$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft File: n47RxT7pDTyshKZHDEt1lMVXXYU.mft (raw, json) Hash identifier: SrVD774G9LDsbIQ+6XSafMYISylonmzb1CMEF/yiNJc= Subject key identifier: 96:F2:35:E9:8E:24:26:8E:98:81:B2:6B:29:E5:29:0E:00:70:21:12 Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 Certificate issuer: /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft Manifest number: 01C7 Signing time: Sun 19 Oct 2025 05:28:13 +0000 Manifest this update: Sun 19 Oct 2025 05:28:12 +0000 Manifest next update: Sun 26 Oct 2025 05:28:12 +0000 Files and hashes: 1: n47RxT7pDTyshKZHDEt1lMVXXYU.crl (hash: MQRZ/4kjlHSRMIi1L6YYMiLnxGp669z96dcFy0p2s8A=) 2: FD4E307AFEA711EDBC673B4BC4F9AE02.roa (hash: /gcnA3lv0gvYzo5Yy1H0Ai0POjgkW7UZBEUoiqUQvoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B983, serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Validity Not Before: Oct 19 05:28:12 2025 GMT Not After : Oct 26 05:28:12 2025 GMT Subject: CN=68f476ec-a1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3f:36:7a:d3:43:b5:11:b3:fd:37:b8:56:f8: 71:ec:4f:2c:4a:99:24:c2:3c:f5:11:f6:37:c6:44: 0f:75:58:2a:95:a3:02:0c:b4:34:58:1e:4d:fd:6a: 4d:86:7a:77:80:09:c1:a4:69:99:29:e9:2e:c5:f8: 98:68:c2:58:c3:6d:bd:cd:f3:38:bd:bf:dd:9a:a3: 09:b4:fd:66:43:c8:8b:6b:36:e6:5a:c3:18:7e:a4: 9b:00:64:f3:4c:d1:12:70:b8:9f:4b:b3:76:05:8b: 40:cb:b5:96:38:a8:95:2a:0a:d6:0d:5e:81:8b:8e: d2:26:30:33:eb:9b:d2:35:51:de:32:e2:54:41:b1: be:c5:cc:50:af:49:dc:fe:c2:2e:fb:b5:1d:13:2a: 8e:83:31:e5:8f:04:1e:7c:69:17:65:30:53:ce:d6: 3e:2d:7c:f6:b5:5f:e7:01:45:86:d7:3e:87:60:d5: 24:cf:07:6d:d5:06:73:c2:35:95:1c:ab:70:46:af: 4f:a6:cf:19:7f:71:ca:e6:a8:ef:ee:33:99:08:57: 6d:d9:4e:f8:0e:97:6b:59:22:57:be:f4:da:cd:92: a8:f0:cd:e7:c8:0b:b3:f1:6c:8f:5e:a0:02:47:0e: 12:0e:a0:57:99:a7:bc:85:7c:58:a1:c7:c5:05:7a: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F2:35:E9:8E:24:26:8E:98:81:B2:6B:29:E5:29:0E:00:70:21:12 X509v3 Authority Key Identifier: keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:44:fb:63:6a:b9:c8:59:e2:1e:15:d5:b4:9b:cc:1a:2a:b0: 28:0e:fb:26:88:e9:16:09:59:a1:e3:02:c7:bf:51:ba:e9:32: 8a:3e:ee:2b:b1:6e:fb:90:8f:ef:c5:b9:6f:dc:26:dc:76:b2: 83:08:b8:74:a4:3b:3f:ad:75:37:fe:59:fa:5d:7a:be:9f:f9: e3:a5:95:f4:95:b5:bc:25:dc:fa:f9:09:0a:9d:81:df:cf:d0: ff:79:20:4b:07:91:3e:fd:cb:0d:e4:d7:62:06:5c:fe:7a:f6: 8f:1c:31:f7:46:dd:18:d4:0b:80:03:08:31:32:d0:52:c4:66: 74:e9:e0:ca:e8:e0:1e:08:9a:00:21:7e:48:ab:b6:a5:b7:3c: cb:13:5f:83:80:65:4d:bf:1f:6f:16:04:8a:b2:a9:b3:bf:84: 45:ef:8f:0e:ef:2b:93:19:7b:c1:12:68:50:d5:69:09:36:3f: c1:11:14:79:a1:7e:39:f4:0b:45:e5:56:56:e4:e9:25:e5:39: 72:e2:08:0b:ba:6b:94:f6:f6:28:b3:4d:7f:e0:b8:ee:2c:8b: 02:b8:58:cc:2c:6d:9a:22:b0:ab:c1:2e:b3:ff:19:f5:c7:f0: 4e:62:6e:87:75:ab:63:e4:8a:1c:bb:22:94:50:1f:45:dd:0e: 47:66:cb:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI5ODMxMTAvBgNVBAUTKDlGOEVEMUM1M0VFOTBEM0NBQzg0QTY0NzBDNEI3NTk0 QzU1NzVEODUwHhcNMjUxMDE5MDUyODEyWhcNMjUxMDI2MDUyODEyWjAYMRYwFAYD VQQDEw02OGY0NzZlYy1hMWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnj82etNDtRGz/Te4Vvhx7E8sSpkkwjz1EfY3xkQPdVgqlaMCDLQ0WB5N/WpN hnp3gAnBpGmZKekuxfiYaMJYw229zfM4vb/dmqMJtP1mQ8iLazbmWsMYfqSbAGTz TNEScLifS7N2BYtAy7WWOKiVKgrWDV6Bi47SJjAz65vSNVHeMuJUQbG+xcxQr0nc /sIu+7UdEyqOgzHljwQefGkXZTBTztY+LXz2tV/nAUWG1z6HYNUkzwdt1QZzwjWV HKtwRq9Pps8Zf3HK5qjv7jOZCFdt2U74DpdrWSJXvvTazZKo8M3nyAuz8WyPXqAC Rw4SDqBXmae8hXxYocfFBXrIiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbyNemO JCaOmIGyaynlKQ4AcCESMB8GA1UdIwQYMBaAFJ+O0cU+6Q08rISmRwxLdZTFV12F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjk4My9FNkE4QUNFQ0ZF QTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERUeXNoS1pIREV0MWxNVlhY WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240N1J4VDdwRFR5c2hLWkhERXQxbE1WWFhZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjk4My9FNkE4QUNFQ0ZFQTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERU eXNoS1pIREV0MWxNVlhYWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJRPtjarnIWeIeFdW0m8waKrAoDvsmiOkWCVmh4wLHv1G66TKKPu4r sW77kI/vxblv3CbcdrKDCLh0pDs/rXU3/ln6XXq+n/njpZX0lbW8Jdz6+QkKnYHf z9D/eSBLB5E+/csN5NdiBlz+evaPHDH3Rt0Y1AuAAwgxMtBSxGZ06eDK6OAeCJoA IX5Iq7altzzLE1+DgGVNvx9vFgSKsqmzv4RF748O7yuTGXvBEmhQ1WkJNj/BERR5 oX459AtF5VZW5Okl5Tly4ggLumuU9vYos01/4LjuLIsCuFjMLG2aIrCrwS6z/xn1 x/BOYm6Hdatj5IocuyKUUB9F3Q5HZsvu -----END CERTIFICATE-----Generated at Mon Oct 20 05:46:47 2025 by rpki-client