$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft File: AruX_YsfYg4CoeLK21nWVvAa2kU.mft (raw, json) Hash identifier: QE75wDrQTfXH9oma+33SCU8WWmnZu+sasfxjft81HMU= Subject key identifier: 20:B5:9B:DE:93:08:B2:A2:86:53:5D:13:AC:83:BB:39:12:A6:AB:C3 Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45 Certificate issuer: /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45 Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft Manifest number: 0325 Signing time: Tue 01 Jul 2025 01:44:29 +0000 Manifest this update: Tue 01 Jul 2025 01:44:28 +0000 Manifest next update: Tue 08 Jul 2025 01:44:28 +0000 Files and hashes: 1: AruX_YsfYg4CoeLK21nWVvAa2kU.crl (hash: usBNeOds8Axf0CVC7EQ9RtjktCeQgtOu23vRzhwsykU=) 2: E100C846D0D211EC92E5014CC4F9AE02.roa (hash: r0SdsL2ORVSdYzkbQ5mo+r9WMoDe9Po2V1LCmdg+FDo=) 3: 2DED8B66D02011ECB021972BC4F9AE02.roa (hash: ICAm0K0jbIgavAr0EQMMjLaOL/gZji3RATFqBqpQADM=) 4: 2D478AFED02011ECB021972BC4F9AE02.roa (hash: /uILdUZ7kShm+RnYwG/kKYiO9gYuOhp2LdX1pGS+VDA=) 5: 8FCF722626C911EE9F1A0917C4F9AE02.roa (hash: dBsLOGuzUlSybPcUJi3MpYXDAALVpmkR+ZsEVuraLp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE108, serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45 Validity Not Before: Jul 1 01:44:28 2025 GMT Not After : Jul 8 01:44:28 2025 GMT Subject: CN=68633d7d-7ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:0f:a5:81:e8:00:dd:67:dc:8f:80:d0:2a: 8e:ed:85:5b:84:3b:c3:87:05:81:07:ad:fc:69:10: 6a:92:98:75:58:53:1c:bd:a6:94:67:86:71:d0:c3: da:0e:59:62:eb:bc:8d:89:bc:8a:30:1d:f1:6e:ce: e3:6f:f1:c9:ad:17:26:83:b4:3a:8f:b7:cd:e5:c7: 30:0c:76:79:aa:87:25:02:35:18:1b:47:62:a0:15: c8:7c:56:82:d9:6a:ed:89:b9:33:19:64:7d:7a:c5: 3a:fe:0d:56:ca:77:97:8c:4a:cb:8f:b7:77:04:11: 24:c3:2b:a1:05:3c:3e:b2:e2:9a:4f:84:3e:c1:53: 5d:cc:3d:b4:de:13:a6:a3:d5:28:8e:df:24:ba:5f: f1:e6:fe:74:20:e6:21:91:f2:92:6d:ff:5b:2b:66: 43:e9:b3:46:0d:0b:e1:f2:2b:09:c9:b5:aa:c6:28: 66:c8:da:39:2c:80:93:3d:24:0a:cc:05:ce:28:1a: 2c:b6:b6:b3:94:f8:00:fa:09:f3:97:53:21:5a:a2: 51:0c:eb:c8:ad:04:e4:9e:59:21:44:6b:f9:69:c8: 66:c7:6a:81:db:f7:1d:be:18:24:f4:cc:77:f7:cd: e0:84:7e:a6:d7:6f:f3:fb:be:76:d9:33:eb:67:63: 15:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B5:9B:DE:93:08:B2:A2:86:53:5D:13:AC:83:BB:39:12:A6:AB:C3 X509v3 Authority Key Identifier: keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:af:54:66:83:88:59:34:07:80:ef:64:5f:fd:a7:0f:7e:fd: