$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft File: s47RYTLcuXiWdncaiwnkUJue1Pk.mft (raw, json) Hash identifier: cSZnR7zszDhTQdONr8ogpOAek4J47L40VdmJQkVq5s4= Subject key identifier: 7A:82:DF:59:88:94:E3:64:4A:D9:BB:93:74:93:D8:E9:76:64:88:38 Authority key identifier: B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9 Certificate issuer: /CN=A915E1F9/serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft Manifest number: 18 Signing time: Fri 17 Oct 2025 11:42:01 +0000 Manifest this update: Fri 17 Oct 2025 11:42:01 +0000 Manifest next update: Fri 24 Oct 2025 11:42:01 +0000 Files and hashes: 1: s47RYTLcuXiWdncaiwnkUJue1Pk.crl (hash: R5ZodZel2dirgiLfuO+Ph4WjjUbUeYGMB5zCmP1AR5s=) 2: BEB06ADA944211F08A761970C4F9AE02.roa (hash: 3kNCZmd08rxPbDlk/PAjWyQO4YBBbNOVI07fLcHLcu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E1F9, serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9 Validity Not Before: Oct 17 11:42:01 2025 GMT Not After : Oct 24 11:42:01 2025 GMT Subject: CN=68f22b89-da56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:1d:11:5a:eb:d6:5f:41:ca:2b:d8:00:f4: 86:a0:62:30:85:ab:f9:11:4d:a4:1c:1c:73:4a:d6: b8:cf:e4:45:76:5f:d0:d0:70:53:9b:ca:57:e5:ed: 23:d9:e8:75:f7:f0:64:8f:bf:66:53:c1:b1:6c:40: f6:ee:aa:0b:1d:3c:7c:84:6d:32:f3:93:f2:21:19: 4f:c8:0e:60:3f:af:ff:24:cb:0c:87:c8:68:70:b3: 21:e3:f6:66:03:fb:7e:95:c8:2c:12:a8:c2:be:10: f6:56:fc:8e:5d:2b:a5:f3:d5:9d:11:ce:a2:cb:bb: 57:22:4f:c2:65:f3:eb:97:0b:40:c3:0f:fa:7b:db: 07:91:ab:0e:d5:b4:8e:2d:9c:d9:3d:12:d1:0c:9e: 63:d0:e7:f1:40:ab:b3:9e:3c:4e:9e:29:16:38:9d: ad:67:7c:69:95:00:2a:c8:87:b7:a6:7f:d1:db:09: f4:9e:12:ad:cb:49:c3:6e:0f:0a:05:b2:23:6d:cb: 12:ba:8e:80:d0:65:56:7e:e5:a5:d2:84:33:91:6e: 93:94:54:8e:67:a5:fb:e8:a7:1e:fe:0d:99:a7:f7: 0b:68:9c:b0:c9:da:66:5b:78:9c:f6:10:1e:51:e8: 2e:b6:26:8b:39:11:91:f9:1e:59:22:d0:e9:de:b8: 77:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:82:DF:59:88:94:E3:64:4A:D9:BB:93:74:93:D8:E9:76:64:88:38 X509v3 Authority Key Identifier: keyid:B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:ba:24:a3:d7:38:68:08:e2:27:98:99:cb:0e:40:28:ab:de: 42:ba:55:22:ad:ec:9b:5a:c4:4d:47:f2:52:e1:c7:4e:bf:d2: 29:e8:7a:ec:6f:05:ca:cb:4c:96:88:2a:22:5a:0f:20:9c:73: a5:3b:91:ba:69:e1:91:da:96:8e:dd:57:ed:cb:32:39:3f:ae: 9f:c1:1d:6d:39:4d:a7:df:52:a0:72:b7:92:34:0a:a1:4d:40: 4c:55:34:fe:ba:54:db:2f:4a:83:6a:9b:72:a5:d0:65:69:ac: b8:e7:38:b9:4f:52:55:0d:50:15:93:ed:5b:da:b9:aa:0f:dd: ec:d3:3c:2e:0b:3f:9f:1a:4c:e1:69:d8:3c:a6:a3:05:a0:0b: 82:b7:ac:50:3c:34:82:86:83:c1:c0:d4:b2:c4:ae:89:3d:72: 0f:34:85:b3:16:0f:5f:ef:ee:63:c0:79:17:37:f9:63:c5:22: ea:ff:24:15:2b:4e:6b:48:f0:10:05:fd:f5:f1:35:eb:56:38: 58:1b:5b:6c:be:ef:34:f7:60:74:4f:2d:00:e7:9b:72:cf:cb: 23:0a:20:a5:25:ba:1f:5e:4f:b4:a9:b9:c2:9d:7c:71:47:e6: 0f:0c:83:43:8c:54:de:20:16:02:e3:72:27:4d:2a:0e:03:eb: 01:c0:d7:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTFGOTExMC8GA1UEBRMoQjM4RUQxNjEzMkRDQjk3ODk2NzY3NzFBOEIwOUU0NTA5 QjlFRDRGOTAeFw0yNTEwMTcxMTQyMDFaFw0yNTEwMjQxMTQyMDFaMBgxFjAUBgNV BAMTDTY4ZjIyYjg5LWRhNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOPx0RWuvWX0HKK9gA9IagYjCFq/kRTaQcHHNK1rjP5EV2X9DQcFObylfl7SPZ 6HX38GSPv2ZTwbFsQPbuqgsdPHyEbTLzk/IhGU/IDmA/r/8kywyHyGhwsyHj9mYD +36VyCwSqMK+EPZW/I5dK6Xz1Z0RzqLLu1ciT8Jl8+uXC0DDD/p72weRqw7VtI4t nNk9EtEMnmPQ5/FAq7OePE6eKRY4na1nfGmVACrIh7emf9HbCfSeEq3LScNuDwoF siNtyxK6joDQZVZ+5aXShDORbpOUVI5npfvopx7+DZmn9wtonLDJ2mZbeJz2EB5R 6C62Jos5EZH5Hlki0OneuHcFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeoLfWYiU 42RK2buTdJPY6XZkiDgwHwYDVR0jBBgwFoAUs47RYTLcuXiWdncaiwnkUJue1Pkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMUY5L0E2QkE2QzhFOERF MjExRjBBMzA4QUM3Q0M0RjlBRTAyL3M0N1JZVExjdVhpV2RuY2Fpd25rVUp1ZTFQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvczQ3UllUTGN1WGlXZG5jYWl3bmtVSnVlMVBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF MUY5L0E2QkE2QzhFOERFMjExRjBBMzA4QUM3Q0M0RjlBRTAyL3M0N1JZVExjdVhp V2RuY2Fpd25rVUp1ZTFQay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMG6JKPXOGgI4ieYmcsOQCir3kK6VSKt7JtaxE1H8lLhx06/0inoeuxv BcrLTJaIKiJaDyCcc6U7kbpp4ZHalo7dV+3LMjk/rp/BHW05TaffUqByt5I0CqFN QExVNP66VNsvSoNqm3Kl0GVprLjnOLlPUlUNUBWT7VvauaoP3ezTPC4LP58aTOFp 2DymowWgC4K3rFA8NIKGg8HA1LLErok9cg80hbMWD1/v7mPAeRc3+WPFIur/JBUr TmtI8BAF/fXxNetWOFgbW2y+7zT3YHRPLQDnm3LPyyMKIKUluh9eT7SpucKdfHFH 5g8Mg0OMVN4gFgLjcidNKg4D6wHA19o= -----END CERTIFICATE-----Generated at Sat Oct 18 23:29:06 2025 by rpki-client