$ rpki-client -vvf rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft File: arqG0wSq9k60oJeym6VXeGDMhW8.mft (raw, json) Hash identifier: 6fyW9FwNVG2Ai6Yqc7jVY6TFSBklaJ/fcpEGWaf90/k= Subject key identifier: B8:7B:4D:75:68:D3:FF:38:3C:8D:B3:8B:88:9F:D3:B3:9E:B6:E3:96 Authority key identifier: 6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F Certificate issuer: /CN=A915290D/serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft Manifest number: 0120 Signing time: Sat 23 Aug 2025 04:58:25 +0000 Manifest this update: Sat 23 Aug 2025 04:58:24 +0000 Manifest next update: Sat 30 Aug 2025 04:58:24 +0000 Files and hashes: 1: arqG0wSq9k60oJeym6VXeGDMhW8.crl (hash: jO3LEEXJTWgLbQh/1Vlp/tUizpRiDdv9qGzNmQtvrKA=) 2: FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa (hash: +1q/DCNFePTtlbMuRD5iV784JkZFCUJE5p4dFu9JRz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915290D, serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F Validity Not Before: Aug 23 04:58:24 2025 GMT Not After : Aug 30 04:58:24 2025 GMT Subject: CN=68a94a71-0693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:37:c5:bc:fe:ca:57:35:11:74:c5:c5:2e:67: d6:5d:1e:82:a7:64:3b:b2:e6:84:ef:25:69:dc:79: 47:a5:3e:0b:10:7d:06:ec:fa:69:90:aa:83:8d:8f: 41:ce:e6:e1:73:cb:07:0a:3f:03:60:d0:51:eb:67: ba:54:46:8a:87:4d:aa:bf:20:14:b0:7e:ca:7c:f7: 9a:31:40:f3:4b:22:79:e2:fd:c6:a9:f6:44:8f:bf: 4f:38:9a:92:30:09:24:89:b2:dd:38:c6:68:b5:c7: d8:99:ff:60:ce:1d:74:73:96:99:93:a8:27:47:17: 06:8a:40:80:f8:1f:f6:2f:0f:11:ee:d9:75:85:09: cc:b6:47:01:77:0d:9e:ec:83:60:ea:1d:38:53:aa: 4e:53:16:c3:14:35:42:f6:27:ac:3e:30:40:80:8a: 39:22:7e:e7:79:6a:32:ba:5c:77:05:65:62:92:8b: f9:bc:fc:2d:da:6a:ea:ac:e0:5d:cf:03:25:79:8b: 90:98:a7:b7:1a:87:36:97:7b:3d:39:ee:7b:ec:cf: 70:a5:54:12:81:a6:5f:45:4e:94:a5:ad:4a:9d:b1: 6e:bc:fd:cf:2d:d2:d4:dd:09:61:2e:5a:aa:2d:1a: 4f:2f:98:23:bb:2e:fe:b8:8f:40:1f:71:12:d2:39: c4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7B:4D:75:68:D3:FF:38:3C:8D:B3:8B:88:9F:D3:B3:9E:B6:E3:96 X509v3 Authority Key Identifier: keyid:6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:56:08:c7:89:ac:2b:c1:b4:59:dc:a0:f6:0a:21:c1:4c:89: eb:29:dc:73:2a:b8:d6:50:60:d9:76:54:ed:d5:c5:83:1b:ef: 2b:02:67:e9:c2:2d:ae:3b:1a:3a:5f:88:3d:a3:ad:36:1b:b8: ed:22:a1:ca:3f:08:f5:81:b9:19:a3:11:6b:cf:99:4f:fe:b1: c1:98:70:4f:ab:1b:92:36:5d:b6:01:15:1c:f0:57:f8:22:89: dc:ea:d8:dd:3f:c3:e9:bc:d7:cd:93:04:b6:72:7f:f4:85:2c: 52:44:5f:c7:12:5c:1e:9b:71:31:4c:39:4a:99:5e:11:36:78: a0:5f:9a:3e:cb:4a:f5:23:8e:b0:58:f3:f6:e0:99:50:1d:f1: 8f:51:3e:bd:fa:f5:c4:f5:80:d4:e2:1a:ec:4b:5a:46:16:f1: d8:c9:91:62:63:13:49:86:60:2e:b1:52:1d:fa:4f:dd:b6:3e: 76:62:9e:56:f5:4a:fc:f3:13:01:b4:fe:11:01:6b:6e:29:85: 26:fa:71:cc:d4:d2:cc:c4:2e:da:6b:e0:2e:c8:5d:55:d9:0d: 09:3c:36:d4:f2:7c:34:53:c6:fe:01:47:7d:b5:74:49:b2:4b: 69:d7:7e:64:2d:c6:07:67:fe:c0:f0:4c:58:f5:fe:2f:ce:20: 8a:1e:bd:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI5MEQxMTAvBgNVBAUTKDZBQkE4NkQzMDRBQUY2NEVCNEEwOTdCMjlCQTU1Nzc4 NjBDQzg1NkYwHhcNMjUwODIzMDQ1ODI0WhcNMjUwODMwMDQ1ODI0WjAYMRYwFAYD VQQDEw02OGE5NGE3MS0wNjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zfFvP7KVzURdMXFLmfWXR6Cp2Q7suaE7yVp3HlHpT4LEH0G7PppkKqDjY9B zubhc8sHCj8DYNBR62e6VEaKh02qvyAUsH7KfPeaMUDzSyJ54v3GqfZEj79POJqS MAkkibLdOMZotcfYmf9gzh10c5aZk6gnRxcGikCA+B/2Lw8R7tl1hQnMtkcBdw2e 7INg6h04U6pOUxbDFDVC9iesPjBAgIo5In7neWoyulx3BWVikov5vPwt2mrqrOBd zwMleYuQmKe3Goc2l3s9Oe577M9wpVQSgaZfRU6Upa1KnbFuvP3PLdLU3QlhLlqq LRpPL5gjuy7+uI9AH3ES0jnEgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLh7TXVo 0/84PI2zi4if07OetuOWMB8GA1UdIwQYMBaAFGq6htMEqvZOtKCXspulV3hgzIVv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjkwRC9BNjg0OUFDOEQw MjkxMUVFOUU2Q0JBNDBDNEY5QUUwMi9hcnFHMHdTcTlrNjBvSmV5bTZWWGVHRE1o VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FycUcwd1NxOWs2MG9KZXltNlZYZUdETWhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjkwRC9BNjg0OUFDOEQwMjkxMUVFOUU2Q0JBNDBDNEY5QUUwMi9hcnFHMHdTcTlr NjBvSmV5bTZWWGVHRE1oVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtVgjHiawrwbRZ3KD2CiHBTInrKdxzKrjWUGDZdlTt1cWDG+8rAmfp wi2uOxo6X4g9o602G7jtIqHKPwj1gbkZoxFrz5lP/rHBmHBPqxuSNl22ARUc8Ff4 Ionc6tjdP8PpvNfNkwS2cn/0hSxSRF/HElwem3ExTDlKmV4RNnigX5o+y0r1I46w WPP24JlQHfGPUT69+vXE9YDU4hrsS1pGFvHYyZFiYxNJhmAusVId+k/dtj52Yp5W 9Ur88xMBtP4RAWtuKYUm+nHM1NLMxC7aa+AuyF1V2Q0JPDbU8nw0U8b+AUd9tXRJ sktp135kLcYHZ/7A8ExY9f4vziCKHr0a -----END CERTIFICATE-----Generated at Sat Aug 23 20:28:33 2025 by rpki-client