$ rpki-client -vvf rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft File: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft (raw, json) Hash identifier: /9XNYMJWKnp+IqUtJ4rBCI2LwkuOrgXmFrc3b+un73s= Subject key identifier: E0:36:94:C7:FC:12:73:42:3E:2C:FB:BB:1E:15:6C:72:41:41:80:D0 Authority key identifier: 01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E Certificate issuer: /CN=A914BCB6/serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E Certificate serial: 05BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft Manifest number: 05AE Signing time: Fri 30 May 2025 23:23:11 +0000 Manifest this update: Fri 30 May 2025 23:23:10 +0000 Manifest next update: Fri 06 Jun 2025 23:23:10 +0000 Files and hashes: 1: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl (hash: TL6huxZraC+ExBBtJJfjON50Yamn4l/B18+v5EALfNs=) 2: F2004572BAED11ECA89EC43AC4F9AE02.roa (hash: zKxvUfg84Vzic8wgNEbv3jYhKTD7shMSTxfN8vMzwMs=) 3: 3D3D3166A8C511EC8F560C42C4F9AE02.roa (hash: /FFxW4TannNv2a3yqsCchm+CH/MvcSFfyvNHDfDpVao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1466 (0x5ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BCB6, serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E Validity Not Before: May 30 23:23:10 2025 GMT Not After : Jun 6 23:23:10 2025 GMT Subject: CN=683a3dde-383b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:26:ee:ab:4b:3e:8b:df:67:22:9b:35:d2:dc: 3f:a8:7d:d2:81:d1:05:99:03:f0:dd:35:e4:d4:90: a5:e7:b7:9e:a6:be:ef:3f:c4:8c:5a:13:4a:62:22: 4b:82:76:c8:e6:f4:37:ed:7b:83:52:ee:2d:67:74: ef:08:a3:e7:b8:cd:73:33:4e:40:be:63:a9:60:a1: d9:f9:5f:98:b7:15:94:14:2b:e1:f2:fe:f7:6c:b6: 61:74:6d:68:85:0b:7c:18:53:68:ee:c9:6a:e6:e0: 22:b7:31:07:3c:b1:27:67:fc:1e:c6:e8:e1:e4:d9: 8e:da:27:df:41:ea:1a:d9:16:ca:96:fa:b9:ca:2a: 54:85:fc:fb:3f:7e:21:47:85:82:3a:e0:c4:e3:1f: 55:25:55:a6:18:f4:c6:e6:79:84:78:0c:cb:4a:fd: a7:00:39:a4:b0:41:1d:19:a0:f3:de:71:f0:06:9f: cc:21:83:0b:22:03:27:6b:82:37:f9:23:42:e6:b0: f0:22:f7:74:0a:df:56:cd:7e:43:06:e0:70:d8:eb: 9e:dd:92:d8:a0:cb:bc:fd:49:99:a6:17:62:f8:af: f4:2e:60:b6:16:43:94:5c:75:41:3a:a0:bf:36:a9: 1c:e4:7d:03:ac:2b:45:15:8b:f6:d1:98:8e:b8:81: d4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:36:94:C7:FC:12:73:42:3E:2C:FB:BB:1E:15:6C:72:41:41:80:D0 X509v3 Authority Key Identifier: