$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft File: s47RYTLcuXiWdncaiwnkUJue1Pk.mft (raw, json) Hash identifier: DXzv56X5RtjZXf9l2RLymRy5mAS+vLMZhwL2ZFXCVMk= Subject key identifier: CE:2D:E6:A8:B2:72:43:CE:1A:9B:13:96:CE:5D:61:16:0B:6C:96:80 Authority key identifier: B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9 Certificate issuer: /CN=A915E1F9/serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft Manifest number: 20 Signing time: Mon 03 Nov 2025 07:47:28 +0000 Manifest this update: Mon 03 Nov 2025 07:47:27 +0000 Manifest next update: Mon 10 Nov 2025 07:47:27 +0000 Files and hashes: 1: s47RYTLcuXiWdncaiwnkUJue1Pk.crl (hash: T0DTPaVWSvVcwGSNGw08Pb6oilQfUkuiDgWjOj2pZMM=) 2: BEB06ADA944211F08A761970C4F9AE02.roa (hash: 3kNCZmd08rxPbDlk/PAjWyQO4YBBbNOVI07fLcHLcu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E1F9, serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9 Validity Not Before: Nov 3 07:47:27 2025 GMT Not After : Nov 10 07:47:27 2025 GMT Subject: CN=69085e0f-01d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:24:bf:9c:6b:c3:3d:8e:91:ee:2e:48:5f:ab: 67:fa:0c:21:ce:09:08:3d:24:52:28:4a:9f:aa:31: fb:1a:51:3f:f0:de:d0:de:94:b1:c9:aa:8f:9a:b8: dd:bb:93:7e:06:3e:f8:1a:5f:c5:47:e6:d7:ae:55: 26:f6:81:cf:21:4c:ca:bd:21:5f:76:bd:d4:c7:df: bc:35:7a:b6:6e:2c:44:c0:2c:41:ac:e1:7a:7b:bf: 37:b5:7c:df:fa:c1:54:92:24:2e:29:87:2a:de:c7: 81:36:ad:c2:ef:ce:7f:9e:c0:a5:6a:d0:17:2c:26: e0:8c:6c:a3:70:7a:ba:60:56:0b:cf:70:2f:db:49: a4:da:68:88:08:c3:0a:2c:7a:74:4e:f9:34:e8:5e: c2:20:e6:69:58:66:06:ab:8e:6c:c2:13:46:82:3d: 10:23:fb:d8:c7:07:fe:a5:13:60:e1:24:76:c0:03: c0:6d:2f:32:5d:ef:65:32:ac:60:b0:4b:a5:06:f5: 9b:b7:5d:76:a9:03:13:4b:87:49:84:9c:ae:3a:0a: 47:ae:d4:5d:d5:a7:7b:84:af:16:10:08:cc:01:d7: 09:5f:a3:6b:2b:09:cb:57:c7:53:63:44:8c:9d:ee: 8d:8d:96:68:76:9b:6d:39:1e:cb:10:90:e4:54:49: 48:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2D:E6:A8:B2:72:43:CE:1A:9B:13:96:CE:5D:61:16:0B:6C:96:80 X509v3 Authority Key Identifier: keyid:B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:75:fa:a0:45:2f:a5:1f:37:8a:83:4c:a7:62:d4:58:94:45: 56:b7:20:3e:ad:4a:72:9d:a3:49:f5:4f:de:86:37:ee:c5:2b: 66:f3:c3:93:1e:aa:70:95:dd:ed:8d:7b:6f:f7:5a:38:2a:43: 5c:51:e6:c1:9b:93:89:05:51:16:a7:81:bd:90:bb:97:1f:2e: 28:d8:e7:0f:d5:97:68:cf:3f:25:8d:9b:e8:85:50:a1:cf:b4: df:e1:c6:53:1f:7c:fa:23:18:62:72:2d:b0:1b:d3:48:d3:9e: 88:3b:3e:14:75:2c:7b:b9:b2:9d:ca:00:be:c1:99:19:80:cf: 26:99:9c:e8:ba:d6:9b:45:73:81:95:9c:e5:a5:a9:a0:ea:ed: 72:5c:35:6c:00:7d:15:39:c6:46:96:4f:b8:94:5b:29:c4:92: b4:51:cb:96:93:e1:1b:0f:85:cc:76:0c:ad:ef:ae:85:59:05: 16:8c:87:c2:47:06:e8:23:f3:ab:12:1b:25:cc:62:c2:71:c0: ac:47:6f:01:d6:1c:ad:ef:a3:ce:f4:f5:e7:e9:74:46:45:2f: f3:5b:4f:06:1a:e3:57:13:e3:89:14:0b:66:63:f5:1c:24:cf: f0:2c:66:93:db:f7:1f:9a:5c:5e:36:57:1b:90:d8:5f:36:5f: d5:73:5c:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTFGOTExMC8GA1UEBRMoQjM4RUQxNjEzMkRDQjk3ODk2NzY3NzFBOEIwOUU0NTA5 QjlFRDRGOTAeFw0yNTExMDMwNzQ3MjdaFw0yNTExMTAwNzQ3MjdaMBgxFjAUBgNV BAMTDTY5MDg1ZTBmLTAxZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTJL+ca8M9jpHuLkhfq2f6DCHOCQg9JFIoSp+qMfsaUT/w3tDelLHJqo+auN27 k34GPvgaX8VH5teuVSb2gc8hTMq9IV92vdTH37w1erZuLETALEGs4Xp7vze1fN/6 wVSSJC4phyrex4E2rcLvzn+ewKVq0BcsJuCMbKNwerpgVgvPcC/bSaTaaIgIwwos enRO+TToXsIg5mlYZgarjmzCE0aCPRAj+9jHB/6lE2DhJHbAA8BtLzJd72UyrGCw S6UG9Zu3XXapAxNLh0mEnK46Ckeu1F3Vp3uErxYQCMwB1wlfo2srCctXx1NjRIyd 7o2Nlmh2m205HssQkORUSUiPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzi3mqLJy Q84amxOWzl1hFgtsloAwHwYDVR0jBBgwFoAUs47RYTLcuXiWdncaiwnkUJue1Pkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMUY5L0E2QkE2QzhFOERF MjExRjBBMzA4QUM3Q0M0RjlBRTAyL3M0N1JZVExjdVhpV2RuY2Fpd25rVUp1ZTFQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvczQ3UllUTGN1WGlXZG5jYWl3bmtVSnVlMVBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF MUY5L0E2QkE2QzhFOERFMjExRjBBMzA4QUM3Q0M0RjlBRTAyL3M0N1JZVExjdVhp V2RuY2Fpd25rVUp1ZTFQay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALN1+qBFL6UfN4qDTKdi1FiURVa3ID6tSnKdo0n1T96GN+7FK2bzw5Me qnCV3e2Ne2/3WjgqQ1xR5sGbk4kFURangb2Qu5cfLijY5w/Vl2jPPyWNm+iFUKHP tN/hxlMffPojGGJyLbAb00jTnog7PhR1LHu5sp3KAL7BmRmAzyaZnOi61ptFc4GV nOWlqaDq7XJcNWwAfRU5xkaWT7iUWynEkrRRy5aT4RsPhcx2DK3vroVZBRaMh8JH Bugj86sSGyXMYsJxwKxHbwHWHK3vo8709efpdEZFL/NbTwYa41cT44kUC2Zj9Rwk z/AsZpPb9x+aXF42VxuQ2F82X9VzXLA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:12:26 2025 by rpki-client