$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft File: MR39neQF4HHYMSH7kCX7TyAkAyw.mft (raw, json) Hash identifier: Ub1DU51WR0B6b5V5mqOgZPdYCgQIFWb2K5gC87RwDYs= Subject key identifier: 47:ED:07:82:33:91:1F:27:F5:42:E3:50:A8:59:1F:8C:7B:0B:1D:43 Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Certificate serial: 0A14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft Manifest number: 0A0D Signing time: Sat 18 Oct 2025 20:48:46 +0000 Manifest this update: Sat 18 Oct 2025 20:48:45 +0000 Manifest next update: Sat 25 Oct 2025 20:48:45 +0000 Files and hashes: 1: MR39neQF4HHYMSH7kCX7TyAkAyw.crl (hash: y3naDmN8Urp4Qs/WHbNtTybAwwWDVShqfL8o40ihR0k=) 2: CD57B28C814211EA94DD3E2DC4F9AE02.roa (hash: ClQj70D4QsMeSPs5XhoDWoqTMjGb5jdaAiwIUHB/7eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2580 (0xa14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B3A, serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Validity Not Before: Oct 18 20:48:45 2025 GMT Not After : Oct 25 20:48:45 2025 GMT Subject: CN=68f3fd2d-354e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0d:50:b9:ef:1f:d8:74:17:18:7b:e8:38:a9: 70:61:fa:04:40:67:aa:39:ab:84:9f:d7:4a:73:48: d2:77:fb:cf:dc:e8:40:34:26:b0:71:a8:da:3b:f0: 33:66:13:07:c7:1d:4d:af:99:2e:b5:45:61:8f:3a: 3f:37:3c:a8:b7:35:8a:a8:af:7f:8f:bb:89:7e:31: 9b:22:3f:1f:6a:3d:17:95:c8:71:b2:bf:33:1f:5a: 47:94:8f:b0:b6:63:0e:d2:b7:65:50:49:c9:51:4f: e3:3e:13:dd:2d:13:f2:b1:b9:76:64:09:fc:b3:cd: 8d:c5:29:38:aa:8f:00:ec:0d:7d:d3:a2:69:b0:5a: 3c:7f:37:e1:d8:2e:85:a7:c2:b1:0b:4c:0e:a3:6c: 97:2d:0b:31:b3:e8:a8:3b:e9:89:18:bf:df:08:bb: 87:c7:b1:89:70:37:ce:4d:75:43:c8:18:0c:9a:a9: f1:b4:f6:7f:2e:95:78:f1:35:ba:f0:c5:e7:d0:c1: 8e:fd:21:4e:7c:9f:0d:35:11:1c:09:59:fe:9e:b8: ad:87:85:98:00:de:c6:d0:1b:ec:41:01:bf:17:d0: 77:c2:62:82:03:62:f4:0c:5a:cd:7d:39:92:26:03: 09:a3:2e:c3:96:c8:14:63:75:0e:12:75:ed:c6:20: c0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:ED:07:82:33:91:1F:27:F5:42:E3:50:A8:59:1F:8C:7B:0B:1D:43 X509v3 Authority Key Identifier: keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:4a:7f:15:29:45:9a:45:3e:57:eb:b4:9b:04:74:ab:ee:52: 4a:18:4c:15:28:77:c9:61:a6:e8:00:fd:e1:93:95:29:b0:81: 2d:72:22:7b:83:5a:eb:12:f4:88:58:cb:db:c0:94:a0:5d:37: 55:e6:b3:bf:8b:78:9e:b7:76:62:3e:0a:53:0c:cb:ab:76:89: 47:78:f3:33:97:e4:9d:80:5a:98:9c:17:84:a9:84:27:30:cb: ad:f9:60:b9:61:20:e0:19:cf:0a:2a:f7:96:cb:a0:de:1a:6a: 69:9b:dc:ea:ac:2f:24:34:e8:16:90:16:bc:10:54:82:48:01: b6:9f:37:2a:ef:06:da:69:0a:10:f0:be:1c:40:ac:88:25:dc: 29:42:84:cc:33:d8:7f:bc:a3:43:07:00:f1:d5:47:94:96:91: 41:e6:9f:ec:34:c5:c2:0c:56:9c:9f:cc:8d:4c:b6:46:73:e1: a9:a4:a2:ea:84:cf:40:88:d5:2d:34:2a:3f:5a:6d:5b:df:73: 18:de:74:9d:4f:6d:ad:7c:9f:3c:0c:ff:7e:6d:39:90:05:ec: a7:c2:a5:dd:28:f3:ea:83:ff:7b:7d:09:af:c3:17:10:04:59: 24:e1:e1:34:4b:0f:61:7a:ae:ff:d5:6b:62:7a:52:5f:bd:5b: 6f:0d:5a:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG MjAyNDAzMkMwHhcNMjUxMDE4MjA0ODQ1WhcNMjUxMDI1MjA0ODQ1WjAYMRYwFAYD VQQDEw02OGYzZmQyZC0zNTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApg1Que8f2HQXGHvoOKlwYfoEQGeqOauEn9dKc0jSd/vP3OhANCawcajaO/Az ZhMHxx1Nr5kutUVhjzo/NzyotzWKqK9/j7uJfjGbIj8faj0Xlchxsr8zH1pHlI+w tmMO0rdlUEnJUU/jPhPdLRPysbl2ZAn8s82NxSk4qo8A7A1906JpsFo8fzfh2C6F p8KxC0wOo2yXLQsxs+ioO+mJGL/fCLuHx7GJcDfOTXVDyBgMmqnxtPZ/LpV48TW6 8MXn0MGO/SFOfJ8NNREcCVn+nrith4WYAN7G0BvsQQG/F9B3wmKCA2L0DFrNfTmS JgMJoy7DlsgUY3UOEnXtxiDABwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEftB4Iz kR8n9ULjUKhZH4x7Cx1DMB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0IzQS81NTFCRjJCQzgxNDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRI SFlNU0g3a0NYN1R5QWtBeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6Sn8VKUWaRT5X67SbBHSr7lJKGEwVKHfJYaboAP3hk5UpsIEtciJ7 g1rrEvSIWMvbwJSgXTdV5rO/i3iet3ZiPgpTDMurdolHePMzl+SdgFqYnBeEqYQn MMut+WC5YSDgGc8KKveWy6DeGmppm9zqrC8kNOgWkBa8EFSCSAG2nzcq7wbaaQoQ 8L4cQKyIJdwpQoTMM9h/vKNDBwDx1UeUlpFB5p/sNMXCDFacn8yNTLZGc+GppKLq hM9AiNUtNCo/Wm1b33MY3nSdT22tfJ88DP9+bTmQBeynwqXdKPPqg/97fQmvwxcQ BFkk4eE0Sw9heq7/1WtielJfvVtvDVoy -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:13 2025 by rpki-client