$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft File: hYtkVOIiRseB5RNSswVkEJhoV34.mft (raw, json) Hash identifier: 1Mu1EMQR7QGlT3HV8LN06DcwcAwG/DfANH744bHKB2o= Subject key identifier: 57:3C:CF:BC:73:46:12:40:9C:FA:83:D6:81:3E:27:59:D5:51:E2:B4 Authority key identifier: 85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E Certificate issuer: /CN=A91F65C7/serialNumber=858B6454E22246C781E51352B30564109868577E Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft Manifest number: FC Signing time: Fri 13 Jun 2025 04:05:32 +0000 Manifest this update: Fri 13 Jun 2025 04:05:31 +0000 Manifest next update: Fri 20 Jun 2025 04:05:31 +0000 Files and hashes: 1: hYtkVOIiRseB5RNSswVkEJhoV34.crl (hash: ySGwZV4N3yISrMdlmQ6okWUd9wjyyfj6gpz0YAaUozk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65C7, serialNumber=858B6454E22246C781E51352B30564109868577E Validity Not Before: Jun 13 04:05:31 2025 GMT Not After : Jun 20 04:05:31 2025 GMT Subject: CN=684ba38c-f46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:24:3e:f3:0b:7e:fa:af:dd:c8:8f:69:55:29: ae:db:ad:4c:0b:c0:18:46:36:7b:b7:84:91:32:88: 60:26:b4:f9:a8:b8:6d:46:43:38:17:77:e2:98:09: 05:4c:43:09:d7:fc:cf:ca:0d:f1:e8:76:fd:d1:f7: 72:14:a1:a2:3b:c5:9a:58:ae:de:b2:a0:24:30:e3: 5b:62:19:e6:60:c8:34:c4:81:53:58:45:b5:20:b9: e3:8b:ee:8a:78:bd:06:15:be:cb:06:9f:23:6e:f9: 59:35:99:1f:fa:cd:c2:22:b9:d8:7c:a5:ad:e1:be: 96:fd:b4:60:cf:be:fc:9b:f3:48:14:c6:e3:b0:59: 3b:cc:9e:b0:bb:96:d7:21:75:b5:fe:6d:fe:92:81: 79:ef:0f:7c:ab:ef:94:7c:7a:e1:d6:7f:82:49:73: 9f:da:84:66:85:08:f1:8f:73:79:7d:40:03:50:0a: 38:e7:65:6d:f1:56:3d:3d:be:4f:30:58:11:49:dc: d9:b6:0c:a8:53:93:3f:b0:d7:91:8e:0d:83:d5:0b: 05:ac:de:c0:44:25:57:74:ee:2f:cd:33:1d:8d:22: 8a:9f:6e:56:5c:bc:6e:18:56:3f:d9:61:90:cc:0f: 86:18:a4:7c:0b:dd:cc:3d:bf:2f:b4:30:b0:32:42: a0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3C:CF:BC:73:46:12:40:9C:FA:83:D6:81:3E:27:59:D5:51:E2:B4 X509v3 Authority Key Identifier: keyid:85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:68:3b:10:22:4f:5c:55:0e:a6:fe:ef:bd:e1:da:cd:49:92: 22:21:09:1f:29:dd:ec:a3:93:e1:52:80:c6:ee:70:73:57:6b: 6e:82:7b:b2:ed:66:28:bb:31:d4:a6:fe:d7:71:ce:64:dd:04: ff:ff:0c:75:c1:d7:c2:47:5d:ba:3f:68:af:b7:80:7d:81:f0: f9:57:87:e7:09:3c:4b:73:01:4b:bf:0c:7e:5d:c2:9f:92:9f: e5:40:5c:a6:7d:aa:0b:df:cc:8c:bb:5f:3a:9e:e2:c3:5f:6a: c7:4f:ff:87:48:e3:7d:77:9b:6f:94:11:12:d5:5c:e8:a6:b0: 79:0d:5f:cc:f0:b6:58:12:33:18:c5:40:01:da:ba:9c:3a:1a: ad:6c:4b:8f:01:ac:51:54:2c:81:0c:38:32:ec:91:09:a9:84: b1:fe:aa:d8:da:28:ff:55:d5:08:e5:35:54:2e:3e:d6:d8:e9: 78:e8:1f:a0:82:67:b0:64:d6:dd:ba:81:e9:e7:b6:27:f0:53: f4:d8:99:ba:fe:0c:a7:09:f1:69:2e:19:bb:f1:a3:3f:42:ae: 28:7d:00:b2:a2:16:c8:d6:6a:66:64:80:3e:2d:40:8f:7f:f8: 46:d8:a0:87:34:4d:87:a9:6e:ef:eb:d5:40:fe:ce:fa:82:25: d9:ed:91:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1QzcxMTAvBgNVBAUTKDg1OEI2NDU0RTIyMjQ2Qzc4MUU1MTM1MkIzMDU2NDEw OTg2ODU3N0UwHhcNMjUwNjEzMDQwNTMxWhcNMjUwNjIwMDQwNTMxWjAYMRYwFAYD VQQDEw02ODRiYTM4Yy1mNDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSQ+8wt++q/dyI9pVSmu261MC8AYRjZ7t4SRMohgJrT5qLhtRkM4F3fimAkF TEMJ1/zPyg3x6Hb90fdyFKGiO8WaWK7esqAkMONbYhnmYMg0xIFTWEW1ILnji+6K eL0GFb7LBp8jbvlZNZkf+s3CIrnYfKWt4b6W/bRgz778m/NIFMbjsFk7zJ6wu5bX IXW1/m3+koF57w98q++UfHrh1n+CSXOf2oRmhQjxj3N5fUADUAo452Vt8VY9Pb5P MFgRSdzZtgyoU5M/sNeRjg2D1QsFrN7ARCVXdO4vzTMdjSKKn25WXLxuGFY/2WGQ zA+GGKR8C93MPb8vtDCwMkKg2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFc8z7xz RhJAnPqD1oE+J1nVUeK0MB8GA1UdIwQYMBaAFIWLZFTiIkbHgeUTUrMFZBCYaFd+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FRDBGQjY4NkMz RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJzZUI1Uk5Tc3dWa0VKaG9W MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZdGtWT0lpUnNlQjVSTlNzd1ZrRUpob1YzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVDNy9FRDBGQjY4NkMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJz ZUI1Uk5Tc3dWa0VKaG9WMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqaDsQIk9cVQ6m/u+94drNSZIiIQkfKd3so5PhUoDG7nBzV2tugnuy 7WYouzHUpv7Xcc5k3QT//wx1wdfCR126P2ivt4B9gfD5V4fnCTxLcwFLvwx+XcKf kp/lQFymfaoL38yMu186nuLDX2rHT/+HSON9d5tvlBES1VzoprB5DV/M8LZYEjMY xUAB2rqcOhqtbEuPAaxRVCyBDDgy7JEJqYSx/qrY2ij/VdUI5TVULj7W2Ol46B+g gmewZNbduoHp57Yn8FP02Jm6/gynCfFpLhm78aM/Qq4ofQCyohbI1mpmZIA+LUCP f/hG2KCHNE2HqW7v69VA/s76giXZ7ZGm -----END CERTIFICATE-----Generated at Sat Jun 14 18:47:38 2025 by rpki-client