$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft File: A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json) Hash identifier: xbE9almKbK/MfB9lJm0tYZ+UwZNGxMObEK3GVfsEiBI= Subject key identifier: F5:04:9E:2A:F4:E2:63:97:D7:CF:8A:DC:44:B0:4C:CB:F9:A6:22:F3 Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft Manifest number: 023B Signing time: Sun 05 Apr 2026 02:04:19 +0000 Manifest this update: Sun 05 Apr 2026 02:04:19 +0000 Manifest next update: Sun 12 Apr 2026 02:04:19 +0000 Files and hashes: 1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: gKsbYZhinGK83nSWqu/iBnJ1Ce6Q/cxJpmwr90PrAH0=) 2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: rd/wAvSucL3KznyqiuFkW7+IzcHszwzgGGaI1AWvgdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Validity Not Before: Apr 5 02:04:19 2026 GMT Not After : Apr 12 02:04:19 2026 GMT Subject: CN=69d1c323-087e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:98:94:83:79:c5:4b:0d:0c:74:e3:00:d4: d2:08:c2:4e:78:ea:97:2a:03:88:3f:d7:88:0f:39: 22:f0:3a:17:56:47:b5:cd:6c:8a:52:a6:73:a2:9b: 53:14:45:72:28:9b:b3:2b:4f:29:28:12:05:72:86: c1:d6:39:3e:fa:67:d7:17:25:38:3b:7e:3c:be:62: 62:39:a4:ad:4d:bd:08:6d:33:05:15:52:c7:42:4a: 5b:00:64:0d:11:0f:54:a2:1c:9c:ef:33:de:a3:00: 4a:b5:f4:9f:22:d7:fd:10:54:25:51:18:99:fd:f1: f4:ea:0e:11:a4:d9:c9:e8:ed:61:6f:d8:f2:c6:b0: 6a:b3:21:a1:3b:21:2d:34:4a:c2:4f:9f:8b:8e:e8: 42:d1:aa:02:4a:d2:f8:2e:6e:31:03:42:e9:14:57: 84:b4:ec:1f:5a:ff:e7:46:aa:7e:5b:cf:79:f8:7c: e2:93:fb:2b:74:44:7e:86:f8:a2:c4:0d:72:1b:c7: 89:1e:81:e5:37:85:34:dd:80:56:64:bb:77:34:f1: 6e:d8:0e:3a:82:30:4b:86:f2:62:e7:5d:6c:2c:63: 05:75:d4:4b:54:56:c5:a1:3f:86:52:d0:47:3c:19: 57:55:ef:7b:ef:e2:64:fd:1a:10:87:d6:00:73:ec: de:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:04:9E:2A:F4:E2:63:97:D7:CF:8A:DC:44:B0:4C:CB:F9:A6:22:F3 X509v3 Authority Key Identifier: keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a3:2b:98:53:04:cd:1e:23:52:24:b4:06:78:6c:c0:49:30: 07:44:aa:39:4a:16:0c:db:85:65:d0:b5:dc:3d:d5:7e:82:e7: 84:93:12:fb:dc:26:51:92:61:ee:83:e0:77:83:44:27:7b:ba: 93:a9:33:d0:68:a4:7e:2a:cd:2c:ac:08:24:54:ba:8a:d8:a1: f4:03:2d:75:1e:9c:75:93:32:af:6a:4b:20:f6:9d:bb:84:c1: 2f:0b:f8:f2:2a:12:9e:95:95:f1:92:6f:9e:d8:3a:66:0e:5c: b9:85:bb:c1:d5:53:26:80:e1:59:1e:22:c8:23:f3:1f:14:83: 8d:1c:fc:bf:05:b5:69:a3:45:7a:3c:2e:26:88:72:ca:bc:d6: ea:fa:fc:5b:50:2d:f0:75:b8:1f:df:1a:2d:ea:4a:72:5f:3a: 00:f2:c1:61:c0:d0:b4:13:f5:54:65:ce:c8:05:c6:df:4f:b4: 53:7c:c5:a4:aa:23:d4:88:62:ae:75:b2:f3:e4:da:32:f0:00: 3c:9a:35:72:27:c2:19:7b:29:86:e4:29:5f:99:c5:13:c0:dc: f6:01:d7:30:d8:d6:04:9e:e1:70:f8:c4:0a:40:32:87:9b:7d: f1:28:d9:dd:cc:df:2f:94:9b:49:4c:cb:5c:69:f0:c4:17:18: c5:7d:c4:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4RDkxMTAvBgNVBAUTKDAzOEVDMEFFQjgzNTBDOURBN0U2RjIwQjI2RDJGMzUw QkE2QzI0MDkwHhcNMjYwNDA1MDIwNDE5WhcNMjYwNDEyMDIwNDE5WjAYMRYwFAYD VQQDEw02OWQxYzMyMy0wODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+6YlIN5xUsNDHTjANTSCMJOeOqXKgOIP9eIDzki8DoXVke1zWyKUqZzoptT FEVyKJuzK08pKBIFcobB1jk++mfXFyU4O348vmJiOaStTb0IbTMFFVLHQkpbAGQN EQ9Uohyc7zPeowBKtfSfItf9EFQlURiZ/fH06g4RpNnJ6O1hb9jyxrBqsyGhOyEt NErCT5+LjuhC0aoCStL4Lm4xA0LpFFeEtOwfWv/nRqp+W895+Hzik/srdER+hvii xA1yG8eJHoHlN4U03YBWZLt3NPFu2A46gjBLhvJi511sLGMFddRLVFbFoT+GUtBH PBlXVe977+Jk/RoQh9YAc+zeSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPUEnir0 4mOX18+K3ESwTMv5piLzMB8GA1UdIwQYMBaAFAOOwK64NQydp+byCybS81C6bCQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjhEOS9BRjVDREIwNEM3 MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURKMm41dklMSnRMelVMcHNK QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0N0FycmcxREoybjV2SUxKdEx6VUxwc0pBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjhEOS9BRjVDREIwNEM3MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURK Mm41dklMSnRMelVMcHNKQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnqMrmFMEzR4jUiS0BnhswEkwB0SqOUoWDNuFZdC13D3VfoLnhJMS+9wmUZJh 7oPgd4NEJ3u6k6kz0GikfirNLKwIJFS6itih9AMtdR6cdZMyr2pLIPadu4TBLwv4 8ioSnpWV8ZJvntg6Zg5cuYW7wdVTJoDhWR4iyCPzHxSDjRz8vwW1aaNFejwuJohy yrzW6vr8W1At8HW4H98aLepKcl86APLBYcDQtBP1VGXOyAXG30+0U3zFpKoj1Ihi rnWy8+TaMvAAPJo1cifCGXsphuQpX5nFE8Dc9gHXMNjWBJ7hcPjECkAyh5t98SjZ 3czfL5SbSUzLXGnwxBcYxX3E/g== -----END CERTIFICATE-----Generated at Mon Apr 6 08:47:30 2026 by rpki-client