$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft File: Ar6z5iH6umNCHtP4hPonC80zHXc.mft (raw, json) Hash identifier: u0GGgsmVGjXr6SVd8TcypVdqHgFHkKE8FhGV0lgeQJI= Subject key identifier: 24:73:BC:CD:E5:56:76:59:CA:20:0B:4E:54:6A:D6:61:37:27:8A:50 Authority key identifier: 02:BE:B3:E6:21:FA:BA:63:42:1E:D3:F8:84:FA:27:0B:CD:33:1D:77 Certificate issuer: /CN=A91C0E5D/serialNumber=02BEB3E621FABA63421ED3F884FA270BCD331D77 Certificate serial: 0636 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft Manifest number: 062D Signing time: Thu 24 Apr 2025 22:30:14 +0000 Manifest this update: Thu 24 Apr 2025 22:30:14 +0000 Manifest next update: Thu 01 May 2025 22:30:14 +0000 Files and hashes: 1: Ar6z5iH6umNCHtP4hPonC80zHXc.crl (hash: XxKsMVbHwidpekDRAO3yboYFtuEA2h1fwfKbZIxxaOo=) 2: C34EB9A6C28311EB9370913FC4F9AE02.roa (hash: KhQ2m3GyJCUcdrixe5p4++jj5LNUmAcZqQ2RRuKTkdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.crl rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1590 (0x636) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E5D, serialNumber=02BEB3E621FABA63421ED3F884FA270BCD331D77 Validity Not Before: Apr 24 22:30:14 2025 GMT Not After : May 1 22:30:14 2025 GMT Subject: CN=680abb76-d20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:0c:b0:a2:d1:06:89:d9:4c:0c:71:0b:bd: 5e:1c:8f:d5:d9:9e:f9:f4:3b:4f:e0:ee:de:65:37: 2f:ac:bb:7f:ea:d5:ed:c2:49:7f:2c:02:8e:d1:f3: 12:9e:5d:ce:b3:7d:e6:f8:a8:7d:bc:04:ce:c4:07: 60:36:5e:03:4f:5d:1e:87:6a:ec:76:85:d0:ff:15: 5d:f8:a8:98:ef:39:81:db:d9:0c:c7:f4:89:25:60: ae:6c:5b:ce:9b:40:69:49:2c:e7:fe:94:54:ba:dc: d9:d5:d9:e4:dc:3e:e6:86:90:e0:65:fe:10:67:e9: cf:fd:1c:9d:e3:c5:1d:a3:3a:78:52:c7:a4:f1:73: f4:28:46:1e:98:96:31:7d:ad:94:bf:c0:a9:52:8f: 90:fb:74:6e:77:4f:a5:d2:94:77:0c:f6:f5:79:7e: 5e:cc:00:99:18:d4:52:17:56:5f:bd:56:4f:f3:f1: 86:5d:f8:09:1a:ed:75:f6:3e:6a:37:a0:17:f7:eb: 03:9b:f1:8a:41:b5:37:3f:35:8b:f9:93:dd:6a:02: 97:54:23:6e:e9:55:d8:58:31:e2:23:96:ee:2a:3d: 77:d5:70:79:86:a5:0b:8d:0f:1c:4a:73:a3:f0:94: 5a:3e:13:c0:b7:e5:69:26:78:5f:59:db:d3:c8:74: 77:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:73:BC:CD:E5:56:76:59:CA:20:0B:4E:54:6A:D6:61:37:27:8A:50 X509v3 Authority Key Identifier: keyid:02:BE:B3:E6:21:FA:BA:63:42:1E:D3:F8:84:FA:27:0B:CD:33:1D:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d8:0f:39:21:09:4d:01:ce:ef:05:d5:75:62:b3:aa:8c:d5: