$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft File: fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json) Hash identifier: +wfQXXQRVHqjBspYccaKkcCHqicsKzYPRcedQmrwb28= Subject key identifier: E3:18:0A:A9:47:96:13:14:03:C6:1A:95:F0:31:D3:62:66:EB:E0:EF Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Certificate serial: 1086 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft Manifest number: 105E Signing time: Thu 24 Apr 2025 17:25:16 +0000 Manifest this update: Thu 24 Apr 2025 17:25:15 +0000 Manifest next update: Thu 01 May 2025 17:25:15 +0000 Files and hashes: 1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: 83MRByA8TZefUhhznOz5P5SYyDzuDCAcTRunGI2754w=) 2: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: sps6OZoL5QmmM3ZpPmWyZ0iMnHwS3c4js0f2ItWVO3c=) 3: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: dVJZeCweb+XTaOi/1adyN7uBH6rIcemfVJD3fZ76wkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4230 (0x1086) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Validity Not Before: Apr 24 17:25:15 2025 GMT Not After : May 1 17:25:15 2025 GMT Subject: CN=680a73fb-ab3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e5:8d:c7:ed:25:20:0c:11:85:62:b5:7a:70: 5c:40:d2:c5:62:6d:69:ee:19:d8:73:ce:a5:ef:36: 69:ef:e0:2d:a5:7f:33:23:96:0a:14:d5:4c:b3:db: 1b:52:33:f7:98:7c:fb:81:7f:9f:06:0f:f2:55:2f: 14:6d:78:63:23:c1:84:b2:bc:a8:4a:a2:fe:f8:33: 60:e2:68:1c:12:03:54:5c:45:b0:b8:8b:b8:58:e3: e8:f9:6d:26:09:81:44:ea:30:93:20:b5:6e:7a:5a: c3:56:0a:f0:86:ba:ee:17:70:a9:cf:3a:46:c1:db: 3a:c1:ee:f7:43:d2:b4:a6:de:cd:c2:1d:65:be:c4: 72:65:d2:be:f1:8e:19:9b:1a:04:c4:ed:f3:ba:0d: 76:36:d8:1c:23:68:64:6d:4b:1b:dc:cb:50:a3:4b: ea:a7:32:b4:c8:c8:ae:10:25:49:2f:6e:46:fd:28: d2:db:24:5f:42:6b:17:28:f4:d5:d1:bf:62:af:93: 3b:32:76:17:1c:cb:5d:12:30:62:09:6a:41:5a:77: 8a:c0:02:ab:ba:f7:0e:d3:2f:76:35:01:ac:89:80: 84:57:82:77:89:fc:84:16:69:0f:5d:4b:64:68:35: fa:ce:da:3f:57:8d:03:b9:f6:14:3b:68:42:26:31: cb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:18:0A:A9:47:96:13:14:03:C6:1A:95:F0:31:D3:62:66:EB:E0:EF X509v3 Authority Key Identifier: keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:86:6e:70:20:4a:cd:90:ba:0e:83:85:fa:dd:81:2a:25:3a: dd:ca:0e:50:b1:75:41:27:52:c1:66:87:41:ba:04:7b:37:7d: 16:72:b7:7e:4f:d1:db:55:3e:29:5d:d8:24:aa:5e:4a:6c:71: c0:6a:4b:b9:9f:e4:7a:d1:3a:12:37:d5:41:d1:b0:fe:5c:5f: f9:78:ec:6b:7e:28:02:4c:e9:dc:53:6b:13:59:08:fb:cf:74: 43:c0:5c:c7:99:b1:26:8a:61:84:8f:84:de:0f:af:d8:64:9b: 48:1f:45:6c:6a:40:0a:c6:b6:04:13:9e:8a:ab:8f:85:dc:08: da:d2:69:10:fe:ad:7b:01:60:1c:b5:65:b4:72:2f:c2:53:ce: a1:87:b4:3e:fc:fa:15:9a:63:e7:3a:9b:3d:d1:ba:68:47:c4: 68:12:f1:57:d8:a8:c3:b3:6f:d4:64:43:37:b2:6e:be:37:d5: c3:9d:25:a2:5a:f8:99:ed:c5:f7:f6:01:e7:8a:51:66:73:bd: bb:bb:1a:1e:1e:49:e3:ee:b1:bc:d3:e5:11:b6:dd:0b:26:81: 67:0f:e9:dd:1c:da:0d:3d:13:59:55:ac:fa:94:80:b1:6f:2a: d4:8d:23:1e:b2:a0:00:e0:5c:3c:6d:ef:29:b4:0b:3e:58:c0: d5:63:5e:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKDdDN0NBMDgxOTUwREFFRkM3QzU0QjhDNDQ2OThCNDhF OEQ3QzY5QjgwHhcNMjUwNDI0MTcyNTE1WhcNMjUwNTAxMTcyNTE1WjAYMRYwFAYD VQQDEw02ODBhNzNmYi1hYjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+WNx+0lIAwRhWK1enBcQNLFYm1p7hnYc86l7zZp7+AtpX8zI5YKFNVMs9sb UjP3mHz7gX+fBg/yVS8UbXhjI8GEsryoSqL++DNg4mgcEgNUXEWwuIu4WOPo+W0m CYFE6jCTILVuelrDVgrwhrruF3CpzzpGwds6we73Q9K0pt7Nwh1lvsRyZdK+8Y4Z mxoExO3zug12NtgcI2hkbUsb3MtQo0vqpzK0yMiuECVJL25G/SjS2yRfQmsXKPTV 0b9ir5M7MnYXHMtdEjBiCWpBWneKwAKruvcO0y92NQGsiYCEV4J3ifyEFmkPXUtk aDX6zto/V40DufYUO2hCJjHL9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMYCqlH lhMUA8YalfAx02Jm6+DvMB8GA1UdIwQYMBaAFHx8oIGVDa78fFS4xEaYtI6NfGm4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMzYyQTFDQTNC MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2eDhWTGpFUnBpMGpvMThh YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZIeWdnWlVOcnZ4OFZMakVScGkwam8xOGFiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMzYyQTFDQTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2 eDhWTGpFUnBpMGpvMThhYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBshm5wIErNkLoOg4X63YEqJTrdyg5QsXVBJ1LBZodBugR7N30Wcrd+ T9HbVT4pXdgkql5KbHHAaku5n+R60ToSN9VB0bD+XF/5eOxrfigCTOncU2sTWQj7 z3RDwFzHmbEmimGEj4TeD6/YZJtIH0VsakAKxrYEE56Kq4+F3Aja0mkQ/q17AWAc tWW0ci/CU86hh7Q+/PoVmmPnOps90bpoR8RoEvFX2KjDs2/UZEM3sm6+N9XDnSWi WviZ7cX39gHnilFmc727uxoeHknj7rG80+URtt0LJoFnD+ndHNoNPRNZVaz6lICx byrUjSMesqAA4Fw8be8ptAs+WMDVY14W -----END CERTIFICATE-----Generated at Sat Apr 26 12:26:53 2025 by rpki-client