$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft File: AruX_YsfYg4CoeLK21nWVvAa2kU.mft (raw, json) Hash identifier: +JX/tdKFY3cOZcOzymoZc1065balNrWpvkyzpgnVmI0= Subject key identifier: 78:72:3C:9E:48:48:38:25:AC:29:79:F2:6E:96:69:07:6E:C2:B3:10 Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45 Certificate issuer: /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45 Certificate serial: 030D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft Manifest number: 0302 Signing time: Fri 25 Apr 2025 01:00:22 +0000 Manifest this update: Fri 25 Apr 2025 01:00:22 +0000 Manifest next update: Fri 02 May 2025 01:00:22 +0000 Files and hashes: 1: AruX_YsfYg4CoeLK21nWVvAa2kU.crl (hash: gvxKKzW9iDFPB+hTMs5XkjVfELTyBvUA7sTvkMfzDG0=) 2: E100C846D0D211EC92E5014CC4F9AE02.roa (hash: 1/Pe3M/1G4UPq/rk/to0ivJs3udNjtiSMOYgKnEzG+4=) 3: 2DED8B66D02011ECB021972BC4F9AE02.roa (hash: X1fS93fErO++gD03CgWQlQr9RcZXTdWLfGnx0iqRdE4=) 4: 2D478AFED02011ECB021972BC4F9AE02.roa (hash: KiWMfnaqo/tfw5gCcea55F0jBNiA0r/0TcX17r/8cvk=) 5: 8FCF722626C911EE9F1A0917C4F9AE02.roa (hash: qejGSJs6cPmwpEoFNORTx2hIhyRLer5JBQ2gW4em5wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 781 (0x30d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE108, serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45 Validity Not Before: Apr 25 01:00:22 2025 GMT Not After : May 2 01:00:22 2025 GMT Subject: CN=680adea6-2568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:89:35:e8:cd:07:79:42:5e:b3:8e:78:ed: 47:24:89:5c:9a:ac:75:c4:4d:d7:15:24:26:91:2d: 40:d8:af:c1:f1:d2:da:b2:6c:05:6c:51:06:a5:36: 4b:b5:f8:3a:ec:ed:4a:a4:90:e6:49:92:35:b8:d3: 24:1b:3b:07:d1:4b:5b:31:3b:be:27:02:51:a1:78: 70:34:97:10:af:36:ce:47:da:d6:7c:49:21:0c:3c: b0:84:f4:1d:14:90:57:91:a5:44:1a:5b:16:1b:7f: 53:5d:f4:8a:4e:83:1b:31:95:c5:98:7a:16:45:b3: 50:ae:98:81:7b:fd:e8:17:c3:54:4f:15:eb:4e:65: 63:eb:ed:29:46:23:7a:ef:5f:00:ca:e4:97:b6:d2: 73:85:65:0e:f5:bf:ff:2b:a5:f6:61:a8:1e:29:82: 6b:86:4b:89:94:f8:bf:95:c1:91:dc:81:1f:df:dc: 71:da:03:5c:10:02:08:ce:29:8c:92:5f:e4:c8:7b: 00:97:d4:6b:7c:55:4e:ad:aa:55:9e:cf:8d:da:31: 15:b5:9e:6a:c3:f9:26:69:50:90:55:fc:af:29:4a: a3:2a:66:4a:6c:b8:2f:f7:f4:89:c3:70:06:72:f5: d0:58:b6:78:7f:50:5b:f1:82:eb:87:af:73:73:ff: 0a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:72:3C:9E:48:48:38:25:AC:29:79:F2:6E:96:69:07:6E:C2:B3:10 X509v3 Authority Key Identifier: keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:16:71:bc:b1:38:2d:d0:5b:f8:c9:b1:07:27:f2:23:03:05: eb:46:e8:3c:f1:67:7f:a6:43:b3:46:af:ad:21:59:91:e2:a2: fe:bf:73:af:f5:55:68:70:4a:d5:5e:26:8d:ca:d8:9d:ed:44: c3:8e:0b:64:d2:42:81:fc:01:9c:f2:e9:06:ef:96:a1:07:49: 0c:f8:08:85:a7:c7:9d:d1:58:20:58:35:43:b1:95:1c:91:eb: e4:1f:3b:5d:9b:86:75:89:03:e4:23:51:67:d2:ac:99:42:86: 18:20:30:fe:b1:f7:44:2c:e2:14:c7:07:ac:1e:73:a5:14:04: cd:b3:af:83:09:4f:93:7e:66:43:5c:8c:4a:f8:12:9c:d3:64: bd:9d:ac:38:cc:e3:51:97:7a:e1:af:01:85:d3:b8:9f:0b:42: 20:28:73:f9:60:5d:ac:c3:04:58:fd:79:17:d9:a7:4e:1a:7d: ff:76:a5:a5:17:b2:16:76:55:2d:0a:43:d1:cb:41:d9:b9:96: 37:d6:bc:b4:f6:b7:96:42:6e:b2:a2:2a:89:3e:fd:05:99:83: 95:1f:62:6f:11:6f:5b:72:81:c8:e5:c5:22:74:b5:64:17:b5: 70:44:6b:ad:90:41:3b:cd:38:fd:8f:65:a3:47:0f:ee:37:a9: b1:7c:03:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUxMDgxMTAvBgNVBAUTKDAyQkI5N0ZEOEIxRjYyMEUwMkExRTJDQURCNTlENjU2 RjAxQURBNDUwHhcNMjUwNDI1MDEwMDIyWhcNMjUwNTAyMDEwMDIyWjAYMRYwFAYD VQQDEw02ODBhZGVhNi0yNTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gCJNejNB3lCXrOOeO1HJIlcmqx1xE3XFSQmkS1A2K/B8dLasmwFbFEGpTZL tfg67O1KpJDmSZI1uNMkGzsH0UtbMTu+JwJRoXhwNJcQrzbOR9rWfEkhDDywhPQd FJBXkaVEGlsWG39TXfSKToMbMZXFmHoWRbNQrpiBe/3oF8NUTxXrTmVj6+0pRiN6 718AyuSXttJzhWUO9b//K6X2YageKYJrhkuJlPi/lcGR3IEf39xx2gNcEAIIzimM kl/kyHsAl9RrfFVOrapVns+N2jEVtZ5qw/kmaVCQVfyvKUqjKmZKbLgv9/SJw3AG cvXQWLZ4f1Bb8YLrh69zc/8KbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhyPJ5I SDglrCl58m6WaQduwrMQMB8GA1UdIwQYMBaAFAK7l/2LH2IOAqHiyttZ1lbwGtpF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTEwOC9FM0IwNDZDQ0Qw MUMxMUVDQjM1NEFGMjRDNEY5QUUwMi9BcnVYX1lzZllnNENvZUxLMjFuV1Z2QWEy a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FydVhfWXNmWWc0Q29lTEsyMW5XVnZBYTJrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTEwOC9FM0IwNDZDQ0QwMUMxMUVDQjM1NEFGMjRDNEY5QUUwMi9BcnVYX1lzZlln NENvZUxLMjFuV1Z2QWEya1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzFnG8sTgt0Fv4ybEHJ/IjAwXrRug88Wd/pkOzRq+tIVmR4qL+v3Ov 9VVocErVXiaNytid7UTDjgtk0kKB/AGc8ukG75ahB0kM+AiFp8ed0VggWDVDsZUc kevkHztdm4Z1iQPkI1Fn0qyZQoYYIDD+sfdELOIUxwesHnOlFATNs6+DCU+TfmZD XIxK+BKc02S9naw4zONRl3rhrwGF07ifC0IgKHP5YF2swwRY/XkX2adOGn3/dqWl F7IWdlUtCkPRy0HZuZY31ry09reWQm6yoiqJPv0FmYOVH2JvEW9bcoHI5cUidLVk F7VwRGutkEE7zTj9j2WjRw/uN6mxfANl -----END CERTIFICATE-----Generated at Sat Apr 26 15:19:53 2025 by rpki-client