$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft File: A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json) Hash identifier: +fZ4KhW/e809+AtZPM8GbuTgry02njsRjBvs7+ew8hw= Subject key identifier: 27:93:BB:3C:1E:E1:B9:87:B3:0C:40:AC:FE:C0:72:AE:AD:5E:64:5A Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft Manifest number: 018E Signing time: Mon 05 May 2025 02:29:07 +0000 Manifest this update: Mon 05 May 2025 02:29:07 +0000 Manifest next update: Mon 12 May 2025 02:29:07 +0000 Files and hashes: 1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: BdVkPa5fgUdYObaHLUFfBM/gvgRQokp7X4wdop3rzQM=) 2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: ZzGWfShy+q0K03Ilr3Gj1zQvQhciFYMihkhjni/eMIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Validity Not Before: May 5 02:29:07 2025 GMT Not After : May 12 02:29:07 2025 GMT Subject: CN=68182273-68dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3a:3a:fe:85:7b:48:2c:68:06:c3:df:e6:ff: 3f:02:00:d1:8e:f5:38:97:ca:5c:ba:bc:bb:be:af: 05:9b:aa:cb:8a:4e:03:53:2b:01:72:a2:d0:22:93: 49:3b:91:6b:f0:cc:1e:d1:13:c2:26:7d:35:c9:ca: fc:c7:18:43:d8:c4:57:0e:f2:2f:9f:37:44:ed:65: 1a:3d:b3:64:6e:d9:a5:e6:26:eb:59:c6:3b:cf:de: be:cc:5b:48:da:5b:54:a9:ee:82:d3:5d:74:b6:9c: ac:b3:58:1f:57:60:d1:d7:12:e6:66:55:f3:f1:f0: 81:cd:8a:37:78:2d:e9:8d:21:9c:ff:46:68:ad:aa: 80:81:80:c1:9f:c6:c1:0f:c4:9e:da:d0:0d:c3:a7: 43:ad:c4:44:99:16:7f:55:da:67:5c:d3:5f:03:63: 30:a3:b7:01:19:63:e0:a5:9e:4d:69:06:8b:33:9f: 82:ab:f6:38:94:f8:8c:59:dc:9f:a4:c7:b4:dc:64: 1b:4f:96:7c:df:a6:ad:a2:f2:2b:a5:9b:04:1c:33: 08:2f:e5:5e:b0:c5:8f:e9:6d:ed:a4:5b:da:9d:4e: 96:91:5a:26:71:ec:64:64:64:64:aa:ae:f9:fb:d8: 00:10:a2:4a:39:01:e1:b4:ba:60:3e:b1:0b:87:17: 94:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:93:BB:3C:1E:E1:B9:87:B3:0C:40:AC:FE:C0:72:AE:AD:5E:64:5A X509v3 Authority Key Identifier: keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:36:9b:d8:ac:97:20:b3:bc:f0:c1:bc:4b:c3:45:ba:a8:46: 4d:eb:23:0d:21:f0:ff:c8:e4:c3:bb:e5:77:88:c1:f2:b3:b0: eb:0e:fe:c3:92:03:99:28:65:af:d9:f8:6c:72:67:4d:6e:ac: 9a:00:7b:6b:5b:f9:75:26:10:4d:27:b3:13:92:a9:ce:8d:90: b4:64:07:64:32:cd:7e:9f:be:d3:c8:20:68:3d:5a:18:28:61: 9a:13:d6:61:79:ae:7b:2c:49:a5:72:eb:d5:5e:57:26:d7:1a: 43:78:55:c7:38:19:da:07:e1:b0:ee:08:b7:b5:5d:04:0a:5d: 75:74:03:3d:01:a7:b9:98:68:e4:47:db:8a:d3:9f:f4:58:9b: 2e:8a:5c:eb:b6:3d:10:7e:70:b1:45:8a:30:bc:07:3d:1b:eb: 12:8c:f0:40:d3:24:3b:9e:25:61:42:a9:09:d0:31:11:0d:0e: 98:0a:c3:85:43:1e:10:fb:6b:01:a9:7e:4f:1d:4a:96:9a:78: 1f:4d:f4:53:77:e5:10:f1:df:fd:47:0b:19:54:68:cf:ad:2e: dd:a7:c5:aa:2f:8b:1b:4f:55:6c:a6:8c:96:87:03:88:f1:70: 02:4c:db:79:87:9b:13:e6:5f:45:69:74:02:11:3a:28:e8:76: 60:c6:d7:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4RDkxMTAvBgNVBAUTKDAzOEVDMEFFQjgzNTBDOURBN0U2RjIwQjI2RDJGMzUw QkE2QzI0MDkwHhcNMjUwNTA1MDIyOTA3WhcNMjUwNTEyMDIyOTA3WjAYMRYwFAYD VQQDEw02ODE4MjI3My02OGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjo6/oV7SCxoBsPf5v8/AgDRjvU4l8pcury7vq8Fm6rLik4DUysBcqLQIpNJ O5Fr8Mwe0RPCJn01ycr8xxhD2MRXDvIvnzdE7WUaPbNkbtml5ibrWcY7z96+zFtI 2ltUqe6C0110tpyss1gfV2DR1xLmZlXz8fCBzYo3eC3pjSGc/0ZoraqAgYDBn8bB D8Se2tANw6dDrcREmRZ/VdpnXNNfA2Mwo7cBGWPgpZ5NaQaLM5+Cq/Y4lPiMWdyf pMe03GQbT5Z836atovIrpZsEHDMIL+VesMWP6W3tpFvanU6WkVomcexkZGRkqq75 +9gAEKJKOQHhtLpgPrELhxeUAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeTuzwe 4bmHswxArP7Acq6tXmRaMB8GA1UdIwQYMBaAFAOOwK64NQydp+byCybS81C6bCQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjhEOS9BRjVDREIwNEM3 MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURKMm41dklMSnRMelVMcHNK QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0N0FycmcxREoybjV2SUxKdEx6VUxwc0pBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjhEOS9BRjVDREIwNEM3MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURK Mm41dklMSnRMelVMcHNKQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAONpvYrJcgs7zwwbxLw0W6qEZN6yMNIfD/yOTDu+V3iMHys7DrDv7D kgOZKGWv2fhscmdNbqyaAHtrW/l1JhBNJ7MTkqnOjZC0ZAdkMs1+n77TyCBoPVoY KGGaE9Zhea57LEmlcuvVXlcm1xpDeFXHOBnaB+Gw7gi3tV0ECl11dAM9Aae5mGjk R9uK05/0WJsuilzrtj0QfnCxRYowvAc9G+sSjPBA0yQ7niVhQqkJ0DERDQ6YCsOF Qx4Q+2sBqX5PHUqWmngfTfRTd+UQ8d/9RwsZVGjPrS7dp8WqL4sbT1VspoyWhwOI 8XACTNt5h5sT5l9FaXQCEToo6HZgxtfv -----END CERTIFICATE-----Generated at Mon May 5 12:36:03 2025 by rpki-client