$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft File: AruX_YsfYg4CoeLK21nWVvAa2kU.mft (raw, json) Hash identifier: 5vlqhCv/kcRXsKZfEDpmyoiaCdvPFNLcKRc2m3cD/7M= Subject key identifier: F0:F8:2D:3C:7F:D2:DC:29:8C:36:01:3F:1A:1D:61:73:6E:7E:D3:82 Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45 Certificate issuer: /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45 Certificate serial: 033D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft Manifest number: 032E Signing time: Sat 19 Jul 2025 01:32:10 +0000 Manifest this update: Sat 19 Jul 2025 01:32:10 +0000 Manifest next update: Sat 26 Jul 2025 01:32:10 +0000 Files and hashes: 1: AruX_YsfYg4CoeLK21nWVvAa2kU.crl (hash: q2+tlWqnUKMeJ1sDxLflUBfKiHhsbcXmhvfAMpNBJTM=) 2: E100C846D0D211EC92E5014CC4F9AE02.roa (hash: r0SdsL2ORVSdYzkbQ5mo+r9WMoDe9Po2V1LCmdg+FDo=) 3: 2DED8B66D02011ECB021972BC4F9AE02.roa (hash: ICAm0K0jbIgavAr0EQMMjLaOL/gZji3RATFqBqpQADM=) 4: 2D478AFED02011ECB021972BC4F9AE02.roa (hash: /uILdUZ7kShm+RnYwG/kKYiO9gYuOhp2LdX1pGS+VDA=) 5: 8FCF722626C911EE9F1A0917C4F9AE02.roa (hash: dBsLOGuzUlSybPcUJi3MpYXDAALVpmkR+ZsEVuraLp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 829 (0x33d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE108, serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45 Validity Not Before: Jul 19 01:32:10 2025 GMT Not After : Jul 26 01:32:10 2025 GMT Subject: CN=687af59a-d4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:64:30:60:2e:cd:2b:b3:3c:02:03:c4:86:6a: 94:45:76:b1:56:3f:86:09:15:1d:d0:70:13:c8:44: b6:32:11:64:0a:2c:ff:72:53:b3:8e:e2:62:ce:09: c6:fc:a1:29:e6:6e:23:b7:84:c0:af:12:6c:32:c3: 0e:fd:12:ac:00:97:c9:c5:b0:75:21:55:5a:7b:d8: f6:e9:24:89:94:3b:8d:b3:c4:30:f7:6a:bd:64:9d: c1:f8:94:15:3a:3d:31:95:6e:fe:1f:cc:d4:31:cc: e6:85:06:91:0c:ae:a6:94:ed:c6:6b:e9:25:09:52: e8:68:cd:80:21:e7:0f:29:b2:49:2d:9b:f0:78:e4: 99:f5:e2:d1:32:55:bb:d4:4c:76:9f:01:a5:91:ae: 15:fe:1d:57:50:dd:88:34:62:c4:05:c9:fe:02:2a: 9a:f3:14:cf:0f:27:a0:e3:09:dc:cb:ba:23:8c:28: 25:2a:f2:2f:22:07:cd:da:db:3f:46:3b:9f:0b:9a: 98:7c:91:bb:48:4d:04:ab:2a:55:ae:15:c8:f2:f1: 91:61:cb:d6:86:0d:96:de:e4:9d:50:87:24:e7:be: 0f:06:cf:ca:1c:cf:b9:13:26:d2:9b:3d:e9:f0:c0: e1:90:36:fc:13:ae:57:1e:6d:12:86:c3:ad:97:3b: b7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F8:2D:3C:7F:D2:DC:29:8C:36:01:3F:1A:1D:61:73:6E:7E:D3:82 X509v3 Authority Key Identifier: keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:be:a9:cb:f6:e7:13:bb:ca:bb:c7:94:aa:b4:83:a3:99:d1: c2:c5:db:37:65:d8:9a:c4:c8:5e:b5:c7:7f:33:81:d1:8c:65: 7f:2b:26:be:f8:e9:18:e8:8a:9c:df:36:7a:6b:4d:88:fe:4a: c0:2c:65:39:63:2b:39:fb:48:f9:b2:90:47:77:ea:7b:68:89: 3d:30:dc:ea:d4:df:45:e4:bf:23:3e:ae:d7:d6:fc:c3:39:87: 76:7c:27:dc:21:16:65:15:0f:70:e9:20:45:39:10:86:fd:d9: 2c:8e:6e:e3:0c:5f:87:66:73:0f:f3:f3:8c:43:2e:a1:ac:03: c4:55:bb:85:e6:44:fe:5b:fb:f7:cd:d7:22:5c:d9:f6:52:33: 71:b8:ca:fb:8d:35:83:5f:2d:90:e8:1e:a6:18:55:1d:79:21: 8c:9b:67:77:77:f2:f1:b6:d1:98:80:9d:26:71:ea:b4:60:0b: 37:b4:02:8f:89:e7:7b:ba:e2:b4:e7:77:16:6b:b1:4a:5c:f3: 7d:af:ef:e1:89:95:ed:9c:12:a4:fa:23:af:be:c6:66:27:c0: cf:f8:23:7f:b9:c9:dc:82:03:7a:2f:5d:ac:b5:19:80:9b:78: ef:74:67:dc:08:fc:13:78:c3:77:0b:4f:7b:1f:59:f3:f0:88: 5c:b7:e8:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUxMDgxMTAvBgNVBAUTKDAyQkI5N0ZEOEIxRjYyMEUwMkExRTJDQURCNTlENjU2 RjAxQURBNDUwHhcNMjUwNzE5MDEzMjEwWhcNMjUwNzI2MDEzMjEwWjAYMRYwFAYD VQQDEw02ODdhZjU5YS1kNGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmQwYC7NK7M8AgPEhmqURXaxVj+GCRUd0HATyES2MhFkCiz/clOzjuJizgnG /KEp5m4jt4TArxJsMsMO/RKsAJfJxbB1IVVae9j26SSJlDuNs8Qw92q9ZJ3B+JQV Oj0xlW7+H8zUMczmhQaRDK6mlO3Ga+klCVLoaM2AIecPKbJJLZvweOSZ9eLRMlW7 1Ex2nwGlka4V/h1XUN2INGLEBcn+Aiqa8xTPDyeg4wncy7ojjCglKvIvIgfN2ts/ RjufC5qYfJG7SE0EqypVrhXI8vGRYcvWhg2W3uSdUIck574PBs/KHM+5EybSmz3p 8MDhkDb8E65XHm0ShsOtlzu32wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPD4LTx/ 0twpjDYBPxodYXNuftOCMB8GA1UdIwQYMBaAFAK7l/2LH2IOAqHiyttZ1lbwGtpF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTEwOC9FM0IwNDZDQ0Qw MUMxMUVDQjM1NEFGMjRDNEY5QUUwMi9BcnVYX1lzZllnNENvZUxLMjFuV1Z2QWEy a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FydVhfWXNmWWc0Q29lTEsyMW5XVnZBYTJrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTEwOC9FM0IwNDZDQ0QwMUMxMUVDQjM1NEFGMjRDNEY5QUUwMi9BcnVYX1lzZlln NENvZUxLMjFuV1Z2QWEya1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAivqnL9ucTu8q7x5SqtIOjmdHCxds3ZdiaxMhetcd/M4HRjGV/Kya+ +OkY6Iqc3zZ6a02I/krALGU5Yys5+0j5spBHd+p7aIk9MNzq1N9F5L8jPq7X1vzD OYd2fCfcIRZlFQ9w6SBFORCG/dksjm7jDF+HZnMP8/OMQy6hrAPEVbuF5kT+W/v3 zdciXNn2UjNxuMr7jTWDXy2Q6B6mGFUdeSGMm2d3d/LxttGYgJ0mceq0YAs3tAKP ied7uuK053cWa7FKXPN9r+/hiZXtnBKk+iOvvsZmJ8DP+CN/ucncggN6L12stRmA m3jvdGfcCPwTeMN3C097H1nz8Ihct+hq -----END CERTIFICATE-----Generated at Sun Jul 20 06:21:52 2025 by rpki-client