$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft File: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json) Hash identifier: XZI4cf8931+n0vG/si9lm/Q89SuH6JWXEUIhLEHC0jU= Subject key identifier: 04:EA:C8:ED:FA:78:BF:EA:ED:CE:D5:E7:A0:DF:D8:E1:BE:9E:60:D8 Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 Certificate issuer: /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft Manifest number: 010A Signing time: Mon 03 Nov 2025 04:57:33 +0000 Manifest this update: Mon 03 Nov 2025 04:57:32 +0000 Manifest next update: Mon 10 Nov 2025 04:57:32 +0000 Files and hashes: 1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: ZTmXibhGokUYL8CRXI/Zv7uZtTbg0X2O5sLsTJJTYMk=) 2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: qfe+ZRHsuzJUkN6PV847BSXw2bwliF4QuG/2zTq3t3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Validity Not Before: Nov 3 04:57:32 2025 GMT Not After : Nov 10 04:57:32 2025 GMT Subject: CN=6908363c-d805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f6:46:11:fb:33:ec:9a:f7:1a:a8:10:11:04: be:21:6e:d4:5b:4c:9e:c2:d9:65:17:1c:e6:b4:6d: 24:03:d5:25:81:cb:c0:ab:6c:f0:eb:20:8f:bb:8c: d1:96:50:f7:79:39:97:58:69:80:96:6b:59:20:db: 74:30:55:0e:78:52:db:c5:24:db:38:8f:1d:56:56: 89:74:84:ff:da:d7:28:a3:24:79:21:12:af:be:cf: 54:4b:67:69:11:a2:25:e3:8b:0f:b1:3f:f0:b3:af: 65:7c:9a:68:50:8f:bc:ac:6e:77:60:a4:9f:7c:bb: be:38:ea:5e:c6:05:c3:5b:cd:44:a1:0a:ce:a7:ec: 8b:70:e3:a4:d5:81:6d:57:d8:42:9a:b4:90:0a:63: 21:74:06:3a:d0:0c:4a:f9:b6:01:08:11:58:dc:fe: 3f:b3:94:17:f0:88:45:d6:34:e1:88:97:fb:a3:69: 8f:09:b6:29:f6:d6:1c:18:1c:04:cb:e5:00:e4:d1: 77:1b:a1:c6:36:79:fd:cd:13:02:33:a6:2b:c7:af: 48:40:4d:67:dc:1e:23:2e:1a:70:bd:e4:0b:1c:79: 56:06:b3:0f:c3:c2:35:4b:57:b3:6d:c7:ad:db:29: 08:a5:5a:f3:07:a7:19:06:de:63:2f:3d:0b:dd:52: f9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EA:C8:ED:FA:78:BF:EA:ED:CE:D5:E7:A0:DF:D8:E1:BE:9E:60:D8 X509v3 Authority Key Identifier: keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:c2:31:47:d5:c2:94:fb:fc:bc:c9:cf:4a:c6:36:ef:71:48: d9:7a:ca:0b:e3:44:5b:f2:cc:73:81:da:6f:b9:ee:d1:0d:16: 6b:54:37:ed:18:59:bc:dc:72:a7:26:4a:fb:a4:cc:c1:04:08: 54:b8:7d:b2:92:6f:56:98:ba:a0:0a:06:66:5c:da:48:1d:c2: 87:df:38:03:5a:c3:81:0b:5f:27:38:8f:75:b6:bf:29:b9:87: 2b:29:04:db:41:5d:42:39:d8:d0:95:ba:0a:01:9e:af:c4:ca: 77:b8:03:00:43:a1:67:46:00:8a:54:5a:f1:28:b4:0f:62:cf: 97:99:61:3e:6d:60:36:2d:f0:7f:60:8a:dd:25:e9:27:89:28: 90:34:41:25:04:5f:41:3a:8a:c7:a7:cc:8d:71:d7:41:58:b4: 3d:e2:f6:b4:59:c0:05:4a:b5:55:26:e2:e9:e3:b7:8e:e4:65: da:0b:19:ce:1c:0f:0c:d3:75:25:f3:f3:8b:37:6a:ff:a2:a3: 0a:f4:82:e7:4e:09:06:f9:e5:fb:3e:65:f9:25:74:22:eb:88: a5:36:30:87:53:54:0a:ee:1c:83:6b:cb:4a:f5:7c:1b:45:2d: 93:eb:30:4c:13:ed:a4:19:26:eb:5e:19:42:7f:6f:b2:be:01: 58:ab:ec:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKEY3RjA2MzY5Mzk5RDk5MzVGNUZCNTlGRDU4NTcxNTQx QTU4MUNDNjMwHhcNMjUxMTAzMDQ1NzMyWhcNMjUxMTEwMDQ1NzMyWjAYMRYwFAYD VQQDEw02OTA4MzYzYy1kODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvZGEfsz7Jr3GqgQEQS+IW7UW0yewtllFxzmtG0kA9UlgcvAq2zw6yCPu4zR llD3eTmXWGmAlmtZINt0MFUOeFLbxSTbOI8dVlaJdIT/2tcooyR5IRKvvs9US2dp EaIl44sPsT/ws69lfJpoUI+8rG53YKSffLu+OOpexgXDW81EoQrOp+yLcOOk1YFt V9hCmrSQCmMhdAY60AxK+bYBCBFY3P4/s5QX8IhF1jThiJf7o2mPCbYp9tYcGBwE y+UA5NF3G6HGNnn9zRMCM6Yrx69IQE1n3B4jLhpwveQLHHlWBrMPw8I1S1ezbcet 2ykIpVrzB6cZBt5jLz0L3VL5EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATqyO36 eL/q7c7V56Df2OG+nmDYMB8GA1UdIwQYMBaAFPfwY2k5nZk19ftZ/VhXFUGlgcxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS84NjI0NjM0ODFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1UWDEtMW45V0ZjVlFhV0J6 R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlfQmphVG1kbVRYMS0xbjlXRmNWUWFXQnpHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS84NjI0NjM0ODFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1U WDEtMW45V0ZjVlFhV0J6R00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0wjFH1cKU+/y8yc9KxjbvcUjZesoL40Rb8sxzgdpvue7RDRZrVDft GFm83HKnJkr7pMzBBAhUuH2ykm9WmLqgCgZmXNpIHcKH3zgDWsOBC18nOI91tr8p uYcrKQTbQV1COdjQlboKAZ6vxMp3uAMAQ6FnRgCKVFrxKLQPYs+XmWE+bWA2LfB/ YIrdJekniSiQNEElBF9BOorHp8yNcddBWLQ94va0WcAFSrVVJuLp47eO5GXaCxnO HA8M03Ul8/OLN2r/oqMK9ILnTgkG+eX7PmX5JXQi64ilNjCHU1QK7hyDa8tK9Xwb RS2T6zBME+2kGSbrXhlCf2+yvgFYq+yM -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:29 2025 by rpki-client