$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: IwR3Exo8LzLY8v7J8e4olAIwiVVBoLYaDmxrHGSN/EI= Subject key identifier: 60:86:33:E8:FB:03:0F:30:8A:AA:AA:BB:F1:30:62:21:F9:08:0E:54 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: C9 Signing time: Sun 19 Oct 2025 09:03:31 +0000 Manifest this update: Sun 19 Oct 2025 09:03:30 +0000 Manifest next update: Sun 26 Oct 2025 09:03:30 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: wTkJBVHbo2xHSkSwlpG/8TGNT5C6S/7WsRMuxbCYHXU=) 2: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: OQ/guaL+54MthYgFWH5vV+2qqkhoKOGTMDARqMovmDI=) 3: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: XCruC0xKn6ivsUEsNjfTmIOISSTMaA8fgFUqBnZykII=) 4: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: /pCleS8hdGGbLBEH6XJqZL1n8cMzpSzBKrLM7XIsvnY=) 5: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: 6QhOrmpvijFEWyqTsDtifgxnnuoD+8QgUKOe4kzD4+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Oct 19 09:03:30 2025 GMT Not After : Oct 26 09:03:30 2025 GMT Subject: CN=68f4a962-9e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:6c:0b:52:ab:e0:db:7a:41:57:41:3d:73: 0c:b0:6f:5f:db:46:a7:21:84:68:05:77:ee:ce:7b: bc:e2:40:c3:5d:69:19:bd:41:a3:4e:b1:6a:57:b3: 12:e5:2b:06:de:90:85:dc:7e:c6:f9:6e:44:7c:d5: 9e:49:1f:8b:50:f5:b6:2d:c1:de:e6:c0:54:9f:e7: 7f:db:1c:9c:93:53:e5:fd:30:e4:15:1d:fe:c5:53: 12:2d:3d:d7:6f:0f:2b:08:3f:f3:5a:c4:11:e0:d3: 23:33:a8:82:2a:fd:b8:0c:3f:63:6f:40:b5:48:22: 37:b6:e2:8b:ad:77:74:df:ba:36:32:f8:61:55:29: 60:63:59:7b:8a:0a:2a:01:6b:0d:28:d6:10:4f:13: 90:5c:c3:ad:dc:05:24:7c:33:8e:e9:15:7c:63:01: dc:3b:2d:e4:6a:7e:1f:61:ac:49:ea:bf:48:74:c0: d4:72:5f:73:62:ae:7b:ba:44:cb:1b:27:6a:6f:98: c5:80:1b:66:af:fb:d3:2e:24:ab:a3:8b:e0:a3:3b: d6:b1:c8:21:c3:d1:70:b7:cf:9a:cd:5f:30:85:0b: 5e:92:d0:35:02:c1:7d:fd:2b:77:dd:b6:db:79:63: f1:92:7b:40:84:55:6b:be:1c:bb:4a:c2:d3:17:49: 48:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:86:33:E8:FB:03:0F:30:8A:AA:AA:BB:F1:30:62:21:F9:08:0E:54 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e9:e0:b8:4e:99:87:27:47:6a:e2:44:38:0e:b1:d6:a5:4f: a1:33:d3:96:a4:c8:88:62:5e:4d:38:47:9c:34:5c:a7:f6:61: 5f:d2:f2:ed:18:94:2a:92:78:ec:07:55:42:0f:54:ec:39:35: 0a:f1:0d:c5:5b:93:35:6d:e2:ee:b4:18:a3:5e:34:c0:41:77: ed:ba:aa:a8:be:de:db:f6:fe:0a:01:fc:3b:f8:b0:82:83:72: 25:16:72:b9:24:f9:f5:6e:f9:e6:69:13:05:35:5d:43:63:5f: 73:d0:6f:c0:c7:d9:74:9c:5c:16:80:70:dd:10:3a:39:03:8d: 38:44:dc:b1:ee:a8:4e:16:8f:44:1e:ae:83:e2:87:8c:7d:fd: 0b:b2:79:3e:87:c8:f2:d8:f7:fb:a1:09:68:d0:ee:db:67:02: 51:22:61:c4:5d:4e:7e:6a:be:27:ec:ca:4a:fc:f2:ec:f6:86: 87:29:ed:c1:fc:a9:46:81:a4:05:15:78:8e:9b:ac:53:70:84: f1:84:2e:3e:ba:c5:f6:08:75:4d:c3:fe:ac:dc:6c:2e:66:d1: 74:ca:38:b1:3b:9a:15:74:27:a7:41:1b:f2:17:a2:5d:e9:4b: 74:d2:8a:38:0c:40:6e:c7:31:bb:54:b5:51:58:29:3a:e4:e9: 4d:75:c4:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjUxMDE5MDkwMzMwWhcNMjUxMDI2MDkwMzMwWjAYMRYwFAYD VQQDEw02OGY0YTk2Mi05ZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwpsC1Kr4Nt6QVdBPXMMsG9f20anIYRoBXfuznu84kDDXWkZvUGjTrFqV7MS 5SsG3pCF3H7G+W5EfNWeSR+LUPW2LcHe5sBUn+d/2xyck1Pl/TDkFR3+xVMSLT3X bw8rCD/zWsQR4NMjM6iCKv24DD9jb0C1SCI3tuKLrXd037o2MvhhVSlgY1l7igoq AWsNKNYQTxOQXMOt3AUkfDOO6RV8YwHcOy3kan4fYaxJ6r9IdMDUcl9zYq57ukTL Gydqb5jFgBtmr/vTLiSro4vgozvWscghw9Fwt8+azV8whQtektA1AsF9/St33bbb eWPxkntAhFVrvhy7SsLTF0lIIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCGM+j7 Aw8wiqqqu/EwYiH5CA5UMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc6eC4TpmHJ0dq4kQ4DrHWpU+hM9OWpMiIYl5NOEecNFyn9mFf0vLt GJQqknjsB1VCD1TsOTUK8Q3FW5M1beLutBijXjTAQXftuqqovt7b9v4KAfw7+LCC g3IlFnK5JPn1bvnmaRMFNV1DY19z0G/Ax9l0nFwWgHDdEDo5A404RNyx7qhOFo9E Hq6D4oeMff0Lsnk+h8jy2Pf7oQlo0O7bZwJRImHEXU5+ar4n7MpK/PLs9oaHKe3B /KlGgaQFFXiOm6xTcITxhC4+usX2CHVNw/6s3GwuZtF0yjixO5oVdCenQRvyF6Jd 6Ut00oo4DEBuxzG7VLVRWCk65OlNdcRx -----END CERTIFICATE-----Generated at Mon Oct 20 00:14:51 2025 by rpki-client