$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft File: ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft (raw, json) Hash identifier: c9uD5kgf63Bqgk2OqmE3A0+qyCf8xIlAqZXrWNHNWhg= Subject key identifier: ED:4C:9D:D3:3B:E2:96:CE:B5:CD:1B:8F:4E:F5:BE:47:77:08:FE:8A Authority key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 Certificate issuer: /CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332 Certificate serial: 06BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft Manifest number: 06B6 Signing time: Sat 18 Oct 2025 23:39:50 +0000 Manifest this update: Sat 18 Oct 2025 23:39:50 +0000 Manifest next update: Sat 25 Oct 2025 23:39:50 +0000 Files and hashes: 1: ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl (hash: sRI1wa1TdNFAJFVaBmJACCgIKIXqs8x2oNeGSjQTLvU=) 2: 1B25BF167FE111EBB6C0941AC4F9AE02.roa (hash: 2hOid2u5TsPs2BD6knP6FFumSUPv3Pl24PKpE2g7tdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1727 (0x6bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E45, serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332 Validity Not Before: Oct 18 23:39:50 2025 GMT Not After : Oct 25 23:39:50 2025 GMT Subject: CN=68f42546-9914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:db:62:f6:08:e4:e7:0e:ac:10:b2:52:00:21: 0a:e9:f7:d3:d4:bc:25:15:96:f3:cc:97:c2:e9:ee: 2c:73:cc:35:69:0f:79:be:4c:a5:61:59:43:33:fe: e1:34:08:4d:be:3d:b5:5e:aa:cb:de:86:e4:cc:5f: a3:2a:8a:1d:9d:d5:f7:86:5c:2f:d5:71:28:ac:5e: ca:6b:83:82:00:07:a1:e0:ea:72:8d:f0:f9:a9:43: c8:08:e9:0b:2b:a5:25:cf:d2:ed:24:0e:6d:cf:ae: a6:45:30:2a:3d:43:28:59:7c:fb:78:60:4c:39:62: 0c:fe:63:58:b6:41:1a:24:a9:c7:f0:65:f4:9f:03: 4b:e2:27:eb:6b:54:6a:27:e5:26:d9:ba:59:cf:08: de:56:4d:0a:81:a8:d9:93:05:0c:8c:55:c3:0f:ed: 14:c4:a0:58:2a:ba:19:56:62:9e:da:5a:4b:0f:42: 32:31:96:5f:8c:1e:f1:1c:09:2c:12:77:ff:93:97: f1:34:9c:2d:d1:81:a4:66:4a:05:ff:c3:ee:d0:39: af:3b:cb:e4:26:c9:8c:bc:ad:18:57:a9:51:e9:bd: 85:44:9e:35:c1:82:89:cd:cc:e3:43:3a:96:09:cb: cb:30:97:ae:19:2e:e9:21:30:42:08:08:29:12:8e: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4C:9D:D3:3B:E2:96:CE:B5:CD:1B:8F:4E:F5:BE:47:77:08:FE:8A X509v3 Authority Key Identifier: keyid:6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:5c:24:7e:2a:e9:2f:16:6f:b3:45:2f:b8:6b:74:08:31:08: 82:f2:a4:b9:32:c2:9a:c1:b8:0d:b7:4d:8d:1f:65:f7:04:eb: 28:9e:03:6a:d4:bd:c7:4b:e2:59:cc:9d:26:9e:33:c0:1a:f2: 4f:3a:17:55:95:45:31:e2:63:ac:59:e1:1e:07:2b:24:bf:4a: 18:fc:e2:81:8e:3e:46:52:1a:cc:7f:ff:7a:4d:19:5f:85:ed: 81:f8:9a:bc:c0:99:c5:05:ae:75:dd:84:02:d7:e0:3d:65:4d: b2:71:4c:20:be:20:e5:f1:37:da:18:c6:bf:f9:a1:ce:1c:91: eb:70:69:8d:0b:89:61:3b:5d:6f:08:c4:00:06:71:fb:e9:d0: 0d:21:bd:90:36:5f:f1:ac:4c:fa:98:68:e4:f8:20:29:10:c6: d9:1f:b2:c6:2b:fc:90:c0:7c:95:44:d0:ff:49:50:ce:83:1e: 37:20:e3:23:d9:83:02:bc:ec:ac:95:ac:df:a1:e5:fa:1f:c5: d4:b7:12:bd:8c:f3:ab:f9:3b:b0:b6:dd:2b:b1:bc:ae:01:75: da:48:73:c4:12:94:24:3e:0e:eb:aa:99:0f:fa:4f:98:04:bb: da:35:81:7b:85:6a:29:bd:b0:5b:e1:22:88:a4:f0:9a:f4:21: 9f:63:f2:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFNDUxMTAvBgNVBAUTKDZBQkZFRkM4MzQxOTExNkVGMzRBRjNBNUE3RkY0OERF MDNCRTgzMzIwHhcNMjUxMDE4MjMzOTUwWhcNMjUxMDI1MjMzOTUwWjAYMRYwFAYD VQQDEw02OGY0MjU0Ni05OTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNti9gjk5w6sELJSACEK6ffT1LwlFZbzzJfC6e4sc8w1aQ95vkylYVlDM/7h NAhNvj21XqrL3obkzF+jKoodndX3hlwv1XEorF7Ka4OCAAeh4OpyjfD5qUPICOkL K6Ulz9LtJA5tz66mRTAqPUMoWXz7eGBMOWIM/mNYtkEaJKnH8GX0nwNL4ifra1Rq J+Um2bpZzwjeVk0KgajZkwUMjFXDD+0UxKBYKroZVmKe2lpLD0IyMZZfjB7xHAks Enf/k5fxNJwt0YGkZkoF/8Pu0DmvO8vkJsmMvK0YV6lR6b2FRJ41wYKJzczjQzqW CcvLMJeuGS7pITBCCAgpEo5NKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1MndM7 4pbOtc0bj071vkd3CP6KMB8GA1UdIwQYMBaAFGq/78g0GRFu80rzpaf/SN4DvoMy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEU0NS9GOEYxQzE5NDdG REUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVXN3pTdk9scF85STNnTy1n ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FyX3Z5RFFaRVc3elN2T2xwXzlJM2dPLWd6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEU0NS9GOEYxQzE5NDdGREUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVX N3pTdk9scF85STNnTy1nekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiXCR+KukvFm+zRS+4a3QIMQiC8qS5MsKawbgNt02NH2X3BOsongNq 1L3HS+JZzJ0mnjPAGvJPOhdVlUUx4mOsWeEeByskv0oY/OKBjj5GUhrMf/96TRlf he2B+Jq8wJnFBa513YQC1+A9ZU2ycUwgviDl8TfaGMa/+aHOHJHrcGmNC4lhO11v CMQABnH76dANIb2QNl/xrEz6mGjk+CApEMbZH7LGK/yQwHyVRND/SVDOgx43IOMj 2YMCvOyslazfoeX6H8XUtxK9jPOr+Tuwtt0rsbyuAXXaSHPEEpQkPg7rqpkP+k+Y BLvaNYF7hWopvbBb4SKIpPCa9CGfY/KO -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:49 2025 by rpki-client