$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft File: A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json) Hash identifier: 7CTT9yg8WSRyDKnNycudi5hxh3hgcBvxS/xUwdHIhXA= Subject key identifier: BC:B6:6C:3C:45:24:BC:00:33:EB:F2:1D:04:17:3C:B6:8B:38:AF:F0 Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft Manifest number: 01EB Signing time: Mon 03 Nov 2025 02:32:45 +0000 Manifest this update: Mon 03 Nov 2025 02:32:45 +0000 Manifest next update: Mon 10 Nov 2025 02:32:45 +0000 Files and hashes: 1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: unJVJa8GlVxrS2G/Lqiib9ExdBlgVXa7V3Q3HbGuvMA=) 2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: hqEhlFzljzL9QNC3npjH/PXhuwMeiWo8+fxKQZav0bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Validity Not Before: Nov 3 02:32:45 2025 GMT Not After : Nov 10 02:32:45 2025 GMT Subject: CN=6908144d-d09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:7b:08:0a:78:14:c9:80:e7:82:22:bb:c4: 04:25:ab:c5:90:2b:fc:f1:50:10:29:ea:83:53:95: 3c:47:67:93:80:ce:bb:bc:84:8d:31:81:4a:23:07: 6b:68:77:31:dc:38:dc:2a:f9:e0:8a:bf:ec:f6:80: 62:55:34:60:2c:60:98:c2:5a:bf:3b:6f:61:b6:4c: eb:16:41:df:66:04:55:e3:7f:90:bc:43:f8:dd:69: 21:b5:69:8f:c0:67:52:a8:a6:0f:4c:5b:ac:97:5f: 0a:5a:7f:91:09:06:33:06:12:d6:1f:30:0b:c9:1a: e7:97:8d:82:0f:14:c5:c8:f8:5d:b0:e8:7e:28:89: 1d:4e:17:2c:15:d8:6f:ae:59:91:31:23:43:eb:fa: b7:f5:7e:ff:ce:c7:50:9a:f7:4c:45:05:87:ed:52: f6:27:e3:73:a8:32:28:ea:de:81:ce:10:ea:23:ad: a5:5c:5f:a3:7c:fc:0d:c0:81:93:ae:fe:61:50:fd: 32:e1:26:ad:57:8a:71:50:1b:e4:84:f4:87:8d:fc: 91:74:bd:94:ff:ff:e6:21:45:22:91:c2:1f:fa:f8: f1:9a:73:60:b6:58:46:3e:3f:91:bd:c8:17:ff:56: 36:ea:ab:7e:cd:49:fa:e7:c4:a8:c0:64:f6:88:6b: 20:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B6:6C:3C:45:24:BC:00:33:EB:F2:1D:04:17:3C:B6:8B:38:AF:F0 X509v3 Authority Key Identifier: keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:fa:4f:60:b3:0f:3f:e5:07:d3:a4:08:48:b1:47:0d:7c:5b: e0:0c:f6:ff:3c:ff:26:85:f5:23:26:0b:22:86:05:b0:f7:91: f5:1c:f2:a1:0c:c6:0a:69:c0:fa:ba:e2:fd:d0:28:f1:64:10: c9:38:44:f0:82:4e:58:a1:b0:a6:b7:d2:ea:58:d7:46:56:82: 94:53:ff:46:ba:8d:15:b5:ff:11:5b:45:53:98:3d:b1:cc:66: 51:b9:4d:9c:d4:f5:91:f8:e4:28:7d:05:1d:fd:64:1b:7a:47: c3:2c:ed:a4:37:e8:3b:ed:df:86:84:13:b5:e7:3b:9b:4c:a9: 17:55:69:50:9e:34:89:41:04:d4:d1:e2:1c:7c:09:39:b5:82: 20:6e:80:7a:02:52:38:a3:49:90:df:1a:09:db:a9:76:92:66: 9b:94:27:05:ee:f9:1d:c4:16:f6:c0:f8:ca:e5:b5:a7:34:6d: 5e:42:ea:7f:ae:1d:5e:37:7e:1c:8f:10:59:83:3a:1b:ea:44: 42:e2:23:f9:1f:1f:57:87:d6:54:e1:df:54:10:db:c9:ec:07: a7:d9:6f:6c:e7:aa:a8:80:33:fe:75:7d:d3:ee:bb:75:cf:41: 7f:95:c8:5e:70:3c:fe:a8:d4:7f:2e:9f:05:f5:9b:99:7d:70: a1:2e:ba:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4RDkxMTAvBgNVBAUTKDAzOEVDMEFFQjgzNTBDOURBN0U2RjIwQjI2RDJGMzUw QkE2QzI0MDkwHhcNMjUxMTAzMDIzMjQ1WhcNMjUxMTEwMDIzMjQ1WjAYMRYwFAYD VQQDEw02OTA4MTQ0ZC1kMDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNt7CAp4FMmA54Iiu8QEJavFkCv88VAQKeqDU5U8R2eTgM67vISNMYFKIwdr aHcx3DjcKvngir/s9oBiVTRgLGCYwlq/O29htkzrFkHfZgRV43+QvEP43WkhtWmP wGdSqKYPTFusl18KWn+RCQYzBhLWHzALyRrnl42CDxTFyPhdsOh+KIkdThcsFdhv rlmRMSND6/q39X7/zsdQmvdMRQWH7VL2J+NzqDIo6t6BzhDqI62lXF+jfPwNwIGT rv5hUP0y4SatV4pxUBvkhPSHjfyRdL2U///mIUUikcIf+vjxmnNgtlhGPj+RvcgX /1Y26qt+zUn658SowGT2iGsgZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy2bDxF JLwAM+vyHQQXPLaLOK/wMB8GA1UdIwQYMBaAFAOOwK64NQydp+byCybS81C6bCQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjhEOS9BRjVDREIwNEM3 MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURKMm41dklMSnRMelVMcHNK QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0N0FycmcxREoybjV2SUxKdEx6VUxwc0pBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjhEOS9BRjVDREIwNEM3MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURK Mm41dklMSnRMelVMcHNKQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1+k9gsw8/5QfTpAhIsUcNfFvgDPb/PP8mhfUjJgsihgWw95H1HPKh DMYKacD6uuL90CjxZBDJOETwgk5YobCmt9LqWNdGVoKUU/9Guo0Vtf8RW0VTmD2x zGZRuU2c1PWR+OQofQUd/WQbekfDLO2kN+g77d+GhBO15zubTKkXVWlQnjSJQQTU 0eIcfAk5tYIgboB6AlI4o0mQ3xoJ26l2kmablCcF7vkdxBb2wPjK5bWnNG1eQup/ rh1eN34cjxBZgzob6kRC4iP5Hx9Xh9ZU4d9UENvJ7Aen2W9s56qogDP+dX3T7rt1 z0F/lchecDz+qNR/Lp8F9ZuZfXChLroT -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:42 2025 by rpki-client