$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft File: A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json) Hash identifier: eWf+w8UrDMQp3kvX//Zjy9+oXM6y5oafDF69m3nrizk= Subject key identifier: 9F:F8:0D:DE:5C:35:CD:83:D0:30:C3:8B:80:A8:AC:52:DD:4F:5E:40 Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft Manifest number: 01E4 Signing time: Sun 19 Oct 2025 05:02:39 +0000 Manifest this update: Sun 19 Oct 2025 05:02:38 +0000 Manifest next update: Sun 26 Oct 2025 05:02:38 +0000 Files and hashes: 1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: /zx4xnc/5Z4/xso0d70GGCVQmwjdBipM0euBTYE85OA=) 2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: hqEhlFzljzL9QNC3npjH/PXhuwMeiWo8+fxKQZav0bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Validity Not Before: Oct 19 05:02:38 2025 GMT Not After : Oct 26 05:02:38 2025 GMT Subject: CN=68f470ef-b310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:32:d7:9e:f6:73:b4:57:f8:af:7f:1b:27:8a: bf:18:1b:f4:45:a3:1d:c0:52:05:51:fd:0f:2a:87: a8:44:31:d3:94:fa:63:a3:c1:f2:cd:55:bf:97:ca: 81:75:6d:82:66:d5:4d:eb:67:2c:a9:ff:8a:3f:a5: e7:10:78:db:eb:9e:a4:44:78:3b:b2:b7:0b:b1:81: 57:ad:55:fc:fd:bd:0a:72:51:e3:ed:6a:d3:55:8f: da:c2:f4:c9:40:76:a2:de:48:1f:85:3a:de:68:11: bd:10:d3:d5:26:c0:39:e3:c8:4f:6b:b4:9f:19:80: 61:b8:37:10:6d:f9:c0:4d:8d:40:34:aa:a6:72:8d: 0d:79:bf:51:d0:15:86:dd:86:83:69:3e:f9:27:80: f9:8a:26:1b:b5:44:7f:54:e8:d4:94:fd:f6:f2:16: 8d:b3:8f:d1:87:f7:65:0c:ab:63:bd:4d:68:ce:d9: 8a:22:4e:a1:86:05:33:d5:c4:60:51:3e:46:06:9c: a2:56:c7:6e:83:78:47:d3:57:07:58:50:e1:35:fd: f0:87:cc:e7:f6:7f:99:4f:aa:57:4e:bd:12:83:61: 40:a7:1d:40:30:4d:d8:1d:59:40:3c:02:b0:6f:0a: 17:4a:db:95:8d:6a:0d:52:7e:83:7c:fa:8a:21:04: 42:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F8:0D:DE:5C:35:CD:83:D0:30:C3:8B:80:A8:AC:52:DD:4F:5E:40 X509v3 Authority Key Identifier: keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c0:63:1b:a3:6c:eb:3f:4e:78:9d:89:91:90:7b:dc:f8:84: 0c:fb:1f:e4:6d:2f:27:c5:ba:8b:fb:f6:54:8b:27:39:0b:3b: 43:e1:47:09:16:28:11:f7:70:fc:73:06:cb:b3:5a:e9:4a:db: 19:e4:f6:8e:1e:22:1b:8d:83:74:87:cf:e6:8c:de:ca:68:f1: a4:30:14:b3:13:25:1b:62:59:29:6d:2f:03:e5:56:86:18:e6: f7:00:62:f9:41:72:01:ef:ee:c7:7a:95:36:f3:f5:6e:c3:53: 12:68:f1:55:6d:1c:9e:26:e7:d8:92:70:8b:1e:7b:f6:cd:ab: b1:f7:da:c5:fb:eb:84:81:7f:07:31:d5:53:65:83:9c:35:0f: 13:fa:89:e4:49:98:c3:4d:95:54:20:3c:05:7b:0c:65:e8:0d: ea:5d:3e:4a:8b:a4:0d:fe:b9:22:6f:1f:41:b9:2a:26:38:7d: cc:b1:03:37:e1:0c:f4:c4:4f:7f:35:a1:b7:c9:f8:19:65:13: c5:7b:39:72:5c:99:81:46:f6:25:e8:1a:42:6a:df:f9:47:f8: d0:37:32:0d:75:50:ac:6a:12:ad:67:cd:ad:12:f4:23:cb:ef: b7:3c:0b:8e:b1:cb:8c:cd:32:08:70:fa:00:5f:9c:26:3f:ca: 46:f7:9f:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4RDkxMTAvBgNVBAUTKDAzOEVDMEFFQjgzNTBDOURBN0U2RjIwQjI2RDJGMzUw QkE2QzI0MDkwHhcNMjUxMDE5MDUwMjM4WhcNMjUxMDI2MDUwMjM4WjAYMRYwFAYD VQQDEw02OGY0NzBlZi1iMzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9jLXnvZztFf4r38bJ4q/GBv0RaMdwFIFUf0PKoeoRDHTlPpjo8HyzVW/l8qB dW2CZtVN62csqf+KP6XnEHjb656kRHg7srcLsYFXrVX8/b0KclHj7WrTVY/awvTJ QHai3kgfhTreaBG9ENPVJsA548hPa7SfGYBhuDcQbfnATY1ANKqmco0Neb9R0BWG 3YaDaT75J4D5iiYbtUR/VOjUlP328haNs4/Rh/dlDKtjvU1oztmKIk6hhgUz1cRg UT5GBpyiVsdug3hH01cHWFDhNf3wh8zn9n+ZT6pXTr0Sg2FApx1AME3YHVlAPAKw bwoXStuVjWoNUn6DfPqKIQRC9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/4Dd5c Nc2D0DDDi4CorFLdT15AMB8GA1UdIwQYMBaAFAOOwK64NQydp+byCybS81C6bCQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjhEOS9BRjVDREIwNEM3 MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURKMm41dklMSnRMelVMcHNK QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0N0FycmcxREoybjV2SUxKdEx6VUxwc0pBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjhEOS9BRjVDREIwNEM3MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURK Mm41dklMSnRMelVMcHNKQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdwGMbo2zrP054nYmRkHvc+IQM+x/kbS8nxbqL+/ZUiyc5CztD4UcJ FigR93D8cwbLs1rpStsZ5PaOHiIbjYN0h8/mjN7KaPGkMBSzEyUbYlkpbS8D5VaG GOb3AGL5QXIB7+7HepU28/Vuw1MSaPFVbRyeJufYknCLHnv2zaux99rF++uEgX8H MdVTZYOcNQ8T+onkSZjDTZVUIDwFewxl6A3qXT5Ki6QN/rkibx9BuSomOH3MsQM3 4Qz0xE9/NaG3yfgZZRPFezlyXJmBRvYl6BpCat/5R/jQNzINdVCsahKtZ82tEvQj y++3PAuOscuMzTIIcPoAX5wmP8pG95+6 -----END CERTIFICATE-----Generated at Mon Oct 20 15:01:12 2025 by rpki-client