$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft File: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft (raw, json) Hash identifier: MbvNf4iW2sZ1apvrUpEiUQ0VLQ8RFjkSHE2Hui3y93g= Subject key identifier: 29:39:23:D2:9A:90:58:8E:D1:F5:95:90:6B:FA:97:5A:E4:E9:55:D7 Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69 Certificate issuer: /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469 Certificate serial: 07E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft Manifest number: 07D1 Signing time: Sat 06 Sep 2025 21:27:04 +0000 Manifest this update: Sat 06 Sep 2025 21:27:03 +0000 Manifest next update: Sat 13 Sep 2025 21:27:03 +0000 Files and hashes: 1: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl (hash: EKufdCuoKpYZO7sALBWlT8tZP1Ckz+0x3kMO1Zb+E1E=) 2: 11446DBE5B2711F099D02552C4F9AE02.roa (hash: RU8kIBK1Vw0uGfLmOnL1T+Qo1FjWkAA2fxz13lNIa7Q=) 3: E75B22220B5D11EBADED9667C4F9AE02.roa (hash: XG/yWG4WDbh/MIdJR6dBMm/WynV56cePJGSqotWER4c=) 4: 2452F9B65B2711F094EC6052C4F9AE02.roa (hash: jD0mFkmOYCkukP/EJhq7Kcd8z9h7khIQ7bnXQB3n7yM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 21:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2025 (0x7e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469 Validity Not Before: Sep 6 21:27:03 2025 GMT Not After : Sep 13 21:27:03 2025 GMT Subject: CN=68bca727-38d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:bb:c7:28:95:4d:d6:0c:87:ae:4c:be:b7: b0:28:38:67:93:99:30:e1:86:1f:92:fb:66:d5:45: e8:69:5d:2a:f8:3a:e1:c8:69:4a:ab:55:74:c6:e4: 92:a4:17:a7:02:74:5b:80:dd:c1:3e:24:ad:e4:f7: b8:4a:2e:ce:c6:f9:2a:f6:05:83:94:ad:b8:11:82: fe:30:0d:92:a9:fc:a2:06:f7:82:e9:e3:6a:c9:22: cf:43:16:68:8e:de:2b:9e:e6:c3:4c:d1:5a:f4:72: 23:ef:8c:28:d3:48:6f:f4:aa:7b:b6:f6:58:32:be: 73:9e:a2:2c:46:3e:70:f5:53:33:1b:8a:19:ab:a0: b5:5e:f1:03:57:ef:66:66:c4:dc:b5:43:c2:81:a2: 18:80:82:e1:f9:6e:07:80:b1:9d:f5:b7:4d:2f:10: 0f:77:69:a0:19:12:a4:9d:8a:73:16:b9:99:a7:4b: 3d:b7:5c:74:f6:a4:14:13:f7:d7:68:88:fd:ab:1d: ca:53:85:33:21:f1:84:87:d4:cf:a2:03:e3:31:ca: 75:f6:49:cf:a4:06:7e:72:dd:ea:72:89:7c:b0:50: c2:e7:05:c3:e8:6e:99:a6:a3:27:d2:3a:a6:16:4c: 8d:24:74:70:3d:b1:ae:18:f7:43:bf:86:67:cc:36: 9b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:39:23:D2:9A:90:58:8E:D1:F5:95:90:6B:FA:97:5A:E4:E9:55:D7 X509v3 Authority Key Identifier: keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:68:cb:f1:97:57:42:c8:57:b9:c2:ea:c1:ab:31:aa:7a:03: 98:b4:a4:0f:3b:3e:1e:0b:d4:d0:75:ff:b5:77:e8:97:ed:c9: c8:c0:11:80:45:3d:05:d6:39:a7:92:52:04:9a:95:2f:64:b3: ee:19:2c:f3:9b:ba:52:fb:5e:b1:93:61:a1:84:de:51:57:cc: 52:e9:9b:3a:97:33:d6:49:54:ef:22:19:80:ab:44:37:91:8c: a6:ca:0c:f0:46:75:75:a6:dd:26:76:0c:2c:87:f0:76:a7:54: dc:f1:ca:6c:a9:2c:d3:54:ed:fe:74:87:95:e7:da:db:c4:d1: 80:a5:4e:4d:47:92:3e:61:01:7b:ab:f2:89:be:da:63:50:b4: 56:0c:f3:41:b3:f4:e4:c8:3d:81:7a:0c:5d:3f:a4:b1:57:61: 24:97:c4:83:28:ec:49:77:c0:c9:ae:6f:4f:df:a1:60:1f:81: b9:7e:f6:c6:69:a3:3c:da:fe:4c:ee:bd:de:b3:88:66:d7:0b: 27:45:c0:2c:34:09:21:b0:8c:24:e0:f6:92:5b:49:ee:98:fa: 49:48:cf:f4:17:1c:37:6c:3a:1d:06:f9:e8:b7:91:a8:52:64: 6a:40:15:ed:fa:b8:c5:f9:d4:3a:08:6c:96:9a:f1:42:e2:7e: f6:8a:68:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwNzIxMTAvBgNVBAUTKEUzQkNCQTg4QkVEQzJBNzY4QTk4NjVGNDE2RDY4QTdD MzAzM0Y0NjkwHhcNMjUwOTA2MjEyNzAzWhcNMjUwOTEzMjEyNzAzWjAYMRYwFAYD VQQDEw02OGJjYTcyNy0zOGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHC7xyiVTdYMh65MvrewKDhnk5kw4YYfkvtm1UXoaV0q+DrhyGlKq1V0xuSS pBenAnRbgN3BPiSt5Pe4Si7Oxvkq9gWDlK24EYL+MA2SqfyiBveC6eNqySLPQxZo jt4rnubDTNFa9HIj74wo00hv9Kp7tvZYMr5znqIsRj5w9VMzG4oZq6C1XvEDV+9m ZsTctUPCgaIYgILh+W4HgLGd9bdNLxAPd2mgGRKknYpzFrmZp0s9t1x09qQUE/fX aIj9qx3KU4UzIfGEh9TPogPjMcp19knPpAZ+ct3qcol8sFDC5wXD6G6ZpqMn0jqm FkyNJHRwPbGuGPdDv4ZnzDabWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCk5I9Ka kFiO0fWVkGv6l1rk6VXXMB8GA1UdIwQYMBaAFOO8uoi+3Cp2iphl9BbWinwwM/Rp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wQ0VBNDk1QzBC NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tuYUttR1gwRnRhS2ZEQXo5 R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ3eTZpTDdjS25hS21HWDBGdGFLZkRBejlHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzA3Mi8wQ0VBNDk1QzBCNUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tu YUttR1gwRnRhS2ZEQXo5R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBaMvxl1dCyFe5wurBqzGqegOYtKQPOz4eC9TQdf+1d+iX7cnIwBGA RT0F1jmnklIEmpUvZLPuGSzzm7pS+16xk2GhhN5RV8xS6Zs6lzPWSVTvIhmAq0Q3 kYymygzwRnV1pt0mdgwsh/B2p1Tc8cpsqSzTVO3+dIeV59rbxNGApU5NR5I+YQF7 q/KJvtpjULRWDPNBs/TkyD2BegxdP6SxV2Ekl8SDKOxJd8DJrm9P36FgH4G5fvbG aaM82v5M7r3es4hm1wsnRcAsNAkhsIwk4PaSW0numPpJSM/0Fxw3bDodBvnot5Go UmRqQBXt+rjF+dQ6CGyWmvFC4n72imgI -----END CERTIFICATE-----Generated at Sun Sep 7 14:33:09 2025 by rpki-client