$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft File: t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft (raw, json) Hash identifier: L72OXwShvl8YsKNnmHWL06Uh8V2sGTDupgGushDgiI0= Subject key identifier: 58:1F:C5:15:CD:9B:6F:13:CF:70:4C:C2:AF:2C:80:94:52:93:D1:9B Authority key identifier: B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 Certificate issuer: /CN=A9147016/serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft Manifest number: 047E Signing time: Wed 17 Sep 2025 00:27:35 +0000 Manifest this update: Wed 17 Sep 2025 00:27:34 +0000 Manifest next update: Wed 24 Sep 2025 00:27:34 +0000 Files and hashes: 1: t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl (hash: kr9Y4KjaVADj3WhBHpZ8Cnlg8Zv4br2frEroJJZQJj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016, serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Validity Not Before: Sep 17 00:27:34 2025 GMT Not After : Sep 24 00:27:34 2025 GMT Subject: CN=68ca0076-5ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1a:24:63:55:2d:99:2f:2e:39:73:6f:c0:3b: 7f:55:c5:1f:54:05:79:37:66:24:2c:e6:ee:da:0e: 5d:26:d8:f6:2a:68:a3:32:09:47:b3:c0:be:0b:b4: b0:c4:85:04:d9:45:54:1a:5d:38:56:6e:dc:c7:65: 5e:17:f5:d7:d5:a6:b3:bf:1a:29:e7:13:d1:dc:b3: d6:91:00:59:a9:73:82:2b:3e:38:56:f8:64:80:a9: 6f:b2:5e:ea:48:4f:a0:3d:db:be:32:78:26:65:ea: 80:b6:e3:4d:71:6f:67:ff:2b:ae:a9:96:c2:b0:e2: e4:ae:44:13:4b:39:32:02:7f:fe:73:10:e7:15:0b: c0:84:3e:75:8e:3a:38:db:ea:90:0a:1d:d1:7b:8e: 43:8f:e6:15:3c:8f:f5:bc:aa:31:2b:c0:32:2f:9b: 51:bd:9f:e6:81:2c:29:60:65:f7:18:ed:77:54:2d: ff:47:35:e9:5f:80:34:39:14:61:58:64:42:aa:d0: 19:0d:2d:8e:97:ec:aa:9d:8f:b6:2f:7e:35:a4:58: 98:66:bb:de:0b:0e:84:f6:ca:7c:ab:01:97:34:7f: 05:da:3c:43:2a:8b:45:4e:c6:c8:a8:11:32:49:3f: de:48:53:9f:45:f9:c1:d3:49:10:7b:37:71:b3:c7: e0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1F:C5:15:CD:9B:6F:13:CF:70:4C:C2:AF:2C:80:94:52:93:D1:9B X509v3 Authority Key Identifier: keyid:B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:72:48:ce:25:91:a6:0c:fd:8f:1e:b0:da:91:15:c8:3a:f7: 56:d3:17:5a:63:23:a1:d9:af:7f:77:48:a6:ec:a2:01:e2:63: 98:c6:33:f0:16:99:9a:fc:df:d4:03:c6:81:31:91:4d:61:9f: e3:64:13:72:77:5a:a8:2d:48:a5:c5:6c:47:d3:6c:e3:22:fc: b3:c4:68:6d:fa:9c:7c:c6:6c:69:be:ff:7a:0b:64:1e:8e:da: 10:c9:2b:d1:05:9a:74:03:69:56:73:a5:05:6b:e9:c8:b8:d5: 0b:79:2f:43:f1:c9:04:3d:83:a0:8b:b8:fb:7e:9f:1e:e9:c4: 46:2f:33:f1:bd:fe:07:f9:f9:d3:98:ed:44:e3:4f:9b:b7:66: 37:0e:c7:d2:12:4d:06:29:80:bf:c1:4b:cb:58:b6:8e:cd:f1: 19:3b:b0:ea:8b:1d:c1:5b:82:eb:31:d4:b6:0e:75:68:b6:f6: ec:78:58:61:1c:1a:53:82:25:84:ca:5c:d9:5e:ee:90:54:3b: 71:3b:2a:75:30:37:f5:24:6e:80:cf:f6:ea:f9:b7:bf:a7:a0: 19:d0:67:32:25:3d:78:b3:ad:36:c9:de:2e:b0:f0:e9:c0:1e: f6:fb:9a:9d:d1:67:3a:d3:6e:99:42:2c:5f:2b:a7:9c:ca:54: 7d:4f:e4:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKEI3QzYxMUYwMkY1QzJEOEQ4QzY2QzI1OUQyM0IzOUM3 ODlBQTAxMDcwHhcNMjUwOTE3MDAyNzM0WhcNMjUwOTI0MDAyNzM0WjAYMRYwFAYD VQQDEw02OGNhMDA3Ni01Y2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRokY1UtmS8uOXNvwDt/VcUfVAV5N2YkLObu2g5dJtj2KmijMglHs8C+C7Sw xIUE2UVUGl04Vm7cx2VeF/XX1aazvxop5xPR3LPWkQBZqXOCKz44VvhkgKlvsl7q SE+gPdu+MngmZeqAtuNNcW9n/yuuqZbCsOLkrkQTSzkyAn/+cxDnFQvAhD51jjo4 2+qQCh3Re45Dj+YVPI/1vKoxK8AyL5tRvZ/mgSwpYGX3GO13VC3/RzXpX4A0ORRh WGRCqtAZDS2Ol+yqnY+2L341pFiYZrveCw6E9sp8qwGXNH8F2jxDKotFTsbIqBEy ST/eSFOfRfnB00kQezdxs8fgvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgfxRXN m28Tz3BMwq8sgJRSk9GbMB8GA1UdIwQYMBaAFLfGEfAvXC2NjGbCWdI7OceJqgEH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8zNzg4MzZFMjU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZMk1ac0paMGpzNXg0bXFB UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4WVI4QzljTFkyTVpzSlowanM1eDRtcUFRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8zNzg4MzZFMjU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZ Mk1ac0paMGpzNXg0bXFBUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqckjOJZGmDP2PHrDakRXIOvdW0xdaYyOh2a9/d0im7KIB4mOYxjPw Fpma/N/UA8aBMZFNYZ/jZBNyd1qoLUilxWxH02zjIvyzxGht+px8xmxpvv96C2Qe jtoQySvRBZp0A2lWc6UFa+nIuNULeS9D8ckEPYOgi7j7fp8e6cRGLzPxvf4H+fnT mO1E40+bt2Y3DsfSEk0GKYC/wUvLWLaOzfEZO7Dqix3BW4LrMdS2DnVotvbseFhh HBpTgiWEylzZXu6QVDtxOyp1MDf1JG6Az/bq+be/p6AZ0GcyJT14s602yd4usPDp wB72+5qd0Wc6026ZQixfK6ecylR9T+SO -----END CERTIFICATE-----Generated at Thu Sep 18 23:50:41 2025 by rpki-client