$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json) Hash identifier: K8kpd2LurR4uRLcxQJvd2TJBdJ2YXBcFlY2cwEUpoPQ= Subject key identifier: 59:C2:F9:18:9C:B1:FE:56:30:85:E8:FF:7B:40:83:04:48:21:C2:DE Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Certificate serial: 0CBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft Manifest number: 0CB3 Signing time: Sun 02 Nov 2025 18:10:43 +0000 Manifest this update: Sun 02 Nov 2025 18:10:43 +0000 Manifest next update: Sun 09 Nov 2025 18:10:43 +0000 Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: xtvSo0VtKygNHJZ4Sb8NFWMNR/G4t1U5O46oT9ELR1k=) 2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: UjvCEDYZnGIMs7cUk//riKADIcRlVC/6WW+32mEJgZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Validity Not Before: Nov 2 18:10:43 2025 GMT Not After : Nov 9 18:10:43 2025 GMT Subject: CN=69079ea3-6bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:b2:bc:51:60:e2:69:71:26:2c:e6:c2:b5: b2:b0:68:cb:af:d0:58:5a:80:95:69:e5:e0:b5:01: 57:65:05:5a:0e:0c:60:7f:2f:69:84:0c:fb:01:4d: e8:57:d4:28:ca:78:3d:df:78:f8:02:0f:8f:ac:51: bd:dc:3e:be:4b:f0:09:a7:9b:d4:50:44:89:1e:78: 43:f0:0b:87:33:66:fe:3b:a0:5f:41:bb:10:a3:9d: af:98:50:b9:99:4b:e9:04:89:b7:e8:fa:26:75:a3: 4b:67:f9:5f:e3:ee:5a:08:32:65:05:a1:c8:50:92: 19:d8:82:15:6e:3a:19:98:d1:5d:c9:e6:55:e3:0a: 9a:8b:69:3c:e7:db:01:ac:b6:86:7d:2b:d2:69:37: ab:17:b4:e6:b5:1e:9f:96:5d:ac:b8:a4:f3:5b:00: 92:f3:54:5e:af:e0:d6:1d:22:23:a4:b0:78:98:8e: cf:ec:bb:8e:29:f9:3b:de:0f:39:47:d0:59:c7:b5: 3b:e0:bd:b7:2a:0e:78:e3:86:22:5c:3d:47:b0:f9: 03:29:f6:44:32:01:9f:7f:8c:9e:e9:3a:ef:21:59: 55:e2:2d:46:75:46:0b:3d:f4:9d:c6:7d:ab:4e:9f: fb:88:9c:38:34:d1:ef:55:74:b2:c9:4f:13:e6:93: 32:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C2:F9:18:9C:B1:FE:56:30:85:E8:FF:7B:40:83:04:48:21:C2:DE X509v3 Authority Key Identifier: keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c3:f6:41:4a:75:45:19:2a:a2:7c:63:0b:fa:1a:3d:ef:c2: ea:62:b2:db:8e:1d:45:13:a7:83:e7:2b:22:7a:a6:ba:83:3b: 6b:39:f4:07:1f:3a:80:aa:4b:b1:37:89:9b:95:ee:26:5f:45: 57:a1:cd:6c:5f:ed:8d:5b:89:8d:b4:f6:96:37:fe:a5:4c:41: 6f:8f:d5:59:9f:2b:37:37:38:80:f3:51:38:ff:70:e2:46:57: c9:96:02:f5:1a:9c:b6:7b:3a:b9:61:e2:c6:7c:de:2b:dd:a3: d0:d0:21:f3:6e:d4:d3:5a:73:21:e7:6e:83:0b:e3:5a:d5:75: 4d:51:a9:eb:b1:2e:3e:06:a2:5d:3a:9e:1b:9f:82:cd:41:4b: 26:0d:7b:f4:1a:ea:c4:24:1d:66:20:de:33:f3:72:b8:60:4e: 2e:de:4f:b7:94:92:3b:05:e0:da:e6:47:c9:5c:74:d9:9a:7c: c4:53:ba:43:65:ba:35:11:30:f5:a7:22:8a:0e:3b:c9:32:cd: 35:05:2a:c5:ff:a7:52:e8:f0:ee:0f:7a:dc:46:bf:49:18:2c: 08:e8:5f:40:65:6f:ba:41:77:56:12:f4:b1:e2:32:1a:38:49: 25:9b:3e:6e:b1:52:6c:07:06:84:25:17:c1:0f:8b:33:f1:09: 5f:b6:af:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhGNTcxMTAvBgNVBAUTKDRGRUQzRDM3MjFBNzhBQjIwNDg2Q0RBRjM0QTNBRTY5 MTdEODdDQkUwHhcNMjUxMTAyMTgxMDQzWhcNMjUxMTA5MTgxMDQzWjAYMRYwFAYD VQQDEw02OTA3OWVhMy02YmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwCyvFFg4mlxJizmwrWysGjLr9BYWoCVaeXgtQFXZQVaDgxgfy9phAz7AU3o V9Qoyng933j4Ag+PrFG93D6+S/AJp5vUUESJHnhD8AuHM2b+O6BfQbsQo52vmFC5 mUvpBIm36PomdaNLZ/lf4+5aCDJlBaHIUJIZ2IIVbjoZmNFdyeZV4wqai2k859sB rLaGfSvSaTerF7TmtR6fll2suKTzWwCS81Rer+DWHSIjpLB4mI7P7LuOKfk73g85 R9BZx7U74L23Kg5444YiXD1HsPkDKfZEMgGff4ye6TrvIVlV4i1GdUYLPfSdxn2r Tp/7iJw4NNHvVXSyyU8T5pMyqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnC+Ric sf5WMIXo/3tAgwRIIcLeMB8GA1UdIwQYMBaAFE/tPTchp4qyBIbNrzSjrmkX2Hy+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEY1Ny80QzU5Rjk2NkZF QkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmlySUVoczJ2TktPdWFSZllm TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtMDlOeUduaXJJRWhzMnZOS091YVJmWWZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEY1Ny80QzU5Rjk2NkZFQkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmly SUVoczJ2TktPdWFSZllmTDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaw/ZBSnVFGSqifGML+ho978LqYrLbjh1FE6eD5ysieqa6gztrOfQH HzqAqkuxN4mble4mX0VXoc1sX+2NW4mNtPaWN/6lTEFvj9VZnys3NziA81E4/3Di RlfJlgL1Gpy2ezq5YeLGfN4r3aPQ0CHzbtTTWnMh526DC+Na1XVNUanrsS4+BqJd Op4bn4LNQUsmDXv0GurEJB1mIN4z83K4YE4u3k+3lJI7BeDa5kfJXHTZmnzEU7pD Zbo1ETD1pyKKDjvJMs01BSrF/6dS6PDuD3rcRr9JGCwI6F9AZW+6QXdWEvSx4jIa OEklmz5usVJsBwaEJRfBD4sz8Qlftq8G -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:29 2025 by rpki-client