$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft File: Ar6z5iH6umNCHtP4hPonC80zHXc.mft (raw, json) Hash identifier: 3SHzWZPrWXA7KiPa4ZjuQSSqKp4U/V/9Xg/WtWGMHxw= Subject key identifier: 43:2D:02:76:7D:66:45:8F:6C:35:1F:FB:E7:03:85:7E:00:78:CB:66 Authority key identifier: 02:BE:B3:E6:21:FA:BA:63:42:1E:D3:F8:84:FA:27:0B:CD:33:1D:77 Certificate issuer: /CN=A91C0E5D/serialNumber=02BEB3E621FABA63421ED3F884FA270BCD331D77 Certificate serial: 066F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft Manifest number: 0665 Signing time: Sun 10 Aug 2025 22:37:40 +0000 Manifest this update: Sun 10 Aug 2025 22:37:40 +0000 Manifest next update: Sun 17 Aug 2025 22:37:40 +0000 Files and hashes: 1: Ar6z5iH6umNCHtP4hPonC80zHXc.crl (hash: XJq8avdVRugH/WMBG0rX9/ZAkAtTEArgDqlT1I8PKJg=) 2: C34EB9A6C28311EB9370913FC4F9AE02.roa (hash: Al61RmIvimM1KwvJGrf39fcF1DIlgNVctNk1tZ67VR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.crl rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1647 (0x66f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E5D, serialNumber=02BEB3E621FABA63421ED3F884FA270BCD331D77 Validity Not Before: Aug 10 22:37:40 2025 GMT Not After : Aug 17 22:37:40 2025 GMT Subject: CN=68991f34-a443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:01:ba:d9:b0:5c:36:84:9e:26:92:e0:f4:f5: 05:7a:62:69:bc:a6:c1:b8:12:b4:8c:1a:52:02:4e: 31:0b:88:a8:44:5d:c9:3a:96:e4:d8:fd:48:7e:12: 40:1c:64:0b:47:b2:b7:1d:90:d6:cb:ca:b1:d8:ab: c7:33:36:b5:67:20:84:6b:a4:cf:d3:f4:73:b1:4e: 28:1a:f1:82:9c:b6:a2:67:4f:c1:1f:8f:68:05:7d: c1:db:2c:8d:c7:bf:9b:0d:d5:3d:5a:ac:f9:18:ac: 41:1d:83:b9:99:d3:e7:ec:fd:de:cf:c1:9d:35:ed: e9:21:26:7a:3d:ad:7b:23:61:8c:f8:4e:cb:e7:80: 2d:99:e2:a4:b3:2a:62:69:d1:f0:e1:35:04:7d:b3: 76:0a:d9:5d:f1:92:fd:31:43:e9:43:cc:a7:31:2d: d0:dd:d7:40:2b:3b:31:39:d3:22:7f:72:91:44:27: 47:ba:eb:bf:ad:26:09:41:98:4e:1a:c0:47:75:f9: f3:4b:86:15:1b:b5:7c:d8:40:ef:76:ae:da:32:24: 54:4f:78:b6:b0:d5:f7:80:10:a9:68:bb:ae:f7:81: 70:9d:c1:16:5e:67:cf:e3:93:7a:84:6b:db:98:30: 87:d3:fa:a7:1f:35:cc:a7:bb:c5:c5:52:92:2e:44: c8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2D:02:76:7D:66:45:8F:6C:35:1F:FB:E7:03:85:7E:00:78:CB:66 X509v3 Authority Key Identifier: keyid:02:BE:B3:E6:21:FA:BA:63:42:1E:D3:F8:84:FA:27:0B:CD:33:1D:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a7:44:96:32:bc:41:e5:d2:1c:31:ca:e9:25:5d:13:e8:a3: 