$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft File: n47RxT7pDTyshKZHDEt1lMVXXYU.mft (raw, json) Hash identifier: FZFtm+4Zu8lLkBYiHxdvEvwimAqs1nGt/cZJATWtSwc= Subject key identifier: D5:75:10:49:24:11:1B:78:FC:5F:7B:02:5B:70:92:25:C9:90:41:B9 Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 Certificate issuer: /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft Manifest number: 01B2 Signing time: Sun 07 Sep 2025 03:33:44 +0000 Manifest this update: Sun 07 Sep 2025 03:33:44 +0000 Manifest next update: Sun 14 Sep 2025 03:33:44 +0000 Files and hashes: 1: n47RxT7pDTyshKZHDEt1lMVXXYU.crl (hash: 8ScSPUXqKicRBro6Rb8lVrBgzfSm7zzL/sqR0PLmqCA=) 2: FD4E307AFEA711EDBC673B4BC4F9AE02.roa (hash: /gcnA3lv0gvYzo5Yy1H0Ai0POjgkW7UZBEUoiqUQvoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 03:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B983, serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Validity Not Before: Sep 7 03:33:44 2025 GMT Not After : Sep 14 03:33:44 2025 GMT Subject: CN=68bcfd18-d2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:26:6d:90:27:70:c4:29:1c:5f:1d:5b:4d:42: 89:75:18:e2:7d:25:00:a2:ef:a9:83:d6:dc:b5:23: 31:6b:7c:a5:5b:b2:d0:4c:3e:83:7f:aa:9c:9a:d7: 30:ba:3b:89:c2:b3:c5:c9:f4:92:67:95:4e:8e:02: b5:95:0b:ea:93:4c:5e:df:64:37:81:78:ee:7e:77: 20:49:fa:4d:00:e4:8d:11:29:3d:5e:1c:8a:1f:21: 86:3c:3c:6e:20:f4:62:ca:ac:7d:71:d0:7c:f4:fa: 24:f7:c7:78:59:db:0b:0c:e8:10:12:f3:6f:12:0e: 94:9a:61:0c:4d:ff:3c:6b:34:f3:f1:ac:74:38:0d: 9a:7e:6f:6e:f1:bb:0e:49:07:98:5a:99:96:5e:16: 2d:35:69:a8:9c:ac:21:32:09:0c:d9:0f:b6:52:57: c2:a1:73:aa:11:c9:3a:b8:89:ee:75:57:9e:71:58: 64:9c:6d:b6:d1:1a:b7:02:74:02:32:ba:17:de:07: e1:48:72:c6:04:b4:45:43:e3:53:2e:a0:16:f3:78: e3:6f:72:49:6b:a9:04:01:01:d2:ff:f1:81:6c:ab: af:f7:db:e2:dd:23:05:2f:1a:b7:1d:72:4d:ce:43: 13:c4:73:3d:1f:b5:d7:91:44:36:4f:57:99:4b:24: e7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:75:10:49:24:11:1B:78:FC:5F:7B:02:5B:70:92:25:C9:90:41:B9 X509v3 Authority Key Identifier: keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:01:26:88:6d:33:01:14:1d:8c:00:12:95:94:7b:95:a3:97: 2f:b6:88:61:e7:88:81:05:43:24:43:d4:df:ed:36:f0:c3:45: 09:32:a0:db:28:17:cf:2d:37:68:0a:6b:3a:81:2f:e8:c8:71: cc:68:ec:c2:0c:3d:94:33:21:e9:df:bf:4b:ef:87:7f:1e:35: 80:e7:b0:69:16:08:2a:c5:97:c8:a4:da:21:c2:d6:9e:bc:cf: 25:ee:b4:0f:cc:65:71:17:ea:09:f7:2c:a3:26:5b:b8:cb:6d: 75:65:19:62:fc:47:00:8b:f1:f5:6e:4f:c5:1c:9e:68:44:7d: 67:42:ec:8c:0b:f7:c1:b3:f9:ae:ca:bd:6e:10:e4:5d:73:35: ad:07:08:74:7f:41:25:0f:3b:74:5e:36:ff:40:68:35:e9:21: cd:7e:f6:e4:b7:6c:2b:6c:eb:a7:81:4d:6d:a6:d1:c1:85:b7: 0a:53:15:ca:9b:dc:23:78:9c:ab:c9:5d:41:25:80:7a:4f:fe: d9:26:63:89:67:58:10:06:7e:a2:de:ff:19:1b:47:38:6f:d2: 2d:51:38:9f:88:fc:8c:69:47:0e:9c:d7:75:40:aa:63:82:3f: 7c:61:45:4e:91:4b:db:83:c9:90:2b:a7:43:dc:76:a4:50:ee: 3e:9b:90:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI5ODMxMTAvBgNVBAUTKDlGOEVEMUM1M0VFOTBEM0NBQzg0QTY0NzBDNEI3NTk0 QzU1NzVEODUwHhcNMjUwOTA3MDMzMzQ0WhcNMjUwOTE0MDMzMzQ0WjAYMRYwFAYD VQQDEw02OGJjZmQxOC1kMmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7SZtkCdwxCkcXx1bTUKJdRjifSUAou+pg9bctSMxa3ylW7LQTD6Df6qcmtcw ujuJwrPFyfSSZ5VOjgK1lQvqk0xe32Q3gXjufncgSfpNAOSNESk9XhyKHyGGPDxu IPRiyqx9cdB89Pok98d4WdsLDOgQEvNvEg6UmmEMTf88azTz8ax0OA2afm9u8bsO SQeYWpmWXhYtNWmonKwhMgkM2Q+2UlfCoXOqEck6uInudVeecVhknG220Rq3AnQC MroX3gfhSHLGBLRFQ+NTLqAW83jjb3JJa6kEAQHS//GBbKuv99vi3SMFLxq3HXJN zkMTxHM9H7XXkUQ2T1eZSyTnJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNV1EEkk ERt4/F97AltwkiXJkEG5MB8GA1UdIwQYMBaAFJ+O0cU+6Q08rISmRwxLdZTFV12F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjk4My9FNkE4QUNFQ0ZF QTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERUeXNoS1pIREV0MWxNVlhY WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240N1J4VDdwRFR5c2hLWkhERXQxbE1WWFhZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjk4My9FNkE4QUNFQ0ZFQTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERU eXNoS1pIREV0MWxNVlhYWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmASaIbTMBFB2MABKVlHuVo5cvtohh54iBBUMkQ9Tf7Tbww0UJMqDb KBfPLTdoCms6gS/oyHHMaOzCDD2UMyHp379L74d/HjWA57BpFggqxZfIpNohwtae vM8l7rQPzGVxF+oJ9yyjJlu4y211ZRli/EcAi/H1bk/FHJ5oRH1nQuyMC/fBs/mu yr1uEORdczWtBwh0f0ElDzt0Xjb/QGg16SHNfvbkt2wrbOungU1tptHBhbcKUxXK m9wjeJyryV1BJYB6T/7ZJmOJZ1gQBn6i3v8ZG0c4b9ItUTifiPyMaUcOnNd1QKpj gj98YUVOkUvbg8mQK6dD3HakUO4+m5B+ -----END CERTIFICATE-----Generated at Mon Sep 8 08:09:25 2025 by rpki-client