$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft File: ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft (raw, json) Hash identifier: 5Tqh9ri6COk3YtZg8dazWRn+rGJLM4uQetLacX2NMHo= Subject key identifier: 17:A4:1D:4D:EB:50:BE:8F:43:98:4A:39:67:12:53:FC:B5:B0:FA:9B Authority key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 Certificate issuer: /CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332 Certificate serial: 0663 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft Manifest number: 065B Signing time: Thu 24 Apr 2025 22:15:08 +0000 Manifest this update: Thu 24 Apr 2025 22:15:07 +0000 Manifest next update: Thu 01 May 2025 22:15:07 +0000 Files and hashes: 1: ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl (hash: ohGJbRXyk1m2/TRWJMCmXoaGEV6IBnkPhsSBlNsFt1M=) 2: 1B25BF167FE111EBB6C0941AC4F9AE02.roa (hash: UCps9/WJGo9HkezcUcRKvCp07t2PRwHy6+kCIMyeCTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1635 (0x663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E45, serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332 Validity Not Before: Apr 24 22:15:07 2025 GMT Not After : May 1 22:15:07 2025 GMT Subject: CN=680ab7eb-3d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d6:1b:15:73:22:0f:b3:b4:32:21:a0:0f:d2: e9:84:51:2b:3a:7c:aa:21:24:da:e8:0c:e7:c0:ee: 02:2f:df:21:2d:13:1c:6f:5b:1e:85:14:41:b3:d9: b4:0b:11:2f:e1:60:4c:f5:07:38:25:90:16:e8:62: a7:99:c3:cd:fd:7e:14:40:bf:06:0a:96:44:0c:79: 1e:16:b0:85:13:f0:4e:b1:34:e2:a1:53:42:28:34: b5:26:dc:36:41:bb:9f:f6:0f:63:ec:44:74:a1:57: ac:53:8b:0a:dc:44:98:2e:20:25:a6:42:72:bf:2f: 06:81:c5:8e:b8:e8:9f:a8:50:69:1d:a8:26:a6:ee: 23:dd:95:ba:dd:97:f3:73:5d:55:65:9d:b2:8f:c9: 17:d4:6c:3a:4a:9b:cc:2c:c5:03:21:43:96:ca:cf: 86:50:8e:8a:df:e7:c3:9f:57:59:3e:89:2b:29:92: 0e:96:53:be:64:64:cf:57:e1:52:ab:11:0c:bf:6d: 64:f2:0a:f3:2f:1f:72:66:33:78:28:0d:f9:36:7b: 40:b4:3c:9f:99:19:f7:75:1e:64:29:ae:6d:8b:2e: db:b4:21:dd:04:b5:ef:fb:db:b1:80:96:1d:fa:fa: 25:d5:5c:52:55:17:fb:1b:9e:e8:48:38:46:a3:0e: 4b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A4:1D:4D:EB:50:BE:8F:43:98:4A:39:67:12:53:FC:B5:B0:FA:9B X509v3 Authority Key Identifier: keyid:6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:65:03:dc:3f:f4:7d:a8:65:e4:20:1f:82:16:30:3f:43:57: 4e:67:85:46:36:00:c7:b2:4e:f5:22:bb:8a:da:fc:73:45:ed: e9:b9:7c:e1:af:6c:c4:7b:d2:02:74:92:04:0f:ca:b2:4e:5c: b5:53:58:bb:ad:93:59:13:14:7e:d4:e7:41:a7:6c:7f:b0:eb: 18:5c:5b:e6:b6:48:39:ee:59:69:91:4d:f4:31:16:65:76:57: bc:7a:aa:30:f1:6c:99:6c:55:b1:ee:32:76:8a:87:0e:d7:0a: 9c:09:38:65:21:de:23:d9:a5:03:8e:e2:d3:62:99:fc:7d:5a: d5:77:7b:8c:88:05:b7:5b:bd:87:c8:36:d7:bf:91:5e:3b:2d: cc:29:f9:4b:6f:4c:7a:8d:38:70:91:37:14:ec:47:41:71:a7: 2e:d6:d0:14:ec:ec:14:ef:9c:e2:45:26:24:d3:8e:b8:85:57: f8:59:ca:5b:f7:75:7b:4f:ef:c7:d0:93:c7:01:d7:df:c1:7e: 3f:da:8f:19:29:d9:e3:74:bd:00:2e:d2:33:6a:d2:10:6b:e9: 0e:80:62:b9:d7:99:3e:27:4d:98:63:04:a9:b8:b9:32:05:76: 48:88:eb:6d:0e:3c:8b:b4:40:d8:34:46:f7:a2:0e:4c:3b:8d: 80:31:94:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFNDUxMTAvBgNVBAUTKDZBQkZFRkM4MzQxOTExNkVGMzRBRjNBNUE3RkY0OERF MDNCRTgzMzIwHhcNMjUwNDI0MjIxNTA3WhcNMjUwNTAxMjIxNTA3WjAYMRYwFAYD VQQDEw02ODBhYjdlYi0zZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tYbFXMiD7O0MiGgD9LphFErOnyqISTa6AznwO4CL98hLRMcb1sehRRBs9m0 CxEv4WBM9Qc4JZAW6GKnmcPN/X4UQL8GCpZEDHkeFrCFE/BOsTTioVNCKDS1Jtw2 Qbuf9g9j7ER0oVesU4sK3ESYLiAlpkJyvy8GgcWOuOifqFBpHagmpu4j3ZW63Zfz c11VZZ2yj8kX1Gw6SpvMLMUDIUOWys+GUI6K3+fDn1dZPokrKZIOllO+ZGTPV+FS qxEMv21k8grzLx9yZjN4KA35NntAtDyfmRn3dR5kKa5tiy7btCHdBLXv+9uxgJYd +vol1VxSVRf7G57oSDhGow5LQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBekHU3r UL6PQ5hKOWcSU/y1sPqbMB8GA1UdIwQYMBaAFGq/78g0GRFu80rzpaf/SN4DvoMy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEU0NS9GOEYxQzE5NDdG REUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVXN3pTdk9scF85STNnTy1n ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FyX3Z5RFFaRVc3elN2T2xwXzlJM2dPLWd6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEU0NS9GOEYxQzE5NDdGREUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVX N3pTdk9scF85STNnTy1nekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9ZQPcP/R9qGXkIB+CFjA/Q1dOZ4VGNgDHsk71IruK2vxzRe3puXzh r2zEe9ICdJIED8qyTly1U1i7rZNZExR+1OdBp2x/sOsYXFvmtkg57llpkU30MRZl dle8eqow8WyZbFWx7jJ2iocO1wqcCThlId4j2aUDjuLTYpn8fVrVd3uMiAW3W72H yDbXv5FeOy3MKflLb0x6jThwkTcU7EdBcacu1tAU7OwU75ziRSYk0464hVf4Wcpb 93V7T+/H0JPHAdffwX4/2o8ZKdnjdL0ALtIzatIQa+kOgGK515k+J02YYwSpuLky BXZIiOttDjyLtEDYNEb3og5MO42AMZRk -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:53 2025 by rpki-client