$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft File: ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft (raw, json) Hash identifier: q676lnj+RbGv4BK6+xp52QkTtRs5hiDln8RLkdfHKXQ= Subject key identifier: CA:C5:AF:0D:0C:FE:4A:F2:4A:2C:D4:9E:DE:AA:12:04:51:62:00:1B Authority key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 Certificate issuer: /CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332 Certificate serial: 0685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft Manifest number: 067D Signing time: Wed 02 Jul 2025 22:38:50 +0000 Manifest this update: Wed 02 Jul 2025 22:38:50 +0000 Manifest next update: Wed 09 Jul 2025 22:38:50 +0000 Files and hashes: 1: ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl (hash: gG72C5Mo8gu4LFA53f9AU+2p840IEjZ1nnuDk4oY3xI=) 2: 1B25BF167FE111EBB6C0941AC4F9AE02.roa (hash: UCps9/WJGo9HkezcUcRKvCp07t2PRwHy6+kCIMyeCTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E45, serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332 Validity Not Before: Jul 2 22:38:50 2025 GMT Not After : Jul 9 22:38:50 2025 GMT Subject: CN=6865b4fa-11a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:66:9b:0f:f7:c2:01:bd:93:72:43:b6:61:4a: 60:cc:f2:ac:ce:1c:07:92:99:57:6c:26:c1:6e:41: c9:99:ac:98:88:ed:62:ae:bd:b0:6e:1e:d2:99:05: 1e:d0:58:e0:16:1c:e0:dc:01:0e:97:94:b9:b9:dc: e8:2e:3d:72:42:39:dc:69:3a:88:9f:2e:db:98:dc: 4c:1d:37:db:3f:c3:4b:09:79:79:ec:f6:6c:4d:32: 52:60:7a:e3:22:c9:58:ab:d3:f2:f1:53:16:3e:d4: 0f:10:91:7d:49:19:ef:ef:9c:2b:61:ff:18:4c:53: 17:a3:34:0d:dc:ce:07:06:6b:29:14:14:e9:ca:1c: 5c:3c:57:4a:fa:b7:4f:41:59:46:2b:62:f6:8b:44: 5e:87:39:16:1b:3a:41:8f:d7:c5:eb:1c:74:44:72: 44:8f:99:de:48:2d:e6:50:4a:43:94:26:f3:e3:3f: 57:d8:39:d0:f4:a5:f0:6a:c3:d7:92:76:33:29:57: 90:45:36:c8:49:6f:4d:2b:b6:cd:8d:42:9b:ae:30: 86:42:1f:71:6f:9b:89:13:8f:97:df:29:5b:93:b6: 5d:71:fc:82:18:96:3b:57:cf:44:98:ef:71:9a:41: bf:54:ce:1f:aa:86:90:d5:52:cc:5f:15:93:53:d4: 07:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C5:AF:0D:0C:FE:4A:F2:4A:2C:D4:9E:DE:AA:12:04:51:62:00:1B X509v3 Authority Key Identifier: keyid:6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:af:c9:f5:1f:c1:75:56:a1:71:5a:99:e3:40:4b:06:cd:24: fb:d8:bd:c2:5d:e5:a0:08:28:3a:85:c2:2f:74:05:c7:ef:07: d2:26:08:77:0c:1b:ed:1f:9f:dd:c6:21:91:3b:63:2d:1d:59: b8:15:16:15:ad:0f:99:a3:39:0c:cb:8a:9e:fd:ea:aa:59:5b: 1a:c1:b3:db:47:6e:08:00:a5:e5:09:c2:56:75:52:ec:53:90: 39:43:93:c8:e1:10:05:25:fa:d2:65:b5:2c:7b:fb:64:f9:98: 3f:64:ef:a8:61:ec:44:6d:e3:3b:69:3f:fa:a4:6d:26:2a:fe: 93:fd:96:e2:ac:64:73:28:22:d8:2d:cd:35:85:a4:7d:a5:70: c3:d5:1e:c9:c6:8d:7a:3f:e7:97:47:cb:f2:56:14:94:a1:d8: fa:59:16:a0:37:8d:4b:ed:14:6f:ed:23:ae:50:87:81:72:88: 81:53:be:c4:80:1b:4f:e8:01:94:07:87:b8:aa:87:20:48:31: 7c:17:11:bd:2c:72:11:95:f6:64:e2:03:a0:fc:0c:0d:47:b2: 27:57:19:54:66:0c:4e:04:a5:4d:af:56:f7:90:67:f2:1c:8e: 8c:5b:d2:ad:0d:99:d0:28:18:58:e5:c4:4e:b2:60:a5:6d:d8: 41:83:c0:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFNDUxMTAvBgNVBAUTKDZBQkZFRkM4MzQxOTExNkVGMzRBRjNBNUE3RkY0OERF MDNCRTgzMzIwHhcNMjUwNzAyMjIzODUwWhcNMjUwNzA5MjIzODUwWjAYMRYwFAYD VQQDEw02ODY1YjRmYS0xMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmabD/fCAb2TckO2YUpgzPKszhwHkplXbCbBbkHJmayYiO1irr2wbh7SmQUe 0FjgFhzg3AEOl5S5udzoLj1yQjncaTqIny7bmNxMHTfbP8NLCXl57PZsTTJSYHrj IslYq9Py8VMWPtQPEJF9SRnv75wrYf8YTFMXozQN3M4HBmspFBTpyhxcPFdK+rdP QVlGK2L2i0RehzkWGzpBj9fF6xx0RHJEj5neSC3mUEpDlCbz4z9X2DnQ9KXwasPX knYzKVeQRTbISW9NK7bNjUKbrjCGQh9xb5uJE4+X3ylbk7ZdcfyCGJY7V89EmO9x mkG/VM4fqoaQ1VLMXxWTU9QHRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrFrw0M /krySizUnt6qEgRRYgAbMB8GA1UdIwQYMBaAFGq/78g0GRFu80rzpaf/SN4DvoMy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEU0NS9GOEYxQzE5NDdG REUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVXN3pTdk9scF85STNnTy1n ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FyX3Z5RFFaRVc3elN2T2xwXzlJM2dPLWd6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEU0NS9GOEYxQzE5NDdGREUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVX N3pTdk9scF85STNnTy1nekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABr8n1H8F1VqFxWpnjQEsGzST72L3CXeWgCCg6hcIvdAXH7wfSJgh3 DBvtH5/dxiGRO2MtHVm4FRYVrQ+ZozkMy4qe/eqqWVsawbPbR24IAKXlCcJWdVLs U5A5Q5PI4RAFJfrSZbUse/tk+Zg/ZO+oYexEbeM7aT/6pG0mKv6T/ZbirGRzKCLY Lc01haR9pXDD1R7Jxo16P+eXR8vyVhSUodj6WRagN41L7RRv7SOuUIeBcoiBU77E gBtP6AGUB4e4qocgSDF8FxG9LHIRlfZk4gOg/AwNR7InVxlUZgxOBKVNr1b3kGfy HI6MW9KtDZnQKBhY5cROsmClbdhBg8CP -----END CERTIFICATE-----Generated at Thu Jul 3 08:49:29 2025 by rpki-client