$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json) Hash identifier: 2aZ4tY+KILIJZF9FRuZRkmNsCSGqUUucWjdiZFvMkZg= Subject key identifier: B2:69:D2:17:8F:07:79:77:6F:F2:F9:51:06:D2:1F:E9:E9:85:8E:9E Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft Manifest number: E2 Signing time: Fri 25 Apr 2025 04:35:39 +0000 Manifest this update: Fri 25 Apr 2025 04:35:38 +0000 Manifest next update: Fri 02 May 2025 04:35:38 +0000 Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: sfNrYodnRrZtnUHKDgc2OYeW8M3thDLE5HhoPo4HV+s=) 2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: w6qwhTkmhaSB3ncvO8yCXadiw5lkWAA4VBrSx+fRpEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Validity Not Before: Apr 25 04:35:38 2025 GMT Not After : May 2 04:35:38 2025 GMT Subject: CN=680b111a-d861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:69:3d:8e:36:ce:16:80:b3:c6:0c:40:0c:56: 1c:6d:1c:72:aa:e3:43:16:92:23:ed:d8:76:2c:66: ed:6f:6b:93:9a:25:82:2b:67:a7:aa:00:ce:c2:ab: ac:cc:19:12:2b:82:aa:56:a0:73:8a:04:49:e6:9d: 77:69:b6:38:ec:3d:9d:1e:85:92:c4:3d:d2:81:b0: 1a:f4:af:e2:65:e3:05:7b:3c:8b:8f:03:54:3e:b7: 69:49:19:4f:00:a2:d8:6c:ff:78:4d:73:6f:82:6b: 9d:d4:f0:dd:16:eb:33:1e:27:f1:f2:da:b4:1b:55: 85:62:6f:df:d7:b5:56:32:1b:56:f4:5c:0a:83:18: f3:47:70:4e:94:be:b9:d1:93:ae:30:dc:f8:1e:38: 6e:a9:0d:65:d0:d0:a2:dc:6e:ea:2a:6a:91:e1:1a: cd:4e:71:77:fb:06:e2:f1:8b:10:1b:13:40:9f:70: 99:cb:4a:82:75:fd:a3:2b:1d:2a:12:85:c5:26:80: 33:96:e7:f5:c0:63:e0:f4:ae:13:40:b6:48:58:a2: 00:e4:ec:b1:28:07:a5:c5:ae:d2:34:76:ed:33:c5: 0a:44:3d:ff:6f:3a:28:91:c9:fd:ef:7c:eb:c7:44: c6:23:b6:71:9a:0b:0b:db:2e:74:c3:0d:89:71:14: 50:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:69:D2:17:8F:07:79:77:6F:F2:F9:51:06:D2:1F:E9:E9:85:8E:9E X509v3 Authority Key Identifier: keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:38:ec:e8:db:13:2f:77:7d:aa:13:de:b4:58:72:50:ab:b4: 60:29:bb:6d:83:52:29:4e:b5:7d:93:73:18:97:49:09:22:cf: 0a:6b:e6:04:a9:dd:05:dd:ed:a8:96:66:74:ba:e4:a9:41:8e: 9b:31:f1:ab:0d:8e:56:72:f4:a1:66:a7:21:e0:11:a7:6f:90: 85:e4:4e:3d:88:ed:21:67:c2:28:f4:04:29:b0:c9:fd:49:92: 26:7f:b0:1e:8b:80:45:47:23:23:fb:ae:e8:8b:6b:b1:20:a0: dc:fd:a1:ef:a0:6c:b6:a2:2f:d5:c8:76:9d:4b:ca:6e:15:2a: 64:db:f7:f2:0e:93:31:4a:7c:ca:d5:ef:cc:db:b3:50:3b:21: 0b:e1:82:41:e4:f1:49:4e:69:98:47:04:46:20:bb:6e:c4:5e: 26:6d:c7:66:00:95:a1:0c:f0:8d:08:10:8d:4c:a5:0e:f2:e4: af:0e:33:e1:55:dc:07:9e:00:cc:dd:72:0a:88:db:37:ce:4c: 51:26:db:50:fd:27:33:4f:15:71:78:37:71:af:e9:96:6b:79: bb:28:e9:d5:48:5d:3a:02:5d:c0:5a:2d:fd:f6:d1:55:8b:b0: 23:c2:04:02:f4:82:c3:c8:a4:0e:51:05:09:9f:ff:2c:3e:72: 1b:6f:b5:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDg3MkM5MzY4NjU2Qzc3ODM1N0MyQTVBOTlCRUNGRkY2 Nzc1NTBBQzgwHhcNMjUwNDI1MDQzNTM4WhcNMjUwNTAyMDQzNTM4WjAYMRYwFAYD VQQDEw02ODBiMTExYS1kODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02k9jjbOFoCzxgxADFYcbRxyquNDFpIj7dh2LGbtb2uTmiWCK2enqgDOwqus zBkSK4KqVqBzigRJ5p13abY47D2dHoWSxD3SgbAa9K/iZeMFezyLjwNUPrdpSRlP AKLYbP94TXNvgmud1PDdFuszHifx8tq0G1WFYm/f17VWMhtW9FwKgxjzR3BOlL65 0ZOuMNz4HjhuqQ1l0NCi3G7qKmqR4RrNTnF3+wbi8YsQGxNAn3CZy0qCdf2jKx0q EoXFJoAzluf1wGPg9K4TQLZIWKIA5OyxKAelxa7SNHbtM8UKRD3/bzookcn973zr x0TGI7ZxmgsL2y50ww2JcRRQZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJp0heP B3l3b/L5UQbSH+nphY6eMB8GA1UdIwQYMBaAFIcsk2hlbHeDV8KlqZvs//Z3VQrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83NUEwQ0QxNEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0Tlh3cVdwbS16XzluZFZD c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83NUEwQ0QxNEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0 Tlh3cVdwbS16XzluZFZDc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLOOzo2xMvd32qE960WHJQq7RgKbttg1IpTrV9k3MYl0kJIs8Ka+YE qd0F3e2olmZ0uuSpQY6bMfGrDY5WcvShZqch4BGnb5CF5E49iO0hZ8Io9AQpsMn9 SZImf7Aei4BFRyMj+67oi2uxIKDc/aHvoGy2oi/VyHadS8puFSpk2/fyDpMxSnzK 1e/M27NQOyEL4YJB5PFJTmmYRwRGILtuxF4mbcdmAJWhDPCNCBCNTKUO8uSvDjPh VdwHngDM3XIKiNs3zkxRJttQ/SczTxVxeDdxr+mWa3m7KOnVSF06Al3AWi399tFV i7AjwgQC9ILDyKQOUQUJn/8sPnIbb7VP -----END CERTIFICATE-----Generated at Sat Apr 26 12:27:27 2025 by rpki-client