$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft File: A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json) Hash identifier: cd3Pv12Htpb4cDG/VlTrl1FbLh4qiT4iwXRljNBkUP8= Subject key identifier: 0A:39:A3:3A:DF:66:69:EC:63:7F:09:F7:B1:5C:28:B7:00:E6:D5:9D Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft Manifest number: 01C1 Signing time: Mon 11 Aug 2025 03:04:52 +0000 Manifest this update: Mon 11 Aug 2025 03:04:52 +0000 Manifest next update: Mon 18 Aug 2025 03:04:52 +0000 Files and hashes: 1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: vo8E/l9eVFHDgv6oiw/RrmwxmoHgKAs5lLCOOwFDPOQ=) 2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: hqEhlFzljzL9QNC3npjH/PXhuwMeiWo8+fxKQZav0bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Validity Not Before: Aug 11 03:04:52 2025 GMT Not After : Aug 18 03:04:52 2025 GMT Subject: CN=68995dd4-216b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4c:6e:0c:a6:1e:ea:c4:5f:f3:37:0b:81:c6: b6:4a:12:79:55:ec:29:40:fb:6d:04:5f:ff:23:61: 81:3c:ba:65:a7:3f:18:3c:08:f9:ed:82:bf:05:e5: 7b:08:67:39:1d:03:6e:e0:fc:54:0f:ea:38:62:31: 56:e4:19:4c:cf:6b:76:60:b2:1f:51:35:d3:2a:6c: f0:5d:40:92:02:17:4e:23:5a:c1:2d:72:62:67:3d: 56:bb:eb:a5:89:48:ba:66:9a:b7:b8:8b:f2:53:b3: 18:60:2e:28:c2:af:91:f4:ab:60:fa:20:79:4c:9a: ef:3a:a1:5c:2f:78:65:e5:b9:76:df:02:05:09:c9: 10:a0:59:de:04:39:cf:b5:30:90:68:42:85:15:e2: f4:1f:d4:5e:b6:7c:81:bb:7b:27:b2:0d:e1:b3:86: 5a:eb:b3:62:6c:ce:d9:7b:ac:0c:c5:3f:87:56:7d: f0:f4:05:88:95:cb:56:68:a2:6f:5f:8c:32:59:f6: 08:25:a3:f3:72:48:2d:5e:67:37:52:57:1f:0c:24: a4:ca:a0:a2:93:01:8a:a9:42:cc:a2:3d:90:4b:95: 87:ae:c5:1e:ac:2e:49:7a:b4:83:fc:0f:d9:39:0d: 33:32:d7:77:07:34:ae:27:b8:a9:36:e6:21:c7:ed: 13:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:39:A3:3A:DF:66:69:EC:63:7F:09:F7:B1:5C:28:B7:00:E6:D5:9D X509v3 Authority Key Identifier: keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:6c:4b:14:0b:55:81:ea:26:3d:42:ac:21:f8:c2:bf:4d:b7: 5c:08:67:9e:61:57:74:f7:73:ed:11:0f:5b:17:24:95:8c:e2: 48:40:6d:29:50:2d:44:bc:6b:b6:eb:aa:b0:6e:82:65:8f:4a: 76:5c:72:b9:56:3b:0d:d4:57:b9:12:6a:be:2f:58:6b:e2:fb: 9e:28:54:52:74:0c:d6:a8:b7:19:b6:fc:04:70:71:0a:b0:d5: d4:ce:d5:42:fe:f1:71:a1:37:ea:73:6c:20:05:cd:c2:18:c4: e1:39:98:fb:b7:e2:56:56:06:93:8a:e1:17:c7:aa:66:42:aa: ea:79:ea:bf:b9:fb:43:09:0c:39:71:d3:97:e7:34:8d:ec:9a: e7:09:af:3a:df:7b:6c:5f:e6:02:2f:ae:fd:97:4c:5c:b0:d2: 3d:a3:e1:ea:d9:aa:3d:09:96:da:cd:ba:42:d2:55:57:64:04: e7:d8:f6:29:a0:91:6f:75:41:84:b3:78:05:bd:25:16:02:32: 93:96:3e:b7:32:92:48:2c:2e:e9:4f:b2:ad:0e:ef:5f:86:33: 8a:70:34:4d:d5:d0:a4:c4:48:93:9b:6d:a2:92:95:01:3c:47: 92:cf:2a:12:4f:1e:70:1b:29:fb:40:e7:87:fc:3b:3d:ae:7a: e4:84:f7:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4RDkxMTAvBgNVBAUTKDAzOEVDMEFFQjgzNTBDOURBN0U2RjIwQjI2RDJGMzUw QkE2QzI0MDkwHhcNMjUwODExMDMwNDUyWhcNMjUwODE4MDMwNDUyWjAYMRYwFAYD VQQDEw02ODk5NWRkNC0yMTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtExuDKYe6sRf8zcLgca2ShJ5VewpQPttBF//I2GBPLplpz8YPAj57YK/BeV7 CGc5HQNu4PxUD+o4YjFW5BlMz2t2YLIfUTXTKmzwXUCSAhdOI1rBLXJiZz1Wu+ul iUi6Zpq3uIvyU7MYYC4owq+R9Ktg+iB5TJrvOqFcL3hl5bl23wIFCckQoFneBDnP tTCQaEKFFeL0H9RetnyBu3snsg3hs4Za67NibM7Ze6wMxT+HVn3w9AWIlctWaKJv X4wyWfYIJaPzckgtXmc3UlcfDCSkyqCikwGKqULMoj2QS5WHrsUerC5JerSD/A/Z OQ0zMtd3BzSuJ7ipNuYhx+0T9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAo5ozrf ZmnsY38J97FcKLcA5tWdMB8GA1UdIwQYMBaAFAOOwK64NQydp+byCybS81C6bCQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjhEOS9BRjVDREIwNEM3 MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURKMm41dklMSnRMelVMcHNK QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0N0FycmcxREoybjV2SUxKdEx6VUxwc0pBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjhEOS9BRjVDREIwNEM3MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURK Mm41dklMSnRMelVMcHNKQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1bEsUC1WB6iY9Qqwh+MK/TbdcCGeeYVd093PtEQ9bFySVjOJIQG0p UC1EvGu266qwboJlj0p2XHK5VjsN1Fe5Emq+L1hr4vueKFRSdAzWqLcZtvwEcHEK sNXUztVC/vFxoTfqc2wgBc3CGMThOZj7t+JWVgaTiuEXx6pmQqrqeeq/uftDCQw5 cdOX5zSN7JrnCa8633tsX+YCL679l0xcsNI9o+Hq2ao9CZbazbpC0lVXZATn2PYp oJFvdUGEs3gFvSUWAjKTlj63MpJILC7pT7KtDu9fhjOKcDRN1dCkxEiTm22ikpUB PEeSzyoSTx5wGyn7QOeH/Ds9rnrkhPeH -----END CERTIFICATE-----Generated at Mon Aug 11 07:25:04 2025 by rpki-client