$ rpki-client -vvf rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft File: arqG0wSq9k60oJeym6VXeGDMhW8.mft (raw, json) Hash identifier: 3X2QwwBRCxGQg/mlHpK4aRSgWGzsQiSPveJrAZullxg= Subject key identifier: CE:35:1A:F2:F4:06:BD:9C:80:C2:9B:95:94:BE:20:C2:19:D3:9A:AF Authority key identifier: 6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F Certificate issuer: /CN=A915290D/serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft Manifest number: DE Signing time: Sun 13 Apr 2025 04:24:55 +0000 Manifest this update: Sun 13 Apr 2025 04:24:54 +0000 Manifest next update: Sun 20 Apr 2025 04:24:54 +0000 Files and hashes: 1: arqG0wSq9k60oJeym6VXeGDMhW8.crl (hash: hntzQWWo90vJwhvPNMDoXk7eHHt741ayEKZPoYnFmQE=) 2: FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa (hash: +1q/DCNFePTtlbMuRD5iV784JkZFCUJE5p4dFu9JRz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 04:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915290D, serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F Validity Not Before: Apr 13 04:24:54 2025 GMT Not After : Apr 20 04:24:54 2025 GMT Subject: CN=67fb3c96-d7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fd:6c:2d:f7:21:0e:6b:3f:d4:39:f4:01:a0: 28:37:00:29:22:20:f1:9f:f3:d2:bb:6d:be:6d:ea: 98:3f:51:33:b3:22:32:c0:c7:ce:14:bb:69:30:09: 60:83:78:95:ad:06:54:76:00:33:be:f6:10:0c:6b: 60:46:a8:23:2c:b5:ca:d4:07:cc:39:0d:76:90:93: 7a:ef:61:03:54:3e:af:b0:45:12:b8:7d:29:b6:ed: 82:12:7a:01:f0:19:7d:71:d6:65:0c:83:53:b8:bd: 0e:e5:db:4d:3d:89:70:71:76:0e:dc:05:91:74:02: 95:af:71:52:51:2b:73:ae:9b:8e:2b:82:77:5f:9f: a7:47:45:8a:b6:0a:56:06:ef:b3:44:fd:58:86:d5: 3b:0a:f1:a0:06:5a:05:71:96:fd:3b:58:e1:e0:f7: af:87:3d:72:b5:f6:55:8a:e8:a6:26:99:df:13:ff: d3:4b:bb:b4:38:fe:17:19:2f:0a:ad:48:a2:3f:4e: 70:4d:d3:64:c5:32:08:c5:6b:2e:f5:1e:b8:68:15: 2e:ea:0b:88:d5:af:e8:69:a5:7f:3e:0e:47:c9:ab: 8c:b2:c4:d8:a7:67:ee:b8:38:73:36:2f:83:73:c4: 9b:ac:82:55:f3:fa:64:46:56:ee:68:c2:f6:88:5b: fc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:35:1A:F2:F4:06:BD:9C:80:C2:9B:95:94:BE:20:C2:19:D3:9A:AF X509v3 Authority Key Identifier: keyid:6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f0:c7:56:23:30:67:d0:61:eb:ff:2b:1a:64:f5:dd:88:93: 93:dc:a2:5d:c0:38:7b:a5:0c:9c:63:e4:df:ac:99:e9:1f:df: 53:4f:e0:16:35:0d:6f:d3:b1:27:c1:97:b3:60:5a:f2:8a:8a: ad:c2:3d:ac:21:b7:43:6d:99:56:39:c7:3e:f4:20:97:af:f5: 08:c6:86:84:09:50:ee:53:43:8d:85:48:48:dd:53:f5:2b:f2: 4f:79:26:42:31:c1:d0:48:c5:21:3e:55:ba:19:d9:29:73:16: c6:6d:fd:0e:9a:c3:78:71:22:42:4d:3f:47:d6:18:b0:6c:6d: fe:5a:65:fa:26:18:d0:ba:12:ca:36:83:1d:9e:49:fd:e9:ad: 32:ad:72:fb:37:73:03:0d:8d:b9:06:50:60:80:b8:6a:9d:61: 35:2e:43:71:89:28:8e:43:7b:a1:a5:fd:25:84:10:f4:9b:2a: 0c:33:81:60:4e:f8:ec:4f:66:e1:b8:2a:b5:db:65:23:de:9a: be:55:c3:5f:61:42:63:a3:21:e3:cb:9d:0d:ea:55:ae:63:21: 19:e5:a0:f1:93:80:94:3b:49:03:82:c1:7e:e0:ff:cd:86:35: 6a:c6:4d:c8:dc:01:64:38:87:c3:26:37:af:8a:4d:c0:45:1f: a2:fb:4e:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI5MEQxMTAvBgNVBAUTKDZBQkE4NkQzMDRBQUY2NEVCNEEwOTdCMjlCQTU1Nzc4 NjBDQzg1NkYwHhcNMjUwNDEzMDQyNDU0WhcNMjUwNDIwMDQyNDU0WjAYMRYwFAYD VQQDEw02N2ZiM2M5Ni1kN2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6f1sLfchDms/1Dn0AaAoNwApIiDxn/PSu22+beqYP1EzsyIywMfOFLtpMAlg g3iVrQZUdgAzvvYQDGtgRqgjLLXK1AfMOQ12kJN672EDVD6vsEUSuH0ptu2CEnoB 8Bl9cdZlDINTuL0O5dtNPYlwcXYO3AWRdAKVr3FSUStzrpuOK4J3X5+nR0WKtgpW Bu+zRP1YhtU7CvGgBloFcZb9O1jh4Pevhz1ytfZViuimJpnfE//TS7u0OP4XGS8K rUiiP05wTdNkxTIIxWsu9R64aBUu6guI1a/oaaV/Pg5HyauMssTYp2fuuDhzNi+D c8SbrIJV8/pkRlbuaML2iFv8RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM41GvL0 Br2cgMKblZS+IMIZ05qvMB8GA1UdIwQYMBaAFGq6htMEqvZOtKCXspulV3hgzIVv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjkwRC9BNjg0OUFDOEQw MjkxMUVFOUU2Q0JBNDBDNEY5QUUwMi9hcnFHMHdTcTlrNjBvSmV5bTZWWGVHRE1o VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FycUcwd1NxOWs2MG9KZXltNlZYZUdETWhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjkwRC9BNjg0OUFDOEQwMjkxMUVFOUU2Q0JBNDBDNEY5QUUwMi9hcnFHMHdTcTlr NjBvSmV5bTZWWGVHRE1oVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM8MdWIzBn0GHr/ysaZPXdiJOT3KJdwDh7pQycY+TfrJnpH99TT+AW NQ1v07EnwZezYFryioqtwj2sIbdDbZlWOcc+9CCXr/UIxoaECVDuU0ONhUhI3VP1 K/JPeSZCMcHQSMUhPlW6GdkpcxbGbf0OmsN4cSJCTT9H1hiwbG3+WmX6JhjQuhLK NoMdnkn96a0yrXL7N3MDDY25BlBggLhqnWE1LkNxiSiOQ3uhpf0lhBD0myoMM4Fg TvjsT2bhuCq122Uj3pq+VcNfYUJjoyHjy50N6lWuYyEZ5aDxk4CUO0kDgsF+4P/N hjVqxk3I3AFkOIfDJjevik3ARR+i+049 -----END CERTIFICATE-----Generated at Mon Apr 14 06:39:30 2025 by rpki-client