$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft File: A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json) Hash identifier: /3IEKxzOu/Llc3Kjxo2cgAB61+XhTqP8Fi7wQSjn360= Subject key identifier: 66:89:84:AC:EC:4F:04:09:1C:9A:02:4B:80:82:F4:65:77:28:9C:FE Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft Manifest number: 01C7 Signing time: Sat 23 Aug 2025 03:01:41 +0000 Manifest this update: Sat 23 Aug 2025 03:01:40 +0000 Manifest next update: Sat 30 Aug 2025 03:01:40 +0000 Files and hashes: 1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: 9r3LqwYO4sutpftYWGngNNfNcr8KmeqjiozqLUjlTVI=) 2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: hqEhlFzljzL9QNC3npjH/PXhuwMeiWo8+fxKQZav0bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Validity Not Before: Aug 23 03:01:40 2025 GMT Not After : Aug 30 03:01:40 2025 GMT Subject: CN=68a92f14-1c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:90:04:08:10:d3:37:02:e3:f4:ce:a2:45: 33:18:7c:81:4b:e5:4f:37:25:b4:70:4c:c7:30:e5: 72:b2:a1:24:2e:7e:4d:06:f8:d3:83:c2:3d:c0:0c: ba:49:df:2a:74:e1:51:a7:cc:98:65:36:bb:e8:dc: 75:4f:f0:f9:99:e1:16:6c:65:36:3b:88:3a:c1:62: b4:6f:5c:d7:53:39:1c:11:5f:a2:86:f0:1d:36:a0: 9f:1e:9c:6d:fb:ee:c2:08:2e:f9:50:d9:96:11:c3: d6:a1:8c:cc:eb:46:a2:fd:b4:d2:ca:4d:02:89:47: c2:79:13:88:ce:9f:d6:3e:a2:d5:ce:9c:c7:35:07: 36:52:f9:0f:71:a8:da:bc:5b:1e:e5:f7:89:15:58: 96:4f:ce:9b:91:d6:cd:9e:67:d8:9f:bc:7d:18:f9: d2:50:b9:9b:98:48:0c:a8:65:16:fe:8f:e6:69:ef: d9:20:73:6f:5e:1e:a8:c4:78:6c:a1:4c:dc:95:e9: 1a:e8:de:be:bc:be:9d:40:36:74:bc:82:24:32:13: 5e:e0:07:83:61:42:cf:f3:a4:af:b2:f4:37:74:65: 1d:7e:ec:3b:22:4f:75:82:f9:a6:42:df:01:31:c5: 0a:43:a4:d7:dd:18:8d:67:81:7f:e4:16:c8:46:bd: c7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:89:84:AC:EC:4F:04:09:1C:9A:02:4B:80:82:F4:65:77:28:9C:FE X509v3 Authority Key Identifier: keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:5b:46:5b:4a:8f:16:14:b3:35:53:14:2b:57:04:1e:a8:5f: d5:fd:e4:26:1a:f4:fd:b5:f3:04:7b:2b:ff:50:e6:60:cc:5c: 25:63:79:81:2f:c4:11:0b:6c:01:1e:8a:09:0d:3a:70:a0:e9: 1b:f9:22:d5:fb:b2:32:13:09:82:a3:02:f6:82:6d:3c:e4:0f: 65:4e:09:7a:c8:af:a6:4a:43:85:b2:cc:16:66:15:e7:dc:c1: 7b:56:42:0a:65:7c:4c:28:e3:d2:19:63:28:7e:d9:57:a3:eb: 50:89:ec:17:7b:c3:ca:8a:c2:b2:ad:cc:d3:cd:de:c1:79:b8: cc:2b:81:7f:57:7d:c5:a3:21:ad:50:d4:65:c6:73:f8:53:bc: 3f:40:68:68:bf:f6:87:48:3f:8f:3e:0f:f3:bf:2d:57:4f:aa: 38:53:aa:13:9b:60:e8:04:24:47:92:88:95:9b:3a:3d:06:13: 84:da:a9:48:8f:25:64:03:06:02:09:b5:81:a2:98:28:22:77: 74:4d:c6:bf:f8:26:fc:fd:d1:a5:62:c7:13:e8:0c:94:f1:06: 69:2f:b6:e5:7f:3a:0d:ca:54:8a:4b:aa:25:c5:75:f7:11:e9: 10:64:e7:11:0b:1e:25:57:e0:a5:ec:ed:3c:c1:8d:aa:87:92: 15:31:fb:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4RDkxMTAvBgNVBAUTKDAzOEVDMEFFQjgzNTBDOURBN0U2RjIwQjI2RDJGMzUw QkE2QzI0MDkwHhcNMjUwODIzMDMwMTQwWhcNMjUwODMwMDMwMTQwWjAYMRYwFAYD VQQDEw02OGE5MmYxNC0xYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJCQBAgQ0zcC4/TOokUzGHyBS+VPNyW0cEzHMOVysqEkLn5NBvjTg8I9wAy6 Sd8qdOFRp8yYZTa76Nx1T/D5meEWbGU2O4g6wWK0b1zXUzkcEV+ihvAdNqCfHpxt ++7CCC75UNmWEcPWoYzM60ai/bTSyk0CiUfCeROIzp/WPqLVzpzHNQc2UvkPcaja vFse5feJFViWT86bkdbNnmfYn7x9GPnSULmbmEgMqGUW/o/mae/ZIHNvXh6oxHhs oUzcleka6N6+vL6dQDZ0vIIkMhNe4AeDYULP86SvsvQ3dGUdfuw7Ik91gvmmQt8B McUKQ6TX3RiNZ4F/5BbIRr3HnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaJhKzs TwQJHJoCS4CC9GV3KJz+MB8GA1UdIwQYMBaAFAOOwK64NQydp+byCybS81C6bCQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjhEOS9BRjVDREIwNEM3 MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURKMm41dklMSnRMelVMcHNK QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0N0FycmcxREoybjV2SUxKdEx6VUxwc0pBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjhEOS9BRjVDREIwNEM3MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURK Mm41dklMSnRMelVMcHNKQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5W0ZbSo8WFLM1UxQrVwQeqF/V/eQmGvT9tfMEeyv/UOZgzFwlY3mB L8QRC2wBHooJDTpwoOkb+SLV+7IyEwmCowL2gm085A9lTgl6yK+mSkOFsswWZhXn 3MF7VkIKZXxMKOPSGWMoftlXo+tQiewXe8PKisKyrczTzd7BebjMK4F/V33FoyGt UNRlxnP4U7w/QGhov/aHSD+PPg/zvy1XT6o4U6oTm2DoBCRHkoiVmzo9BhOE2qlI jyVkAwYCCbWBopgoInd0Tca/+Cb8/dGlYscT6AyU8QZpL7blfzoNylSKS6olxXX3 EekQZOcRCx4lV+Cl7O08wY2qh5IVMfvN -----END CERTIFICATE-----Generated at Sat Aug 23 21:15:09 2025 by rpki-client