58:45:8e:65:8d:2d:79:19:30:e5:03:21:7f:2a:71:35:ef:7a: 1b:d9:0c:59:71:7d:e7:0a:15:c7:18:6c:e9:4a:f3:b8:8c:80: 21:72:3b:ce:40:ce:55:1c:66:58:5d:39:e4:26:56:e5:f2:53: fd:0e:ac:de:20:2a:82:26:1b:fe:e8:36:0c:4b:7d:88:1d:98: 43:7d:22:56:5f:af:68:39:ed:ff:21:7b:a1:8c:72:85:66:a4: 60:6d:f1:ea:43:e7:02:3d:47:20:41:12:4b:a5:3b:fb:a1:22: c2:ea:21:f5:cf:03:fc:55:5d:6f:af:4f:61:a1:68:cd:b9:0a: f7:d7:dc:d1:20:52:c8:da:64:b4:6b:95:ca:07:36:0d:fb:c6: 86:69:5e:eb:fa:20:6b:f7:21:5b:c3:c8:2e:89:f4:48:43:86: ea:c5:9e:64:e8:0d:26:68:07:84:c3:f0:6c:20:53:77:1d:60: 2a:2e:d1:3b:c8:97:54:cd:97:12:04:97:f0:e8:d8:be:75:b9: 13:eb:b5:37:80:d7:4d:e4:9d:57:21:c5:e4:9f:83:5c:55:f3: fe:cf:9d:8e:54:37:16:38:46:f3:e9:b0:ee:e1:88:b5:58:57: ed:87:b1:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNUQxMTAvBgNVBAUTKDAyQkVCM0U2MjFGQUJBNjM0MjFFRDNGODg0RkEyNzBC Q0QzMzFENzcwHhcNMjUwODEwMjIzNzQwWhcNMjUwODE3MjIzNzQwWjAYMRYwFAYD VQQDEw02ODk5MWYzNC1hNDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8gG62bBcNoSeJpLg9PUFemJpvKbBuBK0jBpSAk4xC4ioRF3JOpbk2P1IfhJA HGQLR7K3HZDWy8qx2KvHMza1ZyCEa6TP0/RzsU4oGvGCnLaiZ0/BH49oBX3B2yyN x7+bDdU9Wqz5GKxBHYO5mdPn7P3ez8GdNe3pISZ6Pa17I2GM+E7L54AtmeKksypi adHw4TUEfbN2Ctld8ZL9MUPpQ8ynMS3Q3ddAKzsxOdMif3KRRCdHuuu/rSYJQZhO GsBHdfnzS4YVG7V82EDvdq7aMiRUT3i2sNX3gBCpaLuu94FwncEWXmfP45N6hGvb mDCH0/qnHzXMp7vFxVKSLkTIrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMtAnZ9 ZkWPbDUf++cDhX4AeMtmMB8GA1UdIwQYMBaAFAK+s+Yh+rpjQh7T+IT6JwvNMx13 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU1RC8wRDBGRkJEQzkx RDcxMUVCODZGQTM0MjZDNEY5QUUwMi9BcjZ6NWlINnVtTkNIdFA0aFBvbkM4MHpI WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FyNno1aUg2dW1OQ0h0UDRoUG9uQzgwekhYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU1RC8wRDBGRkJEQzkxRDcxMUVCODZGQTM0MjZDNEY5QUUwMi9BcjZ6NWlINnVt TkNIdFA0aFBvbkM4MHpIWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvp0SWMrxB5dIcMcrpJV0T6KNYRY5ljS15GTDlAyF/KnE173ob2QxZ cX3nChXHGGzpSvO4jIAhcjvOQM5VHGZYXTnkJlbl8lP9DqzeICqCJhv+6DYMS32I HZhDfSJWX69oOe3/IXuhjHKFZqRgbfHqQ+cCPUcgQRJLpTv7oSLC6iH1zwP8VV1v r09hoWjNuQr319zRIFLI2mS0a5XKBzYN+8aGaV7r+iBr9yFbw8guifRIQ4bqxZ5k 6A0maAeEw/BsIFN3HWAqLtE7yJdUzZcSBJfw6Ni+dbkT67U3gNdN5J1XIcXkn4Nc VfP+z52OVDcWOEbz6bDu4Yi1WFfth7ES -----END CERTIFICATE-----Generated at Mon Aug 11 05:52:21 2025 by rpki-client