$ rpki-client -vvf rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft File: arqG0wSq9k60oJeym6VXeGDMhW8.mft (raw, json) Hash identifier: /3IP3ATqxFBoT85a5ey6cr9ARSZQ+HTWaxDnpdrO/UQ= Subject key identifier: F2:3A:0A:9B:E4:D5:2A:6E:34:00:99:92:29:6B:69:CD:22:C1:90:D3 Authority key identifier: 6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F Certificate issuer: /CN=A915290D/serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft Manifest number: E4 Signing time: Fri 25 Apr 2025 04:34:56 +0000 Manifest this update: Fri 25 Apr 2025 04:34:56 +0000 Manifest next update: Fri 02 May 2025 04:34:56 +0000 Files and hashes: 1: arqG0wSq9k60oJeym6VXeGDMhW8.crl (hash: MT8bvk3nKRvjZKDvqO3bfLxxrqykWQUwv800ZHTtGeM=) 2: FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa (hash: +1q/DCNFePTtlbMuRD5iV784JkZFCUJE5p4dFu9JRz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915290D, serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F Validity Not Before: Apr 25 04:34:56 2025 GMT Not After : May 2 04:34:56 2025 GMT Subject: CN=680b10f0-683d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:30:24:63:c2:5a:7f:cd:73:17:ee:4b:18:97: fb:3b:9c:16:2b:3d:4e:b2:50:a6:2f:f3:57:2e:19: 7d:ac:63:8a:47:5f:39:0f:41:1f:12:64:cf:a0:b3: ed:5e:2a:40:91:b0:78:ae:8c:cc:26:34:a8:77:a6: 16:69:c5:65:9b:61:1a:53:0d:59:cb:b4:82:08:8c: 62:bb:a3:7c:45:c3:1d:86:ba:57:a5:c9:35:9e:76: 4a:9a:21:5d:83:09:ff:a2:8f:7d:2a:43:04:4a:26: 7b:64:b0:b1:79:74:bc:bb:d7:f9:58:14:19:2c:ff: 17:0a:32:2b:fe:ee:e8:68:c9:52:8c:3d:89:d0:bf: 83:ea:dc:a4:34:cc:2c:64:9b:ec:52:37:f9:0a:3b: 10:7c:30:5b:ea:3a:c5:36:4c:94:ae:6e:e0:ac:41: ce:52:9c:de:0f:00:98:ff:d1:a0:d3:b8:fe:05:a0: bf:1b:15:58:93:e8:db:f3:78:2d:43:de:9f:5e:3c: 4f:2e:8b:c6:f8:f2:d9:06:20:2c:e0:76:7e:67:03: 00:87:3e:08:f7:04:7d:54:ec:ed:3a:11:1d:8b:4e: b8:ac:d8:80:bb:40:1a:5f:86:dc:8b:72:66:37:26: fd:8d:56:c0:b1:bc:9a:08:bb:59:38:d5:39:c2:ae: 07:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3A:0A:9B:E4:D5:2A:6E:34:00:99:92:29:6B:69:CD:22:C1:90:D3 X509v3 Authority Key Identifier: keyid:6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:e4:09:e2:a7:da:47:5c:28:85:5f:aa:06:9d:83:0b:39:ef: 42:4e:08:d8:cd:83:aa:41:38:37:45:03:dd:71:e5:b6:f7:53: 5a:52:c9:6c:c2:af:79:08:16:00:b4:55:14:15:25:70:59:58: 37:c6:60:4f:11:4b:02:41:95:cc:2e:bf:6c:5c:fd:2e:ba:a8: 72:85:20:07:75:b8:e1:7e:fe:f0:e4:a0:37:33:68:c7:a3:fb: 46:b0:cb:53:62:25:f0:4f:56:47:4c:96:f2:bc:58:02:ac:a4: 28:ce:45:c5:05:3d:60:6d:ec:7c:1d:29:4b:9f:62:c1:21:5d: f5:71:60:95:b0:33:ce:72:ff:e9:de:db:f9:b6:d4:8a:ad:c8: 52:2b:0e:ee:68:c1:75:b4:d0:41:ad:a2:60:c7:55:07:8e:5d: 57:30:a4:99:7c:7e:94:30:6f:ce:b2:c3:68:0c:9e:e9:0f:eb: d9:dd:e1:cd:51:46:14:70:8d:5f:60:e6:42:9b:14:74:d2:ba: 70:94:e1:b5:89:45:b3:1b:51:50:a5:30:a4:ce:7b:81:25:a5: 17:be:16:9d:08:b6:2c:17:ca:6d:db:95:2c:c2:7a:9d:18:69: 64:36:fb:66:65:9d:0e:14:94:bd:1a:78:cf:fc:0f:89:21:b2: a6:e8:96:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI5MEQxMTAvBgNVBAUTKDZBQkE4NkQzMDRBQUY2NEVCNEEwOTdCMjlCQTU1Nzc4 NjBDQzg1NkYwHhcNMjUwNDI1MDQzNDU2WhcNMjUwNTAyMDQzNDU2WjAYMRYwFAYD VQQDEw02ODBiMTBmMC02ODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzAkY8Jaf81zF+5LGJf7O5wWKz1OslCmL/NXLhl9rGOKR185D0EfEmTPoLPt XipAkbB4rozMJjSod6YWacVlm2EaUw1Zy7SCCIxiu6N8RcMdhrpXpck1nnZKmiFd gwn/oo99KkMESiZ7ZLCxeXS8u9f5WBQZLP8XCjIr/u7oaMlSjD2J0L+D6tykNMws ZJvsUjf5CjsQfDBb6jrFNkyUrm7grEHOUpzeDwCY/9Gg07j+BaC/GxVYk+jb83gt Q96fXjxPLovG+PLZBiAs4HZ+ZwMAhz4I9wR9VOztOhEdi064rNiAu0AaX4bci3Jm Nyb9jVbAsbyaCLtZONU5wq4HkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPI6Cpvk 1SpuNACZkilrac0iwZDTMB8GA1UdIwQYMBaAFGq6htMEqvZOtKCXspulV3hgzIVv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjkwRC9BNjg0OUFDOEQw MjkxMUVFOUU2Q0JBNDBDNEY5QUUwMi9hcnFHMHdTcTlrNjBvSmV5bTZWWGVHRE1o VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FycUcwd1NxOWs2MG9KZXltNlZYZUdETWhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjkwRC9BNjg0OUFDOEQwMjkxMUVFOUU2Q0JBNDBDNEY5QUUwMi9hcnFHMHdTcTlr NjBvSmV5bTZWWGVHRE1oVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC15Anip9pHXCiFX6oGnYMLOe9CTgjYzYOqQTg3RQPdceW291NaUsls wq95CBYAtFUUFSVwWVg3xmBPEUsCQZXMLr9sXP0uuqhyhSAHdbjhfv7w5KA3M2jH o/tGsMtTYiXwT1ZHTJbyvFgCrKQozkXFBT1gbex8HSlLn2LBIV31cWCVsDPOcv/p 3tv5ttSKrchSKw7uaMF1tNBBraJgx1UHjl1XMKSZfH6UMG/OssNoDJ7pD+vZ3eHN UUYUcI1fYOZCmxR00rpwlOG1iUWzG1FQpTCkznuBJaUXvhadCLYsF8pt25Uswnqd GGlkNvtmZZ0OFJS9GnjP/A+JIbKm6JYS -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:49 2025 by rpki-client