$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft File: s47RYTLcuXiWdncaiwnkUJue1Pk.mft (raw, json) Hash identifier: dQD/NadfOWCt3RmLPX4gn8CfFAFquHVqqyAyS5RZmoE= Subject key identifier: 62:25:22:BB:5F:6B:06:25:9E:B9:23:2E:FF:64:BB:BD:35:C6:E8:3A Authority key identifier: B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9 Certificate issuer: /CN=A915E1F9/serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft Manifest number: 19 Signing time: Sun 19 Oct 2025 11:26:58 +0000 Manifest this update: Sun 19 Oct 2025 11:26:57 +0000 Manifest next update: Sun 26 Oct 2025 11:26:57 +0000 Files and hashes: 1: s47RYTLcuXiWdncaiwnkUJue1Pk.crl (hash: 3hscU69xcqCivX22qTkPTBYizNtEVp7MIGdrYDbZU88=) 2: BEB06ADA944211F08A761970C4F9AE02.roa (hash: 3kNCZmd08rxPbDlk/PAjWyQO4YBBbNOVI07fLcHLcu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E1F9, serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9 Validity Not Before: Oct 19 11:26:57 2025 GMT Not After : Oct 26 11:26:57 2025 GMT Subject: CN=68f4cb01-bd84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:43:c9:cb:bf:2b:a2:19:9c:18:8b:fd:62: 15:ae:c1:9d:fe:4c:06:d2:ac:29:93:26:4b:77:44: 12:41:26:44:de:25:df:7b:65:40:5f:03:d8:f5:ac: 64:a2:2a:31:dc:d6:3a:09:1e:49:7f:c2:e6:68:19: 59:19:f5:d6:9b:04:be:ce:27:97:ec:8e:fc:08:8d: 7d:9e:44:38:6e:ba:70:ef:39:f7:e8:46:96:b8:85: 30:22:16:f5:78:04:d8:72:2f:d9:d2:f8:f4:71:33: 74:df:6e:40:f1:03:1e:1a:37:92:67:02:39:6b:09: 56:15:34:74:60:a1:13:78:6d:6e:ab:40:db:53:0f: 46:3e:ee:d1:c7:af:63:df:a9:13:7c:ad:cd:b4:f4: c4:12:0f:88:d7:c8:7e:8b:d7:de:4f:3f:e1:33:05: 00:51:38:d5:9d:dc:37:36:9b:06:93:77:bf:3b:e4: 7d:28:6b:bf:a4:97:90:5f:1b:f7:32:28:bb:17:e1: 1f:96:e7:dd:19:18:4f:96:e8:27:61:19:47:75:99: 55:10:a7:71:8f:ca:72:34:c7:3e:24:10:85:d1:b3: b0:6c:32:6b:75:5a:dc:ef:de:a8:32:eb:41:f3:eb: 7d:c2:bf:96:60:67:0e:2b:1a:c5:e7:48:00:30:d4: a3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:25:22:BB:5F:6B:06:25:9E:B9:23:2E:FF:64:BB:BD:35:C6:E8:3A X509v3 Authority Key Identifier: keyid:B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c9:35:b3:83:34:1a:bb:0e:bd:e2:50:70:66:06:28:56:8f: a6:67:31:3a:b0:bd:1c:ed:77:fe:67:4f:4c:28:9d:2e:0c:15: e1:0c:58:51:e7:d0:48:39:38:75:f2:f2:98:e0:28:d8:be:51: 02:dc:33:c2:fa:fc:1a:43:3c:9f:aa:a2:9c:b0:b4:da:e3:ef: 3f:20:a8:32:2b:44:ad:ee:4c:42:39:fc:69:61:12:f3:77:37: 42:20:94:7c:a5:d6:92:03:63:4c:63:6d:8c:d9:17:39:ed:73: cd:ed:21:13:97:08:41:a6:20:60:e5:33:5d:f5:3f:4c:cf:7c: b8:15:bb:b7:4f:9b:e2:a1:53:df:30:d3:05:bd:67:15:17:4f: 98:ca:e7:24:83:f7:c1:6d:92:3a:8a:d9:f5:48:8d:65:a2:a6: 7f:66:15:cd:d6:71:12:1b:fb:2d:7d:81:15:18:79:14:40:97: a9:b2:bb:b1:06:cb:49:98:2f:1a:56:80:b0:6f:87:cb:8d:cb: ac:a8:4c:6a:fe:e0:b7:1c:fc:6f:88:51:7d:e3:cc:11:09:16: a2:84:c7:59:c9:da:4c:46:88:df:c4:80:fb:4b:09:54:0f:ed: e5:d4:a0:33:9b:e0:af:2e:f9:b3:aa:91:93:6e:ab:f7:f8:05: 88:56:5b:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTFGOTExMC8GA1UEBRMoQjM4RUQxNjEzMkRDQjk3ODk2NzY3NzFBOEIwOUU0NTA5 QjlFRDRGOTAeFw0yNTEwMTkxMTI2NTdaFw0yNTEwMjYxMTI2NTdaMBgxFjAUBgNV BAMTDTY4ZjRjYjAxLWJkODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKdEPJy78rohmcGIv9YhWuwZ3+TAbSrCmTJkt3RBJBJkTeJd97ZUBfA9j1rGSi KjHc1joJHkl/wuZoGVkZ9dabBL7OJ5fsjvwIjX2eRDhuunDvOffoRpa4hTAiFvV4 BNhyL9nS+PRxM3TfbkDxAx4aN5JnAjlrCVYVNHRgoRN4bW6rQNtTD0Y+7tHHr2Pf qRN8rc209MQSD4jXyH6L195PP+EzBQBRONWd3Dc2mwaTd7875H0oa7+kl5BfG/cy KLsX4R+W590ZGE+W6CdhGUd1mVUQp3GPynI0xz4kEIXRs7BsMmt1Wtzv3qgy60Hz 633Cv5ZgZw4rGsXnSAAw1KMVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYiUiu19r BiWeuSMu/2S7vTXG6DowHwYDVR0jBBgwFoAUs47RYTLcuXiWdncaiwnkUJue1Pkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMUY5L0E2QkE2QzhFOERF MjExRjBBMzA4QUM3Q0M0RjlBRTAyL3M0N1JZVExjdVhpV2RuY2Fpd25rVUp1ZTFQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvczQ3UllUTGN1WGlXZG5jYWl3bmtVSnVlMVBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF MUY5L0E2QkE2QzhFOERFMjExRjBBMzA4QUM3Q0M0RjlBRTAyL3M0N1JZVExjdVhp V2RuY2Fpd25rVUp1ZTFQay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJrJNbODNBq7Dr3iUHBmBihWj6ZnMTqwvRztd/5nT0wonS4MFeEMWFHn 0Eg5OHXy8pjgKNi+UQLcM8L6/BpDPJ+qopywtNrj7z8gqDIrRK3uTEI5/GlhEvN3 N0IglHyl1pIDY0xjbYzZFzntc83tIROXCEGmIGDlM131P0zPfLgVu7dPm+KhU98w 0wW9ZxUXT5jK5ySD98FtkjqK2fVIjWWipn9mFc3WcRIb+y19gRUYeRRAl6myu7EG y0mYLxpWgLBvh8uNy6yoTGr+4Lcc/G+IUX3jzBEJFqKEx1nJ2kxGiN/EgPtLCVQP 7eXUoDOb4K8u+bOqkZNuq/f4BYhWW7Q= -----END CERTIFICATE-----Generated at Tue Oct 21 01:32:33 2025 by rpki-client