f7:48:d2:aa:2a:aa:ef:71:fc:8c:5c:1f:21:20:38:e1:5a:b0: d0:78:fe:62:b7:f4:06:63:ab:da:34:38:ec:c0:90:57:a2:06: 26:4f:82:5c:82:ae:61:7f:07:6b:e0:76:f5:01:02:ff:ff:e9: 3a:d5:91:aa:16:e7:61:63:36:fb:80:63:f7:5e:b7:b5:ab:ad: 45:20:0d:8c:79:e1:dd:e1:8e:6a:4d:98:8b:ab:a0:02:6f:a1: a3:bd:88:78:9e:43:4b:43:b1:e1:a9:d9:08:a0:1b:30:16:57: 88:94:de:be:6d:52:01:31:47:a4:d0:c9:0a:56:b4:4c:66:9d: 86:46:39:c9:82:f3:0a:35:b8:7c:bc:56:01:ad:de:ae:23:5d: b8:16:e1:4d:67:79:0d:53:21:1f:de:12:6d:1a:de:ce:96:c0: 61:a1:3d:83:e9:31:ef:b1:35:3b:d6:e4:76:8c:56:81:d0:f0: e9:11:b8:f5:a3:d0:28:fa:4c:be:24:05:25:c6:0e:d0:38:82: cf:6a:4f:30:53:29:c2:f0:08:3f:82:9d:35:2d:d8:ba:80:c2: 0d:f3:40:c1:04:99:29:1d:53:f3:57:c0:d0:ff:24:5c:b8:6c: e1:37:20:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUxMDgxMTAvBgNVBAUTKDAyQkI5N0ZEOEIxRjYyMEUwMkExRTJDQURCNTlENjU2 RjAxQURBNDUwHhcNMjUwNzAxMDE0NDI4WhcNMjUwNzA4MDE0NDI4WjAYMRYwFAYD VQQDEw02ODYzM2Q3ZC03ZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuycPpYHoAN1n3I+A0CqO7YVbhDvDhwWBB638aRBqkph1WFMcvaaUZ4Zx0MPa Dlli67yNibyKMB3xbs7jb/HJrRcmg7Q6j7fN5ccwDHZ5qoclAjUYG0dioBXIfFaC 2WrtibkzGWR9esU6/g1WyneXjErLj7d3BBEkwyuhBTw+suKaT4Q+wVNdzD203hOm o9Uojt8kul/x5v50IOYhkfKSbf9bK2ZD6bNGDQvh8isJybWqxihmyNo5LICTPSQK zAXOKBostrazlPgA+gnzl1MhWqJRDOvIrQTknlkhRGv5achmx2qB2/cdvhgk9Mx3 983ghH6m12/z+7522TPrZ2MV6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCC1m96T CLKihlNdE6yDuzkSpqvDMB8GA1UdIwQYMBaAFAK7l/2LH2IOAqHiyttZ1lbwGtpF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTEwOC9FM0IwNDZDQ0Qw MUMxMUVDQjM1NEFGMjRDNEY5QUUwMi9BcnVYX1lzZllnNENvZUxLMjFuV1Z2QWEy a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FydVhfWXNmWWc0Q29lTEsyMW5XVnZBYTJrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTEwOC9FM0IwNDZDQ0QwMUMxMUVDQjM1NEFGMjRDNEY5QUUwMi9BcnVYX1lzZlln NENvZUxLMjFuV1Z2QWEya1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrr1Rmg4hZNAeA72Rf/acPfv33SNKqKqrvcfyMXB8hIDjhWrDQeP5i t/QGY6vaNDjswJBXogYmT4Jcgq5hfwdr4Hb1AQL//+k61ZGqFudhYzb7gGP3Xre1 q61FIA2MeeHd4Y5qTZiLq6ACb6GjvYh4nkNLQ7HhqdkIoBswFleIlN6+bVIBMUek 0MkKVrRMZp2GRjnJgvMKNbh8vFYBrd6uI124FuFNZ3kNUyEf3hJtGt7OlsBhoT2D 6THvsTU71uR2jFaB0PDpEbj1o9Ao+ky+JAUlxg7QOILPak8wUynC8Ag/gp01Ldi6 gMIN80DBBJkpHVPzV8DQ/yRcuGzhNyBA -----END CERTIFICATE-----Generated at Thu Jul 3 00:50:45 2025 by rpki-client