$ rpki-client -vvf rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft File: sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft (raw, json) Hash identifier: k7/iKJCcCO6QF8l5sRWAb6eaZQCjw3EA0S1xx7JXNYQ= Subject key identifier: 84:18:45:59:72:02:15:AD:4B:5A:BC:D7:E3:B8:CD:C3:B7:99:01:F6 Authority key identifier: B0:8B:59:E5:D1:07:05:C5:CB:2D:3C:DB:85:65:B3:28:D5:02:F5:50 Certificate issuer: /CN=A911C53A/serialNumber=B08B59E5D10705C5CB2D3CDB8565B328D502F550 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft Manifest number: 47 Signing time: Sun 19 Oct 2025 10:49:28 +0000 Manifest this update: Sun 19 Oct 2025 10:49:28 +0000 Manifest next update: Sun 26 Oct 2025 10:49:28 +0000 Files and hashes: 1: sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl (hash: IkwOKxC14PhYF++Ciu003/MeSuel5mUw57CVcoGfPGY=) 2: BDF659C4445111F0945A7E49C4F9AE02.roa (hash: NrM1GT0GOIEPUd0x6/lOomv0lodf7Nxw+vo5Gb1q27Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C53A, serialNumber=B08B59E5D10705C5CB2D3CDB8565B328D502F550 Validity Not Before: Oct 19 10:49:28 2025 GMT Not After : Oct 26 10:49:28 2025 GMT Subject: CN=68f4c238-09c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:20:01:a8:76:a9:41:da:a7:75:8c:8a:75:5f: 2a:d5:cd:e4:66:d3:9e:c4:85:3e:87:a1:90:03:e5: e0:8c:e5:58:48:71:f1:ff:d9:f9:da:88:e6:11:18: 2c:cd:37:79:88:b3:e0:c0:2d:c0:16:24:d6:c3:46: ec:31:14:b1:c2:96:a3:74:9a:63:67:b3:ad:32:e2: bb:ff:f7:9d:14:f9:b9:e5:c8:8f:97:52:20:69:b9: 3c:be:c9:52:f5:65:32:4b:6f:fa:d7:f1:bb:b5:fe: 52:d2:4f:56:dc:25:87:5d:99:29:00:28:54:79:72: d5:b8:86:84:58:68:8c:51:e0:66:b1:5f:f5:14:7d: e1:40:cf:c7:7a:ee:96:fa:74:e8:df:d1:bc:9b:a2: 6b:47:da:3b:da:f1:0a:f7:b5:a5:4f:f4:8e:de:c4: 56:a4:ee:af:ea:65:f5:31:18:52:a1:86:75:75:7b: eb:e9:7e:03:55:08:3b:23:82:ce:4e:9b:48:d7:af: 67:fe:7a:80:db:34:77:5f:37:cd:67:d3:32:93:e7: 2e:1e:9e:6a:42:fe:24:38:f4:7f:2a:a2:6d:fe:b0: e3:96:9c:ce:b4:6b:ff:36:6a:72:9a:bf:b0:9f:8e: 94:06:32:ac:29:99:08:3e:90:9a:3a:79:48:08:5e: 26:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:18:45:59:72:02:15:AD:4B:5A:BC:D7:E3:B8:CD:C3:B7:99:01:F6 X509v3 Authority Key Identifier: keyid:B0:8B:59:E5:D1:07:05:C5:CB:2D:3C:DB:85:65:B3:28:D5:02:F5:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:3e:c5:dc:4d:98:5c:c6:cf:92:a2:b4:49:c1:b7:26:e3:cc: