$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft File: ArpjtYYuJwm5DRa33C61z8ii5oQ.mft (raw, json) Hash identifier: watWPXh4wBmHUioJ6gAMyb0qyXb2EQlObYXngUIxMM8= Subject key identifier: E8:58:3E:E2:8F:92:CB:8B:FB:C5:BD:61:A1:74:C1:FF:12:C2:A2:0A Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 Certificate issuer: /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft Manifest number: 01AA Signing time: Sun 15 Jun 2025 02:35:47 +0000 Manifest this update: Sun 15 Jun 2025 02:35:47 +0000 Manifest next update: Sun 22 Jun 2025 02:35:47 +0000 Files and hashes: 1: ArpjtYYuJwm5DRa33C61z8ii5oQ.crl (hash: tKh61H4QcNIbva3QVAygdsiR9wYtzCtEpEWxk3Vs2s8=) 2: 5192AB7ED47811EEB5A6D21AC4F9AE02.roa (hash: xW/u71nn0KALe/rW4D+40PFnNAvvVtQKyJcvAPM8UVs=) 3: A0A7B5161B6D11EE943DBE1AC4F9AE02.roa (hash: w8AYmwvw5WjiU8t0nTCRTmBhXIg32i1mKNjzYab96gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43EE, serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Validity Not Before: Jun 15 02:35:47 2025 GMT Not After : Jun 22 02:35:47 2025 GMT Subject: CN=684e3183-bc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b8:0d:41:7e:c3:c3:7e:2b:71:a7:ae:7b:54: 67:00:85:e7:e8:a2:68:dd:0a:38:a5:2b:12:27:d1: 33:fe:05:6c:0d:17:64:93:b6:73:fc:fd:09:a2:7e: a3:e2:02:42:c7:de:81:ef:0a:3f:4b:d1:02:0a:03: 9d:4b:91:03:87:3b:bd:ec:de:5e:96:e3:4f:ce:42: c5:bc:cd:bd:a9:7a:a2:b1:f4:46:6f:36:d4:64:0f: 0c:40:ff:4e:53:2d:60:e7:c2:18:4f:0e:96:54:8c: 91:1f:77:9a:91:74:e7:6e:13:5a:76:78:14:7f:88: 89:45:85:d7:af:c6:05:b0:fd:37:39:64:3d:ab:30: 7e:40:42:1a:ea:68:4d:5e:b2:ca:67:5c:23:fd:90: de:bd:34:c8:5d:b9:42:4b:4e:c6:a8:37:61:bb:fe: 20:72:14:e3:2a:f3:2b:4f:09:f2:57:84:5b:5e:68: f1:c7:a2:0d:02:d0:4f:51:ba:f7:34:a9:f6:a6:5b: d0:ac:4a:ff:62:6f:69:45:96:5e:f3:0b:07:18:91: 60:f5:60:2c:3f:3d:93:9e:f7:98:ff:ec:de:5a:d5: 9b:a9:d7:34:9b:c1:50:9c:83:9e:7a:a6:52:03:f3: 52:c9:b2:4e:b2:5a:83:d4:5d:b4:37:3e:7b:80:07: 46:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:58:3E:E2:8F:92:CB:8B:FB:C5:BD:61:A1:74:C1:FF:12:C2:A2:0A X509v3 Authority Key Identifier: keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:a8:58:29:a6:0d:f6:8f:a5:c5:23:99:0b:d7:3e:6b:31:a6: 64:c2:d9:d3:78:ae:40:9c:f2:f7:95:31:2c:63:f0:4e:e7:1c: 98:49:9f:25:cc:c2:13:fa:8a:b0:ff:2f:4c:6a:98:9c:77:62: 19:1e:31:62:c9:01:1f:3b:48:d9:40:17:14:bd:ff:6a:52:cd: c7:00:9b:b8:02:61:87:db:10:6b:c9:3d:d0:ca:4d:6f:f4:67: 1b:27:9a:bb:b2:e6:01:b8:f3:bc:ff:c7:11:7c:1c:b3:92:28: 8d:b6:ab:77:6a:a7:7d:7e:75:54:89:81:ee:f0:05:ee:86:1e: ca:4c:68:4c:6c:17:55:b8:cd:58:99:4b:fe:7b:83:c2:7c:94: ad:03:b0:a9:df:90:7f:38:4b:ff:19:e8:e8:ca:3a:45:4f:62: 5b:6f:c1:ba:bd:f9:5a:f6:cd:f5:e7:d4:0e:49:05:0c:8c:66: 3e:49:55:54:86:7f:4b:00:1d:54:79:c9:3d:c9:a1:c2:21:9d: e6:20:b8:d2:77:7d:b8:f2:b5:c1:c8:d1:c0:96:6e:6c:d6:6f: 65:43:81:71:d7:12:43:7a:9b:62:e3:bc:ad:ce:33:c3:fc:71: e1:41:49:06:5e:a8:01:4f:31:ac:b2:90:90:19:fa:36:9a:e8: 5b:d6:62:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRUUxMTAvBgNVBAUTKDAyQkE2M0I1ODYyRTI3MDlCOTBEMTZCN0RDMkVCNUNG QzhBMkU2ODQwHhcNMjUwNjE1MDIzNTQ3WhcNMjUwNjIyMDIzNTQ3WjAYMRYwFAYD VQQDEw02ODRlMzE4My1iYzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5LgNQX7Dw34rcaeue1RnAIXn6KJo3Qo4pSsSJ9Ez/gVsDRdkk7Zz/P0Jon6j 4gJCx96B7wo/S9ECCgOdS5EDhzu97N5eluNPzkLFvM29qXqisfRGbzbUZA8MQP9O Uy1g58IYTw6WVIyRH3eakXTnbhNadngUf4iJRYXXr8YFsP03OWQ9qzB+QEIa6mhN XrLKZ1wj/ZDevTTIXblCS07GqDdhu/4gchTjKvMrTwnyV4RbXmjxx6INAtBPUbr3 NKn2plvQrEr/Ym9pRZZe8wsHGJFg9WAsPz2TnveY/+zeWtWbqdc0m8FQnIOeeqZS A/NSybJOslqD1F20Nz57gAdGCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhYPuKP ksuL+8W9YaF0wf8SwqIKMB8GA1UdIwQYMBaAFAK6Y7WGLicJuQ0Wt9wutc/IouaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNFRS80QThBREFDMENE NDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3bTVEUmEzM0M2MXo4aWk1 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FycGp0WVl1SndtNURSYTMzQzYxejhpaTVvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNFRS80QThBREFDMENENDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3 bTVEUmEzM0M2MXo4aWk1b1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0qFgppg32j6XFI5kL1z5rMaZkwtnTeK5AnPL3lTEsY/BO5xyYSZ8l zMIT+oqw/y9Mapicd2IZHjFiyQEfO0jZQBcUvf9qUs3HAJu4AmGH2xBryT3Qyk1v 9GcbJ5q7suYBuPO8/8cRfByzkiiNtqt3aqd9fnVUiYHu8AXuhh7KTGhMbBdVuM1Y mUv+e4PCfJStA7Cp35B/OEv/GejoyjpFT2Jbb8G6vfla9s3159QOSQUMjGY+SVVU hn9LAB1Ueck9yaHCIZ3mILjSd3248rXByNHAlm5s1m9lQ4Fx1xJDepti47ytzjPD /HHhQUkGXqgBTzGsspCQGfo2muhb1mLD -----END CERTIFICATE-----Generated at Mon Jun 16 15:13:38 2025 by rpki-client