$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json) Hash identifier: XUudkivprl1C5Q480GXy/SYTB3q2n8HRfa3Ji/Ts8SE= Subject key identifier: D2:30:A4:AC:40:43:28:41:13:CF:C6:AF:3D:CF:67:C1:0A:B9:E9:ED Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Certificate serial: 3489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft Manifest number: 3489 Signing time: Fri 06 Jun 2025 15:13:55 +0000 Manifest this update: Fri 06 Jun 2025 15:13:54 +0000 Manifest next update: Fri 13 Jun 2025 15:13:54 +0000 Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: 3e2R4CyUwKlhwXqnJgqpZaF8hp+IbMEiTnYIvd4W+cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 15:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13449 (0x3489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Validity Not Before: Jun 6 15:13:54 2025 GMT Not After : Jun 13 15:13:54 2025 GMT Subject: CN=684305b2-4b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:91:08:5d:a4:c8:f3:dc:d6:30:63:8d:9c: 9b:2a:fb:ce:c1:3a:bd:9b:2c:de:df:07:d4:d1:a7: 93:cf:5b:7c:8f:bc:b6:bb:fc:17:a3:51:04:28:94: 90:a9:34:40:53:a2:1f:d9:a4:e5:3c:73:5c:5b:e3: 8f:4d:d6:c5:24:37:29:53:db:19:4f:92:99:44:b1: 73:21:78:9e:e3:e9:09:22:18:62:e8:a6:48:ba:08: 1b:6a:a4:6a:e9:38:3b:85:b0:ff:22:6c:59:63:7a: 2f:0a:92:3e:00:ea:f0:d7:49:ac:50:bf:70:3a:5d: d4:c9:26:c8:bf:7c:53:ab:20:dc:e8:95:d9:d3:bc: 5b:7f:56:f0:e0:84:2c:40:5c:eb:54:5b:b7:8a:2e: 8e:d7:82:fe:73:3d:f5:99:6a:a9:dd:61:b0:0a:f9: 0f:13:76:2a:3e:be:a3:56:09:c0:46:28:27:f5:e2: 6b:bd:ee:c1:70:9a:62:26:00:ad:21:a1:04:2e:83: 33:fd:f9:5d:fc:b0:e1:1a:00:cb:a3:33:6c:83:6f: c5:28:73:25:f2:49:00:d0:6d:da:b6:50:75:ae:6a: 67:09:fe:33:88:be:72:a9:87:6f:de:9e:76:30:9f: 6a:9c:06:45:3c:3b:85:fc:1c:8f:fc:51:78:b0:32: 4e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:30:A4:AC:40:43:28:41:13:CF:C6:AF:3D:CF:67:C1:0A:B9:E9:ED X509v3 Authority Key Identifier: keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:2c:2b:e4:8d:8f:9f:52:36:9d:10:61:e6:92:36:d0:6c:b0: 07:02:6c:37:1c:c5:52:fc:d3:74:bc:40:1c:0f:3a:c9:38:f8: d4:50:8d:ea:66:e7:df:3b:b3:a2:12:f0:90:36:07:a8:7a:e8: 52:95:22:cb:90:10:99:73:54:7c:3a:17:19:d6:0b:89:d0:4b: 8f:be:e7:72:1a:63:89:6a:14:2f:64:a2:19:18:3c:ef:32:c3: 70:ad:27:63:5d:28:4f:6e:28:a3:98:5c:a5:b1:18:ce:e9:d2: 1b:46:cb:01:eb:5c:1c:2f:d6:10:32:07:4a:e4:89:eb:4f:97: 73:9c:04:56:c2:35:9a:2d:0f:a1:aa:60:fa:71:ae:12:c5:ec: cb:ce:bc:8c:a7:32:36:9a:7a:b2:fe:31:33:16:23:c2:0f:e0: de:0a:06:0b:c9:e3:11:3c:15:cb:19:ac:c6:b9:fc:0c:79:91: da:3c:1a:5f:c8:d6:11:d3:0c:28:0b:64:68:21:da:82:98:ef: 3a:61:47:04:19:30:a3:ab:c5:e5:c5:9a:7a:3e:83:07:48:10: 1c:ac:80:cb:fa:d9:8a:fa:e5:ce:4a:fc:22:a9:31:77:48:b3: de:8f:51:a5:32:18:69:12:79:85:8d:5b:3b:8d:d1:64:28:c1: a1:0a:f6:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCNUUxMTAvBgNVBAUTKDAxMUQ2MUIyMzNBREYzMENEMjQ3NTYyMTI0QkI3MThC QzYzQUQ2NEUwHhcNMjUwNjA2MTUxMzU0WhcNMjUwNjEzMTUxMzU0WjAYMRYwFAYD VQQDEw02ODQzMDViMi00YjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLCRCF2kyPPc1jBjjZybKvvOwTq9myze3wfU0aeTz1t8j7y2u/wXo1EEKJSQ qTRAU6If2aTlPHNcW+OPTdbFJDcpU9sZT5KZRLFzIXie4+kJIhhi6KZIuggbaqRq 6Tg7hbD/ImxZY3ovCpI+AOrw10msUL9wOl3UySbIv3xTqyDc6JXZ07xbf1bw4IQs QFzrVFu3ii6O14L+cz31mWqp3WGwCvkPE3YqPr6jVgnARign9eJrve7BcJpiJgCt IaEELoMz/fld/LDhGgDLozNsg2/FKHMl8kkA0G3atlB1rmpnCf4ziL5yqYdv3p52 MJ9qnAZFPDuF/ByP/FF4sDJO1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIwpKxA QyhBE8/Grz3PZ8EKuentMB8GA1UdIwQYMBaAFAEdYbIzrfMM0kdWISS7cYvGOtZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI1RS9GNTY1QUREMjFE QTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3elNSMVloSkx0eGk4WTYx azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FSMWhzak90OHd6U1IxWWhKTHR4aThZNjFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI1RS9GNTY1QUREMjFEQTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3 elNSMVloSkx0eGk4WTYxazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCILCvkjY+fUjadEGHmkjbQbLAHAmw3HMVS/NN0vEAcDzrJOPjUUI3q ZuffO7OiEvCQNgeoeuhSlSLLkBCZc1R8OhcZ1guJ0EuPvudyGmOJahQvZKIZGDzv MsNwrSdjXShPbiijmFylsRjO6dIbRssB61wcL9YQMgdK5InrT5dznARWwjWaLQ+h qmD6ca4SxezLzryMpzI2mnqy/jEzFiPCD+DeCgYLyeMRPBXLGazGufwMeZHaPBpf yNYR0wwoC2RoIdqCmO86YUcEGTCjq8XlxZp6PoMHSBAcrIDL+tmK+uXOSvwiqTF3 SLPej1GlMhhpEnmFjVs7jdFkKMGhCvaI -----END CERTIFICATE-----Generated at Sat Jun 7 16:12:26 2025 by rpki-client