$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft File: ArpjtYYuJwm5DRa33C61z8ii5oQ.mft (raw, json) Hash identifier: sx/f990tCwzjBak/Bdp1g+IvbmJHVyyrv30sg4wPLcs= Subject key identifier: 7A:EB:2F:AB:77:6D:87:1F:F1:28:B3:B9:FE:75:95:71:57:0D:2D:44 Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 Certificate issuer: /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft Manifest number: 01D5 Signing time: Sun 07 Sep 2025 03:15:21 +0000 Manifest this update: Sun 07 Sep 2025 03:15:20 +0000 Manifest next update: Sun 14 Sep 2025 03:15:20 +0000 Files and hashes: 1: ArpjtYYuJwm5DRa33C61z8ii5oQ.crl (hash: VrlIBaSZL1X7M7yhAcXFhHq0PXVhJNzbOxqpgV6msAQ=) 2: 5192AB7ED47811EEB5A6D21AC4F9AE02.roa (hash: xW/u71nn0KALe/rW4D+40PFnNAvvVtQKyJcvAPM8UVs=) 3: A0A7B5161B6D11EE943DBE1AC4F9AE02.roa (hash: w8AYmwvw5WjiU8t0nTCRTmBhXIg32i1mKNjzYab96gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 03:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43EE, serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Validity Not Before: Sep 7 03:15:20 2025 GMT Not After : Sep 14 03:15:20 2025 GMT Subject: CN=68bcf8c8-3e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e1:5f:c9:d3:9d:1f:60:9f:02:0c:48:7c:85: 33:dd:08:58:0a:64:dd:ea:72:f1:0c:0e:e2:d5:69: da:0d:a6:33:4e:0a:52:e3:cb:e2:c0:3b:e2:32:85: 4a:85:da:5b:4d:aa:c1:cc:78:83:77:1b:d4:92:71: f4:14:b0:43:65:f3:6c:f0:c1:b0:d8:f7:3d:4b:a3: 24:a8:7f:b8:64:b7:17:8c:ba:9d:61:28:8b:c6:51: 2d:e3:a6:ca:86:fd:a3:26:91:9a:74:3a:09:d2:ce: 72:d3:3b:15:d2:8f:7f:4a:4d:91:1b:9c:7d:92:73: b1:25:77:68:0d:a1:90:7c:46:24:26:69:15:79:0b: 14:8b:33:df:90:d3:c5:59:3b:cc:24:bb:82:3c:26: 0e:06:4d:e6:78:c1:6c:9a:4f:4e:d2:1b:7d:7a:14: 08:01:b5:7e:d1:51:e6:5a:4e:c0:1a:c1:e4:aa:a6: c6:53:12:c3:5e:69:b4:9a:4c:ed:15:d5:36:8d:b6: ef:47:9b:54:27:3a:4b:11:48:38:f5:e3:2b:6f:58: 9b:19:e3:68:c2:3f:ad:3b:8d:8d:98:a6:8a:10:85: 63:bf:29:7c:58:2c:22:e6:3b:1f:17:0f:1e:ec:64: 08:92:56:b1:d5:96:3a:02:aa:bf:b4:da:35:86:64: 28:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EB:2F:AB:77:6D:87:1F:F1:28:B3:B9:FE:75:95:71:57:0D:2D:44 X509v3 Authority Key Identifier: keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:15:69:f1:b9:20:8e:31:44:db:ef:4d:cd:2e:75:91:e7:74: da:9a:85:5a:31:cb:86:6f:d9:e3:d4:d6:f1:55:bd:0c:ee:63: 49:de:56:14:4c:87:59:fe:35:00:4b:2f:17:51:e3:9b:7b:8f: 09:d6:6b:9e:6b:b2:da:bc:40:13:20:b9:fb:79:e8:1c:2c:93: 34:52:84:c3:ea:c4:61:97:6b:de:ff:fa:f4:90:f6:de:c0:81: 9f:c6:d3:66:7d:e7:a4:bd:7f:4c:db:a4:de:e7:65:d5:fb:dc: 5d:84:85:79:af:7a:14:5c:ec:54:ce:e3:ef:5b:d7:fb:d7:f8: db:61:8f:1c:7a:a8:48:77:16:57:a6:54:0a:eb:ab:25:10:2e: 73:81:bd:b2:d1:71:4f:ac:30:7e:f1:70:81:69:08:8b:b6:f7: 09:de:94:cf:a7:fa:40:20:29:7a:32:75:eb:62:55:f5:24:39: 09:93:97:7f:ef:c8:bd:3b:d0:89:b1:e4:fb:bc:11:1f:bf:bf: 50:1e:76:f5:6a:d6:0a:41:86:b7:9b:22:cb:a7:ae:ea:a2:a5: 2f:7a:15:9b:30:7b:a4:ec:91:80:54:7b:7d:c4:73:92:97:4c: 13:b7:96:9f:93:5c:6d:67:13:91:bb:64:3e:ca:9b:1d:a1:9f: d8:77:cd:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRUUxMTAvBgNVBAUTKDAyQkE2M0I1ODYyRTI3MDlCOTBEMTZCN0RDMkVCNUNG QzhBMkU2ODQwHhcNMjUwOTA3MDMxNTIwWhcNMjUwOTE0MDMxNTIwWjAYMRYwFAYD VQQDEw02OGJjZjhjOC0zZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+FfydOdH2CfAgxIfIUz3QhYCmTd6nLxDA7i1WnaDaYzTgpS48viwDviMoVK hdpbTarBzHiDdxvUknH0FLBDZfNs8MGw2Pc9S6MkqH+4ZLcXjLqdYSiLxlEt46bK hv2jJpGadDoJ0s5y0zsV0o9/Sk2RG5x9knOxJXdoDaGQfEYkJmkVeQsUizPfkNPF WTvMJLuCPCYOBk3meMFsmk9O0ht9ehQIAbV+0VHmWk7AGsHkqqbGUxLDXmm0mkzt FdU2jbbvR5tUJzpLEUg49eMrb1ibGeNowj+tO42NmKaKEIVjvyl8WCwi5jsfFw8e 7GQIklax1ZY6Aqq/tNo1hmQouQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrrL6t3 bYcf8Sizuf51lXFXDS1EMB8GA1UdIwQYMBaAFAK6Y7WGLicJuQ0Wt9wutc/IouaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNFRS80QThBREFDMENE NDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3bTVEUmEzM0M2MXo4aWk1 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FycGp0WVl1SndtNURSYTMzQzYxejhpaTVvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNFRS80QThBREFDMENENDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3 bTVEUmEzM0M2MXo4aWk1b1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3FWnxuSCOMUTb703NLnWR53TamoVaMcuGb9nj1NbxVb0M7mNJ3lYU TIdZ/jUASy8XUeObe48J1muea7LavEATILn7eegcLJM0UoTD6sRhl2ve//r0kPbe wIGfxtNmfeekvX9M26Te52XV+9xdhIV5r3oUXOxUzuPvW9f71/jbYY8ceqhIdxZX plQK66slEC5zgb2y0XFPrDB+8XCBaQiLtvcJ3pTPp/pAICl6MnXrYlX1JDkJk5d/ 78i9O9CJseT7vBEfv79QHnb1atYKQYa3myLLp67qoqUvehWbMHuk7JGAVHt9xHOS l0wTt5afk1xtZxORu2Q+ypsdoZ/Yd80v -----END CERTIFICATE-----Generated at Mon Sep 8 17:41:40 2025 by rpki-client