$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft File: hYtkVOIiRseB5RNSswVkEJhoV34.mft (raw, json) Hash identifier: fNfSW0n7/lFrG9jZHCDh4oL+B2IIKb7ojZaXbDraPc0= Subject key identifier: 60:38:44:75:C4:35:F3:36:73:BF:CC:98:F1:40:E0:95:BC:3D:21:01 Authority key identifier: 85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E Certificate issuer: /CN=A91F65C7/serialNumber=858B6454E22246C781E51352B30564109868577E Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft Manifest number: E4 Signing time: Fri 25 Apr 2025 04:28:44 +0000 Manifest this update: Fri 25 Apr 2025 04:28:43 +0000 Manifest next update: Fri 02 May 2025 04:28:43 +0000 Files and hashes: 1: hYtkVOIiRseB5RNSswVkEJhoV34.crl (hash: ccZlyJJ2J3DwlkK8DFZBULxv+6vjp3rCs/k1OUIxilQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65C7, serialNumber=858B6454E22246C781E51352B30564109868577E Validity Not Before: Apr 25 04:28:43 2025 GMT Not After : May 2 04:28:43 2025 GMT Subject: CN=680b0f7c-626d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:a5:eb:0e:d9:f0:31:5b:89:4b:db:bb:ae: 81:cc:61:14:8b:79:c4:c6:a3:89:88:e6:67:4f:e4: 69:68:96:f3:cd:1f:a5:45:42:c1:71:04:8b:c3:2b: 0d:36:85:7d:00:a5:e6:25:5c:85:44:ed:40:55:96: a5:0f:ba:1f:6e:a9:9e:31:87:89:cc:2c:47:48:ac: 82:c9:d3:8c:66:66:ff:97:a5:9b:e5:30:51:a0:76: 23:72:1e:34:f0:c0:81:31:74:51:08:f3:a4:39:e7: dc:4e:24:77:f2:05:3f:79:a9:ba:ce:da:df:6e:7d: 58:a8:0f:95:15:41:aa:4b:8a:44:2a:74:7d:60:39: 15:11:45:44:21:5e:50:05:d9:1f:81:87:cb:79:2c: 9f:cb:9c:39:64:3e:34:1a:96:b8:42:fc:00:97:93: 05:22:2a:ae:ba:13:9a:29:0b:b9:2e:03:66:f1:2a: ef:ef:c6:19:23:a7:1f:2b:1a:4d:e5:60:76:f2:d9: 47:c9:65:14:a2:1a:cb:67:ad:61:9b:58:32:d2:10: a8:bf:09:99:03:01:c1:56:f3:ca:90:6a:75:66:f7: a7:d5:76:ab:a6:e6:42:4e:56:f6:e3:6e:55:dd:62: b6:f9:d1:34:15:d1:9b:07:52:bf:4e:9c:c6:60:a5: 8e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:38:44:75:C4:35:F3:36:73:BF:CC:98:F1:40:E0:95:BC:3D:21:01 X509v3 Authority Key Identifier: keyid:85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:fb:56:e4:0b:af:40:e8:8a:32:9c:b1:9b:30:9f:5a:12:cb: d4:ad:d4:8d:82:d0:1e:f3:e8:9b:13:7c:2e:da:df:c6:82:e1: 25:01:7f:29:4f:05:75:c3:c4:50:dc:84:76:6a:f5:92:ec:95: ee:5a:46:c9:b4:a8:07:07:96:f8:89:32:9d:ae:66:4b:67:23: 4d:dd:c8:52:33:67:40:d1:9f:ca:bd:6b:c2:3f:55:62:e7:b5: 9a:63:61:59:d3:2e:80:2f:6b:07:9f:3f:d1:00:3c:0b:70:c4: 78:12:40:28:d3:cb:4a:86:9c:81:b5:07:47:b6:2d:1f:fd:ff: cd:d9:bf:82:4c:33:74:b0:ae:44:1e:39:4b:91:a6:5c:2a:d1: 56:45:58:ea:50:68:71:c3:e0:6a:84:99:67:42:a1:52:6d:c7: 7b:b0:87:2e:0c:76:8b:73:8d:5f:cf:4b:ab:9b:1b:0b:96:b4: aa:c2:55:5e:f5:ff:2e:84:2a:a5:27:6e:91:e9:a0:7f:b6:47: ae:31:51:4a:8b:c3:57:c9:5b:4b:57:ce:8e:db:05:c7:3a:08: 59:d9:3a:a3:1b:3c:cd:6d:54:d9:d1:c1:59:e2:dd:23:e0:fb: 00:8c:e3:aa:0f:9b:48:b1:7d:30:a4:0a:9a:16:48:ea:34:da: f2:66:e9:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1QzcxMTAvBgNVBAUTKDg1OEI2NDU0RTIyMjQ2Qzc4MUU1MTM1MkIzMDU2NDEw OTg2ODU3N0UwHhcNMjUwNDI1MDQyODQzWhcNMjUwNTAyMDQyODQzWjAYMRYwFAYD VQQDEw02ODBiMGY3Yy02MjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDCl6w7Z8DFbiUvbu66BzGEUi3nExqOJiOZnT+RpaJbzzR+lRULBcQSLwysN NoV9AKXmJVyFRO1AVZalD7ofbqmeMYeJzCxHSKyCydOMZmb/l6Wb5TBRoHYjch40 8MCBMXRRCPOkOefcTiR38gU/eam6ztrfbn1YqA+VFUGqS4pEKnR9YDkVEUVEIV5Q BdkfgYfLeSyfy5w5ZD40Gpa4QvwAl5MFIiquuhOaKQu5LgNm8Srv78YZI6cfKxpN 5WB28tlHyWUUohrLZ61hm1gy0hCovwmZAwHBVvPKkGp1Zven1XarpuZCTlb2425V 3WK2+dE0FdGbB1K/TpzGYKWOfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGA4RHXE NfM2c7/MmPFA4JW8PSEBMB8GA1UdIwQYMBaAFIWLZFTiIkbHgeUTUrMFZBCYaFd+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FRDBGQjY4NkMz RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJzZUI1Uk5Tc3dWa0VKaG9W MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZdGtWT0lpUnNlQjVSTlNzd1ZrRUpob1YzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVDNy9FRDBGQjY4NkMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJz ZUI1Uk5Tc3dWa0VKaG9WMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU+1bkC69A6IoynLGbMJ9aEsvUrdSNgtAe8+ibE3wu2t/GguElAX8p TwV1w8RQ3IR2avWS7JXuWkbJtKgHB5b4iTKdrmZLZyNN3chSM2dA0Z/KvWvCP1Vi 57WaY2FZ0y6AL2sHnz/RADwLcMR4EkAo08tKhpyBtQdHti0f/f/N2b+CTDN0sK5E HjlLkaZcKtFWRVjqUGhxw+BqhJlnQqFSbcd7sIcuDHaLc41fz0urmxsLlrSqwlVe 9f8uhCqlJ26R6aB/tkeuMVFKi8NXyVtLV86O2wXHOghZ2TqjGzzNbVTZ0cFZ4t0j 4PsAjOOqD5tIsX0wpAqaFkjqNNryZulZ -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:50 2025 by rpki-client