$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft File: Ar6z5iH6umNCHtP4hPonC80zHXc.mft (raw, json) Hash identifier: 4fLQa354RujDU4svOH6eP4jjmaXcPUatJZcW57d17lU= Subject key identifier: 70:F0:D8:83:00:30:99:94:14:87:AC:F0:E0:88:42:8E:02:36:AA:02 Authority key identifier: 02:BE:B3:E6:21:FA:BA:63:42:1E:D3:F8:84:FA:27:0B:CD:33:1D:77 Certificate issuer: /CN=A91C0E5D/serialNumber=02BEB3E621FABA63421ED3F884FA270BCD331D77 Certificate serial: 062B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft Manifest number: 0622 Signing time: Wed 02 Apr 2025 22:45:08 +0000 Manifest this update: Wed 02 Apr 2025 22:45:07 +0000 Manifest next update: Wed 09 Apr 2025 22:45:07 +0000 Files and hashes: 1: Ar6z5iH6umNCHtP4hPonC80zHXc.crl (hash: NDhjczQe2mepBJ1MvR666lMdw90amJ+XoYUZjSLxvvY=) 2: C34EB9A6C28311EB9370913FC4F9AE02.roa (hash: KhQ2m3GyJCUcdrixe5p4++jj5LNUmAcZqQ2RRuKTkdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.crl rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1579 (0x62b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E5D Validity Not Before: Apr 2 22:45:07 2025 GMT Not After : Apr 9 22:45:07 2025 GMT Subject: CN=67edbdf3-4623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2c:22:a0:0b:07:ce:5c:c4:0a:6a:ea:60:20: 00:7d:a8:d9:5a:45:36:1f:b3:b3:4f:20:e0:d4:a4: 0e:c3:65:8c:a2:18:23:44:c6:e2:72:6f:92:e1:c4: d2:c7:e7:a9:68:09:c4:12:32:b3:61:af:9f:2e:5e: 3c:fe:d0:25:2b:d7:be:9e:b3:d5:91:ec:15:40:31: db:4c:de:a6:2f:9d:e0:47:08:08:f2:14:9a:64:c2: bc:25:4b:43:e2:5f:04:21:b4:be:96:c5:d8:3a:57: 35:c9:17:42:e8:f8:00:f6:d1:38:0e:0a:19:49:6e: 7b:6b:da:7e:c2:e4:38:47:c8:e7:22:5e:e7:3b:34: 63:e9:27:00:41:06:11:d3:4b:b6:ad:b3:69:7f:e7: c2:96:56:d0:b9:d1:a3:ab:c1:4c:bf:35:30:31:c5: 78:3c:2b:61:13:90:7b:ec:d7:a3:80:47:39:85:59: 66:0d:9b:2e:52:53:71:44:43:59:83:9a:b2:0c:e6: 7d:ec:88:1a:a6:87:49:c5:40:26:7b:28:16:cc:82: 3c:10:5f:cc:b2:b1:0f:1c:32:9a:5d:5a:c0:77:61: 68:62:bb:95:72:31:41:3a:84:88:7c:2f:cf:ae:1d: 9e:ed:a2:52:8d:f0:05:7a:8d:eb:c2:bb:d1:81:66: 8f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F0:D8:83:00:30:99:94:14:87:AC:F0:E0:88:42:8E:02:36:AA:02 X509v3 Authority Key Identifier: keyid:02:BE:B3:E6:21:FA:BA:63:42:1E:D3:F8:84:FA:27:0B:CD:33:1D:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:23:eb:69:20:52:7e:10:d3:b0:ff:52:b5:de:f1:e1:cb:45: 