$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft File: hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json) Hash identifier: Avyvl3VOGyKRnTQiWRDHSmvxL54EcvUIY+7Yba/9SdM= Subject key identifier: 63:41:F0:1A:D5:83:CF:B2:20:72:61:38:E1:4D:FD:03:E8:AF:D0:78 Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Certificate serial: 030F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft Manifest number: 0306 Signing time: Fri 25 Apr 2025 01:01:30 +0000 Manifest this update: Fri 25 Apr 2025 01:01:29 +0000 Manifest next update: Fri 02 May 2025 01:01:29 +0000 Files and hashes: 1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: CKMg+bs0SynsN0zDr0OzwzLBPJfB6omRSdkXJv4W5SA=) 2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: 3vg65+dFIA+BeOKO6jxWCKMxKp60+BuPw8DF4AA/5hM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 783 (0x30f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Validity Not Before: Apr 25 01:01:29 2025 GMT Not After : May 2 01:01:29 2025 GMT Subject: CN=680adeea-a439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f8:38:7d:86:90:de:42:fb:a0:58:54:16:94: 54:43:f2:6d:93:de:27:28:99:cd:a7:e0:de:27:29: c3:a0:33:08:df:4b:e4:6c:59:85:e5:92:eb:7d:92: a2:8e:c9:d3:0c:b4:b4:d2:f9:b4:cb:87:8f:58:9c: 0a:8d:39:4e:63:16:59:ce:66:7f:3c:ce:d8:3e:3c: d7:43:f6:b2:21:ae:9c:fe:f0:d9:41:46:e8:39:47: 4f:90:2f:32:6c:af:44:8a:66:3f:93:51:27:a1:3b: 65:7e:0b:53:43:30:1a:df:00:cf:d5:ea:0b:a1:99: be:a8:ff:28:b0:3e:18:6a:25:15:3f:a7:53:ab:df: 9d:80:1f:d4:4c:b9:fe:e0:84:ca:cb:fe:e1:f5:00: 48:2b:51:07:bd:d9:da:57:73:65:fb:e2:b3:ae:a3: 29:a3:ae:62:1d:48:05:8d:51:ef:4d:77:39:3f:f4: 5e:4f:60:cf:30:32:d8:32:13:61:5e:60:9d:9d:dc: d2:02:64:8e:9e:f1:a2:c5:69:bd:63:9f:09:14:74: bb:83:f5:2b:8a:59:55:e6:10:14:79:cc:f3:7d:67: 16:6e:41:94:68:35:9a:ce:1c:1e:67:34:1b:e5:03: 84:f5:fd:6c:72:99:3f:97:5c:4b:e9:56:2e:7d:33: 4e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:41:F0:1A:D5:83:CF:B2:20:72:61:38:E1:4D:FD:03:E8:AF:D0:78 X509v3 Authority Key Identifier: keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:dc:95:c8:af:29:71:45:02:54:3a:59:47:8a:6f:f9:84:5d: 97:09:80:eb:e4:eb:f5:4e:4e:44:9b:5b:28:f4:b2:9e:de:5c: 81:c6:17:ab:2b:78:a7:51:7e:d2:35:7c:d4:62:92:bc:ba:56: 13:6b:1a:40:e0:95:47:20:6e:75:32:0b:ba:9c:ec:0b:e8:06: 3b:5a:bc:11:f4:07:ba:42:23:f2:e9:3e:66:52:f8:61:cd:60: f5:d4:9d:47:ff:c0:28:6a:19:d4:40:38:ea:34:45:c8:b2:01: 37:37:87:ff:94:af:9b:65:61:0a:2e:82:70:12:51:ab:b4:20: b2:4a:63:e3:e5:9d:85:8f:10:f1:be:57:f8:17:57:73:78:97: 22:ef:1b:ab:81:ba:63:ca:04:15:ba:52:0f:6c:12:22:65:34: 99:55:ed:84:76:0a:c4:94:24:ea:a8:c7:f9:f5:8a:87:ac:a6: 43:aa:b4:c6:e0:e0:0d:49:05:74:39:0f:cc:79:0b:b0:66:a9: 22:05:b6:61:ef:59:2a:36:1e:bd:dd:35:67:50:a1:01:6f:61: df:38:28:ed:02:5c:9c:41:b1:62:2c:9d:4f:d8:74:f7:0d:f5: 29:4e:5e:b0:32:52:ee:ed:d6:89:7d:e6:28:d3:b5:10:25:4c: 77:ff:8e:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3 QjdEOUYxQzEwHhcNMjUwNDI1MDEwMTI5WhcNMjUwNTAyMDEwMTI5WjAYMRYwFAYD VQQDEw02ODBhZGVlYS1hNDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/g4fYaQ3kL7oFhUFpRUQ/Jtk94nKJnNp+DeJynDoDMI30vkbFmF5ZLrfZKi jsnTDLS00vm0y4ePWJwKjTlOYxZZzmZ/PM7YPjzXQ/ayIa6c/vDZQUboOUdPkC8y bK9EimY/k1EnoTtlfgtTQzAa3wDP1eoLoZm+qP8osD4YaiUVP6dTq9+dgB/UTLn+ 4ITKy/7h9QBIK1EHvdnaV3Nl++KzrqMpo65iHUgFjVHvTXc5P/ReT2DPMDLYMhNh XmCdndzSAmSOnvGixWm9Y58JFHS7g/UrillV5hAUeczzfWcWbkGUaDWazhweZzQb 5QOE9f1scpk/l1xL6VYufTNOwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNB8BrV g8+yIHJhOOFN/QPor9B4MB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkUyRS9EOEFCQUZFOEQwRkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0 LXVfYmlUdndiaHA3Zlo4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR3JXIrylxRQJUOllHim/5hF2XCYDr5Ov1Tk5Em1so9LKe3lyBxher K3inUX7SNXzUYpK8ulYTaxpA4JVHIG51Mgu6nOwL6AY7WrwR9Ae6QiPy6T5mUvhh zWD11J1H/8AoahnUQDjqNEXIsgE3N4f/lK+bZWEKLoJwElGrtCCySmPj5Z2FjxDx vlf4F1dzeJci7xurgbpjygQVulIPbBIiZTSZVe2EdgrElCTqqMf59YqHrKZDqrTG 4OANSQV0OQ/MeQuwZqkiBbZh71kqNh693TVnUKEBb2HfOCjtAlycQbFiLJ1P2HT3 DfUpTl6wMlLu7daJfeYo07UQJUx3/44C -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:27 2025 by rpki-client