$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json) Hash identifier: 9Z7HujytZIUtI5BxqoZwp6kttWUSK2XWAoEtJR51RZQ= Subject key identifier: E3:94:B2:11:10:E5:DC:14:11:92:AB:5C:BB:2A:AF:16:1B:41:46:15 Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Certificate serial: 3496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft Manifest number: 3496 Signing time: Wed 02 Jul 2025 15:15:59 +0000 Manifest this update: Wed 02 Jul 2025 15:15:58 +0000 Manifest next update: Wed 09 Jul 2025 15:15:58 +0000 Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: nNcOptlyUVohDTlAkyfgXmsAd0t2aBsNjSPrxxu6QOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13462 (0x3496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Validity Not Before: Jul 2 15:15:58 2025 GMT Not After : Jul 9 15:15:58 2025 GMT Subject: CN=68654d2f-0111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bf:34:4a:4f:8b:15:f6:72:1c:9f:fe:0f:87: 95:40:5d:c1:d4:56:92:58:bd:7b:d1:e2:9e:44:20: 29:cc:5b:11:81:26:eb:92:c6:a4:24:47:2a:0a:56: ce:be:63:c0:00:f0:77:05:6b:96:12:9c:ab:f6:59: 06:a1:00:0b:83:59:8c:25:8d:81:2c:9b:99:39:26: d1:b0:d5:3f:bd:70:49:65:07:8e:af:25:2d:72:f3: f8:c7:8a:4d:95:2e:47:29:70:e3:6f:60:0c:23:38: 91:dd:58:c3:c3:cb:33:43:f6:9e:a5:4e:15:0a:b3: b8:65:cb:77:25:fc:ff:1b:52:26:21:3a:1f:53:8a: 93:64:64:05:20:3c:21:de:eb:94:a2:d1:61:49:4d: 27:36:02:b0:ba:35:59:4f:fd:3a:46:45:95:ef:44: 1b:e8:e3:39:45:6a:d4:88:e5:e2:30:be:49:39:89: 42:75:eb:20:a2:fa:30:03:40:ee:3d:c7:fe:4e:02: 40:ba:84:6f:d5:aa:6a:24:7c:6b:c2:a5:5c:e9:b2: e6:2d:ec:bf:88:9b:df:dd:2b:85:8f:50:ec:32:27: 8b:b0:e7:3e:f9:aa:75:80:2f:f9:39:ef:d5:47:16: a4:35:0a:ae:56:fd:87:7c:47:22:a3:f1:f0:f8:c3: f1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:94:B2:11:10:E5:DC:14:11:92:AB:5C:BB:2A:AF:16:1B:41:46:15 X509v3 Authority Key Identifier: keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:75:03:29:03:1a:dc:57:03:d8:cb:fd:f2:bf:19:e0:9a:09: 92:eb:2c:5e:c2:41:e6:64:93:ed:32:9e:02:d9:f2:73:f5:b1: 27:8f:2c:5f:61:eb:53:57:df:63:ee:c1:c2:ea:e7:36:df:d3: f5:b0:39:13:f9:75:63:03:8b:bd:65:75:84:a2:aa:e1:b3:a1: c9:c7:e4:b3:03:96:cc:f0:f5:6b:f0:94:a5:ea:9f:3b:05:af: c2:46:1e:3c:8a:93:8a:1b:a7:2b:d3:db:ba:28:5e:3a:94:32: 95:01:32:6a:ad:a4:6b:3d:52:6c:3d:0f:95:39:0a:ac:97:68: a1:64:43:f9:99:5f:3b:ca:f9:43:2d:d1:cc:98:12:67:dd:db: d3:8c:61:5d:92:f9:12:b5:af:ae:58:09:94:fb:37:64:13:b5: 16:a6:ae:2b:83:67:c0:49:af:d0:b0:a3:1a:be:98:82:97:04: 5a:db:0f:d0:1b:8e:27:8f:bb:7d:d2:c9:c6:ca:26:a3:0c:75: a8:c7:c2:2b:92:6b:6d:25:e7:2d:7a:e0:31:07:da:b4:01:35: 43:68:2c:0a:32:bd:ad:39:df:b7:0b:65:fd:4f:b7:81:2b:79: dd:16:1c:04:3c:16:3a:7d:35:43:62:3a:af:5c:10:8b:fb:0e: 64:05:d2:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCNUUxMTAvBgNVBAUTKDAxMUQ2MUIyMzNBREYzMENEMjQ3NTYyMTI0QkI3MThC QzYzQUQ2NEUwHhcNMjUwNzAyMTUxNTU4WhcNMjUwNzA5MTUxNTU4WjAYMRYwFAYD VQQDEw02ODY1NGQyZi0wMTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtb80Sk+LFfZyHJ/+D4eVQF3B1FaSWL170eKeRCApzFsRgSbrksakJEcqClbO vmPAAPB3BWuWEpyr9lkGoQALg1mMJY2BLJuZOSbRsNU/vXBJZQeOryUtcvP4x4pN lS5HKXDjb2AMIziR3VjDw8szQ/aepU4VCrO4Zct3Jfz/G1ImITofU4qTZGQFIDwh 3uuUotFhSU0nNgKwujVZT/06RkWV70Qb6OM5RWrUiOXiML5JOYlCdesgovowA0Du Pcf+TgJAuoRv1apqJHxrwqVc6bLmLey/iJvf3SuFj1DsMieLsOc++ap1gC/5Oe/V RxakNQquVv2HfEcio/Hw+MPx3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOUshEQ 5dwUEZKrXLsqrxYbQUYVMB8GA1UdIwQYMBaAFAEdYbIzrfMM0kdWISS7cYvGOtZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI1RS9GNTY1QUREMjFE QTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3elNSMVloSkx0eGk4WTYx azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FSMWhzak90OHd6U1IxWWhKTHR4aThZNjFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI1RS9GNTY1QUREMjFEQTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3 elNSMVloSkx0eGk4WTYxazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOdQMpAxrcVwPYy/3yvxngmgmS6yxewkHmZJPtMp4C2fJz9bEnjyxf YetTV99j7sHC6uc239P1sDkT+XVjA4u9ZXWEoqrhs6HJx+SzA5bM8PVr8JSl6p87 Ba/CRh48ipOKG6cr09u6KF46lDKVATJqraRrPVJsPQ+VOQqsl2ihZEP5mV87yvlD LdHMmBJn3dvTjGFdkvkSta+uWAmU+zdkE7UWpq4rg2fASa/QsKMavpiClwRa2w/Q G44nj7t90snGyiajDHWox8IrkmttJecteuAxB9q0ATVDaCwKMr2tOd+3C2X9T7eB K3ndFhwEPBY6fTVDYjqvXBCL+w5kBdI2 -----END CERTIFICATE-----Generated at Thu Jul 3 16:43:54 2025 by rpki-client