$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft File: A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json) Hash identifier: EQV4zNsaQturJuylNOCV4g9JLt3rfu4tbUJzqbBdZ7g= Subject key identifier: C3:FF:FE:39:9E:9A:35:88:7A:4E:BD:A5:C8:9B:22:73:F8:4F:2F:5E Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft Manifest number: 0189 Signing time: Fri 25 Apr 2025 02:41:52 +0000 Manifest this update: Fri 25 Apr 2025 02:41:51 +0000 Manifest next update: Fri 02 May 2025 02:41:51 +0000 Files and hashes: 1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: r3QyINoDLVOeiARzIbjw7qva3Z3jW9neoQ0195PYYwg=) 2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: ZzGWfShy+q0K03Ilr3Gj1zQvQhciFYMihkhjni/eMIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Validity Not Before: Apr 25 02:41:51 2025 GMT Not After : May 2 02:41:51 2025 GMT Subject: CN=680af66f-41ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:f0:6a:42:dc:4e:67:e4:29:b1:4c:9c:4c: 70:86:e1:06:06:a7:58:f5:3f:55:e3:05:bf:e3:d2: 10:39:00:1c:96:92:f3:19:00:ba:f8:00:0b:db:f4: 3c:ff:be:7d:d6:98:49:ef:e4:ae:cb:4e:dd:e6:ea: 7a:dd:6e:fd:ba:92:73:9c:15:80:e7:d2:f1:97:92: 0f:cf:48:99:f3:75:6b:ff:db:12:a9:49:c5:94:f8: 3b:0f:70:17:b7:72:cb:16:4d:c9:de:65:2f:19:3b: 06:11:93:8e:e4:68:bd:c8:e3:03:ac:f1:3e:91:82: 0d:10:00:94:17:ac:1c:31:a7:bf:d2:70:dc:02:7b: b7:f6:19:5d:64:49:96:4e:d5:37:9b:7b:26:ba:db: 78:c6:9c:b6:27:1c:a9:19:42:38:a3:d4:87:2e:a3: 86:9a:07:2f:6e:40:3b:0c:de:7b:42:23:9c:9a:08: fa:9c:94:6a:d8:41:03:f8:36:27:4d:40:a7:c5:3a: 9b:98:ca:01:9e:11:1a:d5:fb:9c:85:e2:f5:e3:3f: 46:e8:54:dd:a4:f5:01:cb:0d:b9:ce:8e:1d:d3:a1: e1:d5:4f:33:1d:b2:bb:81:89:f3:82:c7:93:89:7e: 3f:be:50:af:42:e1:1c:33:aa:f3:4c:2f:96:07:13: da:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FF:FE:39:9E:9A:35:88:7A:4E:BD:A5:C8:9B:22:73:F8:4F:2F:5E X509v3 Authority Key Identifier: keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:4f:94:9c:ca:cb:7a:5f:db:42:cd:c5:c9:69:6d:f6:aa:39: a1:6e:84:2b:d9:8d:da:6c:c4:fd:0f:22:c9:fb:37:33:63:fd: 51:4a:30:f5:7a:28:17:ff:b7:dc:0f:ee:95:0e:86:19:00:72: a3:02:a8:fd:e7:b5:99:43:a5:2a:04:8d:b0:b3:6e:60:92:cd: df:09:84:d5:d6:66:3d:d2:24:e6:33:0b:0b:bb:e9:29:fb:be: f3:e1:0c:e1:05:0c:62:1e:c6:8a:f8:b7:58:da:20:43:5c:ee: e9:2f:c1:18:90:af:37:a7:00:f8:07:76:8b:40:07:32:fd:32: b8:02:ab:96:2f:60:b8:74:cf:a8:5f:d0:82:a9:0a:ea:c7:ee: c5:82:be:3f:5a:d7:ec:42:a4:76:ff:9a:eb:78:8f:2d:e4:3a: c2:36:ab:42:e8:6c:93:5c:94:81:c9:5d:8f:c9:77:24:48:89: 0c:2c:0d:a9:81:24:f8:9b:ed:31:54:9e:a8:c1:7e:86:6f:73: aa:58:bc:57:15:17:cd:00:63:c6:f5:0d:b0:f5:c6:7c:e8:b5: 84:45:09:6c:81:f6:da:7f:44:73:af:58:09:54:48:0f:f1:d8: eb:71:65:a8:cb:88:9b:3b:e7:91:ac:7e:ce:aa:43:f8:f9:58: 29:ec:17:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4RDkxMTAvBgNVBAUTKDAzOEVDMEFFQjgzNTBDOURBN0U2RjIwQjI2RDJGMzUw QkE2QzI0MDkwHhcNMjUwNDI1MDI0MTUxWhcNMjUwNTAyMDI0MTUxWjAYMRYwFAYD VQQDEw02ODBhZjY2Zi00MWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0bwakLcTmfkKbFMnExwhuEGBqdY9T9V4wW/49IQOQAclpLzGQC6+AAL2/Q8 /7591phJ7+Suy07d5up63W79upJznBWA59Lxl5IPz0iZ83Vr/9sSqUnFlPg7D3AX t3LLFk3J3mUvGTsGEZOO5Gi9yOMDrPE+kYINEACUF6wcMae/0nDcAnu39hldZEmW TtU3m3smutt4xpy2JxypGUI4o9SHLqOGmgcvbkA7DN57QiOcmgj6nJRq2EED+DYn TUCnxTqbmMoBnhEa1fucheL14z9G6FTdpPUByw25zo4d06Hh1U8zHbK7gYnzgseT iX4/vlCvQuEcM6rzTC+WBxPavQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMP//jme mjWIek69pcibInP4Ty9eMB8GA1UdIwQYMBaAFAOOwK64NQydp+byCybS81C6bCQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjhEOS9BRjVDREIwNEM3 MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURKMm41dklMSnRMelVMcHNK QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0N0FycmcxREoybjV2SUxKdEx6VUxwc0pBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjhEOS9BRjVDREIwNEM3MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURK Mm41dklMSnRMelVMcHNKQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2T5Scyst6X9tCzcXJaW32qjmhboQr2Y3abMT9DyLJ+zczY/1RSjD1 eigX/7fcD+6VDoYZAHKjAqj957WZQ6UqBI2ws25gks3fCYTV1mY90iTmMwsLu+kp +77z4QzhBQxiHsaK+LdY2iBDXO7pL8EYkK83pwD4B3aLQAcy/TK4AquWL2C4dM+o X9CCqQrqx+7Fgr4/WtfsQqR2/5rreI8t5DrCNqtC6GyTXJSByV2PyXckSIkMLA2p gST4m+0xVJ6owX6Gb3OqWLxXFRfNAGPG9Q2w9cZ86LWERQlsgfbaf0Rzr1gJVEgP 8djrcWWoy4ibO+eRrH7OqkP4+Vgp7BeG -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:17 2025 by rpki-client