$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft File: n47RxT7pDTyshKZHDEt1lMVXXYU.mft (raw, json) Hash identifier: sab4l2GQoz2m8PTEfhaqtmHm1Dsbbphwz+Y+toUmiI4= Subject key identifier: BE:1C:BA:2C:FA:82:9D:E4:BA:7E:C6:41:D3:96:B3:78:93:12:C8:09 Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 Certificate issuer: /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft Manifest number: 01AA Signing time: Sat 23 Aug 2025 03:23:42 +0000 Manifest this update: Sat 23 Aug 2025 03:23:42 +0000 Manifest next update: Sat 30 Aug 2025 03:23:42 +0000 Files and hashes: 1: n47RxT7pDTyshKZHDEt1lMVXXYU.crl (hash: VV6uPwosa0/RH7q4zKEk/fvoXCmZIToEm5Tn5Ykotog=) 2: FD4E307AFEA711EDBC673B4BC4F9AE02.roa (hash: /gcnA3lv0gvYzo5Yy1H0Ai0POjgkW7UZBEUoiqUQvoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B983, serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Validity Not Before: Aug 23 03:23:42 2025 GMT Not After : Aug 30 03:23:42 2025 GMT Subject: CN=68a9343e-00a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3a:78:30:d6:d7:f8:e8:02:38:c4:32:25:c9: 63:2f:25:15:f3:d3:06:96:f1:f2:f4:61:9f:d5:99: ab:9f:1f:d4:16:cd:4f:be:64:c0:4b:c3:ac:66:13: c8:d7:ba:de:ea:87:86:e2:ed:08:8c:1a:ac:62:f6: 47:a6:92:15:2b:12:dc:6e:24:14:5b:af:13:b4:a7: 6e:a4:b8:5a:23:e8:bf:f5:96:76:30:37:be:c1:e1: f2:98:bc:66:34:0c:51:2c:b8:8b:0d:4b:6f:33:b6: 55:65:c1:47:91:25:72:22:8f:fe:f6:ae:b8:25:c2: 4a:15:a1:f0:e2:44:ab:4c:3c:49:d2:fd:e1:04:37: cf:c3:11:37:9f:06:c2:55:fc:0f:c7:18:3e:81:7a: 3f:75:ca:12:38:9f:0c:63:2b:ea:9b:fe:24:ba:46: 2e:af:75:20:e4:0d:cb:f8:0a:d4:3e:98:3d:29:63: 08:e8:08:f4:f7:9f:bd:a5:b3:32:7e:75:88:54:50: ec:ce:b3:94:24:c0:ff:67:5d:c1:37:94:16:31:7c: 58:b4:c8:dd:7f:ef:0b:a5:2d:c8:53:dd:3e:1a:1f: 29:f0:b6:26:3b:6c:b5:f5:3a:38:d3:7d:e6:1f:f4: 9a:2a:e8:74:28:b3:5f:3e:fd:d7:5c:a6:e5:62:46: 2a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1C:BA:2C:FA:82:9D:E4:BA:7E:C6:41:D3:96:B3:78:93:12:C8:09 X509v3 Authority Key Identifier: keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:8e:25:08:53:91:c2:f5:20:af:49:ed:8a:b7:cb:2b:bc:e0: 7c:04:9d:57:b2:1d:6a:e4:c9:c9:5b:ee:10:ee:44:71:8f:77: cc:8f:9c:fc:a6:2c:84:84:fb:57:44:7e:84:39:88:76:f9:55: 5b:89:4f:e9:f9:a1:bc:19:72:1b:f1:53:c3:31:9f:15:ac:7b: 88:7e:45:6b:ae:65:a9:e7:fc:38:70:d0:97:c1:51:1f:04:12: 7f:60:51:05:e4:57:2d:2b:8a:c4:98:cd:4c:00:4c:52:9b:16: 00:8a:eb:59:91:84:2d:fc:89:68:25:09:15:78:6d:2f:69:52: 38:6a:34:d9:69:3b:09:26:34:40:8c:a6:4f:90:d1:93:d9:db: f9:f5:c2:c8:b3:c5:de:a6:e8:6b:6f:c4:ca:a8:8f:42:03:c7: fe:9f:1a:67:cd:3f:20:d8:1d:ac:0a:29:45:84:9a:64:e5:e2: 08:f4:5c:8f:44:d6:7b:ea:ad:23:b3:08:10:9f:4c:0b:3e:fd: ee:0b:a9:c5:fd:7d:06:21:9b:a9:e6:04:14:d1:8b:51:68:3f: 7f:5c:f1:ea:58:78:2b:30:a5:5d:b3:87:3a:32:1a:8f:66:69: 08:7c:d0:29:b7:e0:67:4d:c9:da:36:7f:ca:39:85:af:39:03: d4:1b:71:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI5ODMxMTAvBgNVBAUTKDlGOEVEMUM1M0VFOTBEM0NBQzg0QTY0NzBDNEI3NTk0 QzU1NzVEODUwHhcNMjUwODIzMDMyMzQyWhcNMjUwODMwMDMyMzQyWjAYMRYwFAYD VQQDEw02OGE5MzQzZS0wMGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Dp4MNbX+OgCOMQyJcljLyUV89MGlvHy9GGf1Zmrnx/UFs1PvmTAS8OsZhPI 17re6oeG4u0IjBqsYvZHppIVKxLcbiQUW68TtKdupLhaI+i/9ZZ2MDe+weHymLxm NAxRLLiLDUtvM7ZVZcFHkSVyIo/+9q64JcJKFaHw4kSrTDxJ0v3hBDfPwxE3nwbC VfwPxxg+gXo/dcoSOJ8MYyvqm/4kukYur3Ug5A3L+ArUPpg9KWMI6Aj095+9pbMy fnWIVFDszrOUJMD/Z13BN5QWMXxYtMjdf+8LpS3IU90+Gh8p8LYmO2y19To4033m H/SaKuh0KLNfPv3XXKblYkYqcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4cuiz6 gp3kun7GQdOWs3iTEsgJMB8GA1UdIwQYMBaAFJ+O0cU+6Q08rISmRwxLdZTFV12F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjk4My9FNkE4QUNFQ0ZF QTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERUeXNoS1pIREV0MWxNVlhY WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240N1J4VDdwRFR5c2hLWkhERXQxbE1WWFhZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjk4My9FNkE4QUNFQ0ZFQTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERU eXNoS1pIREV0MWxNVlhYWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5jiUIU5HC9SCvSe2Kt8srvOB8BJ1Xsh1q5MnJW+4Q7kRxj3fMj5z8 piyEhPtXRH6EOYh2+VVbiU/p+aG8GXIb8VPDMZ8VrHuIfkVrrmWp5/w4cNCXwVEf BBJ/YFEF5FctK4rEmM1MAExSmxYAiutZkYQt/IloJQkVeG0vaVI4ajTZaTsJJjRA jKZPkNGT2dv59cLIs8Xepuhrb8TKqI9CA8f+nxpnzT8g2B2sCilFhJpk5eII9FyP RNZ76q0jswgQn0wLPv3uC6nF/X0GIZup5gQU0YtRaD9/XPHqWHgrMKVds4c6MhqP ZmkIfNApt+BnTcnaNn/KOYWvOQPUG3F4 -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:11 2025 by rpki-client