 32:fb:eb:6a:60:ce:b1:e5:00:ec:69:58:4d:61:5b: 65:a5:09:84:7d:25:4b:df:e2:f9:49:98:ae:1c:fe: da:98:72:47:f1:b3:2d:99:b0:b3:a2:ff:68:c8:af: 9d:b0:fe:77:97:dc:18:af:b0:7b:96:dd:e2:f5:d9: a6:22:10:27:79:19:e7:53:f6:c0:ff:a7:af:af:85: cf:5f:32:0f:5c:74:b6:bf:2b:10:2c:5d:84:ae:b0: 65:26:d7:1e:47:8c:1c:bb:bd:5d:6d:e4:e6:3a:b1: 2f:ae:ed:b5:fe:cc:94:6c:ba:6d:74:7c:a7:d0:8f: 62:79:2e:69:58:52:ad:de:aa:fd:cf:da:bd:84:31: c5:e4:8d:82:e2:d4:e1:9e:63:b8:d1:01:a5:35:b7: a2:af:fc:ae:38:71:26:6a:98:53:fa:67:af:eb:01: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D0:BD:F5:76:3A:E2:5D:91:1A:2B:0C:56:7F:D3:EA:0E:A6:3A:BC X509v3 Authority Key Identifier: keyid:4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:dd:a5:32:96:d5:db:74:7e:87:35:fc:11:e5:dd:7a:c0:20: b2:3a:8b:20:20:f4:3f:10:2e:51:e2:69:39:76:07:98:60:32: 91:07:02:71:ad:73:75:82:60:e2:61:43:cd:56:c7:bc:7e:33: 99:d4:ca:f4:74:78:88:b5:09:c2:78:f0:6f:01:da:52:f2:34: 43:e3:0b:c9:7a:c4:a4:57:b5:03:08:37:3c:a6:9a:36:24:7e: c1:f2:47:77:0b:72:7c:ba:1d:13:c8:72:15:b6:ca:e1:cb:a3: 38:89:c9:d1:ad:d8:29:6e:66:3d:c8:a8:a1:10:db:fe:6e:68: 0e:dd:ac:77:8b:a6:bd:58:85:73:81:ee:30:ea:18:df:62:a4: f8:58:e5:3b:b1:ce:32:66:1c:64:96:34:51:e9:d6:3b:89:81: 04:93:7e:cc:dd:82:48:b1:37:f0:be:34:91:ae:d4:56:20:1f: 4a:d4:06:6e:bb:dc:11:31:fe:d6:fe:71:44:f1:b2:ef:c4:ed: 40:a3:13:ca:6b:bd:3c:71:20:cc:81:cd:f7:8b:8d:5e:24:74: 76:17:a9:ce:10:76:82:7d:57:53:37:db:f0:e2:a9:d1:d3:78: 43:4c:ba:8f:cc:08:4e:8c:7a:eb:22:50:63:0e:be:36:14:50: e1:09:15:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNjUxMTAvBgNVBAUTKDRGRDExRTJDQ0NENTE0MTk1MzBBQzA0QTE0MjU4RjEx QTg1NzdFQUQwHhcNMjUxMTA1MDUyNjEyWhcNMjUxMTEyMDUyNjEyWjAYMRYwFAYD VQQDEw02OTBhZGZmNS1mOTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1F3PnfNrVVkpBdZCWrhUVAaK7zOnM74rsAOknhKz9AM9qGI+d70DDfOUX6ve lkXeZ0P3KdEYu1jPKEEuA9QvQUG5WCEFXFM5h+rnV0M6fBdRQi8KXzi/Z7wy++tq YM6x5QDsaVhNYVtlpQmEfSVL3+L5SZiuHP7amHJH8bMtmbCzov9oyK+dsP53l9wY r7B7lt3i9dmmIhAneRnnU/bA/6evr4XPXzIPXHS2vysQLF2ErrBlJtceR4wcu71d beTmOrEvru21/syUbLptdHyn0I9ieS5pWFKt3qr9z9q9hDHF5I2C4tThnmO40QGl Nbeir/yuOHEmaphT+mev6wFh/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrQvfV2 OuJdkRorDFZ/0+oOpjq8MB8GA1UdIwQYMBaAFE/RHizM1RQZUwrAShQljxGoV36t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wOTg1MEI4MjQ1 QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9UOUVlTE16VkZCbFRDc0JLRkNXUEVhaFhm cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5RWVMTXpWRkJsVENzQktGQ1dQRWFoWGZxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI2NS8wOTg1MEI4MjQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9UOUVlTE16VkZC bFRDc0JLRkNXUEVhaFhmcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW3aUyltXbdH6HNfwR5d16wCCyOosgIPQ/EC5R4mk5dgeYYDKRBwJx rXN1gmDiYUPNVse8fjOZ1Mr0dHiItQnCePBvAdpS8jRD4wvJesSkV7UDCDc8ppo2 JH7B8kd3C3J8uh0TyHIVtsrhy6M4icnRrdgpbmY9yKihENv+bmgO3ax3i6a9WIVz ge4w6hjfYqT4WOU7sc4yZhxkljRR6dY7iYEEk37M3YJIsTfwvjSRrtRWIB9K1AZu u9wRMf7W/nFE8bLvxO1AoxPKa708cSDMgc33i41eJHR2F6nOEHaCfVdTN9vw4qnR 03hDTLqPzAhOjHrrIlBjDr42FFDhCRU0 -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:21 2025 by rpki-client