$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json) Hash identifier: yBLKW7KfkB/z11zbw+7tqDMDKFUVQVAUd5P39GB9Eqc= Subject key identifier: 86:57:3B:A0:CA:99:D4:B9:D2:7E:92:84:D1:43:94:F2:C7:F7:0A:AF Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Certificate serial: 117D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft Manifest number: 1168 Signing time: Thu 24 Apr 2025 17:15:34 +0000 Manifest this update: Thu 24 Apr 2025 17:15:33 +0000 Manifest next update: Thu 01 May 2025 17:15:33 +0000 Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: 1gR83Bh656cGT/FjnDqP7nA3R1hKfoOAM/cpOsbJ/1s=) 2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: IU4SG15xY5pa/IoW3wwDCZ3o/ZxiWKB5Df2NzHDteOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4477 (0x117d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Validity Not Before: Apr 24 17:15:33 2025 GMT Not After : May 1 17:15:33 2025 GMT Subject: CN=680a71b5-1c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:21:a1:89:db:cd:c9:f1:66:03:16:00:de:cb: a0:20:7c:4d:0b:a5:b6:cf:a7:71:1c:d8:b2:a2:96: 5a:04:60:7b:6a:af:4b:ab:49:0c:8d:e3:00:9d:f3: 78:8d:b6:a9:cd:00:e2:1a:39:cf:83:41:19:24:3c: 40:dc:5d:63:c4:94:d8:7e:2d:21:c5:31:57:10:df: 07:bb:29:ec:dc:f8:ce:d9:a5:52:79:1a:d3:e0:b9: b2:7d:b8:04:43:21:5d:12:19:28:24:07:dc:34:8f: dd:c0:86:b2:05:d0:24:ad:0e:37:19:10:ab:15:e5: c0:37:a7:c9:52:8a:23:33:9c:b4:c0:44:cc:d9:93: b2:ed:06:9c:69:e4:e8:97:4e:ea:37:bb:21:23:62: bb:d3:c5:40:94:f9:41:f7:58:71:d1:8b:1b:16:25: 22:09:9f:7c:1d:80:8b:4a:0b:b4:49:44:86:d0:6d: 0c:ca:d6:31:9b:eb:5d:d4:e5:02:57:bb:e5:f2:8e: 95:e9:8d:57:82:f1:15:89:c5:99:bf:5e:2e:b1:6c: a3:82:e9:e1:a1:b7:b0:8a:ca:01:16:dc:b6:f8:78: 5d:4a:55:d3:65:c1:bc:35:21:ec:93:72:f5:17:bd: 53:97:4a:b9:3b:ac:3f:45:e3:96:2f:bc:a5:cf:16: e2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:57:3B:A0:CA:99:D4:B9:D2:7E:92:84:D1:43:94:F2:C7:F7:0A:AF X509v3 Authority Key Identifier: keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:c3:15:3b:a7:01:07:d2:65:ba:6e:69:ad:93:71:fa:80:0d: 6b:c0:2c:47:c2:e3:bf:64:ff:8e:cf:55:b2:b1:f6:1b:69:c8: 87:51:79:59:5a:44:e8:b8:ad:44:bf:2d:42:ac:b4:fd:f5:f0: 53:fd:a9:96:c7:e3:5f:ef:a5:5a:86:89:5c:eb:bf:6c:4c:54: 1b:0e:46:21:97:45:a9:d0:cf:9c:c2:65:68:da:55:fc:8f:60: 9e:7d:6d:d8:5f:07:a8:7f:8e:fa:82:72:0f:d3:e7:c4:86:1b: 43:d5:c5:3a:02:b2:30:a5:99:4b:05:33:9e:ca:7a:3c:d1:5e: e1:16:5c:c0:7e:40:ea:06:ca:ca:c3:37:a9:93:7e:98:f9:08: a8:e1:f3:72:b2:6b:be:33:49:06:be:0b:8a:e8:2b:72:20:f4: 63:13:01:54:4d:68:75:ef:d5:3a:4c:69:70:cd:f7:43:53:43: 0f:27:28:76:1c:cc:2a:7a:94:76:8a:d0:78:80:0d:16:fc:73: b4:73:f4:97:01:3d:ff:18:dd:61:c4:e5:a3:6f:61:1f:62:3d: 73:57:8b:63:52:90:24:3f:e9:20:d5:c1:a2:89:cb:45:f1:8d: 9b:d7:fa:b5:cb:e5:54:49:1f:de:3c:3b:3c:fa:a3:e3:4a:59: eb:60:a6:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyN0MxMTAvBgNVBAUTKDFEODgyQzhDRjI0MzRDQzlCQkZENzkxOTFEQzJDNjk4 MjkyNkU4QUIwHhcNMjUwNDI0MTcxNTMzWhcNMjUwNTAxMTcxNTMzWjAYMRYwFAYD VQQDEw02ODBhNzFiNS0xYzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyGhidvNyfFmAxYA3sugIHxNC6W2z6dxHNiyopZaBGB7aq9Lq0kMjeMAnfN4 jbapzQDiGjnPg0EZJDxA3F1jxJTYfi0hxTFXEN8Huyns3PjO2aVSeRrT4LmyfbgE QyFdEhkoJAfcNI/dwIayBdAkrQ43GRCrFeXAN6fJUoojM5y0wETM2ZOy7QacaeTo l07qN7shI2K708VAlPlB91hx0YsbFiUiCZ98HYCLSgu0SUSG0G0MytYxm+td1OUC V7vl8o6V6Y1XgvEVicWZv14usWyjgunhobewisoBFty2+HhdSlXTZcG8NSHsk3L1 F71Tl0q5O6w/ReOWL7ylzxbivwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZXO6DK mdS50n6ShNFDlPLH9wqvMB8GA1UdIwQYMBaAFB2ILIzyQ0zJu/15GR3CxpgpJuir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI3Qy85RDc3QzZENDAy OEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRNbTdfWGtaSGNMR21Da202 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hZZ3NqUEpEVE1tN19Ya1pIY0xHbUNrbTZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzI3Qy85RDc3QzZENDAyOEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRN bTdfWGtaSGNMR21Da202S3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEwxU7pwEH0mW6bmmtk3H6gA1rwCxHwuO/ZP+Oz1WysfYbaciHUXlZ WkTouK1Evy1CrLT99fBT/amWx+Nf76Vaholc679sTFQbDkYhl0Wp0M+cwmVo2lX8 j2CefW3YXweof476gnIP0+fEhhtD1cU6ArIwpZlLBTOeyno80V7hFlzAfkDqBsrK wzepk36Y+Qio4fNysmu+M0kGvguK6CtyIPRjEwFUTWh179U6TGlwzfdDU0MPJyh2 HMwqepR2itB4gA0W/HO0c/SXAT3/GN1hxOWjb2EfYj1zV4tjUpAkP+kg1cGiictF 8Y2b1/q1y+VUSR/ePDs8+qPjSlnrYKZK -----END CERTIFICATE-----Generated at Sat Apr 26 03:36:10 2025 by rpki-client