$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft File: A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json) Hash identifier: tE6Ic+oeXyK3d1nES5tkDua1D+o6FPxhOzAnpC7kmyE= Subject key identifier: A8:FB:1F:A1:C0:EF:4E:46:19:2C:55:12:A9:C0:54:BD:08:0C:7A:4C Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft Manifest number: 01EC Signing time: Wed 05 Nov 2025 02:41:10 +0000 Manifest this update: Wed 05 Nov 2025 02:41:09 +0000 Manifest next update: Wed 12 Nov 2025 02:41:09 +0000 Files and hashes: 1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: LnzlyGgMS+etW92oK23fVc6Wqw42o4/KkCUF6P32qHw=) 2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: hqEhlFzljzL9QNC3npjH/PXhuwMeiWo8+fxKQZav0bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Validity Not Before: Nov 5 02:41:09 2025 GMT Not After : Nov 12 02:41:09 2025 GMT Subject: CN=690ab946-c487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:62:a6:63:d9:16:d3:9f:1e:39:2c:c9:72:8c: 9f:cd:fb:a2:97:a6:06:cb:eb:4b:e4:c5:31:0a:aa: 8c:08:55:71:f2:11:e1:96:ec:f6:ae:e7:ea:50:0d: 0d:0e:f9:16:27:c1:fc:7c:9e:88:21:db:67:d0:e3: 78:e4:93:69:77:2f:39:4b:f1:d3:cd:f8:d3:33:6b: 5d:3d:f9:04:bb:46:57:a4:d1:28:31:e3:c1:b3:a4: 95:fc:a4:f5:a5:ab:c6:ac:74:36:30:10:cc:91:24: c2:1d:5e:5d:a4:84:b9:c2:54:ef:2e:66:f8:a6:d7: 23:eb:4f:3c:ef:45:3f:3e:aa:b3:72:47:32:01:ca: 6d:f4:b1:d4:2a:44:f2:af:46:86:10:8d:48:b8:59: c1:4d:17:9a:33:9b:89:fa:10:5a:b5:84:10:d5:b4: 16:c3:9c:d6:d2:a0:30:40:eb:92:f6:cd:1a:92:76: 8f:6b:4d:ad:13:39:4b:c0:6d:c3:b0:1a:21:b1:65: 97:b7:4d:e5:e7:f4:1b:50:b6:47:4c:e7:46:00:ae: 90:f0:bc:41:56:5e:d9:68:00:fa:f8:ea:ce:9d:f2: b4:90:17:bb:b4:5f:bb:15:31:c5:7a:e4:af:6a:aa: 10:40:13:83:7c:e8:62:4e:e6:53:80:22:27:45:d3: dd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FB:1F:A1:C0:EF:4E:46:19:2C:55:12:A9:C0:54:BD:08:0C:7A:4C X509v3 Authority Key Identifier: keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:55:7f:0a:d4:bb:30:0d:6a:5a:ea:43:80:80:44:1e:1a:31: 9e:5c:d8:7f:53:51:00:13:db:d5:40:f3:be:7c:72:fd:2c:a4: 17:1b:44:7b:81:c7:2a:4a:ee:0b:98:b0:4b:56:bd:f4:62:d6: b3:a6:9c:78:a4:b6:31:c8:e5:c3:b9:65:2c:96:ba:9d:44:1e: f2:be:a9:4f:99:d7:08:40:bc:f5:11:8b:ba:75:96:5e:bb:c3: b0:20:f5:f3:20:ce:52:f8:2a:e2:12:57:3b:6f:b7:b4:46:64: f0:ac:88:7c:3b:84:81:3b:77:e4:90:96:b6:f4:e2:51:63:60: 95:fe:d6:89:55:c5:f8:7b:37:13:25:1a:fa:88:98:8a:a2:be: b0:3e:4d:1b:f8:dd:37:48:64:4a:df:2b:d1:83:26:8d:b1:09: 0f:e7:f2:a7:30:08:a9:92:c0:70:7f:65:a6:1f:15:e3:38:fd: a1:9c:ee:4b:f0:9b:d7:11:17:ea:d6:cb:e6:20:e5:95:57:7b: bd:80:c4:d2:0b:b3:0d:20:c3:50:6a:0b:c2:20:fb:7a:a4:92: 90:e6:f7:bd:36:1c:37:15:76:24:f4:da:c3:17:d1:4d:5c:22: bf:4f:ca:42:a4:ca:52:57:c7:2a:f8:1a:31:33:b0:09:70:3a: f6:61:b3:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4RDkxMTAvBgNVBAUTKDAzOEVDMEFFQjgzNTBDOURBN0U2RjIwQjI2RDJGMzUw QkE2QzI0MDkwHhcNMjUxMTA1MDI0MTA5WhcNMjUxMTEyMDI0MTA5WjAYMRYwFAYD VQQDEw02OTBhYjk0Ni1jNDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12KmY9kW058eOSzJcoyfzfuil6YGy+tL5MUxCqqMCFVx8hHhluz2rufqUA0N DvkWJ8H8fJ6IIdtn0ON45JNpdy85S/HTzfjTM2tdPfkEu0ZXpNEoMePBs6SV/KT1 pavGrHQ2MBDMkSTCHV5dpIS5wlTvLmb4ptcj608870U/PqqzckcyAcpt9LHUKkTy r0aGEI1IuFnBTReaM5uJ+hBatYQQ1bQWw5zW0qAwQOuS9s0aknaPa02tEzlLwG3D sBohsWWXt03l5/QbULZHTOdGAK6Q8LxBVl7ZaAD6+OrOnfK0kBe7tF+7FTHFeuSv aqoQQBODfOhiTuZTgCInRdPdLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKj7H6HA 705GGSxVEqnAVL0IDHpMMB8GA1UdIwQYMBaAFAOOwK64NQydp+byCybS81C6bCQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjhEOS9BRjVDREIwNEM3 MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURKMm41dklMSnRMelVMcHNK QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0N0FycmcxREoybjV2SUxKdEx6VUxwc0pBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjhEOS9BRjVDREIwNEM3MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURK Mm41dklMSnRMelVMcHNKQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABVX8K1LswDWpa6kOAgEQeGjGeXNh/U1EAE9vVQPO+fHL9LKQXG0R7 gccqSu4LmLBLVr30Ytazppx4pLYxyOXDuWUslrqdRB7yvqlPmdcIQLz1EYu6dZZe u8OwIPXzIM5S+CriElc7b7e0RmTwrIh8O4SBO3fkkJa29OJRY2CV/taJVcX4ezcT JRr6iJiKor6wPk0b+N03SGRK3yvRgyaNsQkP5/KnMAipksBwf2WmHxXjOP2hnO5L 8JvXERfq1svmIOWVV3u9gMTSC7MNIMNQagvCIPt6pJKQ5ve9Nhw3FXYk9NrDF9FN XCK/T8pCpMpSV8cq+BoxM7AJcDr2YbPB -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:32 2025 by rpki-client