10:f9:c1:78:75:8d:cd:ea:7d:68:42:34:a1:35:09:4c:50:12: d0:88:fb:8b:5c:f9:6c:1d:f0:96:5b:12:dc:1b:82:1f:59:48: 12:1c:7b:54:a9:e7:66:88:36:da:e2:ea:d0:ed:22:f5:6a:9f: 7e:a2:f8:6e:c5:d9:93:a7:b4:4c:24:72:15:ff:8f:1e:80:14: 78:aa:a6:fd:d7:8c:54:fd:b4:a8:f6:30:3d:31:c8:c3:ee:a1: 6a:2f:aa:f0:a5:da:3c:eb:bd:00:6e:cd:42:e6:f4:45:e0:d0: 11:a5:5b:ca:e1:d0:03:b0:d6:31:72:c2:b2:41:97:81:3c:40: 20:75:69:d3:b2:48:96:e1:cb:91:00:50:c7:9b:0c:cd:30:39: 55:0e:cd:cb:f4:7b:30:8c:3b:35:30:6e:3a:4a:c8:08:b3:32: 5c:87:57:c3:5b:1c:67:85:61:d0:fa:90:ad:98:b1:be:6b:65: a3:5b:4d:18:68:0c:d1:e0:95:70:f0:14:4f:f6:b8:17:00:2e: 82:a9:a8:68:af:5c:fb:12:03:44:d7:8e:7f:9c:11:de:2e:e3: ed:0c:a0:7c:81:6f:a9:fd:a5:f7:b8:5a:9b:f2:0d:4c:fe:fa: 80:db:19:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNUQxMTAvBgNVBAUTKDAyQkVCM0U2MjFGQUJBNjM0MjFFRDNGODg0RkEyNzBC Q0QzMzFENzcwHhcNMjUwNDAyMjI0NTA3WhcNMjUwNDA5MjI0NTA3WjAYMRYwFAYD VQQDEw02N2VkYmRmMy00NjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSwioAsHzlzECmrqYCAAfajZWkU2H7OzTyDg1KQOw2WMohgjRMbicm+S4cTS x+epaAnEEjKzYa+fLl48/tAlK9e+nrPVkewVQDHbTN6mL53gRwgI8hSaZMK8JUtD 4l8EIbS+lsXYOlc1yRdC6PgA9tE4DgoZSW57a9p+wuQ4R8jnIl7nOzRj6ScAQQYR 00u2rbNpf+fCllbQudGjq8FMvzUwMcV4PCthE5B77NejgEc5hVlmDZsuUlNxRENZ g5qyDOZ97IgapodJxUAmeygWzII8EF/MsrEPHDKaXVrAd2FoYruVcjFBOoSIfC/P rh2e7aJSjfAFeo3rwrvRgWaP3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDw2IMA MJmUFIes8OCIQo4CNqoCMB8GA1UdIwQYMBaAFAK+s+Yh+rpjQh7T+IT6JwvNMx13 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU1RC8wRDBGRkJEQzkx RDcxMUVCODZGQTM0MjZDNEY5QUUwMi9BcjZ6NWlINnVtTkNIdFA0aFBvbkM4MHpI WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FyNno1aUg2dW1OQ0h0UDRoUG9uQzgwekhYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU1RC8wRDBGRkJEQzkxRDcxMUVCODZGQTM0MjZDNEY5QUUwMi9BcjZ6NWlINnVt TkNIdFA0aFBvbkM4MHpIWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClI+tpIFJ+ENOw/1K13vHhy0UQ+cF4dY3N6n1oQjShNQlMUBLQiPuL XPlsHfCWWxLcG4IfWUgSHHtUqedmiDba4urQ7SL1ap9+ovhuxdmTp7RMJHIV/48e gBR4qqb914xU/bSo9jA9McjD7qFqL6rwpdo8670Abs1C5vRF4NARpVvK4dADsNYx csKyQZeBPEAgdWnTskiW4cuRAFDHmwzNMDlVDs3L9HswjDs1MG46SsgIszJch1fD WxxnhWHQ+pCtmLG+a2WjW00YaAzR4JVw8BRP9rgXAC6Cqahor1z7EgNE145/nBHe LuPtDKB8gW+p/aX3uFqb8g1M/vqA2xnl -----END CERTIFICATE-----Generated at Fri Apr 4 21:22:59 2025 by rpki-client