$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft File: A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json) Hash identifier: y66MJo5JFqqR/pTU4IRBRYtAziPSX0599fMHzFnrAyQ= Subject key identifier: C7:98:24:92:C8:B5:9D:31:9A:30:AD:6B:0C:8F:32:66:36:91:84:8A Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft Manifest number: 01A3 Signing time: Fri 13 Jun 2025 02:19:36 +0000 Manifest this update: Fri 13 Jun 2025 02:19:36 +0000 Manifest next update: Fri 20 Jun 2025 02:19:36 +0000 Files and hashes: 1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: MQASA6QLCIfKh7U1vrFfJ8BCt6sH9sEoxbgTnVIWD0g=) 2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: hqEhlFzljzL9QNC3npjH/PXhuwMeiWo8+fxKQZav0bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Validity Not Before: Jun 13 02:19:36 2025 GMT Not After : Jun 20 02:19:36 2025 GMT Subject: CN=684b8ab8-afdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c3:f5:16:9d:1c:13:91:ff:b6:a6:ab:11:ec: 57:3b:9a:ba:0f:4e:bd:22:69:ed:26:2a:e5:8f:9d: 6f:45:96:39:c3:92:b8:eb:cf:7e:86:75:b2:80:1a: 86:b5:a6:bc:1d:ac:fd:90:03:13:b6:00:b6:65:b4: 8f:0d:4e:5b:ed:e4:a1:57:f9:83:53:74:ee:ac:99: ed:df:6b:97:3a:33:a2:73:c6:51:5d:1a:73:53:cb: c4:7f:01:84:95:bb:d9:34:23:ed:08:3b:90:14:c7: d1:63:15:55:47:20:99:85:c3:61:ec:6a:f6:a1:91: 2b:11:3a:b6:dd:0b:fe:9e:6b:13:34:39:3b:07:20: 98:61:78:a1:04:05:59:11:2d:b4:49:6b:1c:a4:d5: 7e:89:b9:74:31:d2:c9:a1:09:89:e6:5d:97:3a:55: 3e:c9:57:18:ee:a5:f8:90:3c:cb:f3:2b:98:c0:df: 63:03:ef:2a:a9:bf:d0:11:4d:02:a0:9a:15:82:d7: 8d:5d:3f:67:3f:0e:c5:cd:54:e9:dd:ff:b5:fc:b8: a3:95:fe:fe:88:f2:5b:d0:ca:b0:0f:fc:e2:a7:2d: a1:b5:09:e5:3d:23:11:ae:52:ad:c1:9e:7b:94:23: 3c:0c:95:c5:d3:7d:50:ac:1d:8c:fc:77:2b:37:9a: ba:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:98:24:92:C8:B5:9D:31:9A:30:AD:6B:0C:8F:32:66:36:91:84:8A X509v3 Authority Key Identifier: keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c9:18:99:2e:1d:0c:28:ec:28:7d:7d:3a:51:70:30:38:71: 68:bc:c4:c2:8e:22:ad:0e:8e:7f:3d:25:16:71:bb:4a:1b:54: 60:79:a7:1a:78:0c:9c:5c:17:dd:56:0f:7f:13:65:d9:df:fe: c7:8a:4e:d3:8a:73:58:63:41:26:50:12:c2:92:f3:46:37:c1: e8:59:a4:70:f6:2e:26:23:e0:5a:94:6e:77:24:45:fb:9f:df: 72:d3:56:a6:c7:a6:4b:a5:c6:a7:64:40:b3:29:c3:41:24:c3: 2a:0e:7c:cb:59:b7:95:0d:8e:31:8f:a6:d5:fa:59:63:39:64: 61:e0:24:b4:d3:f9:70:1a:8f:ed:b7:b7:6f:eb:65:0a:1a:7f: 7b:e3:25:fe:26:25:82:2d:b2:68:e3:3b:65:ee:73:38:87:0d: 06:67:57:66:51:89:ca:80:d4:68:3a:8b:d6:ac:63:34:6d:3a: 52:d5:d5:4d:33:81:8d:61:99:ce:d5:fe:4b:2c:9b:1f:56:16: 56:10:df:f9:9c:bf:e2:fb:99:ca:b9:12:20:79:ec:e2:40:c1: 85:72:d5:1a:f5:4c:2d:ab:50:b4:6e:32:bc:a7:9d:30:aa:3a: e5:bd:98:63:79:77:e5:e4:ae:b5:69:0d:94:7e:57:e6:21:b9: f5:c4:a0:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4RDkxMTAvBgNVBAUTKDAzOEVDMEFFQjgzNTBDOURBN0U2RjIwQjI2RDJGMzUw QkE2QzI0MDkwHhcNMjUwNjEzMDIxOTM2WhcNMjUwNjIwMDIxOTM2WjAYMRYwFAYD VQQDEw02ODRiOGFiOC1hZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cP1Fp0cE5H/tqarEexXO5q6D069ImntJirlj51vRZY5w5K4689+hnWygBqG taa8Haz9kAMTtgC2ZbSPDU5b7eShV/mDU3TurJnt32uXOjOic8ZRXRpzU8vEfwGE lbvZNCPtCDuQFMfRYxVVRyCZhcNh7Gr2oZErETq23Qv+nmsTNDk7ByCYYXihBAVZ ES20SWscpNV+ibl0MdLJoQmJ5l2XOlU+yVcY7qX4kDzL8yuYwN9jA+8qqb/QEU0C oJoVgteNXT9nPw7FzVTp3f+1/Lijlf7+iPJb0MqwD/zipy2htQnlPSMRrlKtwZ57 lCM8DJXF031QrB2M/HcrN5q69wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeYJJLI tZ0xmjCtawyPMmY2kYSKMB8GA1UdIwQYMBaAFAOOwK64NQydp+byCybS81C6bCQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjhEOS9BRjVDREIwNEM3 MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURKMm41dklMSnRMelVMcHNK QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0N0FycmcxREoybjV2SUxKdEx6VUxwc0pBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjhEOS9BRjVDREIwNEM3MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURK Mm41dklMSnRMelVMcHNKQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9yRiZLh0MKOwofX06UXAwOHFovMTCjiKtDo5/PSUWcbtKG1Rgeaca eAycXBfdVg9/E2XZ3/7Hik7TinNYY0EmUBLCkvNGN8HoWaRw9i4mI+BalG53JEX7 n99y01amx6ZLpcanZECzKcNBJMMqDnzLWbeVDY4xj6bV+lljOWRh4CS00/lwGo/t t7dv62UKGn974yX+JiWCLbJo4ztl7nM4hw0GZ1dmUYnKgNRoOovWrGM0bTpS1dVN M4GNYZnO1f5LLJsfVhZWEN/5nL/i+5nKuRIgeeziQMGFctUa9Uwtq1C0bjK8p50w qjrlvZhjeXfl5K61aQ2UflfmIbn1xKAZ -----END CERTIFICATE-----Generated at Sat Jun 14 18:46:58 2025 by rpki-client