e8:cf:49:5f:56:c3:72:03:8f:20:35:c1:37:89:a0:81:a4:6e: 93:33:36:c4:74:49:ba:96:8d:93:85:9d:47:e5:53:f7:84:37: 38:7f:bf:7a:17:77:58:df:ea:40:66:85:ca:51:de:08:de:20: e8:99:7d:f6:b3:3b:8d:38:4a:72:6f:ce:97:cb:a6:67:bc:52: 9c:4c:db:be:b8:f4:2c:ed:47:bd:77:f2:fd:27:b3:d7:fe:7b: b1:2b:df:b8:23:7b:d7:e8:ff:b4:15:9d:c9:4c:56:df:a5:2f: 12:37:5d:e8:ac:d9:ca:2b:9f:cf:3f:cc:6b:e7:e4:00:52:8e: 02:e1:a3:ed:04:78:a6:f9:89:3c:47:c6:b4:de:03:2d:3c:61: e4:b4:7c:19:77:fd:43:49:2b:40:55:e4:69:b3:22:8d:a7:e8: d9:53:41:7f:67:6b:c6:a6:70:2c:45:28:6b:5b:84:e8:bb:f4: 07:c3:5e:a1:aa:4a:b5:c0:ce:79:e2:eb:3b:f1:93:6e:91:f5: fc:cc:91:51:d4:3e:26:e2:49:f8:58:16:15:e2:75:97:6d:6d: 53:19:86:c5:db:1d:b0:fb:1c:ed:da:b6:15:37:65:39:5b:a6: 36:61:85:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzUzQTExMC8GA1UEBRMoQjA4QjU5RTVEMTA3MDVDNUNCMkQzQ0RCODU2NUIzMjhE NTAyRjU1MDAeFw0yNTEwMTkxMDQ5MjhaFw0yNTEwMjYxMDQ5MjhaMBgxFjAUBgNV BAMTDTY4ZjRjMjM4LTA5YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUIAGodqlB2qd1jIp1XyrVzeRm057EhT6HoZAD5eCM5VhIcfH/2fnaiOYRGCzN N3mIs+DALcAWJNbDRuwxFLHClqN0mmNns60y4rv/950U+bnlyI+XUiBpuTy+yVL1 ZTJLb/rX8bu1/lLST1bcJYddmSkAKFR5ctW4hoRYaIxR4GaxX/UUfeFAz8d67pb6 dOjf0bybomtH2jva8Qr3taVP9I7exFak7q/qZfUxGFKhhnV1e+vpfgNVCDsjgs5O m0jXr2f+eoDbNHdfN81n0zKT5y4enmpC/iQ49H8qom3+sOOWnM60a/82anKav7Cf jpQGMqwpmQg+kJo6eUgIXiZpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhBhFWXIC Fa1LWrzX47jNw7eZAfYwHwYDVR0jBBgwFoAUsItZ5dEHBcXLLTzbhWWzKNUC9VAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDNTNBLzQ3NDUwNTZFNDQ1 MTExRjBBMDlFOEEyNEM0RjlBRTAyL3NJdFo1ZEVIQmNYTExUemJoV1d6S05VQzlW QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc0l0WjVkRUhCY1hMTFR6YmhXV3pLTlVDOVZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD NTNBLzQ3NDUwNTZFNDQ1MTExRjBBMDlFOEEyNEM0RjlBRTAyL3NJdFo1ZEVIQmNY TExUemJoV1d6S05VQzlWQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACg+xdxNmFzGz5KitEnBtybjzOjPSV9Ww3IDjyA1wTeJoIGkbpMzNsR0 SbqWjZOFnUflU/eENzh/v3oXd1jf6kBmhcpR3gjeIOiZffazO404SnJvzpfLpme8 UpxM27649CztR7138v0ns9f+e7Er37gje9fo/7QVnclMVt+lLxI3Xeis2corn88/ zGvn5ABSjgLho+0EeKb5iTxHxrTeAy08YeS0fBl3/UNJK0BV5GmzIo2n6NlTQX9n a8amcCxFKGtbhOi79AfDXqGqSrXAznni6zvxk26R9fzMkVHUPibiSfhYFhXidZdt bVMZhsXbHbD7HO3athU3ZTlbpjZhhQU= -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:23 2025 by rpki-client