$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft File: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json) Hash identifier: AGGmR4fQIpxml3qoZSbADNCtE7x5nuUZxE+1ebNS5cI= Subject key identifier: D9:B3:96:62:30:91:54:BF:45:EA:9E:B8:CD:B3:34:33:77:0D:BF:26 Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 Certificate issuer: /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft Manifest number: 0103 Signing time: Sun 19 Oct 2025 07:57:44 +0000 Manifest this update: Sun 19 Oct 2025 07:57:43 +0000 Manifest next update: Sun 26 Oct 2025 07:57:43 +0000 Files and hashes: 1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: 7bH51hkpHoeUdHPr3UA6h9Xsv7g+Qz6nm8WIYGwQvFM=) 2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: qfe+ZRHsuzJUkN6PV847BSXw2bwliF4QuG/2zTq3t3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Validity Not Before: Oct 19 07:57:43 2025 GMT Not After : Oct 26 07:57:43 2025 GMT Subject: CN=68f499f7-3737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a9:90:a6:13:e0:c6:1a:25:74:cf:4e:7e:9b: a2:70:aa:18:5d:25:3a:f7:ed:52:05:07:4b:b1:bf: fa:32:41:17:65:0b:eb:4c:94:8f:58:f4:e8:7f:20: 45:e9:53:9d:93:90:45:29:87:83:49:81:e1:62:73: ad:98:61:f7:89:8e:b1:7f:43:a1:bd:cd:35:72:0e: c3:84:f4:cb:3a:f5:06:08:45:bc:0f:47:15:41:92: c3:85:23:d0:5f:ae:82:09:66:4d:56:49:30:8a:9e: 48:a3:2b:9b:4e:f5:cb:cf:d3:67:f1:74:cb:36:ea: ee:5d:a0:1a:4d:76:bc:6c:a4:17:bc:dd:35:5e:67: ca:43:94:fd:cc:07:60:23:88:ed:c6:62:69:70:4b: 3f:0d:cc:5d:ac:57:50:9e:92:a9:51:39:fe:07:29: 72:63:0e:c7:99:52:1c:69:8f:0a:93:4a:bc:64:02: a5:90:27:b0:07:95:49:3d:18:88:a8:e1:ab:b6:76: 1f:b4:3a:23:02:25:e1:81:db:4d:29:be:52:8e:1a: 6d:be:15:90:a5:6c:e6:55:0f:5c:9e:ae:aa:ed:8a: af:de:5d:5b:a7:87:d0:94:c6:ed:71:6e:20:91:e3: c4:05:34:51:df:63:5e:3f:48:8a:34:3c:d0:4d:d8: 29:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B3:96:62:30:91:54:BF:45:EA:9E:B8:CD:B3:34:33:77:0D:BF:26 X509v3 Authority Key Identifier: keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:6b:72:6a:19:1c:10:5b:f2:4b:b8:fd:fa:e2:1f:08:f6:fd: 2d:87:97:3f:e2:2f:35:27:48:87:f0:df:9b:01:bb:82:d0:24: 49:08:5b:6c:dd:82:cc:26:af:b1:99:1a:26:29:87:28:99:af: d7:55:5e:10:3c:21:25:07:31:14:89:9e:0f:19:c8:16:32:58: cf:c9:9e:48:79:d6:3a:a4:85:c0:6f:d4:70:20:0a:c7:c5:b0: 9b:69:10:ab:6c:66:60:fe:98:1e:07:30:ef:e9:60:7f:bf:ce: a1:9e:bc:0d:ac:57:eb:94:8e:7b:c5:1a:7b:59:fb:32:8a:db: 3e:f6:2e:26:a4:db:1c:1e:d5:44:f2:2e:38:7c:f5:9e:b7:fa: cd:3b:d3:0e:98:b1:5e:14:de:d4:32:0c:56:a9:42:54:81:78: 86:18:e2:49:65:f0:33:00:bd:85:4f:fb:7a:68:da:de:37:54: 0b:23:f2:88:02:be:de:ff:59:73:94:b9:a4:c3:a2:e5:b2:42: 30:8d:10:9e:d5:7d:1e:a2:0b:5f:ab:9d:4d:a3:6b:23:51:2f: 8e:23:eb:da:c6:ac:0e:05:d3:82:f3:fd:51:f8:5e:11:7e:77: 65:1b:eb:be:be:60:33:b1:7e:e7:c8:c1:0c:f4:01:2b:04:ce: 84:28:be:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKEY3RjA2MzY5Mzk5RDk5MzVGNUZCNTlGRDU4NTcxNTQx QTU4MUNDNjMwHhcNMjUxMDE5MDc1NzQzWhcNMjUxMDI2MDc1NzQzWjAYMRYwFAYD VQQDEw02OGY0OTlmNy0zNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqmQphPgxholdM9OfpuicKoYXSU69+1SBQdLsb/6MkEXZQvrTJSPWPTofyBF 6VOdk5BFKYeDSYHhYnOtmGH3iY6xf0Ohvc01cg7DhPTLOvUGCEW8D0cVQZLDhSPQ X66CCWZNVkkwip5IoyubTvXLz9Nn8XTLNuruXaAaTXa8bKQXvN01XmfKQ5T9zAdg I4jtxmJpcEs/DcxdrFdQnpKpUTn+BylyYw7HmVIcaY8Kk0q8ZAKlkCewB5VJPRiI qOGrtnYftDojAiXhgdtNKb5SjhptvhWQpWzmVQ9cnq6q7Yqv3l1bp4fQlMbtcW4g kePEBTRR32NeP0iKNDzQTdgpeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmzlmIw kVS/ReqeuM2zNDN3Db8mMB8GA1UdIwQYMBaAFPfwY2k5nZk19ftZ/VhXFUGlgcxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS84NjI0NjM0ODFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1UWDEtMW45V0ZjVlFhV0J6 R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlfQmphVG1kbVRYMS0xbjlXRmNWUWFXQnpHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS84NjI0NjM0ODFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1U WDEtMW45V0ZjVlFhV0J6R00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHa3JqGRwQW/JLuP364h8I9v0th5c/4i81J0iH8N+bAbuC0CRJCFts 3YLMJq+xmRomKYcoma/XVV4QPCElBzEUiZ4PGcgWMljPyZ5IedY6pIXAb9RwIArH xbCbaRCrbGZg/pgeBzDv6WB/v86hnrwNrFfrlI57xRp7Wfsyits+9i4mpNscHtVE 8i44fPWet/rNO9MOmLFeFN7UMgxWqUJUgXiGGOJJZfAzAL2FT/t6aNreN1QLI/KI Ar7e/1lzlLmkw6LlskIwjRCe1X0eogtfq51No2sjUS+OI+vaxqwOBdOC8/1R+F4R fndlG+u+vmAzsX7nyMEM9AErBM6EKL7U -----END CERTIFICATE-----Generated at Tue Oct 21 02:54:37 2025 by rpki-client