$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft File: ArpjtYYuJwm5DRa33C61z8ii5oQ.mft (raw, json) Hash identifier: Z4Ua9smX+n1vhw5392EzVuG+c/5AUMbas+KRiwJZ1rk= Subject key identifier: 03:EF:96:35:62:23:84:D1:5D:F7:2D:27:A5:82:E1:F0:38:9F:ED:27 Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 Certificate issuer: /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft Manifest number: 01B1 Signing time: Sun 29 Jun 2025 02:24:43 +0000 Manifest this update: Sun 29 Jun 2025 02:24:43 +0000 Manifest next update: Sun 06 Jul 2025 02:24:43 +0000 Files and hashes: 1: ArpjtYYuJwm5DRa33C61z8ii5oQ.crl (hash: rnRI4FTWg33Ifu/qjCkHMlFYr60HfiPdz5wjQXYW5tY=) 2: 5192AB7ED47811EEB5A6D21AC4F9AE02.roa (hash: xW/u71nn0KALe/rW4D+40PFnNAvvVtQKyJcvAPM8UVs=) 3: A0A7B5161B6D11EE943DBE1AC4F9AE02.roa (hash: w8AYmwvw5WjiU8t0nTCRTmBhXIg32i1mKNjzYab96gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43EE, serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Validity Not Before: Jun 29 02:24:43 2025 GMT Not After : Jul 6 02:24:43 2025 GMT Subject: CN=6860a3eb-5bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:eb:97:3e:c6:cd:84:53:77:18:ba:33:d5:ec: a6:ec:55:3d:af:c4:78:7c:d0:8c:ee:f4:40:c7:ec: 40:15:a3:cc:a7:03:33:f6:9f:62:e5:cd:8d:28:e7: 6c:47:3f:21:21:52:49:d0:0c:da:5f:d2:ea:2a:83: 4a:24:b5:e1:2f:95:91:3c:8d:a6:55:8e:62:a4:cf: 33:43:c4:de:ef:04:09:6c:9c:f9:5d:7e:74:73:6b: ea:6f:d6:51:f8:e7:16:4c:4d:5b:26:b9:dc:46:b7: 56:8a:dc:ba:e9:63:b0:10:8e:fb:80:8f:b6:a8:9c: 56:d6:65:d1:a7:3b:66:93:71:d6:2c:0e:52:8c:e4: 91:ba:db:53:52:4c:b4:45:37:bc:17:3f:53:56:72: 5b:c1:d8:02:4b:21:6c:02:e7:0d:25:3f:cf:75:f0: 14:d5:c0:f3:6f:9d:94:ab:31:5c:71:a4:37:df:43: 7d:33:ec:94:63:c4:c5:03:d7:b9:92:cb:d5:96:e8: 12:8b:13:5c:89:48:b0:74:62:75:20:ef:ea:ef:85: 98:fc:27:fb:bc:14:ff:67:33:35:da:f0:d9:b7:cd: 7e:00:bb:00:8b:b9:d1:fd:4e:da:bb:45:bf:de:ab: 01:16:1c:72:44:b7:2d:1c:52:38:56:c3:b0:b7:97: 8b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EF:96:35:62:23:84:D1:5D:F7:2D:27:A5:82:E1:F0:38:9F:ED:27 X509v3 Authority Key Identifier: keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:08:95:6e:72:35:87:5a:76:a0:15:e9:a9:a2:26:1b:42:ef: 8c:6b:b3:05:fa:f7:6b:bb:d3:4d:1d:c8:78:a5:89:43:6b:23: ce:e5:d0:99:65:af:54:bd:8f:9f:1a:ac:69:50:7e:f0:a9:9f: b9:16:90:8f:85:ea:ad:93:64:aa:0a:81:14:47:f5:6a:54:7b: 2f:b9:0b:65:e9:4c:77:1a:43:aa:30:92:5d:a3:b5:26:a6:8c: 78:ad:4b:f7:c1:f2:6b:89:c0:67:4a:85:7a:76:b6:f6:1e:23: 95:c4:37:ec:7b:6b:60:0e:21:7b:57:8b:47:66:10:e9:e3:c2: ac:6b:d1:39:b3:70:52:40:b4:e1:18:ed:32:8f:49:f2:c7:89: 70:1d:67:29:fe:7d:21:f6:54:99:fc:67:ae:64:00:25:68:e4: 2c:d0:54:50:36:d1:f2:bf:c9:93:d3:53:3f:ba:94:41:93:b2: 33:de:b1:4a:52:b7:30:e1:31:52:43:15:f8:92:47:19:cd:fa: e8:b5:9d:bc:71:6b:77:71:f3:97:75:3e:cc:a7:3c:1e:43:80: c7:d0:8d:40:ec:1f:71:7c:0b:07:00:b9:ab:9d:78:8b:e5:9a: 8c:11:25:b3:a5:57:4f:e0:79:88:e3:6e:2b:0a:21:14:e9:82: 70:eb:61:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRUUxMTAvBgNVBAUTKDAyQkE2M0I1ODYyRTI3MDlCOTBEMTZCN0RDMkVCNUNG QzhBMkU2ODQwHhcNMjUwNjI5MDIyNDQzWhcNMjUwNzA2MDIyNDQzWjAYMRYwFAYD VQQDEw02ODYwYTNlYi01YmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeuXPsbNhFN3GLoz1eym7FU9r8R4fNCM7vRAx+xAFaPMpwMz9p9i5c2NKOds Rz8hIVJJ0AzaX9LqKoNKJLXhL5WRPI2mVY5ipM8zQ8Te7wQJbJz5XX50c2vqb9ZR +OcWTE1bJrncRrdWity66WOwEI77gI+2qJxW1mXRpztmk3HWLA5SjOSRuttTUky0 RTe8Fz9TVnJbwdgCSyFsAucNJT/PdfAU1cDzb52UqzFccaQ330N9M+yUY8TFA9e5 ksvVlugSixNciUiwdGJ1IO/q74WY/Cf7vBT/ZzM12vDZt81+ALsAi7nR/U7au0W/ 3qsBFhxyRLctHFI4VsOwt5eLWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPvljVi I4TRXfctJ6WC4fA4n+0nMB8GA1UdIwQYMBaAFAK6Y7WGLicJuQ0Wt9wutc/IouaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNFRS80QThBREFDMENE NDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3bTVEUmEzM0M2MXo4aWk1 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FycGp0WVl1SndtNURSYTMzQzYxejhpaTVvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNFRS80QThBREFDMENENDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3 bTVEUmEzM0M2MXo4aWk1b1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJCJVucjWHWnagFempoiYbQu+Ma7MF+vdru9NNHch4pYlDayPO5dCZ Za9UvY+fGqxpUH7wqZ+5FpCPheqtk2SqCoEUR/VqVHsvuQtl6Ux3GkOqMJJdo7Um pox4rUv3wfJricBnSoV6drb2HiOVxDfse2tgDiF7V4tHZhDp48Ksa9E5s3BSQLTh GO0yj0nyx4lwHWcp/n0h9lSZ/GeuZAAlaOQs0FRQNtHyv8mT01M/upRBk7Iz3rFK Urcw4TFSQxX4kkcZzfrotZ28cWt3cfOXdT7MpzweQ4DH0I1A7B9xfAsHALmrnXiL 5ZqMESWzpVdP4HmI424rCiEU6YJw62Fq -----END CERTIFICATE-----Generated at Tue Jul 1 00:44:12 2025 by rpki-client