$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft File: A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json) Hash identifier: NV5ThBuxUt/CmBLlk2C6Pq9uGIprRs6eJGuBjoEy6pM= Subject key identifier: B5:31:87:98:76:AA:20:C8:B8:BD:5C:4E:96:68:C5:11:29:2C:C6:E3 Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft Manifest number: 0236 Signing time: Fri 27 Mar 2026 02:04:42 +0000 Manifest this update: Fri 27 Mar 2026 02:04:41 +0000 Manifest next update: Fri 03 Apr 2026 02:04:41 +0000 Files and hashes: 1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: fnTQCtuZdWsU1PvImYqDxs+2xoJnfIf60Zld0ZyycsA=) 2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: rd/wAvSucL3KznyqiuFkW7+IzcHszwzgGGaI1AWvgdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 02:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Validity Not Before: Mar 27 02:04:41 2026 GMT Not After : Apr 3 02:04:41 2026 GMT Subject: CN=69c5e5ba-a59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:b1:a8:76:9d:51:fc:2a:5b:c1:f1:d7:36: f5:b9:c7:1c:ef:fd:d9:e3:d6:e9:bc:2a:d5:6d:f1: 96:89:db:a7:75:ca:be:0b:00:df:f1:0e:43:df:98: 95:86:c6:a2:58:ee:6d:fb:35:97:20:88:50:07:2b: 47:3b:92:b6:12:f1:37:bb:fd:fe:f0:38:04:1c:81: 9f:cb:a4:71:1f:f5:52:d8:42:5d:0d:e4:e8:4a:75: 7f:92:17:31:80:6a:66:b0:2a:6a:c8:1e:76:f8:ca: 18:fc:08:c7:e5:fc:3c:64:dd:93:1c:3d:5b:ca:dc: 41:5f:01:2a:b1:fc:7f:45:ad:dd:e1:35:00:f6:1b: 90:ff:eb:0c:79:36:a4:10:70:4a:76:cc:64:f2:fe: 13:a0:4c:97:27:dd:ab:45:2c:19:5b:71:b4:d1:28: 73:86:38:5c:b9:62:91:59:30:9c:70:ce:42:44:49: fe:ea:74:ef:58:5d:6b:20:a7:5c:6e:b4:ed:b1:96: 85:75:ed:62:60:94:a2:f4:72:be:e4:e8:2e:26:d9: 67:e5:22:6a:8d:0c:9c:13:e0:e1:42:44:cb:0f:cd: 8b:9b:35:65:30:8a:d6:19:6c:0d:72:80:e4:94:3b: 08:e0:e6:7a:57:be:c7:48:a1:fe:09:16:e9:a1:6c: 79:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:31:87:98:76:AA:20:C8:B8:BD:5C:4E:96:68:C5:11:29:2C:C6:E3 X509v3 Authority Key Identifier: keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d5:23:a8:55:94:85:a6:44:dc:b8:cd:56:52:47:fa:ab:02: d1:c2:64:0e:db:8c:03:e2:25:a7:4e:24:fc:a8:9b:b1:66:d7: 85:97:c1:56:53:fd:1c:ca:af:a1:b7:82:c9:bb:c6:dc:23:f2: 96:35:e4:8e:f0:4e:ad:37:9b:c9:6d:3c:65:12:f3:46:fb:96: 66:72:ea:38:1d:89:2e:52:cc:cd:9b:ac:e1:53:da:14:b8:f8: 4f:93:92:b0:d3:d1:2d:79:8e:89:fa:47:0b:ac:63:81:2c:17: fe:ea:b7:a6:b3:4c:d9:5d:43:e8:d8:e2:77:c2:8d:f6:ec:05: fe:65:1a:25:6a:a9:4a:42:0c:ff:3d:e6:3d:cd:37:7c:c7:fa: 3a:d1:32:9c:77:fc:05:3e:ca:ee:9d:f6:43:79:fb:98:be:70: 4d:8a:0c:f9:c3:64:73:1c:63:45:36:eb:1e:26:e5:75:1c:84: 8d:cb:02:66:2a:7a:0f:0a:99:ab:54:ba:0c:ee:85:da:6d:a2: bc:5d:51:78:5c:80:6d:38:71:29:d8:4c:37:4c:c7:ce:87:cd: c3:ee:da:ee:d5:ac:90:e1:fa:75:b9:05:57:74:22:04:36:6b: be:89:4e:02:24:3d:28:86:c0:67:cb:a4:3b:c3:9a:1b:5e:af: 2a:95:4a:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4RDkxMTAvBgNVBAUTKDAzOEVDMEFFQjgzNTBDOURBN0U2RjIwQjI2RDJGMzUw QkE2QzI0MDkwHhcNMjYwMzI3MDIwNDQxWhcNMjYwNDAzMDIwNDQxWjAYMRYwFAYD VQQDEw02OWM1ZTViYS1hNTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqF2xqHadUfwqW8Hx1zb1uccc7/3Z49bpvCrVbfGWidundcq+CwDf8Q5D35iV hsaiWO5t+zWXIIhQBytHO5K2EvE3u/3+8DgEHIGfy6RxH/VS2EJdDeToSnV/khcx gGpmsCpqyB52+MoY/AjH5fw8ZN2THD1bytxBXwEqsfx/Ra3d4TUA9huQ/+sMeTak EHBKdsxk8v4ToEyXJ92rRSwZW3G00ShzhjhcuWKRWTCccM5CREn+6nTvWF1rIKdc brTtsZaFde1iYJSi9HK+5OguJtln5SJqjQycE+DhQkTLD82LmzVlMIrWGWwNcoDk lDsI4OZ6V77HSKH+CRbpoWx5qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLUxh5h2 qiDIuL1cTpZoxREpLMbjMB8GA1UdIwQYMBaAFAOOwK64NQydp+byCybS81C6bCQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjhEOS9BRjVDREIwNEM3 MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURKMm41dklMSnRMelVMcHNK QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0N0FycmcxREoybjV2SUxKdEx6VUxwc0pBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjhEOS9BRjVDREIwNEM3MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURK Mm41dklMSnRMelVMcHNKQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAdUjqFWUhaZE3LjNVlJH+qsC0cJkDtuMA+Ilp04k/KibsWbXhZfBVlP9HMqv obeCybvG3CPyljXkjvBOrTebyW08ZRLzRvuWZnLqOB2JLlLMzZus4VPaFLj4T5OS sNPRLXmOifpHC6xjgSwX/uq3prNM2V1D6Njid8KN9uwF/mUaJWqpSkIM/z3mPc03 fMf6OtEynHf8BT7K7p32Q3n7mL5wTYoM+cNkcxxjRTbrHibldRyEjcsCZip6DwqZ q1S6DO6F2m2ivF1ReFyAbThxKdhMN0zHzofNw+7a7tWskOH6dbkFV3QiBDZrvolO AiQ9KIbAZ8ukO8OaG16vKpVKdA== -----END CERTIFICATE-----Generated at Sat Mar 28 12:07:37 2026 by rpki-client