$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft File: hy5atTm-Q4V0A9T11FpUcrsgem0.mft (raw, json) Hash identifier: Kgpi5XJkp0r7Jnk69YcNEyNKaIDqzrxHV0UzVzgGPVI= Subject key identifier: DA:58:DC:EC:31:98:33:C2:B4:00:91:13:AE:4A:46:1C:41:FD:4D:F2 Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Certificate serial: 0377 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft Manifest number: 0368 Signing time: Fri 13 Jun 2025 00:29:24 +0000 Manifest this update: Fri 13 Jun 2025 00:29:23 +0000 Manifest next update: Fri 20 Jun 2025 00:29:23 +0000 Files and hashes: 1: hy5atTm-Q4V0A9T11FpUcrsgem0.crl (hash: dvDz+7/ILT8cft2f1DJeo8+r4YoGz1aNfDFsaTjwUk8=) 2: A445EAA0B5B911EC8AADD413C4F9AE02.roa (hash: fxFlUsOaGScQkl9QgTozAWohlmX4iM9s7uV5Ua++ETg=) 3: 1D171A58C76211EC95B63648C4F9AE02.roa (hash: u3mehOty6gVz9qRridn7xauePsp938KB+uM0lLKTBHU=) 4: 2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa (hash: OvtIBWIONkhrTQi/ko/Qtu38pVg+GOOY2iprHCNF2R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 887 (0x377) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193339, serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Validity Not Before: Jun 13 00:29:23 2025 GMT Not After : Jun 20 00:29:23 2025 GMT Subject: CN=684b70e4-20c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1c:a5:78:d2:70:09:39:b7:fa:d2:b3:dc:47: 52:d6:87:75:16:e1:c5:c9:fc:5c:a2:f8:61:3a:af: b4:31:58:65:49:75:bc:d6:1f:06:a7:f6:20:66:6c: 6a:e1:cd:b1:17:76:37:f5:d6:d7:e8:a6:76:ca:50: bf:e3:e0:3e:4d:66:35:dd:d5:79:9e:5b:96:21:b8: 0f:57:4f:15:cd:74:37:19:c7:1d:01:0d:d9:85:93: 10:3a:22:25:34:1a:ac:d0:82:00:8f:09:39:55:16: 64:26:c6:ce:0b:40:fe:1e:39:0f:d0:2f:7b:8d:05: 52:6b:dd:2d:4b:1e:77:74:fd:4f:21:68:6c:41:c7: 60:7f:e3:f2:9a:96:c6:94:bc:68:45:60:40:e1:19: a2:a6:9b:1a:be:99:47:b4:fd:fe:6d:71:9a:82:f5: 46:77:05:4d:f2:2f:46:a0:27:b9:f2:1a:7b:a5:07: cb:93:92:23:8e:0f:1e:7f:92:81:3a:ca:bf:a4:66: 3f:65:ab:1e:e2:f6:a5:ca:f3:46:ad:32:61:06:76: 4a:5a:ae:5f:be:fb:fd:07:4c:9d:24:cf:dc:fb:06: 07:b3:2b:4f:36:72:03:93:c8:2e:c9:4e:fc:0a:12: c8:4c:75:47:58:b5:8f:17:be:a5:a3:de:53:da:cc: 30:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:58:DC:EC:31:98:33:C2:B4:00:91:13:AE:4A:46:1C:41:FD:4D:F2 X509v3 Authority Key Identifier: keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ae:c8:0e:f5:50:ff:cc:55:c0:1f:bc:dd:f6:aa:63:29:54: 90:4b:b8:db:d8:84:3e:d9:6f:2a:81:7c:4e:c4:9d:0c:9d:81: 19:85:e0:34:d2:c8:5a:57:73:8b:00:60:09:5a:ba:21:89:26: a5:8f:46:b6:63:ee:e8:e8:6f:0a:9c:9a:59:61:fe:e5:fd:9e: 03:89:22:20:78:ca:68:04:92:14:46:d8:8c:d9:8b:b7:9e:23: 90:0b:a9:03:4a:fb:a8:b5:70:c8:ec:a3:86:45:f4:2c:b8:0d: e9:88:4f:84:80:63:f7:8a:14:a1:53:36:8e:b8:fc:5e:38:58: e4:35:8a:71:f1:99:39:72:65:ac:6e:e5:9b:ee:ed:0d:88:cf: 8e:6d:e9:25:5e:4d:fd:13:d2:22:4b:56:4b:b8:5d:42:45:72: 50:30:9f:1d:b1:fe:75:f7:06:d2:f2:13:83:68:e3:82:1c:72: 74:2a:bf:2b:16:10:7b:f5:16:52:4c:98:05:f7:92:10:e1:13: e1:dc:2c:d1:da:b6:00:d2:f4:22:30:e5:1b:ed:59:d2:b0:67: dd:1a:35:8c:11:b5:ca:83:f0:eb:c1:73:83:58:b3:72:97:a1: cb:01:77:d8:8a:35:42:07:dc:ca:20:c8:06:57:e7:2d:52:2d: f9:69:ff:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzMzkxMTAvBgNVBAUTKDg3MkU1QUI1MzlCRTQzODU3NDAzRDRGNUQ0NUE1NDcy QkIyMDdBNkQwHhcNMjUwNjEzMDAyOTIzWhcNMjUwNjIwMDAyOTIzWjAYMRYwFAYD VQQDEw02ODRiNzBlNC0yMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmhyleNJwCTm3+tKz3EdS1od1FuHFyfxcovhhOq+0MVhlSXW81h8Gp/YgZmxq 4c2xF3Y39dbX6KZ2ylC/4+A+TWY13dV5nluWIbgPV08VzXQ3GccdAQ3ZhZMQOiIl NBqs0IIAjwk5VRZkJsbOC0D+HjkP0C97jQVSa90tSx53dP1PIWhsQcdgf+PympbG lLxoRWBA4RmippsavplHtP3+bXGagvVGdwVN8i9GoCe58hp7pQfLk5Ijjg8ef5KB Osq/pGY/Zase4valyvNGrTJhBnZKWq5fvvv9B0ydJM/c+wYHsytPNnIDk8guyU78 ChLITHVHWLWPF76lo95T2sww/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpY3Owx mDPCtACRE65KRhxB/U3yMB8GA1UdIwQYMBaAFIcuWrU5vkOFdAPU9dRaVHK7IHpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzMzOS80NTI2Nzk3MEIy RkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0VjBBOVQxMUZwVWNyc2dl bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5NWF0VG0tUTRWMEE5VDExRnBVY3JzZ2VtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzMzOS80NTI2Nzk3MEIyRkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0 VjBBOVQxMUZwVWNyc2dlbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1rsgO9VD/zFXAH7zd9qpjKVSQS7jb2IQ+2W8qgXxOxJ0MnYEZheA0 0shaV3OLAGAJWrohiSalj0a2Y+7o6G8KnJpZYf7l/Z4DiSIgeMpoBJIURtiM2Yu3 niOQC6kDSvuotXDI7KOGRfQsuA3piE+EgGP3ihShUzaOuPxeOFjkNYpx8Zk5cmWs buWb7u0NiM+ObeklXk39E9IiS1ZLuF1CRXJQMJ8dsf519wbS8hODaOOCHHJ0Kr8r FhB79RZSTJgF95IQ4RPh3CzR2rYA0vQiMOUb7VnSsGfdGjWMEbXKg/DrwXODWLNy l6HLAXfYijVCB9zKIMgGV+ctUi35af9+ -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:24 2025 by rpki-client