$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft File: rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json) Hash identifier: p3VzHCUHrLbDQuZt9fnc8vz2jkOGkOXo7jdiVBtYtX8= Subject key identifier: 77:51:F4:AE:4F:26:46:97:5E:74:FC:1E:70:1C:65:30:97:46:70:46 Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 Certificate issuer: /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Certificate serial: 043F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft Manifest number: 0436 Signing time: Fri 25 Apr 2025 00:06:23 +0000 Manifest this update: Fri 25 Apr 2025 00:06:22 +0000 Manifest next update: Fri 02 May 2025 00:06:22 +0000 Files and hashes: 1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: pkwznaFj13P2QArNFVSyKdI5ukt5yST8dIlt769oyhE=) 2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: vuA1aYKkB68NvYwo7uB0J5bfujQe8Me2IIkrPlSzC4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Validity Not Before: Apr 25 00:06:22 2025 GMT Not After : May 2 00:06:22 2025 GMT Subject: CN=680ad1ff-e60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ff:ad:f2:bb:be:6a:57:bf:04:fc:23:51:05: 85:e0:ed:66:06:7f:e1:60:7e:3e:24:31:27:28:89: a6:39:cb:af:d6:01:9e:15:47:01:36:2f:0c:22:48: 70:6c:38:de:c4:95:dd:ba:a9:84:26:2a:6b:34:8b: d5:92:f4:e0:22:a4:88:b9:9d:aa:c0:b9:3e:71:4f: f6:6f:f0:a7:42:a6:bb:ec:a4:f0:31:f7:6b:30:a9: b5:f0:f4:2b:35:82:e0:6f:5c:f9:2b:c6:3b:22:01: 36:28:24:b8:99:95:ac:45:5a:3c:0d:1b:a8:eb:d2: ba:1e:b4:8e:f6:cd:c5:4e:89:c5:9a:d1:a5:3a:11: 5b:fe:36:c9:7a:0f:23:bc:80:40:7b:31:24:31:e6: 33:c0:96:dd:22:f9:95:30:ff:2d:f4:99:30:99:80: 16:2e:ab:a1:b2:15:54:f8:3c:21:55:23:65:60:57: 05:9c:e4:4a:30:1e:2e:9a:74:a8:e3:63:14:e7:05: 7e:05:a5:fc:67:03:ce:3c:32:bc:c2:18:f0:4e:ea: a5:ef:d8:4d:22:fc:9c:ea:aa:46:de:3d:81:2f:a6: 71:b7:43:1b:bf:61:48:c3:4c:b1:d8:7d:8c:4d:8a: 00:61:4c:e7:4f:ae:f8:14:1c:93:7c:e1:76:f3:9a: ea:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:51:F4:AE:4F:26:46:97:5E:74:FC:1E:70:1C:65:30:97:46:70:46 X509v3 Authority Key Identifier: keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:aa:d3:6a:bb:71:c3:cc:34:69:a0:ea:eb:a8:4b:91:88:9c: 3e:85:c5:9a:1a:7c:81:1b:23:9d:33:4d:89:f3:6f:92:c5:00: a7:65:74:84:ef:c9:b9:46:41:4b:e5:90:2e:2b:39:fc:51:d0: 1f:8a:70:25:b6:4b:59:ac:c2:8d:b1:b2:9d:b0:21:74:12:ef: 1e:64:91:04:f3:9c:48:34:7c:8d:69:96:f2:9d:4e:10:c4:4b: d7:04:09:1a:55:7c:2d:f2:2b:80:35:fd:d1:72:67:8e:88:52: b7:46:96:0e:ab:83:b4:d5:3e:7c:68:2e:6e:51:da:af:4a:ea: 74:93:ba:7d:14:a7:05:68:56:b8:64:f5:e6:a0:4b:64:1b:d0: f2:08:16:82:b7:ca:ae:48:77:1a:af:86:b6:8d:8b:73:ff:f5: d7:66:a5:9e:0f:77:c4:8d:fe:db:f1:44:fe:0e:22:7d:26:0a: a0:5b:6a:40:0e:1b:76:0f:43:f6:4c:39:0a:00:a8:9d:c1:1a: e8:fa:85:35:d7:06:7a:17:ed:94:0a:fd:3c:58:0e:75:e5:04: d8:b2:20:59:13:36:c7:d8:29:b9:76:bd:ca:03:85:e9:19:16: 30:08:46:2e:37:ba:b8:3d:e5:b3:cc:e4:1a:99:64:3a:0e:9d: 78:be:ba:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCQjMxMTAvBgNVBAUTKEFDN0M5RTcxODIyQzA1NjE4NTE4NjQ1M0Y5NjBCMkMx RThDQTk0RTMwHhcNMjUwNDI1MDAwNjIyWhcNMjUwNTAyMDAwNjIyWjAYMRYwFAYD VQQDEw02ODBhZDFmZi1lNjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/+t8ru+ale/BPwjUQWF4O1mBn/hYH4+JDEnKImmOcuv1gGeFUcBNi8MIkhw bDjexJXduqmEJiprNIvVkvTgIqSIuZ2qwLk+cU/2b/CnQqa77KTwMfdrMKm18PQr NYLgb1z5K8Y7IgE2KCS4mZWsRVo8DRuo69K6HrSO9s3FTonFmtGlOhFb/jbJeg8j vIBAezEkMeYzwJbdIvmVMP8t9JkwmYAWLquhshVU+DwhVSNlYFcFnORKMB4umnSo 42MU5wV+BaX8ZwPOPDK8whjwTuql79hNIvyc6qpG3j2BL6Zxt0Mbv2FIw0yx2H2M TYoAYUznT674FByTfOF285rqtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdR9K5P JkaXXnT8HnAcZTCXRnBGMB8GA1UdIwQYMBaAFKx8nnGCLAVhhRhkU/lgssHoypTj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEJCMy9BRUE4NzNFQzVC QzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JXR0ZHR1JULVdDeXdlakts T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JIeWVjWUlzQldHRkdHUlQtV0N5d2VqS2xPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEJCMy9BRUE4NzNFQzVCQzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JX R0ZHR1JULVdDeXdlaktsT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPqtNqu3HDzDRpoOrrqEuRiJw+hcWaGnyBGyOdM02J82+SxQCnZXSE 78m5RkFL5ZAuKzn8UdAfinAltktZrMKNsbKdsCF0Eu8eZJEE85xINHyNaZbynU4Q xEvXBAkaVXwt8iuANf3RcmeOiFK3RpYOq4O01T58aC5uUdqvSup0k7p9FKcFaFa4 ZPXmoEtkG9DyCBaCt8quSHcar4a2jYtz//XXZqWeD3fEjf7b8UT+DiJ9JgqgW2pA Dht2D0P2TDkKAKidwRro+oU11wZ6F+2UCv08WA515QTYsiBZEzbH2Cm5dr3KA4Xp GRYwCEYuN7q4PeWzzOQamWQ6Dp14vroD -----END CERTIFICATE-----Generated at Sat Apr 26 17:38:39 2025 by rpki-client