$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft File: hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json) Hash identifier: FcM/jjzmHjgk4aS5tQk18zMEE8v92XB19yuHBoS202o= Subject key identifier: 30:A7:42:AE:6D:AD:58:1A:D7:58:D7:D0:06:33:A8:AA:08:51:BA:31 Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Certificate serial: 032C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft Manifest number: 0322 Signing time: Tue 17 Jun 2025 00:46:24 +0000 Manifest this update: Tue 17 Jun 2025 00:46:23 +0000 Manifest next update: Tue 24 Jun 2025 00:46:23 +0000 Files and hashes: 1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: 6yBYNBazUQP+9MttBTXvqFnsZpVtCylKJ9bzHGIhMTQ=) 2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: 7/5fZwleDVzsoLoxdmlvx46DZvj38NfAJm5JPzwN8K4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 812 (0x32c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Validity Not Before: Jun 17 00:46:23 2025 GMT Not After : Jun 24 00:46:23 2025 GMT Subject: CN=6850badf-0ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:bc:aa:c7:c1:c4:bc:97:1c:6d:04:4b:9c: 23:2c:c7:e1:90:a2:d0:51:56:dd:26:c6:b1:bf:e7: 09:93:9a:c6:dc:f0:d5:de:a7:f8:c0:07:16:dd:f2: 8f:2e:52:74:92:3c:9a:35:ab:6f:f9:85:4c:8e:2d: 65:13:6d:76:4a:ea:5e:54:19:07:08:41:58:18:37: 22:a1:d4:58:48:75:d4:99:30:22:9f:2a:54:38:c3: fd:9a:ee:cd:fc:ec:d5:b1:b1:de:3f:6d:ea:2c:76: 55:9d:82:71:6a:14:64:b5:e2:e8:6f:82:63:57:1d: 4a:c6:8a:ae:1d:e9:a1:ae:04:08:08:61:d1:28:df: 02:fa:fb:b6:fa:8b:88:1f:50:9f:33:7e:b5:84:c6: 88:e5:cf:1f:95:e6:43:d1:69:bd:01:95:2e:22:b9: 90:c4:9c:ab:af:7d:50:e9:1c:98:a7:70:89:7a:98: 0f:bf:0d:59:e4:5c:25:7f:11:ca:ed:11:b2:3f:92: d6:77:6a:55:74:81:35:7f:a2:d1:20:a3:0d:bf:2a: 66:da:da:69:83:c2:37:5c:29:35:e4:3c:af:ac:59: a1:aa:c9:e6:df:b6:14:db:54:2e:e0:5e:8b:c9:cb: 28:b1:80:98:12:62:58:99:0a:aa:56:75:34:7c:b9: cc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A7:42:AE:6D:AD:58:1A:D7:58:D7:D0:06:33:A8:AA:08:51:BA:31 X509v3 Authority Key Identifier: keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8c:ec:aa:1c:52:91:c3:8c:74:09:dd:f3:1d:1e:0d:79:67: 03:a6:70:2f:30:4d:e2:79:49:cc:ad:ed:d4:7f:72:97:d2:c3: 30:9d:df:18:38:e4:2c:36:02:36:98:89:24:87:23:a2:0e:e7: 4c:70:58:78:08:37:43:89:a5:a1:46:bb:ec:64:d3:74:60:56: 25:6a:8f:80:78:5e:92:82:92:7f:6e:02:7f:d7:e4:ea:3a:5d: a9:30:82:15:25:6f:c5:c0:c9:ca:c5:ea:e1:b2:6c:c0:c5:37: 97:b1:e4:b4:9d:ee:82:a7:91:e0:ce:73:e4:68:ef:ea:3b:2a: e1:91:8f:c8:5e:4e:a1:64:e4:76:43:8a:69:19:9f:83:e1:0c: 72:a3:fc:8d:9f:d5:ae:90:44:98:54:b6:56:fd:c7:43:df:6f: 79:9f:9f:2a:fa:2b:f4:16:79:8f:0b:a9:a2:1d:9e:63:4e:47: 35:42:39:74:03:4c:ee:83:95:0a:2f:bd:d6:c9:a6:01:3f:99: 16:f4:40:05:a7:e0:67:c1:e2:5c:99:05:16:78:8d:90:11:46: fa:74:e2:4c:ac:65:9a:e5:e9:3c:1b:a4:09:3a:a7:4d:8e:f7: 5f:fd:8b:8d:02:8b:c1:60:e5:98:88:ac:f9:62:66:93:ef:8e: 83:70:3f:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3 QjdEOUYxQzEwHhcNMjUwNjE3MDA0NjIzWhcNMjUwNjI0MDA0NjIzWjAYMRYwFAYD VQQDEw02ODUwYmFkZi0wZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK28qsfBxLyXHG0ES5wjLMfhkKLQUVbdJsaxv+cJk5rG3PDV3qf4wAcW3fKP LlJ0kjyaNatv+YVMji1lE212SupeVBkHCEFYGDciodRYSHXUmTAinypUOMP9mu7N /OzVsbHeP23qLHZVnYJxahRkteLob4JjVx1KxoquHemhrgQICGHRKN8C+vu2+ouI H1CfM361hMaI5c8fleZD0Wm9AZUuIrmQxJyrr31Q6RyYp3CJepgPvw1Z5FwlfxHK 7RGyP5LWd2pVdIE1f6LRIKMNvypm2tppg8I3XCk15DyvrFmhqsnm37YU21Qu4F6L ycsosYCYEmJYmQqqVnU0fLnM4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCnQq5t rVga11jX0AYzqKoIUboxMB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkUyRS9EOEFCQUZFOEQwRkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0 LXVfYmlUdndiaHA3Zlo4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOjOyqHFKRw4x0Cd3zHR4NeWcDpnAvME3ieUnMre3Uf3KX0sMwnd8Y OOQsNgI2mIkkhyOiDudMcFh4CDdDiaWhRrvsZNN0YFYlao+AeF6SgpJ/bgJ/1+Tq Ol2pMIIVJW/FwMnKxerhsmzAxTeXseS0ne6Cp5HgznPkaO/qOyrhkY/IXk6hZOR2 Q4ppGZ+D4Qxyo/yNn9WukESYVLZW/cdD3295n58q+iv0FnmPC6miHZ5jTkc1Qjl0 A0zug5UKL73WyaYBP5kW9EAFp+BnweJcmQUWeI2QEUb6dOJMrGWa5ek8G6QJOqdN jvdf/YuNAovBYOWYiKz5YmaT746DcD8f -----END CERTIFICATE-----Generated at Wed Jun 18 09:53:48 2025 by rpki-client