a7:90:d1:47:60:5b:e5:58:93:93:d0:0b:2a:12:23:dd:2e:cf: 5e:46:4e:f9:b2:8a:92:94:eb:bd:34:c8:35:4e:3b:29:43:3d: 07:69:d4:58:ae:e6:b2:1e:e8:4e:1d:d1:cd:ec:f0:71:d4:b8: 44:e6:c7:14:0d:68:b2:89:5c:a4:7c:5c:66:2f:95:6a:7b:fb: c4:c9:d2:11:77:ed:a5:62:f9:a3:b5:cc:10:fc:d8:12:7b:bc: 86:4e:d9:54:8e:1a:72:b6:d9:32:63:87:b0:b0:1a:a9:6f:42: 05:50:4e:09:30:6f:4b:7b:e5:15:c5:4e:99:1d:e6:f8:28:8c: 4b:1f:60:1f:04:a5:63:01:17:69:8f:5a:30:43:63:cb:8c:11: 2f:69:24:8c:1d:7e:25:44:43:0a:b9:31:5b:fd:f6:33:d5:12: aa:a0:92:2b:0c:9a:05:70:cb:99:09:0a:f4:39:dc:7f:f1:0e: 1a:a1:51:23:0e:14:7d:bd:3b:d9:2e:3c:0a:46:cc:88:40:77: 7a:c3:fe:29:5f:5b:27:08:c7:35:60:71:ca:c4:e1:1e:53:26: 19:66:93:16:09:76:8a:ac:0c:6a:d3:e8:78:e3:19:ce:3b:1c: 4f:32:c6:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNUQxMTAvBgNVBAUTKDAyQkVCM0U2MjFGQUJBNjM0MjFFRDNGODg0RkEyNzBC Q0QzMzFENzcwHhcNMjUwNDI0MjIzMDE0WhcNMjUwNTAxMjIzMDE0WjAYMRYwFAYD VQQDEw02ODBhYmI3Ni1kMjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj8MsKLRBonZTAxxC71eHI/V2Z759DtP4O7eZTcvrLt/6tXtwkl/LAKO0fMS nl3Os33m+Kh9vATOxAdgNl4DT10eh2rsdoXQ/xVd+KiY7zmB29kMx/SJJWCubFvO m0BpSSzn/pRUutzZ1dnk3D7mhpDgZf4QZ+nP/Ryd48Udozp4Usek8XP0KEYemJYx fa2Uv8CpUo+Q+3Rud0+l0pR3DPb1eX5ezACZGNRSF1ZfvVZP8/GGXfgJGu119j5q N6AX9+sDm/GKQbU3PzWL+ZPdagKXVCNu6VXYWDHiI5buKj131XB5hqULjQ8cSnOj 8JRaPhPAt+VpJnhfWdvTyHR3hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRzvM3l VnZZyiALTlRq1mE3J4pQMB8GA1UdIwQYMBaAFAK+s+Yh+rpjQh7T+IT6JwvNMx13 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU1RC8wRDBGRkJEQzkx RDcxMUVCODZGQTM0MjZDNEY5QUUwMi9BcjZ6NWlINnVtTkNIdFA0aFBvbkM4MHpI WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FyNno1aUg2dW1OQ0h0UDRoUG9uQzgwekhYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU1RC8wRDBGRkJEQzkxRDcxMUVCODZGQTM0MjZDNEY5QUUwMi9BcjZ6NWlINnVt TkNIdFA0aFBvbkM4MHpIWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr2A85IQlNAc7vBdV1YrOqjNWnkNFHYFvlWJOT0AsqEiPdLs9eRk75 soqSlOu9NMg1TjspQz0HadRYruayHuhOHdHN7PBx1LhE5scUDWiyiVykfFxmL5Vq e/vEydIRd+2lYvmjtcwQ/NgSe7yGTtlUjhpyttkyY4ewsBqpb0IFUE4JMG9Le+UV xU6ZHeb4KIxLH2AfBKVjARdpj1owQ2PLjBEvaSSMHX4lREMKuTFb/fYz1RKqoJIr DJoFcMuZCQr0Odx/8Q4aoVEjDhR9vTvZLjwKRsyIQHd6w/4pX1snCMc1YHHKxOEe UyYZZpMWCXaKrAxq0+h44xnOOxxPMsb0 -----END CERTIFICATE-----Generated at Sat Apr 26 12:23:00 2025 by rpki-client