$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft File: rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json) Hash identifier: WICKbea0hYIiRuOjh/SWnJ7DQsWMfThZmtudO0BfB2w= Subject key identifier: 69:1F:C1:B8:DC:4C:69:A4:BA:B1:E8:CA:B7:30:CD:2F:2F:66:AF:B9 Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 Certificate issuer: /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Certificate serial: 045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft Manifest number: 0450 Signing time: Thu 12 Jun 2025 23:49:54 +0000 Manifest this update: Thu 12 Jun 2025 23:49:54 +0000 Manifest next update: Thu 19 Jun 2025 23:49:54 +0000 Files and hashes: 1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: NAdz2nEAW4h3zrchPYRObJZ2BSpLpmZby00L8Gaixt4=) 2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: etY8R8Zkoq3Jr+o5iT0vM2/Uvx5KoKGB+//fjS6auO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Validity Not Before: Jun 12 23:49:54 2025 GMT Not After : Jun 19 23:49:54 2025 GMT Subject: CN=684b67a2-558e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:99:66:29:13:4f:7c:e6:74:2c:46:7f:08:5e: 83:02:8b:b5:6f:43:ec:80:bb:eb:46:d9:db:88:25: 10:78:54:54:ca:6c:46:48:ec:63:b7:c4:d1:e9:ac: a8:3d:5a:69:a1:16:36:7b:1f:53:bf:fc:03:fd:52: 83:10:48:d6:24:21:88:e4:ab:4f:51:6b:25:d1:fa: 2e:20:61:0c:0e:a0:4e:c6:42:50:de:aa:4d:dd:a0: 62:d9:06:0d:2b:39:df:1a:ff:22:92:30:dc:60:4b: b7:1c:79:0b:66:16:4b:75:b8:6b:57:69:7e:b2:90: 8c:80:d2:f0:84:cf:aa:b0:14:d8:d3:2a:7c:6a:bd: 02:7e:29:e3:92:ab:dd:f5:08:02:8e:0f:19:63:d3: 0c:be:60:1c:2d:aa:e8:8d:36:51:6d:d1:5f:01:5d: 11:31:cc:5f:80:b1:ac:49:ab:f8:10:f3:36:38:73: e2:fe:3c:c5:dd:30:12:01:a3:3d:e4:d6:0d:6d:16: b3:ce:33:d3:7d:52:9c:7f:6d:4e:64:65:ca:2b:be: 69:ad:ca:34:86:08:89:b1:99:3f:f3:0d:2b:d9:b7: 63:8f:a6:e3:68:d2:8b:d5:72:cc:78:a3:c2:0c:b1: b2:72:81:1d:49:d3:32:f1:38:ba:0e:fe:db:2c:d8: 84:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1F:C1:B8:DC:4C:69:A4:BA:B1:E8:CA:B7:30:CD:2F:2F:66:AF:B9 X509v3 Authority Key Identifier: keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:75:f5:88:39:64:b7:7a:10:6a:b8:fb:45:de:71:30:17:b9: 57:1e:04:28:2d:b5:4f:0e:d6:1c:65:bd:f5:52:f7:61:c3:6b: aa:a4:0f:4d:a2:11:05:c8:e4:32:d4:a8:fa:8e:d9:b4:81:c3: 9f:f9:7b:b7:b1:e8:78:fe:d6:0f:55:05:dd:c0:63:ba:07:24: ea:df:08:69:26:7b:ad:8b:9a:88:59:05:e2:7b:04:bf:a9:c6: a9:66:fc:33:08:a8:b8:6c:f5:3d:33:bf:6e:43:68:4f:2c:9e: d5:b9:bf:83:86:53:b8:29:fa:41:4c:c1:fa:1b:df:ef:4b:23: b5:53:75:af:1d:53:b8:03:23:f6:e1:29:84:84:ef:bf:56:31: 1c:2b:db:9e:de:41:5e:da:f2:e4:f9:1c:d5:2f:ce:d9:af:ac: 63:d4:64:be:22:4b:84:f0:8b:7d:28:4a:22:91:40:d5:ae:75: 29:60:1f:e2:db:66:d6:12:d0:c4:70:cf:c5:95:b6:20:88:0c: 97:e5:e3:ed:ff:de:15:62:fa:a5:bd:c0:f6:50:a8:87:69:77: 6a:58:f3:0a:cd:d6:20:87:da:c5:1f:15:7d:e9:ab:3b:07:71: c5:d4:b2:04:fd:ad:5b:ba:f3:ee:33:d9:ba:23:a3:c8:78:a5: 03:64:28:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCQjMxMTAvBgNVBAUTKEFDN0M5RTcxODIyQzA1NjE4NTE4NjQ1M0Y5NjBCMkMx RThDQTk0RTMwHhcNMjUwNjEyMjM0OTU0WhcNMjUwNjE5MjM0OTU0WjAYMRYwFAYD VQQDEw02ODRiNjdhMi01NThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZlmKRNPfOZ0LEZ/CF6DAou1b0PsgLvrRtnbiCUQeFRUymxGSOxjt8TR6ayo PVppoRY2ex9Tv/wD/VKDEEjWJCGI5KtPUWsl0fouIGEMDqBOxkJQ3qpN3aBi2QYN KznfGv8ikjDcYEu3HHkLZhZLdbhrV2l+spCMgNLwhM+qsBTY0yp8ar0Cfinjkqvd 9QgCjg8ZY9MMvmAcLarojTZRbdFfAV0RMcxfgLGsSav4EPM2OHPi/jzF3TASAaM9 5NYNbRazzjPTfVKcf21OZGXKK75prco0hgiJsZk/8w0r2bdjj6bjaNKL1XLMeKPC DLGycoEdSdMy8Ti6Dv7bLNiE2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkfwbjc TGmkurHoyrcwzS8vZq+5MB8GA1UdIwQYMBaAFKx8nnGCLAVhhRhkU/lgssHoypTj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEJCMy9BRUE4NzNFQzVC QzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JXR0ZHR1JULVdDeXdlakts T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JIeWVjWUlzQldHRkdHUlQtV0N5d2VqS2xPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEJCMy9BRUE4NzNFQzVCQzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JX R0ZHR1JULVdDeXdlaktsT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAdfWIOWS3ehBquPtF3nEwF7lXHgQoLbVPDtYcZb31Uvdhw2uqpA9N ohEFyOQy1Kj6jtm0gcOf+Xu3seh4/tYPVQXdwGO6ByTq3whpJnuti5qIWQXiewS/ qcapZvwzCKi4bPU9M79uQ2hPLJ7Vub+DhlO4KfpBTMH6G9/vSyO1U3WvHVO4AyP2 4SmEhO+/VjEcK9ue3kFe2vLk+RzVL87Zr6xj1GS+IkuE8It9KEoikUDVrnUpYB/i 22bWEtDEcM/FlbYgiAyX5ePt/94VYvqlvcD2UKiHaXdqWPMKzdYgh9rFHxV96as7 B3HF1LIE/a1buvPuM9m6I6PIeKUDZCh4 -----END CERTIFICATE-----Generated at Sat Jun 14 17:09:30 2025 by rpki-client