$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft File: ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft (raw, json) Hash identifier: 1SsZ5Tc1+2BpFAmMgDhHeTqHG9HBPgNA7d/h7wQMNos= Subject key identifier: C7:90:B2:64:8E:C4:BE:EA:0F:C3:78:39:19:AA:FD:C1:27:50:07:63 Authority key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 Certificate issuer: /CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332 Certificate serial: 069A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft Manifest number: 0692 Signing time: Tue 12 Aug 2025 22:39:33 +0000 Manifest this update: Tue 12 Aug 2025 22:39:33 +0000 Manifest next update: Tue 19 Aug 2025 22:39:33 +0000 Files and hashes: 1: ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl (hash: X9Wxli7X7+65Om5Kb//8l7s2v5nF4gd9T1rSV3ULjt0=) 2: 1B25BF167FE111EBB6C0941AC4F9AE02.roa (hash: UCps9/WJGo9HkezcUcRKvCp07t2PRwHy6+kCIMyeCTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 22:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E45, serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332 Validity Not Before: Aug 12 22:39:33 2025 GMT Not After : Aug 19 22:39:33 2025 GMT Subject: CN=689bc2a5-6ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:39:a7:b8:06:51:dd:cd:0e:2e:52:a3:ef:ae: b8:39:69:52:3c:81:dc:a1:01:d5:cf:5e:a1:ac:de: 36:7b:40:de:43:d2:9e:65:72:e3:20:2a:8b:76:28: f7:39:f8:7f:30:b7:5a:6e:0e:a6:b3:a5:02:c7:60: 0c:37:f2:47:cb:c9:73:c6:4e:59:df:a5:96:96:bc: 82:ba:a6:e0:44:d4:2f:be:00:d5:ad:7c:77:e2:46: ce:99:c9:bd:73:3e:c9:07:79:49:79:5a:ac:01:1e: 26:f7:8e:b4:1f:21:e9:cb:de:f7:18:11:08:75:cf: 10:ab:28:62:ca:0a:0c:36:c4:52:40:33:0a:15:0c: 1e:3d:f1:d3:41:60:52:dd:d2:59:90:08:3a:ae:ce: 27:a3:93:cc:1c:fa:bb:7e:86:52:3c:6f:f9:d1:0b: 40:7d:fa:32:26:60:ab:25:88:3a:5c:fe:8c:5d:89: 42:d8:8f:ed:a7:33:ea:e0:3b:09:e9:39:92:90:b6: 86:70:9f:84:96:da:c1:2c:88:cc:fa:c1:a7:2b:e8: f3:df:35:36:70:24:41:12:47:75:4d:87:19:cb:9f: 62:1c:f9:24:1c:d5:9b:02:72:17:95:92:12:25:96: 20:31:b5:86:3a:5c:40:4e:0d:fe:e9:65:eb:98:9a: 4f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:90:B2:64:8E:C4:BE:EA:0F:C3:78:39:19:AA:FD:C1:27:50:07:63 X509v3 Authority Key Identifier: keyid:6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:38:d7:f7:1e:40:48:e3:8b:88:ab:9b:27:fe:ee:75:76:bb: 06:66:26:0a:88:cc:a5:d9:b0:a6:df:f0:ee:a7:0f:04:c7:42: 1e:02:7c:c6:54:39:28:39:3d:c8:b9:6e:52:b6:db:af:3f:15: 92:08:a0:7b:4f:52:a1:af:3e:51:18:6a:12:31:db:5b:45:eb: 95:35:6c:c7:5d:3a:6a:20:d7:91:fd:33:f8:95:36:66:a0:ea: 16:06:4c:d7:70:03:7c:b6:f0:45:d3:2c:0e:35:df:8b:c4:31: 3e:6a:b8:b4:fc:44:8d:35:5d:05:59:3e:ad:85:ba:73:6b:c1: 25:73:5b:6b:fa:17:8e:55:53:f5:96:f2:70:a9:1b:ed:e5:1b: d9:9d:f9:0c:76:bd:36:9e:d1:f7:93:ee:f5:36:8c:84:ec:eb: d2:ff:cb:18:99:6f:3e:27:42:7d:4e:a9:d5:c4:b0:5b:7c:3e: da:7e:48:61:67:38:9f:fe:7b:ff:9d:23:27:fa:1f:f8:84:d0: c6:7e:21:79:36:c2:b3:4d:c0:44:9b:af:f5:7b:ec:5d:fd:ac: c3:51:c9:e3:90:f6:2d:43:08:d0:2c:01:aa:7a:af:6f:1d:95: d0:ce:d2:ff:62:ea:4a:8f:e2:d5:61:d4:72:fc:2f:83:79:05: 34:96:91:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFNDUxMTAvBgNVBAUTKDZBQkZFRkM4MzQxOTExNkVGMzRBRjNBNUE3RkY0OERF MDNCRTgzMzIwHhcNMjUwODEyMjIzOTMzWhcNMjUwODE5MjIzOTMzWjAYMRYwFAYD VQQDEw02ODliYzJhNS02ZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDmnuAZR3c0OLlKj7664OWlSPIHcoQHVz16hrN42e0DeQ9KeZXLjICqLdij3 Ofh/MLdabg6ms6UCx2AMN/JHy8lzxk5Z36WWlryCuqbgRNQvvgDVrXx34kbOmcm9 cz7JB3lJeVqsAR4m9460HyHpy973GBEIdc8QqyhiygoMNsRSQDMKFQwePfHTQWBS 3dJZkAg6rs4no5PMHPq7foZSPG/50QtAffoyJmCrJYg6XP6MXYlC2I/tpzPq4DsJ 6TmSkLaGcJ+EltrBLIjM+sGnK+jz3zU2cCRBEkd1TYcZy59iHPkkHNWbAnIXlZIS JZYgMbWGOlxATg3+6WXrmJpP8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeQsmSO xL7qD8N4ORmq/cEnUAdjMB8GA1UdIwQYMBaAFGq/78g0GRFu80rzpaf/SN4DvoMy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEU0NS9GOEYxQzE5NDdG REUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVXN3pTdk9scF85STNnTy1n ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FyX3Z5RFFaRVc3elN2T2xwXzlJM2dPLWd6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEU0NS9GOEYxQzE5NDdGREUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVX N3pTdk9scF85STNnTy1nekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVONf3HkBI44uIq5sn/u51drsGZiYKiMyl2bCm3/Dupw8Ex0IeAnzG VDkoOT3IuW5SttuvPxWSCKB7T1Khrz5RGGoSMdtbReuVNWzHXTpqINeR/TP4lTZm oOoWBkzXcAN8tvBF0ywONd+LxDE+ari0/ESNNV0FWT6thbpza8Elc1tr+heOVVP1 lvJwqRvt5RvZnfkMdr02ntH3k+71NoyE7OvS/8sYmW8+J0J9TqnVxLBbfD7afkhh Zzif/nv/nSMn+h/4hNDGfiF5NsKzTcBEm6/1e+xd/azDUcnjkPYtQwjQLAGqeq9v HZXQztL/YupKj+LVYdRy/C+DeQU0lpEh -----END CERTIFICATE-----Generated at Wed Aug 13 00:32:27 2025 by rpki-client