$ rpki-client -vvf rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft File: T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft (raw, json) Hash identifier: TrOeXLnPtONcEY7DvseKrTe22bJMI9J3YiIUX37UdrE= Subject key identifier: 01:95:70:6C:83:AD:77:43:0C:E1:BE:0D:75:CD:5F:5E:5F:CA:14:DA Authority key identifier: 4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 Certificate issuer: /CN=A9194815/serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Certificate serial: 0664 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft Manifest number: 065F Signing time: Sun 02 Nov 2025 22:36:31 +0000 Manifest this update: Sun 02 Nov 2025 22:36:31 +0000 Manifest next update: Sun 09 Nov 2025 22:36:31 +0000 Files and hashes: 1: T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl (hash: qcq/35BOAc8lXQv7pXiVXK7crez9+SYflyOp8U979T4=) 2: 873D9ADEA1C411EB9F4FE15EC4F9AE02.roa (hash: Fr5NAXSgAa9hVkhIVMm09Qkrw1we8d2exICvkLCxNcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194815, serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Validity Not Before: Nov 2 22:36:31 2025 GMT Not After : Nov 9 22:36:31 2025 GMT Subject: CN=6907dcef-2bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9f:7c:08:24:e5:11:7e:65:db:3d:aa:12:e7: e7:35:b9:25:26:6f:64:8c:28:a3:17:e6:95:e3:43: ca:2e:82:36:89:d1:56:10:57:99:da:88:36:70:82: 7a:02:5a:19:ba:3c:b8:47:e9:8d:45:77:88:74:ab: 81:7e:81:9e:dd:e8:ed:57:fc:20:a9:93:55:5c:f4: 7c:d3:11:94:79:c9:61:0b:18:40:ea:78:53:7c:6d: 57:31:e8:da:99:2b:82:86:09:e8:e4:56:47:49:d1: 4f:5c:7e:28:49:cb:19:ef:7e:47:91:4f:94:38:0a: 79:67:bd:3a:03:97:6f:8e:1a:96:bb:27:c6:28:92: 3f:61:b3:87:2c:0c:17:d5:10:85:86:ec:e2:f2:36: 9c:ef:ac:a3:c3:6d:ca:e5:03:d0:1a:67:04:cb:84: 41:91:01:a4:04:0a:e3:3b:7b:36:50:0e:74:0e:e0: 94:d3:47:38:c5:7e:94:f5:55:69:f8:37:e3:95:95: 5c:ba:bd:35:0b:e1:f3:dd:d4:ce:e1:30:8d:b5:4b: 12:6b:cc:9b:74:66:2a:8a:d3:2d:dc:e4:51:b2:3e: 56:e2:36:6b:f4:6b:48:6a:c4:28:dd:ce:3e:32:2b: 8c:b1:84:49:f3:86:12:74:e6:a4:cb:31:84:05:80: 13:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:95:70:6C:83:AD:77:43:0C:E1:BE:0D:75:CD:5F:5E:5F:CA:14:DA X509v3 Authority Key Identifier: keyid:4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1e:63:02:51:16:66:8c:7c:83:2b:27:12:7a:77:8e:61:b1: 01:18:b0:cd:7c:e4:7c:72:22:40:db:8e:81:b0:06:ce:29:30: ad:42:e1:38:ba:a2:a7:87:65:5b:1d:1c:ea:87:37:ae:11:e3: 80:f0:46:73:86:8f:fd:7e:82:db:16:9d:3f:ba:50:cc:f7:7e: 96:61:e7:73:18:58:b9:2c:6c:7e:94:7f:0e:6c:db:5e:c5:2a: 75:49:e4:53:3b:da:16:a4:c3:11:c6:f9:b4:b5:37:8f:29:a0: 93:60:c5:8e:57:a1:5b:b7:de:8d:82:55:02:cd:8e:7f:66:a2: 63:2f:5d:61:ab:fe:8f:74:85:5c:fe:3a:f5:b1:51:0c:7f:46: de:b8:f4:98:71:2f:7c:3d:a9:80:0a:f9:06:fe:9a:5e:7d:aa: 5e:9a:5d:f6:46:87:53:36:ce:12:0a:0b:66:7a:e0:c5:2d:b8: 30:0d:b8:41:60:8c:25:b9:88:5c:6d:18:cd:54:80:61:ff:bf: 28:c2:98:af:11:7c:84:d0:6a:ca:b4:71:80:19:9d:12:48:06: b6:f7:f7:ec:a3:4a:7f:db:31:39:0e:8f:59:6c:0d:69:5e:19: 16:b4:fe:b2:f8:c4:1e:a9:1b:97:c4:4b:61:71:d8:59:92:b4: d7:39:e0:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4MTUxMTAvBgNVBAUTKDRGNzQ0QzNDMEFBNzk3OUE4NTg0OUY1NkVFQjdCOTg3 QUIyM0QyNTgwHhcNMjUxMTAyMjIzNjMxWhcNMjUxMTA5MjIzNjMxWjAYMRYwFAYD VQQDEw02OTA3ZGNlZi0yYmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJ98CCTlEX5l2z2qEufnNbklJm9kjCijF+aV40PKLoI2idFWEFeZ2og2cIJ6 AloZujy4R+mNRXeIdKuBfoGe3ejtV/wgqZNVXPR80xGUeclhCxhA6nhTfG1XMeja mSuChgno5FZHSdFPXH4oScsZ735HkU+UOAp5Z706A5dvjhqWuyfGKJI/YbOHLAwX 1RCFhuzi8jac76yjw23K5QPQGmcEy4RBkQGkBArjO3s2UA50DuCU00c4xX6U9VVp +DfjlZVcur01C+Hz3dTO4TCNtUsSa8ybdGYqitMt3ORRsj5W4jZr9GtIasQo3c4+ MiuMsYRJ84YSdOakyzGEBYAT8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGVcGyD rXdDDOG+DXXNX15fyhTaMB8GA1UdIwQYMBaAFE90TDwKp5eahYSfVu63uYerI9JY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDgxNS8xQjYzRTdEOEEx QzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1cUZoSjlXN3JlNWg2c2ow bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QzUk1QQXFubDVxRmhKOVc3cmU1aDZzajBsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDgxNS8xQjYzRTdEOEExQzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1 cUZoSjlXN3JlNWg2c2owbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSHmMCURZmjHyDKycSeneOYbEBGLDNfOR8ciJA246BsAbOKTCtQuE4 uqKnh2VbHRzqhzeuEeOA8EZzho/9foLbFp0/ulDM936WYedzGFi5LGx+lH8ObNte xSp1SeRTO9oWpMMRxvm0tTePKaCTYMWOV6Fbt96NglUCzY5/ZqJjL11hq/6PdIVc /jr1sVEMf0beuPSYcS98PamACvkG/ppefapeml32RodTNs4SCgtmeuDFLbgwDbhB YIwluYhcbRjNVIBh/78owpivEXyE0GrKtHGAGZ0SSAa29/fso0p/2zE5Do9ZbA1p XhkWtP6y+MQeqRuXxEthcdhZkrTXOeBB -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:05 2025 by rpki-client