keyid:01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:2f:a3:6e:5c:14:fe:30:9e:48:b9:19:8a:c2:ff:f2:e6:50: 61:55:f4:b9:ad:d8:1c:74:94:e8:fc:ba:0a:ff:b3:91:7e:bd: fe:3b:95:89:e8:53:84:df:93:1d:21:df:6e:76:51:54:bb:72: 15:f3:32:67:c1:f9:53:85:66:fc:22:ce:4e:d6:6e:5d:88:60: e7:ed:e5:55:6c:25:57:f0:2c:2a:e8:91:63:52:55:14:cd:f3: 09:96:5f:81:0f:c0:92:e9:f7:b4:27:dc:91:33:72:1f:a8:10: 11:fb:a3:c9:8d:f6:15:a5:e4:8d:6b:e4:2c:86:b1:27:92:8c: d3:c8:5c:06:40:4e:10:07:bc:ef:3a:d9:5b:f8:b7:0d:64:d3: 4b:da:7a:2f:97:f6:ed:4e:0a:e7:49:cb:5a:db:9e:06:06:f8: 3f:ab:fd:ba:85:4f:4f:87:be:02:42:5e:77:83:87:b5:d9:78: 41:82:b4:3e:47:bb:3a:b4:72:6f:38:df:f7:26:51:3b:b5:65: 71:22:61:e3:c8:a0:c3:03:87:3a:32:3e:8c:20:9c:03:0d:8d: ac:fc:a7:43:14:e7:07:62:e4:9a:b8:b7:57:95:ee:96:0a:8d: 0a:72:1d:1d:cc:fc:60:d3:d6:f7:9a:0b:d4:85:09:d6:42:16: 85:55:7e:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDQjYxMTAvBgNVBAUTKDAxMTBCQjNBQjUwRTNBMEQ0NDkwQzMyMTAzQkJDNDA1 NERDNjgyMUUwHhcNMjUwNTMwMjMyMzEwWhcNMjUwNjA2MjMyMzEwWjAYMRYwFAYD VQQDEw02ODNhM2RkZS0zODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ybuq0s+i99nIps10tw/qH3SgdEFmQPw3TXk1JCl57eepr7vP8SMWhNKYiJL gnbI5vQ37XuDUu4tZ3TvCKPnuM1zM05AvmOpYKHZ+V+YtxWUFCvh8v73bLZhdG1o hQt8GFNo7slq5uAitzEHPLEnZ/wexujh5NmO2iffQeoa2RbKlvq5yipUhfz7P34h R4WCOuDE4x9VJVWmGPTG5nmEeAzLSv2nADmksEEdGaDz3nHwBp/MIYMLIgMna4I3 +SNC5rDwIvd0Ct9WzX5DBuBw2Oue3ZLYoMu8/UmZphdi+K/0LmC2FkOUXHVBOqC/ Nqkc5H0DrCtFFYv20ZiOuIHUNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOA2lMf8 EnNCPiz7ux4VbHJBQYDQMB8GA1UdIwQYMBaAFAEQuzq1DjoNRJDDIQO7xAVNxoIe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkNCNi8yQUI3Q0M1QUND RjExMUVCOTE0MjE5NThDNEY5QUUwMi9BUkM3T3JVT09nMUVrTU1oQTd2RUJVM0dn aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FSQzdPclVPT2cxRWtNTWhBN3ZFQlUzR2doNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkNCNi8yQUI3Q0M1QUNDRjExMUVCOTE0MjE5NThDNEY5QUUwMi9BUkM3T3JVT09n MUVrTU1oQTd2RUJVM0dnaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/L6NuXBT+MJ5IuRmKwv/y5lBhVfS5rdgcdJTo/LoK/7ORfr3+O5WJ 6FOE35MdId9udlFUu3IV8zJnwflThWb8Is5O1m5diGDn7eVVbCVX8Cwq6JFjUlUU zfMJll+BD8CS6fe0J9yRM3IfqBAR+6PJjfYVpeSNa+QshrEnkozTyFwGQE4QB7zv Otlb+LcNZNNL2novl/btTgrnScta254GBvg/q/26hU9Ph74CQl53g4e12XhBgrQ+ R7s6tHJvON/3JlE7tWVxImHjyKDDA4c6Mj6MIJwDDY2s/KdDFOcHYuSauLdXle6W Co0Kch0dzPxg09b3mgvUhQnWQhaFVX5q -----END CERTIFICATE-----Generated at Sat May 31 16:47:49 2025 by rpki-client