$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft File: Ar6z5iH6umNCHtP4hPonC80zHXc.mft (raw, json) Hash identifier: h5tPz3lCsG2zCTkJeg37ecBun7yx+WgBUBsswEZEADA= Subject key identifier: E8:3E:29:26:3B:8C:35:E5:30:CE:AD:AD:DF:75:CB:4C:9C:AC:F1:E2 Authority key identifier: 02:BE:B3:E6:21:FA:BA:63:42:1E:D3:F8:84:FA:27:0B:CD:33:1D:77 Certificate issuer: /CN=A91C0E5D/serialNumber=02BEB3E621FABA63421ED3F884FA270BCD331D77 Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft Manifest number: 066B Signing time: Fri 22 Aug 2025 22:41:39 +0000 Manifest this update: Fri 22 Aug 2025 22:41:38 +0000 Manifest next update: Fri 29 Aug 2025 22:41:38 +0000 Files and hashes: 1: Ar6z5iH6umNCHtP4hPonC80zHXc.crl (hash: aadO/uV3DzuClU2gsGNjdZ797v+tSY6aoULBmQbE+GE=) 2: C34EB9A6C28311EB9370913FC4F9AE02.roa (hash: Al61RmIvimM1KwvJGrf39fcF1DIlgNVctNk1tZ67VR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.crl rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E5D, serialNumber=02BEB3E621FABA63421ED3F884FA270BCD331D77 Validity Not Before: Aug 22 22:41:38 2025 GMT Not After : Aug 29 22:41:38 2025 GMT Subject: CN=68a8f223-a649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:9f:52:87:98:61:8c:b5:2e:39:47:7a:eb: bb:b3:ab:99:b3:47:5f:77:99:20:63:f2:7b:7e:e7: 50:a1:94:50:a5:5e:60:ec:84:b6:65:c7:62:9d:87: 53:34:b4:aa:02:ce:a5:bd:ac:bc:05:f4:1c:38:b4: f5:67:42:69:e8:0b:78:00:5c:79:1c:50:67:ce:84: f4:91:87:e9:7e:c2:e0:7c:c6:64:a2:1b:c7:47:74: 95:6f:62:cb:5e:1c:58:4a:31:10:e9:30:f8:f2:fe: 19:c9:3e:db:28:9d:e9:e5:dc:a3:1a:47:97:c1:bf: 02:6e:cf:66:65:a3:bc:1e:11:d4:85:51:20:95:be: 4f:7e:60:81:3a:c9:ee:08:a0:02:21:1e:f6:66:ab: 07:d9:6d:cb:fe:c4:26:99:45:13:cd:6e:ae:1c:ad: f4:83:bb:bb:33:7a:3f:4e:d3:8a:7a:87:ba:01:0e: 74:e4:b3:eb:63:39:87:1f:e2:b8:27:76:3d:75:e2: 5f:8e:6a:3c:9b:56:36:5b:aa:0d:50:28:e4:db:bc: 54:ef:78:80:0c:a7:a1:a4:3c:e1:92:41:7d:00:82: e5:09:0c:05:78:fa:df:f5:f9:e4:03:02:50:7f:60: ba:8c:65:59:68:4b:e4:c9:5f:a8:ba:27:da:f8:d8: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3E:29:26:3B:8C:35:E5:30:CE:AD:AD:DF:75:CB:4C:9C:AC:F1:E2 X509v3 Authority Key Identifier: keyid:02:BE:B3:E6:21:FA:BA:63:42:1E:D3:F8:84:FA:27:0B:CD:33:1D:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:69:b1:a1:6f:e2:00:df:cc:d5:9f:12:47:f7:1d:fc:c4:f1: 