$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft File: A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json) Hash identifier: cyE9WRS4NWosssnRUTnL97HfxPY7kzz2QxDcDS+KycM= Subject key identifier: E6:93:75:87:96:A0:37:AF:8D:BD:18:6E:20:DE:1D:53:10:8F:38:92 Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft Manifest number: 01AD Signing time: Thu 03 Jul 2025 03:16:26 +0000 Manifest this update: Thu 03 Jul 2025 03:16:25 +0000 Manifest next update: Thu 10 Jul 2025 03:16:25 +0000 Files and hashes: 1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: 2Zk6s3mO0665z7rJUajGvZGVBP7ULUKC90ptk6GNF44=) 2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: hqEhlFzljzL9QNC3npjH/PXhuwMeiWo8+fxKQZav0bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Validity Not Before: Jul 3 03:16:25 2025 GMT Not After : Jul 10 03:16:25 2025 GMT Subject: CN=6865f60a-a636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:4e:58:04:92:98:fa:8f:0d:61:30:10:67: d4:1f:13:54:f7:13:7f:35:15:fc:54:00:1e:02:3a: 8a:fa:5e:68:96:03:ea:3d:69:92:8d:a0:5c:e2:45: 4b:df:17:98:bf:57:b9:81:f6:e7:8e:23:63:95:e6: 55:45:7e:0b:8d:ac:87:66:33:de:e8:36:a6:97:67: 5d:3c:5b:01:80:68:f3:df:34:a2:dd:37:14:e5:43: ec:34:f7:4d:04:65:f1:5f:ed:a1:c2:18:80:89:32: 57:7c:6f:5e:0d:45:5f:a9:25:53:6e:70:be:43:74: 4b:aa:05:a7:84:8b:fb:fe:a3:17:ca:8a:97:d0:7c: de:68:5f:81:8d:ad:fb:9b:52:fc:f5:02:04:4c:06: 09:ee:54:ae:e2:78:fd:61:82:1e:61:67:60:58:55: 3d:69:51:89:17:8b:2c:b3:16:cc:d6:e7:97:31:0a: 4e:23:b1:85:67:62:04:50:4f:fb:76:67:ed:d5:a5: bb:71:10:2c:74:95:67:81:53:cf:94:ae:a4:91:62: a3:c0:0f:b6:a5:9a:56:c4:46:97:bf:8a:f8:97:bd: d7:3b:db:f0:0e:99:93:b2:b5:ac:a5:3e:7b:41:f2: e2:d4:93:50:38:b9:68:f3:74:80:9b:bd:ae:7e:40: 9e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:93:75:87:96:A0:37:AF:8D:BD:18:6E:20:DE:1D:53:10:8F:38:92 X509v3 Authority Key Identifier: keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:8a:62:b2:59:a0:de:f4:fa:5e:11:5d:4f:c3:85:94:65:24: b5:4c:b3:5e:4f:8f:f9:d1:bd:b6:e6:3e:d0:aa:80:ee:b2:a2: 85:ba:18:3d:73:4c:92:f7:00:39:17:3f:c7:e4:52:b9:1d:40: 6b:9c:b1:cc:e4:c5:52:6d:b8:6b:a0:d5:23:5a:03:14:71:f0: 5a:1d:39:2b:8b:47:49:94:f7:77:ef:a8:fe:ba:0c:e3:e7:9b: 69:9c:ed:c5:e9:00:58:ad:8d:95:3e:aa:ab:93:4d:04:c9:9d: f3:6f:68:90:75:7c:01:30:6b:0e:69:3f:91:e4:13:73:93:d7: b4:84:0d:12:36:5a:f8:0c:b6:4f:52:88:9f:f2:3c:ec:88:b7: f3:b4:23:69:52:56:ff:84:75:fd:fb:f2:20:5f:f6:f4:1b:10: 95:73:f1:9b:ab:15:f4:6d:e1:20:02:57:04:08:37:60:f9:59: cb:0e:78:03:c8:cb:e3:42:83:34:8e:82:3c:31:f7:6d:2f:c0: b0:8a:c0:5a:c0:4d:54:14:f9:a0:cb:f1:67:c7:9a:93:59:c1: 68:de:a9:9b:60:91:83:de:71:91:a9:1c:c9:2c:c2:39:ce:2d: e1:68:9e:d8:f9:0c:2c:10:5d:e3:9a:c0:8a:5c:c8:4c:4e:8b: 84:fd:bd:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4RDkxMTAvBgNVBAUTKDAzOEVDMEFFQjgzNTBDOURBN0U2RjIwQjI2RDJGMzUw QkE2QzI0MDkwHhcNMjUwNzAzMDMxNjI1WhcNMjUwNzEwMDMxNjI1WjAYMRYwFAYD VQQDEw02ODY1ZjYwYS1hNjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuidOWASSmPqPDWEwEGfUHxNU9xN/NRX8VAAeAjqK+l5olgPqPWmSjaBc4kVL 3xeYv1e5gfbnjiNjleZVRX4LjayHZjPe6Daml2ddPFsBgGjz3zSi3TcU5UPsNPdN BGXxX+2hwhiAiTJXfG9eDUVfqSVTbnC+Q3RLqgWnhIv7/qMXyoqX0HzeaF+Bja37 m1L89QIETAYJ7lSu4nj9YYIeYWdgWFU9aVGJF4sssxbM1ueXMQpOI7GFZ2IEUE/7 dmft1aW7cRAsdJVngVPPlK6kkWKjwA+2pZpWxEaXv4r4l73XO9vwDpmTsrWspT57 QfLi1JNQOLlo83SAm72ufkCe0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOaTdYeW oDevjb0YbiDeHVMQjziSMB8GA1UdIwQYMBaAFAOOwK64NQydp+byCybS81C6bCQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjhEOS9BRjVDREIwNEM3 MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURKMm41dklMSnRMelVMcHNK QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0N0FycmcxREoybjV2SUxKdEx6VUxwc0pBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjhEOS9BRjVDREIwNEM3MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURK Mm41dklMSnRMelVMcHNKQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaimKyWaDe9PpeEV1Pw4WUZSS1TLNeT4/50b225j7QqoDusqKFuhg9 c0yS9wA5Fz/H5FK5HUBrnLHM5MVSbbhroNUjWgMUcfBaHTkri0dJlPd376j+ugzj 55tpnO3F6QBYrY2VPqqrk00EyZ3zb2iQdXwBMGsOaT+R5BNzk9e0hA0SNlr4DLZP Uoif8jzsiLfztCNpUlb/hHX9+/IgX/b0GxCVc/GbqxX0beEgAlcECDdg+VnLDngD yMvjQoM0joI8MfdtL8CwisBawE1UFPmgy/Fnx5qTWcFo3qmbYJGD3nGRqRzJLMI5 zi3haJ7Y+QwsEF3jmsCKXMhMTouE/b1p -----END CERTIFICATE-----Generated at Thu Jul 3 06:49:49 2025 by rpki-client