$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft File: Ar6z5iH6umNCHtP4hPonC80zHXc.mft (raw, json) Hash identifier: Ux8MhV5EmcJxTYbD+llF8mFEZ3X8nqTWT0rfk7mPqLc= Subject key identifier: AA:E0:0F:AB:5C:84:FA:6A:FD:61:9D:59:B6:0F:E4:D0:76:21:51:D0 Authority key identifier: 02:BE:B3:E6:21:FA:BA:63:42:1E:D3:F8:84:FA:27:0B:CD:33:1D:77 Certificate issuer: /CN=A91C0E5D/serialNumber=02BEB3E621FABA63421ED3F884FA270BCD331D77 Certificate serial: 063E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft Manifest number: 0635 Signing time: Sat 10 May 2025 22:17:45 +0000 Manifest this update: Sat 10 May 2025 22:17:44 +0000 Manifest next update: Sat 17 May 2025 22:17:44 +0000 Files and hashes: 1: Ar6z5iH6umNCHtP4hPonC80zHXc.crl (hash: ANmRcepECs8DIeItt8EPXEvft+9ngjUB2FMZoNgwA2c=) 2: C34EB9A6C28311EB9370913FC4F9AE02.roa (hash: KhQ2m3GyJCUcdrixe5p4++jj5LNUmAcZqQ2RRuKTkdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.crl rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1598 (0x63e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E5D, serialNumber=02BEB3E621FABA63421ED3F884FA270BCD331D77 Validity Not Before: May 10 22:17:44 2025 GMT Not After : May 17 22:17:44 2025 GMT Subject: CN=681fd089-f1ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:a4:bc:13:a9:06:4d:20:0e:f6:af:89:be: ec:38:c2:fb:f7:68:ff:3d:71:24:c0:98:e3:cd:53: fe:7e:49:07:f0:7b:91:70:f3:1e:ff:c4:05:c0:80: 1b:45:03:75:e9:79:99:58:96:00:ff:0b:08:7c:56: d7:c8:b6:09:27:d6:b9:48:33:1f:ca:42:23:aa:f4: 2d:01:35:e6:85:17:bf:a3:57:e6:4f:e8:87:ea:53: fb:1a:7c:d2:13:d5:23:f9:84:9d:9e:d3:c3:57:26: fd:69:82:a1:87:d0:c1:b1:7d:cb:22:45:98:05:0b: 77:f5:2a:d3:bf:35:30:fa:3c:d3:88:68:f6:26:e6: 93:c1:09:12:2d:29:eb:14:ff:97:53:75:24:41:37: 31:71:68:59:bb:2f:a0:33:b3:d1:b5:a3:44:9d:68: 2d:48:d9:20:7d:9c:b5:ad:01:25:cb:5b:c4:7f:28: 7a:df:1c:f0:b8:0e:be:ba:51:90:b3:e6:f8:26:22: d5:ad:cd:ca:28:ef:93:3f:2f:91:85:94:cd:a4:d3: 45:81:a4:7b:55:cd:90:e1:2c:b6:d8:a0:b0:7c:4b: 2a:83:be:d8:d1:89:81:01:ff:59:8e:60:8e:b8:62: b8:42:31:b9:61:87:39:35:49:53:0a:be:aa:08:08: c5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E0:0F:AB:5C:84:FA:6A:FD:61:9D:59:B6:0F:E4:D0:76:21:51:D0 X509v3 Authority Key Identifier: keyid:02:BE:B3:E6:21:FA:BA:63:42:1E:D3:F8:84:FA:27:0B:CD:33:1D:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:2d:9b:89:17:1d:c3:db:e6:2c:52:1f:59:57:5f:b5:51:40: