$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft File: kHuyYrVxYj40suIMYKcYwXOcw70.mft (raw, json) Hash identifier: UpGrHqas7zcoQAk7rGuyF9Y3fWHHZ0kDpwhMLWy/scM= Subject key identifier: F7:12:AD:33:6A:F2:9F:12:8C:E7:D7:E2:12:9A:80:CA:68:5A:9E:AA Authority key identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD Certificate issuer: /CN=A91A3A64/serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD Certificate serial: 039E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft Manifest number: 0398 Signing time: Thu 15 May 2025 00:49:06 +0000 Manifest this update: Thu 15 May 2025 00:49:06 +0000 Manifest next update: Thu 22 May 2025 00:49:06 +0000 Files and hashes: 1: kHuyYrVxYj40suIMYKcYwXOcw70.crl (hash: LXbxe0Idnpm9PbW4b4nvXHfTvsv5hogOiuevjHU0md8=) 2: 5B92665E9ADD11ECA5401423C4F9AE02.roa (hash: ys9QvzSFj3FhbpKZdlZ1B6mYP128OL/SXk3uErxC5zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 926 (0x39e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3A64, serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD Validity Not Before: May 15 00:49:06 2025 GMT Not After : May 22 00:49:06 2025 GMT Subject: CN=68253a02-8217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:32:a8:6d:ee:21:45:ed:07:28:b4:ae:68:60: dd:44:de:5b:0b:6c:3c:76:5e:fa:3d:4c:ed:eb:5b: 8d:5c:da:85:ce:f4:b9:e8:42:3a:ea:36:7a:27:75: cc:67:d9:ff:8b:81:d4:28:86:7c:08:d6:94:c9:b1: bb:06:0a:4c:7e:e4:39:0e:f6:4d:2b:56:72:f2:eb: 1d:a5:45:9a:cd:18:25:c8:b4:0f:2c:19:76:a5:d6: cf:2b:5f:a2:91:3e:2b:c4:c2:9b:67:c1:70:94:24: a0:31:fc:56:ce:26:b3:95:0a:21:92:87:63:5b:01: 73:cf:19:6f:2f:3c:75:66:5e:90:ac:18:06:88:b0: 16:ce:6b:19:e7:7e:1f:09:5a:d4:12:b5:2e:35:46: 08:20:b7:ab:cf:76:ab:42:3a:87:10:9b:f5:1f:66: 1b:77:3b:ca:6c:8d:09:da:3b:8c:d5:a9:66:97:86: 93:70:3d:28:be:f0:c1:01:76:30:ac:02:ff:b3:ab: c9:7e:69:83:92:9a:4a:77:62:31:f1:69:a3:cd:56: b6:3b:1b:8b:a0:af:cf:74:b3:cc:48:80:c7:a7:f8: ec:08:e9:4f:3e:48:20:61:54:06:50:2d:41:d7:65: b7:e7:d4:94:41:d9:cc:37:f4:ba:d5:2d:d6:97:44: 9f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:12:AD:33:6A:F2:9F:12:8C:E7:D7:E2:12:9A:80:CA:68:5A:9E:AA X509v3 Authority Key Identifier: keyid:90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3b:14:3a:f0:a3:9d:b6:d6:15:52:71:47:65:db:37:80:47: 1c:bd:72:36:16:4b:82:89:3f:3b:83:ec:69:69:b7:20:7b:e2: ac:bb:d2:7e:f8:47:b0:ed:5f:bd:6c:a2:34:03:78:b3:a5:8d: ef:3c:18:6c:86:80:ba:fc:0d:cd:c6:f4:a0:d1:a8:e5:25:0d: 3a:5c:f7:71:4e:67:2d:40:ad:71:49:96:f0:8f:58:4c:b3:15: 4e:cd:7f:e1:5e:be:f5:ad:8b:60:77:a2:02:65:90:36:5d:6a: bc:07:64:7d:45:a5:d3:7f:4b:f4:93:74:11:9e:bd:25:12:68: 6d:50:9d:14:37:5e:dd:de:55:91:85:4e:2a:65:e1:46:46:71: 82:45:a6:fb:9a:5a:98:89:89:94:e9:93:80:cb:06:6c:76:79: 6e:9a:83:72:64:77:89:d0:c5:29:4e:de:cd:b0:98:ba:a8:ff: 3a:d9:98:72:86:7a:58:2c:ec:84:f2:6c:e4:08:06:89:f2:00: f9:4f:1e:02:07:e3:53:eb:49:8e:71:05:0b:93:50:39:62:78: d5:78:cb:69:3c:f6:34:47:f1:ee:4e:7a:20:3c:63:8f:60:da: 98:6e:94:8f:b3:0d:d1:2b:87:f3:d5:17:f7:60:f0:99:6b:ed: c9:06:06:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBNjQxMTAvBgNVBAUTKDkwN0JCMjYyQjU3MTYyM0UzNEIyRTIwQzYwQTcxOEMx NzM5Q0MzQkQwHhcNMjUwNTE1MDA0OTA2WhcNMjUwNTIyMDA0OTA2WjAYMRYwFAYD VQQDEw02ODI1M2EwMi04MjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDKobe4hRe0HKLSuaGDdRN5bC2w8dl76PUzt61uNXNqFzvS56EI66jZ6J3XM Z9n/i4HUKIZ8CNaUybG7BgpMfuQ5DvZNK1Zy8usdpUWazRglyLQPLBl2pdbPK1+i kT4rxMKbZ8FwlCSgMfxWziazlQohkodjWwFzzxlvLzx1Zl6QrBgGiLAWzmsZ534f CVrUErUuNUYIILerz3arQjqHEJv1H2YbdzvKbI0J2juM1alml4aTcD0ovvDBAXYw rAL/s6vJfmmDkppKd2Ix8WmjzVa2OxuLoK/PdLPMSIDHp/jsCOlPPkggYVQGUC1B 12W359SUQdnMN/S61S3Wl0Sf4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcSrTNq 8p8SjOfX4hKagMpoWp6qMB8GA1UdIwQYMBaAFJB7smK1cWI+NLLiDGCnGMFznMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0E2NC8zNThDNjdCRTlB REExMUVDODU3MTMzNzhDNEY5QUUwMi9rSHV5WXJWeFlqNDBzdUlNWUtjWXdYT2N3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tIdXlZclZ4WWo0MHN1SU1ZS2NZd1hPY3c3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0E2NC8zNThDNjdCRTlBREExMUVDODU3MTMzNzhDNEY5QUUwMi9rSHV5WXJWeFlq NDBzdUlNWUtjWXdYT2N3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOOxQ68KOdttYVUnFHZds3gEccvXI2FkuCiT87g+xpabcge+Ksu9J+ +Eew7V+9bKI0A3izpY3vPBhshoC6/A3NxvSg0ajlJQ06XPdxTmctQK1xSZbwj1hM sxVOzX/hXr71rYtgd6ICZZA2XWq8B2R9RaXTf0v0k3QRnr0lEmhtUJ0UN17d3lWR hU4qZeFGRnGCRab7mlqYiYmU6ZOAywZsdnlumoNyZHeJ0MUpTt7NsJi6qP862Zhy hnpYLOyE8mzkCAaJ8gD5Tx4CB+NT60mOcQULk1A5YnjVeMtpPPY0R/HuTnogPGOP YNqYbpSPsw3RK4fz1Rf3YPCZa+3JBgZP -----END CERTIFICATE-----Generated at Fri May 16 22:55:48 2025 by rpki-client