$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft File: Hy55yPeszIoD-1tKOvzF9pMbN4I.mft (raw, json) Hash identifier: WLiXIpJ+SwBTiuSvUONINbwXLFFtjPTn8Aixb2H7StE= Subject key identifier: D8:97:00:73:93:2F:21:9A:EF:24:A7:0C:B5:B7:48:E1:5F:24:DC:E5 Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 Certificate issuer: /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Certificate serial: 172C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft Manifest number: 1722 Signing time: Wed 14 May 2025 16:42:31 +0000 Manifest this update: Wed 14 May 2025 16:42:31 +0000 Manifest next update: Wed 21 May 2025 16:42:31 +0000 Files and hashes: 1: Hy55yPeszIoD-1tKOvzF9pMbN4I.crl (hash: C+la7yR3UXe3rtuvmaPM1XfH2JFN63LNJq8TCf0KuV4=) 2: 02181C4CE13511E7B0D71C83C4F9AE02.roa (hash: kYdi56Vh70Qo/SN0C8R4CSPhNox0X9SfOcU95n5XzCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5932 (0x172c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB09C, serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Validity Not Before: May 14 16:42:31 2025 GMT Not After : May 21 16:42:31 2025 GMT Subject: CN=6824c7f7-de59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:2c:7c:26:0e:dc:42:7a:15:fd:31:20:be: 41:c5:2a:c1:14:6b:4c:53:41:f0:9b:1a:9f:e9:c3: 69:10:52:f5:a8:aa:45:0d:97:6f:55:aa:98:ac:e9: 4f:ac:f6:71:7b:5d:5f:36:d2:3a:21:9b:f7:3e:88: 01:3b:19:f8:67:24:42:46:6e:ef:15:6b:2f:ec:49: b4:09:fa:e4:63:bd:63:2f:01:8f:44:7e:60:bf:ef: 9a:39:49:5f:f6:d3:42:79:3f:06:cc:0f:3e:70:18: ab:1b:57:9e:88:d0:86:9c:bf:e2:b0:91:c7:c9:cf: c3:f2:d4:2c:05:c7:9e:be:c4:bd:8a:f3:11:21:49: 43:fe:76:55:ce:87:4e:a0:36:f6:26:a6:d8:8f:bd: c1:86:21:c2:98:8a:71:95:d0:2d:55:bb:79:97:8a: b6:73:89:c3:5e:97:b4:8c:a0:b5:33:c6:ec:e4:56: e8:78:72:70:83:00:b4:5c:93:51:1f:06:82:ac:ed: 63:f4:58:65:77:7c:e4:eb:fc:ff:4f:ef:bd:ae:7f: b0:07:98:6d:12:d9:f5:cf:92:38:09:9b:fe:dd:6c: a7:61:2c:c0:21:f4:ab:c1:46:0d:44:6c:37:81:d2: b4:82:e5:81:14:d9:fd:15:02:f1:0d:72:a2:fd:89: f7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:97:00:73:93:2F:21:9A:EF:24:A7:0C:B5:B7:48:E1:5F:24:DC:E5 X509v3 Authority Key Identifier: keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:9f:42:cd:46:b7:2d:e1:bd:f5:36:ed:ca:3c:0a:2e:14:0e: 14:69:96:94:07:9e:3a:1e:26:e2:aa:52:fd:b3:b6:f9:95:21: bd:ea:18:c1:79:a9:8b:13:9f:b6:53:0e:94:e4:e0:10:48:4e: b0:c0:42:e1:2e:45:05:1a:7e:a3:7e:f9:ec:3f:3b:24:0b:b1: 27:f1:7c:73:7d:91:ef:14:1b:dd:af:9f:b3:0d:4e:cc:6b:a3: 92:6b:de:b3:6c:b7:43:36:95:fd:c0:ae:f1:5c:8f:e9:3b:ce: 0c:60:06:a6:1a:de:72:c9:19:28:f1:3e:6d:16:a4:01:10:89: d7:89:1c:a8:a3:df:e1:e4:61:1e:3d:49:98:5b:79:37:54:b9: 73:ee:09:02:01:8f:02:9a:fb:f0:88:e2:d5:00:7d:a7:e7:68: 33:b2:0a:6a:57:67:a5:53:c5:92:34:1d:05:41:d2:ef:c2:6f: ce:b7:3d:c5:5d:ea:4b:2c:99:61:55:aa:c8:39:92:55:6a:2b: e4:03:f6:e1:3e:80:68:1b:5f:b0:7c:07:49:0f:0e:78:25:0b: 0b:52:f1:6f:c0:4b:48:c2:57:cb:c0:4c:4c:c6:bf:47:6e:c4: 96:c2:85:f1:c9:bf:8e:f1:50:83:57:d4:4a:28:40:7a:73:17: 35:c3:30:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIwOUMxMTAvBgNVBAUTKDFGMkU3OUM4RjdBQ0NDOEEwM0ZCNUI0QTNBRkNDNUY2 OTMxQjM3ODIwHhcNMjUwNTE0MTY0MjMxWhcNMjUwNTIxMTY0MjMxWjAYMRYwFAYD VQQDEw02ODI0YzdmNy1kZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUwsfCYO3EJ6Ff0xIL5BxSrBFGtMU0Hwmxqf6cNpEFL1qKpFDZdvVaqYrOlP rPZxe11fNtI6IZv3PogBOxn4ZyRCRm7vFWsv7Em0CfrkY71jLwGPRH5gv++aOUlf 9tNCeT8GzA8+cBirG1eeiNCGnL/isJHHyc/D8tQsBceevsS9ivMRIUlD/nZVzodO oDb2JqbYj73BhiHCmIpxldAtVbt5l4q2c4nDXpe0jKC1M8bs5FboeHJwgwC0XJNR HwaCrO1j9Fhld3zk6/z/T++9rn+wB5htEtn1z5I4CZv+3WynYSzAIfSrwUYNRGw3 gdK0guWBFNn9FQLxDXKi/Yn3JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiXAHOT LyGa7ySnDLW3SOFfJNzlMB8GA1UdIwQYMBaAFB8uecj3rMyKA/tbSjr8xfaTGzeC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjA5Qy8xRkNEMTVFMEUx MzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJb0QtMXRLT3Z6RjlwTWJO NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h5NTV5UGVzeklvRC0xdEtPdnpGOXBNYk40SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjA5Qy8xRkNEMTVFMEUxMzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJ b0QtMXRLT3Z6RjlwTWJONEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDan0LNRrct4b31Nu3KPAouFA4UaZaUB546HibiqlL9s7b5lSG96hjB eamLE5+2Uw6U5OAQSE6wwELhLkUFGn6jfvnsPzskC7En8XxzfZHvFBvdr5+zDU7M a6OSa96zbLdDNpX9wK7xXI/pO84MYAamGt5yyRko8T5tFqQBEInXiRyoo9/h5GEe PUmYW3k3VLlz7gkCAY8CmvvwiOLVAH2n52gzsgpqV2elU8WSNB0FQdLvwm/Otz3F XepLLJlhVarIOZJVaivkA/bhPoBoG1+wfAdJDw54JQsLUvFvwEtIwlfLwExMxr9H bsSWwoXxyb+O8VCDV9RKKEB6cxc1wzA0 -----END CERTIFICATE-----Generated at Thu May 15 22:22:05 2025 by rpki-client