$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft File: hy5atTm-Q4V0A9T11FpUcrsgem0.mft (raw, json) Hash identifier: pqLIJXmdsSlQJfO/vIE7r5LRL7gejMWysQREAk+I5Ew= Subject key identifier: F7:E2:CD:06:30:1D:A5:03:2A:CC:F6:50:71:09:1A:E7:18:A3:0A:CA Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Certificate serial: 035F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft Manifest number: 0350 Signing time: Fri 25 Apr 2025 00:47:06 +0000 Manifest this update: Fri 25 Apr 2025 00:47:06 +0000 Manifest next update: Fri 02 May 2025 00:47:06 +0000 Files and hashes: 1: hy5atTm-Q4V0A9T11FpUcrsgem0.crl (hash: q++7zNtY6K1xtI4JEIwoUSW3g7oymTRI+hnAArv6Zfc=) 2: A445EAA0B5B911EC8AADD413C4F9AE02.roa (hash: fxFlUsOaGScQkl9QgTozAWohlmX4iM9s7uV5Ua++ETg=) 3: 1D171A58C76211EC95B63648C4F9AE02.roa (hash: u3mehOty6gVz9qRridn7xauePsp938KB+uM0lLKTBHU=) 4: 2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa (hash: OvtIBWIONkhrTQi/ko/Qtu38pVg+GOOY2iprHCNF2R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 863 (0x35f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193339, serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Validity Not Before: Apr 25 00:47:06 2025 GMT Not After : May 2 00:47:06 2025 GMT Subject: CN=680adb8a-5040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:69:0d:03:93:bf:ce:05:11:cd:be:2a:02:e8: 23:8e:12:48:ad:ea:6f:96:ca:48:8c:8c:0a:ed:6b: 47:8f:86:10:82:5e:e3:4f:2e:64:4f:61:53:8b:80: c9:fc:bc:3a:cb:f4:cd:ed:e5:0d:67:b0:0c:b4:3e: 46:fa:a2:f6:c1:48:5c:56:c3:5f:d4:a3:66:6e:71: a4:3b:82:44:0e:ee:2b:42:93:d7:6b:db:cc:cf:db: 2b:f8:bf:61:34:58:ad:b2:6d:ae:e6:76:f5:b7:89: 1f:9a:03:f8:a5:85:07:cb:16:6d:29:a0:54:e4:55: 0c:19:f3:9a:88:99:07:b5:4b:b9:16:cc:cf:cc:e9: 2f:d2:5a:09:c7:b2:ba:0f:79:e0:47:c8:14:96:d0: 69:b8:aa:e1:8a:bb:46:95:59:db:95:61:8c:0b:68: 3d:00:6d:20:2a:eb:6c:ac:e1:77:89:64:18:ec:17: df:80:04:de:9b:91:fc:d6:0f:ad:cf:51:b3:0e:3b: 71:55:06:2f:92:8f:35:9b:a7:91:b6:9e:34:c9:1b: af:0c:82:e7:a8:2f:2b:22:eb:06:29:c5:75:04:e6: 3e:64:87:a0:44:16:5e:bb:cb:f9:f9:67:ad:25:d5: ac:ae:0b:95:ce:e9:52:92:40:ae:ac:9b:e5:42:8c: 11:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E2:CD:06:30:1D:A5:03:2A:CC:F6:50:71:09:1A:E7:18:A3:0A:CA X509v3 Authority Key Identifier: keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ee:ce:4a:aa:66:3c:63:fd:96:c4:35:3f:c5:4e:1c:2a:a2: a4:82:70:36:49:8a:69:d1:7c:4e:96:19:08:c2:ec:a6:8f:2d: f1:1b:9c:1f:29:2e:7d:20:7d:2a:91:a5:da:93:7f:35:94:ca: 0f:fe:c5:77:99:68:b6:43:6a:82:1b:01:c7:8c:45:85:4b:d7: 05:71:0f:da:33:b9:e4:72:4c:0d:66:e1:fc:46:4f:54:33:ba: 6f:f0:52:2d:e5:2f:2a:e4:69:87:ab:52:27:80:3d:26:69:b5: 1f:43:b2:7d:1d:2e:de:98:4f:c0:5f:a1:4b:11:83:27:bd:51: 6b:f3:b1:28:f8:bf:cf:86:3f:cb:f2:e1:7f:b1:5a:67:50:9b: 95:93:b6:77:02:cb:0f:36:4c:fb:47:95:09:a1:8a:34:d6:e2: 58:9e:63:94:0b:a4:8e:39:23:bc:70:96:1d:29:6c:fc:b0:09: 24:51:ab:de:75:4e:32:c4:aa:b1:23:f5:1a:5b:d0:c8:47:a9: 16:ed:2e:0d:77:3b:95:5d:76:1f:9b:0a:49:a5:e4:a8:3b:3a: c3:79:c1:c5:f9:22:40:00:fa:f3:74:16:b2:91:07:3a:b9:f0: 1b:33:aa:de:d8:7e:bd:1f:59:4c:1f:3b:64:69:65:17:2a:a5: 6c:56:92:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzMzkxMTAvBgNVBAUTKDg3MkU1QUI1MzlCRTQzODU3NDAzRDRGNUQ0NUE1NDcy QkIyMDdBNkQwHhcNMjUwNDI1MDA0NzA2WhcNMjUwNTAyMDA0NzA2WjAYMRYwFAYD VQQDEw02ODBhZGI4YS01MDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWkNA5O/zgURzb4qAugjjhJIrepvlspIjIwK7WtHj4YQgl7jTy5kT2FTi4DJ /Lw6y/TN7eUNZ7AMtD5G+qL2wUhcVsNf1KNmbnGkO4JEDu4rQpPXa9vMz9sr+L9h NFitsm2u5nb1t4kfmgP4pYUHyxZtKaBU5FUMGfOaiJkHtUu5FszPzOkv0loJx7K6 D3ngR8gUltBpuKrhirtGlVnblWGMC2g9AG0gKutsrOF3iWQY7BffgATem5H81g+t z1GzDjtxVQYvko81m6eRtp40yRuvDILnqC8rIusGKcV1BOY+ZIegRBZeu8v5+Wet JdWsrguVzulSkkCurJvlQowRiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfizQYw HaUDKsz2UHEJGucYowrKMB8GA1UdIwQYMBaAFIcuWrU5vkOFdAPU9dRaVHK7IHpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzMzOS80NTI2Nzk3MEIy RkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0VjBBOVQxMUZwVWNyc2dl bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5NWF0VG0tUTRWMEE5VDExRnBVY3JzZ2VtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzMzOS80NTI2Nzk3MEIyRkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0 VjBBOVQxMUZwVWNyc2dlbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT7s5KqmY8Y/2WxDU/xU4cKqKkgnA2SYpp0XxOlhkIwuymjy3xG5wf KS59IH0qkaXak381lMoP/sV3mWi2Q2qCGwHHjEWFS9cFcQ/aM7nkckwNZuH8Rk9U M7pv8FIt5S8q5GmHq1IngD0mabUfQ7J9HS7emE/AX6FLEYMnvVFr87Eo+L/Phj/L 8uF/sVpnUJuVk7Z3AssPNkz7R5UJoYo01uJYnmOUC6SOOSO8cJYdKWz8sAkkUave dU4yxKqxI/UaW9DIR6kW7S4NdzuVXXYfmwpJpeSoOzrDecHF+SJAAPrzdBaykQc6 ufAbM6re2H69H1lMHztkaWUXKqVsVpJm -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:19 2025 by rpki-client