$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft File: n47RxT7pDTyshKZHDEt1lMVXXYU.mft (raw, json) Hash identifier: IoZ89bW66W5vfV5StTefug4rkb7zermqa8AOWY/Mgsc= Subject key identifier: 25:D3:FC:6F:22:44:74:24:54:E9:BA:62:09:11:33:DD:13:22:5A:53 Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 Certificate issuer: /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft Manifest number: 01CE Signing time: Mon 03 Nov 2025 02:53:43 +0000 Manifest this update: Mon 03 Nov 2025 02:53:42 +0000 Manifest next update: Mon 10 Nov 2025 02:53:42 +0000 Files and hashes: 1: n47RxT7pDTyshKZHDEt1lMVXXYU.crl (hash: uiQuOaF4WCPFGY+IgG1ARCMTg/75zRlt7y8HneYMzbk=) 2: FD4E307AFEA711EDBC673B4BC4F9AE02.roa (hash: /gcnA3lv0gvYzo5Yy1H0Ai0POjgkW7UZBEUoiqUQvoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B983, serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Validity Not Before: Nov 3 02:53:42 2025 GMT Not After : Nov 10 02:53:42 2025 GMT Subject: CN=69081936-ae9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:54:9b:4e:ad:6a:2a:ef:a8:e5:dc:d9:cd:b1: fe:db:4c:2c:64:09:6a:75:d2:89:17:74:bd:d7:df: b8:37:c0:a3:3d:01:79:b5:92:c1:b7:d2:09:25:e5: 6a:19:70:a8:22:57:8f:22:d0:75:af:e6:72:40:35: a3:93:74:6d:51:96:7f:d6:d8:b1:aa:78:02:55:c0: cb:5a:6d:f4:1d:5d:58:93:e9:19:2f:c8:d9:25:2d: d2:a3:76:0b:85:0e:11:15:95:1d:96:a0:94:1e:08: aa:8f:9e:65:ec:69:84:21:d1:67:d2:b1:dd:38:60: be:df:63:be:92:cc:0e:6c:4d:38:af:0f:9e:7e:15: 97:20:9e:58:32:33:0a:c5:82:2e:64:19:8b:f0:47: 7b:bd:f4:30:d1:fc:aa:d3:50:ec:63:d4:1b:ba:37: 47:78:5c:bf:7c:d2:bf:2b:d7:78:1d:80:6e:48:9c: 0b:2b:5e:28:69:d4:1d:27:de:fe:a1:39:79:25:70: 40:6c:a7:e2:1c:a5:fb:af:9e:27:63:cc:46:c6:88: 54:9b:e6:a0:23:8d:3c:f0:d1:33:1c:5a:16:21:a4: 3a:c4:85:fc:74:fb:dd:f1:ac:ed:22:e9:8f:93:d7: 3b:f9:9f:63:04:03:32:65:28:74:1e:ef:a2:f5:09: bc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D3:FC:6F:22:44:74:24:54:E9:BA:62:09:11:33:DD:13:22:5A:53 X509v3 Authority Key Identifier: keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b2:5b:de:3b:a7:57:3b:e4:17:8d:47:cc:fd:c4:b2:cb:c1: bd:6b:fe:7d:e0:b1:b3:b5:d1:f1:a8:c8:75:e0:a2:0a:e7:62: 24:da:49:48:11:17:3e:df:02:cd:82:12:8a:6f:8a:9f:81:8c: ed:b8:19:a9:59:ea:a1:e3:7d:53:d6:08:23:47:7c:33:03:92: 41:59:3b:d9:f1:d1:e4:4b:ba:c3:e4:33:46:97:60:c8:b7:aa: 92:5c:6d:9b:b0:b0:51:5c:6d:f8:03:38:2a:2c:60:01:40:df: 7b:6b:f8:8e:22:81:31:b0:32:62:af:1b:b8:a9:e7:32:86:8b: 22:bd:2c:ab:3d:ca:b2:c6:f9:65:41:dc:cc:83:b7:27:27:f0: 28:56:1e:c4:d3:b2:25:62:94:db:b3:9f:14:6f:b6:d6:de:06: 16:b7:b1:51:0b:13:fe:04:3e:4c:d8:94:8d:b5:8d:5c:59:81: e9:5c:b7:fa:48:16:9e:fe:f3:e1:64:51:ab:27:bb:76:be:1c: 6a:5b:e4:b0:e8:f8:f4:c7:06:56:fc:2c:4d:fe:53:d4:5b:70: 02:ee:fa:8b:be:52:a5:45:f2:e8:ee:03:02:2b:7f:35:44:97: 12:17:e4:0b:28:08:0e:c3:c3:8e:c9:90:05:c0:2f:52:31:10: 07:c0:48:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI5ODMxMTAvBgNVBAUTKDlGOEVEMUM1M0VFOTBEM0NBQzg0QTY0NzBDNEI3NTk0 QzU1NzVEODUwHhcNMjUxMTAzMDI1MzQyWhcNMjUxMTEwMDI1MzQyWjAYMRYwFAYD VQQDEw02OTA4MTkzNi1hZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5VSbTq1qKu+o5dzZzbH+20wsZAlqddKJF3S919+4N8CjPQF5tZLBt9IJJeVq GXCoIlePItB1r+ZyQDWjk3RtUZZ/1tixqngCVcDLWm30HV1Yk+kZL8jZJS3So3YL hQ4RFZUdlqCUHgiqj55l7GmEIdFn0rHdOGC+32O+kswObE04rw+efhWXIJ5YMjMK xYIuZBmL8Ed7vfQw0fyq01DsY9QbujdHeFy/fNK/K9d4HYBuSJwLK14oadQdJ97+ oTl5JXBAbKfiHKX7r54nY8xGxohUm+agI4088NEzHFoWIaQ6xIX8dPvd8aztIumP k9c7+Z9jBAMyZSh0Hu+i9Qm87QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXT/G8i RHQkVOm6YgkRM90TIlpTMB8GA1UdIwQYMBaAFJ+O0cU+6Q08rISmRwxLdZTFV12F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjk4My9FNkE4QUNFQ0ZF QTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERUeXNoS1pIREV0MWxNVlhY WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240N1J4VDdwRFR5c2hLWkhERXQxbE1WWFhZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjk4My9FNkE4QUNFQ0ZFQTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERU eXNoS1pIREV0MWxNVlhYWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMslveO6dXO+QXjUfM/cSyy8G9a/594LGztdHxqMh14KIK52Ik2klI ERc+3wLNghKKb4qfgYztuBmpWeqh431T1ggjR3wzA5JBWTvZ8dHkS7rD5DNGl2DI t6qSXG2bsLBRXG34AzgqLGABQN97a/iOIoExsDJirxu4qecyhosivSyrPcqyxvll QdzMg7cnJ/AoVh7E07IlYpTbs58Ub7bW3gYWt7FRCxP+BD5M2JSNtY1cWYHpXLf6 SBae/vPhZFGrJ7t2vhxqW+Sw6Pj0xwZW/CxN/lPUW3AC7vqLvlKlRfLo7gMCK381 RJcSF+QLKAgOw8OOyZAFwC9SMRAHwEiZ -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:15 2025 by rpki-client