$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft File: n47RxT7pDTyshKZHDEt1lMVXXYU.mft (raw, json) Hash identifier: CvMhPpd9PiSy56C+4LQW/XVYz0x2CmruwZz4wOxlPtY= Subject key identifier: 85:94:C8:42:B7:6E:17:6B:A3:70:E8:56:B6:BE:58:90:14:36:C3:9F Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 Certificate issuer: /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft Manifest number: 01A3 Signing time: Sat 09 Aug 2025 03:42:59 +0000 Manifest this update: Sat 09 Aug 2025 03:42:58 +0000 Manifest next update: Sat 16 Aug 2025 03:42:58 +0000 Files and hashes: 1: n47RxT7pDTyshKZHDEt1lMVXXYU.crl (hash: 3Uq6io1VfcMnO/pWK5Zgyu6/u0ov5diMTxNu6Rh+P8g=) 2: FD4E307AFEA711EDBC673B4BC4F9AE02.roa (hash: /gcnA3lv0gvYzo5Yy1H0Ai0POjgkW7UZBEUoiqUQvoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B983, serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Validity Not Before: Aug 9 03:42:58 2025 GMT Not After : Aug 16 03:42:58 2025 GMT Subject: CN=6896c3c3-48ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:30:b7:37:55:32:ca:18:db:c3:e8:ca:81:54: f5:9e:32:5c:3f:3b:bc:52:48:b3:c5:89:b7:0b:f7: e5:94:ec:2b:d0:7a:54:db:3b:37:85:69:31:f9:68: f8:25:59:f9:5b:94:01:a4:ab:bf:70:f2:b1:e0:56: 11:26:80:70:c7:dc:dc:b9:c5:e2:c7:ea:14:84:63: 7a:1e:93:32:9b:0f:4e:ad:c0:2a:86:32:6d:f0:b6: 47:3b:1d:29:e7:b7:66:4f:92:f5:e4:ca:7f:7b:03: 19:43:81:41:e9:58:07:5f:99:c2:3e:6f:f0:f5:f1: d9:0c:56:d5:ea:a1:b0:a8:b3:ce:d3:39:db:60:4e: 61:d1:9d:36:83:d4:1b:05:5e:82:87:a5:62:c4:7d: 92:da:56:ef:31:2f:63:25:9e:c3:71:95:87:cc:71: 7f:87:e8:5d:09:1c:91:bc:91:c7:5f:4e:ba:c0:9b: 65:b2:1f:fc:46:d3:d8:06:a7:8c:e6:91:a6:27:96: 47:43:c9:cb:cb:b7:4d:0d:09:c7:4f:9b:2d:e1:d3: 0d:d9:bd:14:12:a7:e6:8c:42:63:bb:88:bd:8c:eb: 1f:ff:7b:db:7b:09:22:9e:6a:61:c3:96:2a:63:35: dd:96:8a:fb:2c:39:9d:ba:47:38:9f:8b:3f:a5:ea: 18:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:94:C8:42:B7:6E:17:6B:A3:70:E8:56:B6:BE:58:90:14:36:C3:9F X509v3 Authority Key Identifier: keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:9c:e4:2c:01:b0:f0:04:d8:05:95:27:c9:12:ea:86:22:2a: d7:ca:5f:cc:4c:ee:74:04:91:eb:98:cc:1c:c9:d4:51:87:23: 91:c9:9b:fa:61:e2:26:8f:43:e3:97:3b:ba:03:a6:e0:fc:fe: e6:48:49:79:b3:bf:73:15:4e:66:42:b1:77:20:8b:fc:c7:4d: ea:d7:96:9a:c0:76:c6:6b:49:36:23:65:cd:c9:e5:f2:9a:bf: 6c:e7:35:d3:3a:67:42:1e:f3:8e:50:f2:39:56:e9:c7:ad:b6: 0d:7d:df:ba:4b:21:d6:fd:d9:d0:23:ef:94:e2:46:b1:c2:06: 2e:3f:b8:e3:84:09:5c:17:70:2b:cc:c1:6a:ab:22:87:46:21: f8:dd:d8:fd:42:d7:68:0a:d2:2b:5f:5c:f3:bb:46:e3:33:42: 57:01:e4:2e:55:60:85:09:82:dd:13:de:3f:a5:fa:d8:d6:7a: 28:37:67:bf:3e:5c:b5:3f:7f:fe:90:a0:77:06:d1:8e:78:0b: a7:f9:35:3a:9f:37:cd:5f:6f:e9:43:f6:d7:50:a0:3d:1c:ed: cb:7a:9e:09:4d:ca:3b:88:09:7f:c3:0f:e9:ec:0b:73:ba:84: 42:42:76:d3:29:16:c3:83:bb:8d:d8:98:00:b4:df:51:40:71: fc:97:8b:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI5ODMxMTAvBgNVBAUTKDlGOEVEMUM1M0VFOTBEM0NBQzg0QTY0NzBDNEI3NTk0 QzU1NzVEODUwHhcNMjUwODA5MDM0MjU4WhcNMjUwODE2MDM0MjU4WjAYMRYwFAYD VQQDEw02ODk2YzNjMy00OGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlTC3N1Uyyhjbw+jKgVT1njJcPzu8UkizxYm3C/fllOwr0HpU2zs3hWkx+Wj4 JVn5W5QBpKu/cPKx4FYRJoBwx9zcucXix+oUhGN6HpMymw9OrcAqhjJt8LZHOx0p 57dmT5L15Mp/ewMZQ4FB6VgHX5nCPm/w9fHZDFbV6qGwqLPO0znbYE5h0Z02g9Qb BV6Ch6VixH2S2lbvMS9jJZ7DcZWHzHF/h+hdCRyRvJHHX066wJtlsh/8RtPYBqeM 5pGmJ5ZHQ8nLy7dNDQnHT5st4dMN2b0UEqfmjEJju4i9jOsf/3vbewkinmphw5Yq YzXdlor7LDmdukc4n4s/peoYTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWUyEK3 bhdro3DoVra+WJAUNsOfMB8GA1UdIwQYMBaAFJ+O0cU+6Q08rISmRwxLdZTFV12F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjk4My9FNkE4QUNFQ0ZF QTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERUeXNoS1pIREV0MWxNVlhY WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240N1J4VDdwRFR5c2hLWkhERXQxbE1WWFhZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjk4My9FNkE4QUNFQ0ZFQTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERU eXNoS1pIREV0MWxNVlhYWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0nOQsAbDwBNgFlSfJEuqGIirXyl/MTO50BJHrmMwcydRRhyORyZv6 YeImj0Pjlzu6A6bg/P7mSEl5s79zFU5mQrF3IIv8x03q15aawHbGa0k2I2XNyeXy mr9s5zXTOmdCHvOOUPI5VunHrbYNfd+6SyHW/dnQI++U4kaxwgYuP7jjhAlcF3Ar zMFqqyKHRiH43dj9QtdoCtIrX1zzu0bjM0JXAeQuVWCFCYLdE94/pfrY1nooN2e/ Ply1P3/+kKB3BtGOeAun+TU6nzfNX2/pQ/bXUKA9HO3Lep4JTco7iAl/ww/p7Atz uoRCQnbTKRbDg7uN2JgAtN9RQHH8l4t+ -----END CERTIFICATE-----Generated at Sun Aug 10 18:16:19 2025 by rpki-client