$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json) Hash identifier: tnyDWqcm1sJYvV2CcFARIWzyro0HX54UWjPJNJuZuIo= Subject key identifier: 5D:E8:41:2B:B0:6E:89:9E:97:9C:F6:A0:D7:E2:7C:81:0F:06:3E:8F Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft Manifest number: EB Signing time: Tue 13 May 2025 04:37:32 +0000 Manifest this update: Tue 13 May 2025 04:37:31 +0000 Manifest next update: Tue 20 May 2025 04:37:31 +0000 Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: O/NvHmQQ9RT8jarpU0Zr4hYdK1opaQZZYcg/oQ4I0fA=) 2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: w6qwhTkmhaSB3ncvO8yCXadiw5lkWAA4VBrSx+fRpEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Validity Not Before: May 13 04:37:31 2025 GMT Not After : May 20 04:37:31 2025 GMT Subject: CN=6822cc8c-8a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8d:51:25:07:8a:0b:2b:3c:64:dd:4c:ef:fa: 5a:22:f9:8a:7c:df:66:84:2b:a9:bc:21:f0:d2:1e: cd:cb:5d:63:eb:dc:ca:6a:df:35:24:88:98:20:49: 57:00:93:ac:27:40:51:c4:8c:f5:46:27:05:55:2e: 1a:89:e0:27:57:fb:73:e5:6c:b4:b0:33:1b:9a:85: 8f:c8:e5:58:dd:00:1b:11:18:a2:51:98:60:b4:10: c8:3c:91:23:28:d8:13:52:cf:a1:a5:7b:54:2b:30: 7a:ed:3c:fa:ef:40:25:29:18:2e:b9:e4:f1:6f:31: f5:ca:88:ae:17:7e:a1:4f:cf:af:8e:45:25:04:df: de:7c:60:aa:60:be:ee:8b:1f:55:00:85:2a:dc:ff: 57:7a:7c:a1:cb:a7:19:45:90:8c:1a:ad:25:37:b2: 2e:be:43:b5:4b:02:49:4d:1c:b2:94:91:20:23:da: 68:68:6a:a8:f5:7f:e6:03:d0:7a:0d:d7:ae:d2:ca: 2b:cb:d6:67:33:e1:eb:d9:a3:42:5d:00:73:e9:0b: cf:32:34:8e:90:ce:fd:b0:22:c5:9d:11:07:3e:b7: a2:32:aa:c9:59:fb:6a:53:e9:6c:57:f6:df:58:30: a6:5b:a6:c3:96:83:f1:4f:88:f3:f3:df:fb:ca:7d: ed:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E8:41:2B:B0:6E:89:9E:97:9C:F6:A0:D7:E2:7C:81:0F:06:3E:8F X509v3 Authority Key Identifier: keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:5a:d9:13:c0:6c:be:42:19:78:c7:c9:f5:68:83:57:d0:c9: 56:3f:fe:4f:78:ea:1e:96:44:27:27:80:20:5c:e8:c7:42:8f: 7d:3f:df:d0:52:29:82:1d:65:c9:fc:f9:1a:34:ca:39:00:86: b9:b8:63:c5:d3:58:1c:24:33:4c:37:a1:e2:f9:1c:ff:13:61: c4:3f:bc:65:61:88:6c:48:e2:ad:f5:f7:2f:ec:57:84:b3:13: 98:99:7f:55:a4:34:e6:cc:5c:1f:15:1f:c6:ea:59:ac:f4:99: 81:eb:a3:af:e0:f7:eb:8d:0f:0a:7a:ea:0e:bc:2e:66:b3:58: c5:2d:83:53:85:13:46:59:8a:61:68:75:df:97:42:03:71:c4: 46:38:71:d0:84:ee:21:61:24:ac:13:79:56:13:06:e0:e5:79: 70:bb:2b:6a:89:35:66:d3:15:7b:9a:38:e3:7c:c7:9d:6b:c8: 9b:10:f1:91:d3:8f:e4:27:3c:bb:3e:dd:a2:f1:66:9c:a5:2c: e1:e2:b2:16:e1:cd:14:90:98:17:7a:ad:ea:d9:ff:16:d8:17: de:2e:12:a7:56:54:3d:c0:a6:c0:a4:6d:22:ce:76:a7:a3:c0: 47:a2:e5:6d:71:81:d4:16:b9:31:4e:dc:1d:78:2c:58:16:1b: a9:a6:f1:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDg3MkM5MzY4NjU2Qzc3ODM1N0MyQTVBOTlCRUNGRkY2 Nzc1NTBBQzgwHhcNMjUwNTEzMDQzNzMxWhcNMjUwNTIwMDQzNzMxWjAYMRYwFAYD VQQDEw02ODIyY2M4Yy04YTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtY1RJQeKCys8ZN1M7/paIvmKfN9mhCupvCHw0h7Ny11j69zKat81JIiYIElX AJOsJ0BRxIz1RicFVS4aieAnV/tz5Wy0sDMbmoWPyOVY3QAbERiiUZhgtBDIPJEj KNgTUs+hpXtUKzB67Tz670AlKRguueTxbzH1yoiuF36hT8+vjkUlBN/efGCqYL7u ix9VAIUq3P9Xenyhy6cZRZCMGq0lN7IuvkO1SwJJTRyylJEgI9poaGqo9X/mA9B6 Ddeu0sory9ZnM+Hr2aNCXQBz6QvPMjSOkM79sCLFnREHPreiMqrJWftqU+lsV/bf WDCmW6bDloPxT4jz89/7yn3tHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3oQSuw bomel5z2oNfifIEPBj6PMB8GA1UdIwQYMBaAFIcsk2hlbHeDV8KlqZvs//Z3VQrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83NUEwQ0QxNEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0Tlh3cVdwbS16XzluZFZD c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83NUEwQ0QxNEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0 Tlh3cVdwbS16XzluZFZDc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpWtkTwGy+Qhl4x8n1aINX0MlWP/5PeOoelkQnJ4AgXOjHQo99P9/Q UimCHWXJ/PkaNMo5AIa5uGPF01gcJDNMN6Hi+Rz/E2HEP7xlYYhsSOKt9fcv7FeE sxOYmX9VpDTmzFwfFR/G6lms9JmB66Ov4PfrjQ8KeuoOvC5ms1jFLYNThRNGWYph aHXfl0IDccRGOHHQhO4hYSSsE3lWEwbg5XlwuytqiTVm0xV7mjjjfMeda8ibEPGR 04/kJzy7Pt2i8WacpSzh4rIW4c0UkJgXeq3q2f8W2BfeLhKnVlQ9wKbApG0iznan o8BHouVtcYHUFrkxTtwdeCxYFhuppvHh -----END CERTIFICATE-----Generated at Tue May 13 14:01:45 2025 by rpki-client