ab:57:b7:d7:d1:c7:d2:0d:c3:da:eb:0f:b5:bd:d3:8f:e0:7a: f2:f8:36:d2:f7:b7:e4:c8:37:e3:2f:15:b6:c9:a7:35:44:57: 4a:c5:a9:a2:73:71:fd:e7:d3:19:e2:17:48:23:90:6d:e2:34: 04:8c:f6:36:a6:36:4a:18:86:75:c3:36:36:2a:1c:46:58:24: 18:33:aa:2c:05:88:dd:c2:63:ef:67:ac:a7:c6:83:7c:cc:a5: 4b:b0:ed:7f:29:06:fa:91:1c:89:09:36:a0:11:0b:aa:24:97: 47:ee:1e:2a:61:74:da:00:62:8a:35:28:8e:1d:3e:d7:38:62: 29:0b:1c:c7:27:dc:11:15:c3:67:4b:69:67:d4:88:c4:b2:bd: 84:f6:ba:cb:50:7e:23:7e:fc:df:3a:cf:cc:77:4f:8f:92:c7: 11:92:08:6f:4c:5d:79:cd:50:e7:2b:90:bd:c3:bd:0b:aa:f1: 58:e6:9b:a3:8a:66:25:34:1e:10:0e:eb:ec:50:89:e3:7d:b6: 62:48:c4:4d:67:6d:9a:dd:0b:50:24:f5:a6:64:c4:f1:85:00: b8:bf:8f:c2:88:ae:99:01:7e:f1:da:a9:4a:a5:4f:a9:c1:49: 2e:00:28:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNUQxMTAvBgNVBAUTKDAyQkVCM0U2MjFGQUJBNjM0MjFFRDNGODg0RkEyNzBC Q0QzMzFENzcwHhcNMjUwNTEwMjIxNzQ0WhcNMjUwNTE3MjIxNzQ0WjAYMRYwFAYD VQQDEw02ODFmZDA4OS1mMWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOGkvBOpBk0gDvavib7sOML792j/PXEkwJjjzVP+fkkH8HuRcPMe/8QFwIAb RQN16XmZWJYA/wsIfFbXyLYJJ9a5SDMfykIjqvQtATXmhRe/o1fmT+iH6lP7GnzS E9Uj+YSdntPDVyb9aYKhh9DBsX3LIkWYBQt39SrTvzUw+jzTiGj2JuaTwQkSLSnr FP+XU3UkQTcxcWhZuy+gM7PRtaNEnWgtSNkgfZy1rQEly1vEfyh63xzwuA6+ulGQ s+b4JiLVrc3KKO+TPy+RhZTNpNNFgaR7Vc2Q4Sy22KCwfEsqg77Y0YmBAf9ZjmCO uGK4QjG5YYc5NUlTCr6qCAjFvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrgD6tc hPpq/WGdWbYP5NB2IVHQMB8GA1UdIwQYMBaAFAK+s+Yh+rpjQh7T+IT6JwvNMx13 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU1RC8wRDBGRkJEQzkx RDcxMUVCODZGQTM0MjZDNEY5QUUwMi9BcjZ6NWlINnVtTkNIdFA0aFBvbkM4MHpI WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FyNno1aUg2dW1OQ0h0UDRoUG9uQzgwekhYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU1RC8wRDBGRkJEQzkxRDcxMUVCODZGQTM0MjZDNEY5QUUwMi9BcjZ6NWlINnVt TkNIdFA0aFBvbkM4MHpIWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlLZuJFx3D2+YsUh9ZV1+1UUCrV7fX0cfSDcPa6w+1vdOP4Hry+DbS 97fkyDfjLxW2yac1RFdKxamic3H959MZ4hdII5Bt4jQEjPY2pjZKGIZ1wzY2KhxG WCQYM6osBYjdwmPvZ6ynxoN8zKVLsO1/KQb6kRyJCTagEQuqJJdH7h4qYXTaAGKK NSiOHT7XOGIpCxzHJ9wRFcNnS2ln1IjEsr2E9rrLUH4jfvzfOs/Md0+PkscRkghv TF15zVDnK5C9w70LqvFY5pujimYlNB4QDuvsUInjfbZiSMRNZ22a3QtQJPWmZMTx hQC4v4/CiK6ZAX7x2qlKpU+pwUkuAChx -----END CERTIFICATE-----Generated at Sun May 11 09:10:07 2025 by rpki-client