$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft File: ArpjtYYuJwm5DRa33C61z8ii5oQ.mft (raw, json) Hash identifier: +0+58gxCb9KQW83HvADlYbAJjyFZvSwhAW09aHWaTpU= Subject key identifier: 1C:EE:5D:40:44:DD:72:B1:04:4A:6C:7A:BC:3C:7C:0C:8C:09:79:68 Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 Certificate issuer: /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft Manifest number: 01A2 Signing time: Sat 31 May 2025 03:07:54 +0000 Manifest this update: Sat 31 May 2025 03:07:53 +0000 Manifest next update: Sat 07 Jun 2025 03:07:53 +0000 Files and hashes: 1: ArpjtYYuJwm5DRa33C61z8ii5oQ.crl (hash: JDb8RVjIOpTjvl0//9+KNx9CXQCtAFpnhbRclm+HbfA=) 2: 5192AB7ED47811EEB5A6D21AC4F9AE02.roa (hash: xW/u71nn0KALe/rW4D+40PFnNAvvVtQKyJcvAPM8UVs=) 3: A0A7B5161B6D11EE943DBE1AC4F9AE02.roa (hash: w8AYmwvw5WjiU8t0nTCRTmBhXIg32i1mKNjzYab96gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43EE, serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Validity Not Before: May 31 03:07:53 2025 GMT Not After : Jun 7 03:07:53 2025 GMT Subject: CN=683a7289-8ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:84:39:c6:f9:c1:a1:20:a3:54:3d:74:72:49: 4a:c0:6b:82:81:88:96:13:55:fb:49:85:6e:f7:5e: 15:3b:5c:ff:f3:18:10:7a:95:1d:55:10:f2:58:6b: c0:06:cd:30:7b:78:b8:43:31:a5:48:a2:39:87:8c: 4e:ef:c7:a1:73:81:bf:e5:9f:53:66:c0:fb:db:b9: de:17:17:e7:a5:fc:f1:85:4e:e9:56:7a:29:18:d8: ac:47:95:d9:eb:18:c0:f3:04:ba:b6:9b:e5:61:d6: c2:55:26:81:b5:15:fe:4f:a0:52:bb:36:f5:89:88: 3a:ab:8c:bd:23:00:2c:8d:f2:bc:b2:0b:3c:93:9b: 19:8d:dc:f3:3f:29:78:87:53:09:9c:1b:51:44:31: 7e:a6:da:f5:27:a4:07:a2:88:0e:fd:06:5c:b5:bb: cd:e7:e4:76:02:50:f2:24:4a:69:63:fa:13:68:b5: 75:d6:02:42:d6:08:e6:61:72:c3:2c:63:a5:d8:6d: 7a:82:ed:40:76:d3:0b:ae:6d:7e:f0:17:3b:fc:e0: 14:22:a0:33:0d:09:43:32:01:d5:94:fa:e8:a2:40: 0c:96:e8:c6:5a:07:22:ea:9e:3c:0c:01:e8:77:10: 16:65:13:33:ac:b8:10:04:46:8a:31:72:90:ed:56: d1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EE:5D:40:44:DD:72:B1:04:4A:6C:7A:BC:3C:7C:0C:8C:09:79:68 X509v3 Authority Key Identifier: keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4d:11:84:6a:4c:94:65:9a:78:38:f1:58:80:38:f4:5c:a0: ca:59:a7:ba:95:a4:8b:37:a3:8a:27:60:ee:6e:da:26:b2:af: c4:b3:84:5b:f8:65:24:85:1b:cd:12:99:03:59:78:6f:53:51: ea:45:0c:d8:06:48:e5:ab:e9:66:f6:fc:1a:41:bf:0a:23:49: a8:dd:7b:9d:77:30:89:b2:23:3b:3b:66:21:63:84:ed:f5:7e: 56:18:0d:29:aa:17:b8:d9:71:5b:2d:f9:f0:b9:f5:34:d3:9f: 3e:af:b9:7c:21:50:05:79:96:1c:f2:60:4c:4e:ae:d0:81:c7: 33:58:b6:c1:f8:89:d2:87:94:1f:17:83:e2:36:45:b8:7a:94: 1f:0b:01:e2:bb:6a:bc:93:d4:c2:9a:29:c2:1a:32:df:36:cf: 54:9b:4d:1f:5d:d0:8b:9a:bd:07:f1:8f:7f:8f:59:f0:33:1f: ad:f5:77:d6:ff:49:f5:6f:aa:3f:10:95:22:f7:1f:d7:72:f1: dc:39:12:d8:20:a7:99:80:54:80:bc:16:bb:71:ce:8f:47:c7: 9a:3c:0a:01:f5:a8:5f:1e:26:c0:7b:56:d6:de:49:87:d3:09: 1f:cf:c0:b2:7a:10:9c:63:f7:7f:3d:d1:4d:53:e6:14:45:33: b6:fc:94:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRUUxMTAvBgNVBAUTKDAyQkE2M0I1ODYyRTI3MDlCOTBEMTZCN0RDMkVCNUNG QzhBMkU2ODQwHhcNMjUwNTMxMDMwNzUzWhcNMjUwNjA3MDMwNzUzWjAYMRYwFAYD VQQDEw02ODNhNzI4OS04ZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IQ5xvnBoSCjVD10cklKwGuCgYiWE1X7SYVu914VO1z/8xgQepUdVRDyWGvA Bs0we3i4QzGlSKI5h4xO78ehc4G/5Z9TZsD727neFxfnpfzxhU7pVnopGNisR5XZ 6xjA8wS6tpvlYdbCVSaBtRX+T6BSuzb1iYg6q4y9IwAsjfK8sgs8k5sZjdzzPyl4 h1MJnBtRRDF+ptr1J6QHoogO/QZctbvN5+R2AlDyJEppY/oTaLV11gJC1gjmYXLD LGOl2G16gu1AdtMLrm1+8Bc7/OAUIqAzDQlDMgHVlProokAMlujGWgci6p48DAHo dxAWZRMzrLgQBEaKMXKQ7VbR8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzuXUBE 3XKxBEpserw8fAyMCXloMB8GA1UdIwQYMBaAFAK6Y7WGLicJuQ0Wt9wutc/IouaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNFRS80QThBREFDMENE NDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3bTVEUmEzM0M2MXo4aWk1 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FycGp0WVl1SndtNURSYTMzQzYxejhpaTVvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNFRS80QThBREFDMENENDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3 bTVEUmEzM0M2MXo4aWk1b1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqTRGEakyUZZp4OPFYgDj0XKDKWae6laSLN6OKJ2Dubtomsq/Es4Rb +GUkhRvNEpkDWXhvU1HqRQzYBkjlq+lm9vwaQb8KI0mo3XuddzCJsiM7O2YhY4Tt 9X5WGA0pqhe42XFbLfnwufU0058+r7l8IVAFeZYc8mBMTq7QgcczWLbB+InSh5Qf F4PiNkW4epQfCwHiu2q8k9TCminCGjLfNs9Um00fXdCLmr0H8Y9/j1nwMx+t9XfW /0n1b6o/EJUi9x/XcvHcORLYIKeZgFSAvBa7cc6PR8eaPAoB9ahfHibAe1bW3kmH 0wkfz8CyehCcY/d/PdFNU+YURTO2/JRy -----END CERTIFICATE-----Generated at Sat May 31 16:36:54 2025 by rpki-client