$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json) Hash identifier: wvGmK7ZypyIJrbhb9f/upAUu5fr2UrIEZd2EX4MKGh8= Subject key identifier: BB:2A:89:64:77:A4:B6:78:C0:E9:F1:D8:14:59:59:73:38:8C:77:D9 Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Certificate serial: 347B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft Manifest number: 347B Signing time: Sat 10 May 2025 15:09:24 +0000 Manifest this update: Sat 10 May 2025 15:09:24 +0000 Manifest next update: Sat 17 May 2025 15:09:24 +0000 Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: o98BYqqHh989yaIZqRR6YkmWkQp1k6E6iW7njQStZGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13435 (0x347b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Validity Not Before: May 10 15:09:24 2025 GMT Not After : May 17 15:09:24 2025 GMT Subject: CN=681f6c24-ec6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:03:d0:c0:85:8c:9d:c6:ff:0f:55:75:a5:78: f9:31:c4:e5:f7:01:c2:62:60:1a:4e:85:d2:4b:53: dc:fa:21:01:8a:0d:7a:fa:cf:68:a0:02:14:d6:a9: 39:d9:ef:de:dd:f8:6b:93:ae:2b:b5:76:e6:3b:15: bf:9d:d4:6b:1e:72:6a:6b:91:8c:74:2d:73:1a:59: c0:88:42:9e:01:88:00:21:f9:ff:cc:b3:18:96:ab: ff:7b:c5:c0:13:dc:38:a3:c1:7a:77:e5:f0:d9:a3: 32:71:3d:e4:a6:cb:23:ec:db:16:af:10:04:fb:f6: 46:5f:15:3a:b6:6c:04:bd:1e:00:03:de:96:ff:a7: c4:07:17:8d:3c:13:32:b7:50:9c:02:d3:6f:3d:d7: e8:19:7b:23:cd:5d:af:e5:4a:0a:04:d6:14:d4:4b: 6b:12:84:71:69:c8:70:59:74:13:a1:34:25:04:26: cf:c0:20:28:56:06:8c:a3:c3:eb:70:56:89:e2:1c: bb:d3:40:c8:6a:f3:32:a2:27:6a:c0:6b:96:8d:22: dc:7e:bc:a7:2e:7f:5b:98:bf:69:df:f9:e1:5b:80: 00:68:a9:96:d1:81:31:3c:9d:1e:8f:32:9c:61:63: 2e:ba:61:ef:4c:03:f0:74:1d:29:22:1c:c7:95:29: 3a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2A:89:64:77:A4:B6:78:C0:E9:F1:D8:14:59:59:73:38:8C:77:D9 X509v3 Authority Key Identifier: keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:9b:b6:86:61:dc:c5:29:0b:96:e8:fe:89:60:cb:e2:df:2b: 8a:f6:b4:f5:51:18:81:36:c1:34:3a:32:1c:c0:74:13:72:9f: d7:59:1b:71:45:79:4f:7f:d7:fd:a3:1a:04:c6:4a:c2:a4:a7: 10:19:ff:3e:7e:c1:d8:f3:be:0d:01:ff:24:d7:c8:94:48:03: 07:39:51:c2:7c:06:15:1c:ba:1f:a0:9a:cb:3d:9b:7b:c2:dc: c5:eb:5f:b2:8f:27:38:40:90:15:c8:9e:43:92:d1:3e:00:77: 9f:a9:11:1d:32:22:c2:9c:28:9f:cc:bf:9f:f4:08:65:4f:68: 2e:2f:fd:39:6b:6f:8e:33:49:6e:3e:90:a0:9e:c3:5c:21:a4: 58:b5:b6:33:5f:30:39:59:2c:73:3c:ff:9b:d7:63:82:58:09: 87:34:1f:3f:9a:6c:82:36:6d:77:22:e2:6d:02:33:52:79:ea: a5:12:c0:6d:db:04:48:ab:34:fa:e9:9c:92:df:ce:41:09:b2: fe:7f:17:5d:a2:0d:20:34:d6:34:90:6b:24:e9:58:27:ff:dd: b4:ca:75:8a:4f:46:b2:32:da:1f:b0:e0:0f:cc:84:90:9b:f3: da:99:8f:f3:da:56:b6:db:b7:8c:bb:b5:4c:b0:21:f2:16:c2: cb:8c:73:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCNUUxMTAvBgNVBAUTKDAxMUQ2MUIyMzNBREYzMENEMjQ3NTYyMTI0QkI3MThC QzYzQUQ2NEUwHhcNMjUwNTEwMTUwOTI0WhcNMjUwNTE3MTUwOTI0WjAYMRYwFAYD VQQDEw02ODFmNmMyNC1lYzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9QPQwIWMncb/D1V1pXj5McTl9wHCYmAaToXSS1Pc+iEBig16+s9ooAIU1qk5 2e/e3fhrk64rtXbmOxW/ndRrHnJqa5GMdC1zGlnAiEKeAYgAIfn/zLMYlqv/e8XA E9w4o8F6d+Xw2aMycT3kpssj7NsWrxAE+/ZGXxU6tmwEvR4AA96W/6fEBxeNPBMy t1CcAtNvPdfoGXsjzV2v5UoKBNYU1EtrEoRxachwWXQToTQlBCbPwCAoVgaMo8Pr cFaJ4hy700DIavMyoidqwGuWjSLcfrynLn9bmL9p3/nhW4AAaKmW0YExPJ0ejzKc YWMuumHvTAPwdB0pIhzHlSk6UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsqiWR3 pLZ4wOnx2BRZWXM4jHfZMB8GA1UdIwQYMBaAFAEdYbIzrfMM0kdWISS7cYvGOtZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI1RS9GNTY1QUREMjFE QTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3elNSMVloSkx0eGk4WTYx azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FSMWhzak90OHd6U1IxWWhKTHR4aThZNjFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI1RS9GNTY1QUREMjFEQTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3 elNSMVloSkx0eGk4WTYxazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUm7aGYdzFKQuW6P6JYMvi3yuK9rT1URiBNsE0OjIcwHQTcp/XWRtx RXlPf9f9oxoExkrCpKcQGf8+fsHY874NAf8k18iUSAMHOVHCfAYVHLofoJrLPZt7 wtzF61+yjyc4QJAVyJ5DktE+AHefqREdMiLCnCifzL+f9AhlT2guL/05a2+OM0lu PpCgnsNcIaRYtbYzXzA5WSxzPP+b12OCWAmHNB8/mmyCNm13IuJtAjNSeeqlEsBt 2wRIqzT66ZyS385BCbL+fxddog0gNNY0kGsk6Vgn/920ynWKT0ayMtofsOAPzISQ m/PamY/z2la227eMu7VMsCHyFsLLjHP4 -----END CERTIFICATE-----Generated at Sun May 11 03:52:48 2025 by rpki-client