$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft File: T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json) Hash identifier: pBdeOZfkXu7U2PotmJ0xhcoV68cltwGP1LfB7pbrBUg= Subject key identifier: 89:AD:F5:EE:BA:06:7F:AD:25:D0:03:16:26:ED:FA:C0:E3:83:E4:93 Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 Certificate issuer: /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Certificate serial: 0CEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft Manifest number: 0CE4 Signing time: Tue 04 Nov 2025 18:13:09 +0000 Manifest this update: Tue 04 Nov 2025 18:13:08 +0000 Manifest next update: Tue 11 Nov 2025 18:13:08 +0000 Files and hashes: 1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: xyxr06QqntBgTIglqL8ERco7K5vO5Xng6Ru4MdCF+QY=) 2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: oJosadtw5w9tpArhAwGt/EEeiGusbxI8nMtN4HfNB7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3307 (0xceb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Validity Not Before: Nov 4 18:13:08 2025 GMT Not After : Nov 11 18:13:08 2025 GMT Subject: CN=690a4235-1853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:6d:9e:f1:b0:c9:4a:83:ba:0e:32:05:48: 0d:57:cd:f1:ea:04:32:c8:8d:60:3b:1f:14:67:fe: 0b:f8:d5:54:89:4f:b3:88:07:8b:ef:fa:e7:ac:4d: 71:b3:17:26:b2:24:aa:ce:00:01:95:14:6d:39:fb: ca:83:c6:c3:e4:4a:f9:de:5b:d4:51:8d:09:57:b4: c7:af:52:87:c2:9c:be:7c:c2:de:7a:ff:b3:b9:7c: 3a:b4:9b:cb:4d:e6:1e:14:0c:74:75:8f:4d:12:63: 29:fa:87:9f:0e:36:98:1c:c2:7a:f4:63:54:41:39: 62:a2:15:17:0c:4c:ab:de:38:86:46:af:2a:55:00: ca:4f:91:74:78:c0:b8:f4:56:02:b8:18:4b:c8:3a: ed:37:c5:a9:69:eb:f3:4f:f2:5e:75:c5:00:2a:24: 8b:d2:61:e4:bb:0b:9e:49:d4:58:78:cf:c6:80:eb: 38:08:77:f3:e6:67:93:3b:40:1f:0c:3c:a4:e2:a9: 88:92:a0:6f:12:15:e8:c6:37:57:78:77:53:5a:87: 66:85:a7:2b:4a:7a:55:f4:4c:0f:f8:e2:af:59:f7: 6d:11:b7:7d:2c:78:2c:7a:db:d4:2c:d3:c3:52:85: a8:07:ed:ab:7d:61:bc:40:b6:fa:c3:22:ee:e8:bc: dd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AD:F5:EE:BA:06:7F:AD:25:D0:03:16:26:ED:FA:C0:E3:83:E4:93 X509v3 Authority Key Identifier: keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:60:6f:90:98:a3:25:97:35:90:a6:97:e4:3c:7c:93:8a:ab: bd:5e:94:25:b8:59:0f:e7:16:2d:93:ec:80:e6:96:9d:1b:af: 18:01:50:56:a3:30:90:43:a1:8f:1d:34:72:35:b0:ad:ca:60: 33:7b:60:c0:70:f1:44:ca:b2:f9:88:3f:30:fc:d1:30:97:20: 92:33:1a:f1:27:98:23:90:53:34:fb:43:3b:74:f3:61:1f:3e: 6c:c5:a5:80:40:92:bc:38:76:f6:90:bd:fe:ba:e0:fd:5a:9b: 50:67:21:b8:ea:30:a8:d6:b2:9d:80:82:e7:af:d6:e0:71:8a: 3b:67:fa:07:95:eb:1f:ff:7a:ea:b4:77:ad:1d:36:d1:8e:2a: 46:7f:0f:d3:c3:cb:7b:68:6c:47:b4:4a:5c:8d:74:37:9a:b6: 99:12:3a:a3:19:50:08:53:b6:d8:97:d5:6c:2a:88:f9:15:bd: 66:31:e7:f0:d0:e7:68:10:e9:67:c8:9d:20:7d:86:40:94:74: 9c:61:f0:50:ba:f4:82:59:ec:50:c3:db:fa:27:eb:91:8c:5c: e0:7e:56:4f:07:ec:87:f1:12:e5:f7:4f:f8:a0:3c:01:11:43: 91:1d:a8:dd:68:c9:99:95:68:51:4b:b0:e7:50:93:21:70:f6: bb:85:f6:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNDIxMTAvBgNVBAUTKDRGRUY2NTA3QjI1NUQ4MDY2QTBEQTNGRjI3RDM5NTQ2 OEIxNTJEMzgwHhcNMjUxMTA0MTgxMzA4WhcNMjUxMTExMTgxMzA4WjAYMRYwFAYD VQQDEw02OTBhNDIzNS0xODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvVtnvGwyUqDug4yBUgNV83x6gQyyI1gOx8UZ/4L+NVUiU+ziAeL7/rnrE1x sxcmsiSqzgABlRRtOfvKg8bD5Er53lvUUY0JV7THr1KHwpy+fMLeev+zuXw6tJvL TeYeFAx0dY9NEmMp+oefDjaYHMJ69GNUQTliohUXDEyr3jiGRq8qVQDKT5F0eMC4 9FYCuBhLyDrtN8WpaevzT/JedcUAKiSL0mHkuwueSdRYeM/GgOs4CHfz5meTO0Af DDyk4qmIkqBvEhXoxjdXeHdTWodmhacrSnpV9EwP+OKvWfdtEbd9LHgsetvULNPD UoWoB+2rfWG8QLb6wyLu6LzdzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImt9e66 Bn+tJdADFibt+sDjg+STMB8GA1UdIwQYMBaAFE/vZQeyVdgGag2j/yfTlUaLFS04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M0Mi8zRkIzQjhEOEY1 NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJBWnFEYVBfSjlPVlJvc1ZM VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtOWxCN0pWMkFacURhUF9KOU9WUm9zVkxUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M0Mi8zRkIzQjhEOEY1NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJB WnFEYVBfSjlPVlJvc1ZMVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzYG+QmKMllzWQppfkPHyTiqu9XpQluFkP5xYtk+yA5padG68YAVBW ozCQQ6GPHTRyNbCtymAze2DAcPFEyrL5iD8w/NEwlyCSMxrxJ5gjkFM0+0M7dPNh Hz5sxaWAQJK8OHb2kL3+uuD9WptQZyG46jCo1rKdgILnr9bgcYo7Z/oHlesf/3rq tHetHTbRjipGfw/Tw8t7aGxHtEpcjXQ3mraZEjqjGVAIU7bYl9VsKoj5Fb1mMefw 0OdoEOlnyJ0gfYZAlHScYfBQuvSCWexQw9v6J+uRjFzgflZPB+yH8RLl90/4oDwB EUORHajdaMmZlWhRS7DnUJMhcPa7hfYN -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:46 2025 by rpki-client