$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json) Hash identifier: onnFBsejwDkT3OuL2qdtLBGpNmuOrZqs9dX7EcupDG4= Subject key identifier: BF:27:45:B1:7F:CB:69:B9:26:FB:C2:63:80:66:D9:0B:39:BC:DE:9B Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft Manifest number: 0104 Signing time: Thu 03 Jul 2025 05:18:58 +0000 Manifest this update: Thu 03 Jul 2025 05:18:58 +0000 Manifest next update: Thu 10 Jul 2025 05:18:58 +0000 Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: 3yRQLjms4KYFXrzB4LT5WvRzGzv18mDdOzK3wcvFRRE=) 2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: w6qwhTkmhaSB3ncvO8yCXadiw5lkWAA4VBrSx+fRpEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Validity Not Before: Jul 3 05:18:58 2025 GMT Not After : Jul 10 05:18:58 2025 GMT Subject: CN=686612c2-9ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:9f:2b:8b:38:0a:00:d4:f0:6c:f7:14:b1: 64:b9:75:b0:98:6c:9a:53:d4:ed:ce:ba:e2:82:6e: 8d:19:c3:10:a8:2d:cc:68:21:2c:35:46:09:94:13: 6d:60:f3:b1:68:22:a5:03:f7:1b:7e:b0:fb:f1:a9: 81:76:78:9e:f2:a0:71:2e:f0:80:72:e7:69:84:8b: 02:a3:f0:93:3c:a9:26:76:79:b2:4b:28:47:6f:7b: cf:bd:9e:24:79:b9:00:31:0c:32:d6:82:00:8f:3d: 6a:17:45:ac:5a:c7:32:1c:ba:88:0f:37:c3:84:16: 33:ad:99:81:3e:9a:e7:e2:a4:50:01:b7:65:5c:1e: 53:c1:cf:8f:6b:c0:78:8b:db:72:77:87:02:a4:b1: 36:ad:a0:bc:4b:f4:1d:cd:0b:86:96:8b:37:37:b8: 34:08:bb:3d:c0:42:5c:43:36:82:0b:87:5f:3d:a0: aa:4d:4c:94:74:5f:af:99:5e:8a:34:1e:a5:d7:3d: 56:1d:af:b9:06:65:05:e4:ea:dc:6b:4b:b1:75:25: a8:8f:eb:0f:97:c4:dd:76:2c:8a:80:64:e8:6f:86: 5e:a9:fd:3c:22:63:e5:18:f3:ad:6f:88:4a:e3:dd: 4a:37:63:62:bf:5f:59:af:ee:7f:91:5a:64:c8:c9: ee:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:27:45:B1:7F:CB:69:B9:26:FB:C2:63:80:66:D9:0B:39:BC:DE:9B X509v3 Authority Key Identifier: keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:f5:1e:04:ec:4f:0a:41:a7:5a:a9:6e:29:26:89:87:e0:fa: 75:82:ef:b6:6e:4e:11:f7:70:11:a6:77:ab:8a:78:23:67:72: 96:2f:02:db:92:84:cb:78:41:4a:cf:e0:3b:05:b7:6b:88:e7: c4:3a:db:fe:c5:4b:e3:00:84:f5:77:f8:24:85:53:a3:48:10: a2:2d:38:76:50:0e:be:7d:8b:fe:52:f8:64:49:98:b6:c9:a8: f0:20:f8:64:8b:1e:fe:21:db:52:57:83:ea:6b:b2:33:d4:83: cd:40:25:87:1e:ef:1f:8b:30:0c:40:86:47:85:c7:52:83:f8: 72:61:50:d4:d6:6a:65:6b:79:3e:b9:41:5d:99:92:de:7c:e9: 9e:d3:5a:89:6c:d4:f8:1b:72:f1:7b:f6:09:97:e6:8b:bc:8e: de:e4:85:cf:f8:b6:d0:b4:5f:ed:95:2f:96:fd:3c:ce:16:c0: 03:dd:ac:54:2f:a5:23:5b:b0:55:47:c8:9a:04:77:18:e0:3b: 2a:db:95:03:93:9f:7a:49:46:26:53:33:81:e7:29:88:72:4c: 60:25:7d:33:32:de:b2:1a:ff:f0:28:a1:30:99:d3:d9:63:b9: 43:91:38:b1:82:ae:ff:8c:b5:4a:a9:d6:52:fe:77:17:93:92: 8a:01:c5:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDg3MkM5MzY4NjU2Qzc3ODM1N0MyQTVBOTlCRUNGRkY2 Nzc1NTBBQzgwHhcNMjUwNzAzMDUxODU4WhcNMjUwNzEwMDUxODU4WjAYMRYwFAYD VQQDEw02ODY2MTJjMi05YmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeCfK4s4CgDU8Gz3FLFkuXWwmGyaU9Ttzrrigm6NGcMQqC3MaCEsNUYJlBNt YPOxaCKlA/cbfrD78amBdnie8qBxLvCAcudphIsCo/CTPKkmdnmySyhHb3vPvZ4k ebkAMQwy1oIAjz1qF0WsWscyHLqIDzfDhBYzrZmBPprn4qRQAbdlXB5Twc+Pa8B4 i9tyd4cCpLE2raC8S/QdzQuGlos3N7g0CLs9wEJcQzaCC4dfPaCqTUyUdF+vmV6K NB6l1z1WHa+5BmUF5Orca0uxdSWoj+sPl8TddiyKgGTob4Zeqf08ImPlGPOtb4hK 491KN2Niv19Zr+5/kVpkyMnuQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8nRbF/ y2m5JvvCY4Bm2Qs5vN6bMB8GA1UdIwQYMBaAFIcsk2hlbHeDV8KlqZvs//Z3VQrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83NUEwQ0QxNEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0Tlh3cVdwbS16XzluZFZD c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83NUEwQ0QxNEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0 Tlh3cVdwbS16XzluZFZDc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV9R4E7E8KQadaqW4pJomH4Pp1gu+2bk4R93ARpneringjZ3KWLwLb koTLeEFKz+A7BbdriOfEOtv+xUvjAIT1d/gkhVOjSBCiLTh2UA6+fYv+UvhkSZi2 yajwIPhkix7+IdtSV4Pqa7Iz1IPNQCWHHu8fizAMQIZHhcdSg/hyYVDU1mpla3k+ uUFdmZLefOme01qJbNT4G3Lxe/YJl+aLvI7e5IXP+LbQtF/tlS+W/TzOFsAD3axU L6UjW7BVR8iaBHcY4Dsq25UDk596SUYmUzOB5ymIckxgJX0zMt6yGv/wKKEwmdPZ Y7lDkTixgq7/jLVKqdZS/ncXk5KKAcXR -----END CERTIFICATE-----Generated at Thu Jul 3 23:21:35 2025 by rpki-client