$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft File: ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft (raw, json) Hash identifier: N+mleF1GHUz6DdEvoAmNXUgX/ulsrG7sbTX1tHRMaV0= Subject key identifier: B4:89:4C:61:31:3A:57:62:D2:AA:15:1C:61:1A:F9:1E:A5:A5:72:AE Authority key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 Certificate issuer: /CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332 Certificate serial: 0658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft Manifest number: 0650 Signing time: Wed 02 Apr 2025 22:29:19 +0000 Manifest this update: Wed 02 Apr 2025 22:29:19 +0000 Manifest next update: Wed 09 Apr 2025 22:29:19 +0000 Files and hashes: 1: ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl (hash: 8hqNhPph8PsU2ij5OVu3FVNn4mWbceuEkYjO5uPDmqg=) 2: 1B25BF167FE111EBB6C0941AC4F9AE02.roa (hash: UCps9/WJGo9HkezcUcRKvCp07t2PRwHy6+kCIMyeCTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E45 Validity Not Before: Apr 2 22:29:19 2025 GMT Not After : Apr 9 22:29:19 2025 GMT Subject: CN=67edba3f-dfc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2e:ed:aa:8f:7b:71:9f:ae:b6:12:a6:c5:81: a4:5b:8e:3f:33:ee:c1:4a:b9:e6:77:b4:16:20:1f: 8d:63:64:f2:82:43:43:9d:55:f8:14:99:a7:78:8e: 4a:67:e6:25:31:21:b7:df:b8:c7:75:10:67:4f:b3: 74:09:32:bf:0c:7e:9c:39:1d:af:2c:ef:03:54:03: 50:52:b1:b6:de:eb:15:2a:a0:f0:ca:91:4b:33:9c: 88:a9:bf:66:08:0a:9a:54:5d:f3:28:82:e4:75:1c: 0b:02:c9:73:9d:ea:4a:b0:15:08:20:34:7a:7f:ae: c6:c0:b0:1e:d1:18:9f:9f:23:63:f8:c7:4d:68:bc: 81:41:82:b5:9a:31:4f:5d:05:f2:f4:74:ef:98:05: 5c:39:ae:f7:97:f3:56:4b:b6:ce:2f:a9:dc:28:4c: 18:09:7e:91:7b:73:0e:d8:8e:77:bb:ee:05:f7:ee: 9b:dc:e9:e0:55:bb:02:12:aa:53:f2:c9:2d:84:3f: 1b:81:8a:58:bf:d9:fb:87:52:4c:d1:72:38:92:15: c3:1c:a0:52:92:d9:67:29:77:56:dc:c7:45:9b:b2: d0:cf:a1:d2:7e:92:8d:a0:13:1b:df:27:05:25:da: b4:38:26:47:2a:62:54:81:cb:e1:43:5a:68:d4:6e: a5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:89:4C:61:31:3A:57:62:D2:AA:15:1C:61:1A:F9:1E:A5:A5:72:AE X509v3 Authority Key Identifier: keyid:6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:28:ff:82:92:55:46:1b:92:c8:e7:e3:4f:c2:58:1f:11:4b: c4:a5:cb:e6:f3:54:51:83:60:85:5e:4d:cd:20:1c:26:5c:8c: 88:82:a4:55:42:06:1e:db:c2:24:88:72:e8:86:2e:e3:49:4e: 27:12:7c:41:2a:a2:08:63:7e:88:33:5e:bb:2c:22:c2:5c:da: 80:b1:15:c7:c6:a9:4e:07:2b:9f:31:92:f6:70:97:59:2c:e8: f6:30:9f:cb:46:28:e0:56:8a:28:58:85:8e:55:e7:90:3c:7f: 04:19:47:b7:d2:98:33:d6:11:fd:93:bc:fb:83:74:cc:e7:50: 07:99:fd:a0:6e:03:44:1e:b6:76:24:4b:20:e3:e0:1f:09:88: 9a:35:25:4e:be:9b:a6:e8:b9:9c:29:f8:e6:8a:b6:ee:6f:46: 9c:ca:a5:b9:2c:d7:10:88:fd:0b:17:de:df:fe:2b:1c:2f:58: 87:25:b7:ae:1a:a4:a0:3c:69:85:e7:4e:ac:74:6a:1c:5b:62: e9:46:29:9e:b8:52:dc:b6:57:c5:f4:e6:86:cd:9b:45:46:fc: 9c:32:7c:57:00:0f:ed:49:fe:4d:78:16:71:83:e0:6b:b2:09: 16:71:d9:7c:2f:44:a3:00:1a:0e:73:eb:8a:b3:1a:7a:c0:91: f3:32:07:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFNDUxMTAvBgNVBAUTKDZBQkZFRkM4MzQxOTExNkVGMzRBRjNBNUE3RkY0OERF MDNCRTgzMzIwHhcNMjUwNDAyMjIyOTE5WhcNMjUwNDA5MjIyOTE5WjAYMRYwFAYD VQQDEw02N2VkYmEzZi1kZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6S7tqo97cZ+uthKmxYGkW44/M+7BSrnmd7QWIB+NY2TygkNDnVX4FJmneI5K Z+YlMSG337jHdRBnT7N0CTK/DH6cOR2vLO8DVANQUrG23usVKqDwypFLM5yIqb9m CAqaVF3zKILkdRwLAslznepKsBUIIDR6f67GwLAe0RifnyNj+MdNaLyBQYK1mjFP XQXy9HTvmAVcOa73l/NWS7bOL6ncKEwYCX6Re3MO2I53u+4F9+6b3OngVbsCEqpT 8skthD8bgYpYv9n7h1JM0XI4khXDHKBSktlnKXdW3MdFm7LQz6HSfpKNoBMb3ycF Jdq0OCZHKmJUgcvhQ1po1G6lOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSJTGEx Oldi0qoVHGEa+R6lpXKuMB8GA1UdIwQYMBaAFGq/78g0GRFu80rzpaf/SN4DvoMy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEU0NS9GOEYxQzE5NDdG REUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVXN3pTdk9scF85STNnTy1n ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FyX3Z5RFFaRVc3elN2T2xwXzlJM2dPLWd6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEU0NS9GOEYxQzE5NDdGREUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVX N3pTdk9scF85STNnTy1nekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmKP+CklVGG5LI5+NPwlgfEUvEpcvm81RRg2CFXk3NIBwmXIyIgqRV QgYe28IkiHLohi7jSU4nEnxBKqIIY36IM167LCLCXNqAsRXHxqlOByufMZL2cJdZ LOj2MJ/LRijgVoooWIWOVeeQPH8EGUe30pgz1hH9k7z7g3TM51AHmf2gbgNEHrZ2 JEsg4+AfCYiaNSVOvpum6LmcKfjmirbub0acyqW5LNcQiP0LF97f/iscL1iHJbeu GqSgPGmF506sdGocW2LpRimeuFLctlfF9OaGzZtFRvycMnxXAA/tSf5NeBZxg+Br sgkWcdl8L0SjABoOc+uKsxp6wJHzMgf+ -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:44 2025 by rpki-client