8b:b2:fb:a0:28:97:90:8c:1c:88:4b:6a:3f:43:14:1e:45:af: 36:f3:6d:04:a6:09:d8:8c:70:6a:6a:dd:ba:1d:ae:ed:30:71: eb:27:92:cc:c8:dc:1f:8e:c2:d6:df:4d:d1:0b:f8:a1:a2:dd: be:19:91:01:28:3a:16:a1:e3:b5:a8:40:b1:53:bd:73:3d:78: f2:20:c9:71:28:09:71:52:82:f4:c5:da:e3:bb:83:7f:ca:7c: d6:0b:72:b3:53:a6:5b:a1:c0:30:64:c9:6c:d0:02:88:f9:bd: dc:f2:d1:ee:08:67:5d:0f:e7:43:85:3c:73:d1:8d:7c:88:8f: 88:9b:9a:7c:17:0a:6c:1b:f8:a7:44:7a:f0:50:b5:95:a7:fa: 39:de:bf:53:0b:2e:bf:4b:e7:f2:43:ba:35:7f:df:b4:ce:c7: 4c:3a:91:7e:84:5b:58:85:f1:50:78:28:1f:41:54:7c:a1:42: 07:f2:02:8d:8d:84:d1:7f:41:97:2c:45:bd:76:a7:98:67:b3: 8a:3f:f9:b9:d4:f3:25:cc:d2:b5:5b:39:23:7f:95:a9:ba:bd: 26:e9:50:c0:c8:42:a0:29:af:81:62:33:ef:9d:48:ec:70:5e: 9d:35:21:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNUQxMTAvBgNVBAUTKDAyQkVCM0U2MjFGQUJBNjM0MjFFRDNGODg0RkEyNzBC Q0QzMzFENzcwHhcNMjUwODIyMjI0MTM4WhcNMjUwODI5MjI0MTM4WjAYMRYwFAYD VQQDEw02OGE4ZjIyMy1hNjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvyfUoeYYYy1LjlHeuu7s6uZs0dfd5kgY/J7fudQoZRQpV5g7IS2ZcdinYdT NLSqAs6lvay8BfQcOLT1Z0Jp6At4AFx5HFBnzoT0kYfpfsLgfMZkohvHR3SVb2LL XhxYSjEQ6TD48v4ZyT7bKJ3p5dyjGkeXwb8Cbs9mZaO8HhHUhVEglb5PfmCBOsnu CKACIR72ZqsH2W3L/sQmmUUTzW6uHK30g7u7M3o/TtOKeoe6AQ505LPrYzmHH+K4 J3Y9deJfjmo8m1Y2W6oNUCjk27xU73iADKehpDzhkkF9AILlCQwFePrf9fnkAwJQ f2C6jGVZaEvkyV+ouifa+NjX+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOg+KSY7 jDXlMM6trd91y0ycrPHiMB8GA1UdIwQYMBaAFAK+s+Yh+rpjQh7T+IT6JwvNMx13 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU1RC8wRDBGRkJEQzkx RDcxMUVCODZGQTM0MjZDNEY5QUUwMi9BcjZ6NWlINnVtTkNIdFA0aFBvbkM4MHpI WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FyNno1aUg2dW1OQ0h0UDRoUG9uQzgwekhYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU1RC8wRDBGRkJEQzkxRDcxMUVCODZGQTM0MjZDNEY5QUUwMi9BcjZ6NWlINnVt TkNIdFA0aFBvbkM4MHpIWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKabGhb+IA38zVnxJH9x38xPGLsvugKJeQjByIS2o/QxQeRa82820E pgnYjHBqat26Ha7tMHHrJ5LMyNwfjsLW303RC/ihot2+GZEBKDoWoeO1qECxU71z PXjyIMlxKAlxUoL0xdrju4N/ynzWC3KzU6ZbocAwZMls0AKI+b3c8tHuCGddD+dD hTxz0Y18iI+Im5p8FwpsG/inRHrwULWVp/o53r9TCy6/S+fyQ7o1f9+0zsdMOpF+ hFtYhfFQeCgfQVR8oUIH8gKNjYTRf0GXLEW9dqeYZ7OKP/m51PMlzNK1Wzkjf5Wp ur0m6VDAyEKgKa+BYjPvnUjscF6dNSFN -----END CERTIFICATE-----Generated at Sat Aug 23 14:22:33 2025 by rpki-client