$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft File: Hy55yPeszIoD-1tKOvzF9pMbN4I.mft (raw, json) Hash identifier: OdDrqoVGjKay7/ZIai90GWYXm1+y2gU9ELgM8DgJhhI= Subject key identifier: 0C:18:A9:E7:02:B0:FF:BB:F7:80:C3:D0:76:66:86:BE:DB:A4:98:E5 Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 Certificate issuer: /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Certificate serial: 1745 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft Manifest number: 173B Signing time: Wed 02 Jul 2025 16:44:48 +0000 Manifest this update: Wed 02 Jul 2025 16:44:48 +0000 Manifest next update: Wed 09 Jul 2025 16:44:48 +0000 Files and hashes: 1: Hy55yPeszIoD-1tKOvzF9pMbN4I.crl (hash: U38UFgHOxoxloi49akULwKRBNFIs/oW4eddKdIbZUFw=) 2: 02181C4CE13511E7B0D71C83C4F9AE02.roa (hash: kYdi56Vh70Qo/SN0C8R4CSPhNox0X9SfOcU95n5XzCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5957 (0x1745) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB09C, serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Validity Not Before: Jul 2 16:44:48 2025 GMT Not After : Jul 9 16:44:48 2025 GMT Subject: CN=68656200-13fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:f4:d4:bf:74:3f:a6:97:39:53:df:3f:a7: d1:11:f2:ec:0d:d3:48:d3:3a:ba:4a:4f:39:c0:63: 7a:19:33:84:74:f3:f2:bf:43:77:af:95:49:84:cb: b3:74:c8:f5:f2:a3:e1:da:72:c6:03:f5:bf:ef:29: 86:7d:c4:74:91:50:d4:85:b9:01:ce:34:37:1b:b7: 50:33:9d:0e:dd:35:00:d5:f5:e3:fe:11:d3:59:d4: da:59:04:49:b4:1f:48:13:f2:bf:f6:87:e9:8c:e8: 5b:bc:c5:c6:8c:74:78:16:38:2b:9d:00:d8:27:f1: 64:10:a7:45:0b:f9:5d:b9:f2:e3:75:ce:7e:17:53: 1f:82:71:e6:86:39:a2:80:40:40:2f:6f:b5:6d:69: 04:a3:3e:e3:aa:81:f4:8c:5d:99:72:5c:3f:8a:de: bf:26:ef:ff:70:78:44:7f:69:5b:df:82:47:c1:68: f9:bd:eb:e3:36:74:79:ad:20:f9:a0:33:62:da:c3: 56:7b:4f:c5:68:43:00:ca:7c:7a:ca:e7:ed:38:83: 61:c1:fd:30:16:e4:fe:d2:fe:43:d7:9c:7b:58:74: 6f:f4:dc:b4:9a:56:5f:42:7a:41:07:46:0b:31:1c: 98:f4:86:ae:18:93:f8:64:81:6e:56:6c:54:3b:8e: 04:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:18:A9:E7:02:B0:FF:BB:F7:80:C3:D0:76:66:86:BE:DB:A4:98:E5 X509v3 Authority Key Identifier: keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:4d:b7:d4:fc:7e:cc:fb:ea:01:86:dd:00:cc:8a:81:d4:65: 64:59:d2:5e:a5:c9:53:84:ab:98:f0:f8:a4:32:2d:89:ab:63: 5f:5d:c9:6f:c0:6d:11:67:c4:9c:e3:83:86:a1:7e:b5:a7:dd: 5b:dd:76:e2:f0:6e:a7:57:44:e0:ff:44:b0:cb:08:c3:f1:b2: 92:42:b9:38:b8:8b:4e:ff:3f:b8:54:4d:e5:77:a2:ce:36:57: ed:70:83:39:c2:98:03:7c:ff:52:76:1b:4b:c5:18:5c:ef:17: 24:d9:80:86:94:6e:48:0d:ed:a7:20:89:c2:bc:14:5c:2e:5e: b6:9d:f9:cb:c2:8a:b8:1e:e2:03:65:c9:3f:cf:15:7e:96:5c: f9:57:c7:fd:85:9e:a3:8c:72:47:76:e3:11:54:42:ab:02:49: 37:91:18:6a:e0:ed:b1:9e:8e:23:a9:5c:02:7d:1f:ae:5e:1e: 53:f0:f9:4c:ba:ff:42:cf:17:42:1a:a8:53:43:e4:d8:39:42: f4:01:7b:12:c7:cf:bc:49:bc:8b:a4:0c:75:73:d3:d3:9c:80: af:a6:7c:1c:b5:be:35:5e:89:38:5d:8c:44:e8:7e:4e:08:b7: c9:c7:90:81:9f:e8:69:7b:11:04:a1:0d:93:d8:a4:4a:b8:ca: 7a:03:e9:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIwOUMxMTAvBgNVBAUTKDFGMkU3OUM4RjdBQ0NDOEEwM0ZCNUI0QTNBRkNDNUY2 OTMxQjM3ODIwHhcNMjUwNzAyMTY0NDQ4WhcNMjUwNzA5MTY0NDQ4WjAYMRYwFAYD VQQDEw02ODY1NjIwMC0xM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubv01L90P6aXOVPfP6fREfLsDdNI0zq6Sk85wGN6GTOEdPPyv0N3r5VJhMuz dMj18qPh2nLGA/W/7ymGfcR0kVDUhbkBzjQ3G7dQM50O3TUA1fXj/hHTWdTaWQRJ tB9IE/K/9ofpjOhbvMXGjHR4FjgrnQDYJ/FkEKdFC/ldufLjdc5+F1MfgnHmhjmi gEBAL2+1bWkEoz7jqoH0jF2Zclw/it6/Ju//cHhEf2lb34JHwWj5vevjNnR5rSD5 oDNi2sNWe0/FaEMAynx6yuftOINhwf0wFuT+0v5D15x7WHRv9Ny0mlZfQnpBB0YL MRyY9IauGJP4ZIFuVmxUO44EhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwYqecC sP+794DD0HZmhr7bpJjlMB8GA1UdIwQYMBaAFB8uecj3rMyKA/tbSjr8xfaTGzeC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjA5Qy8xRkNEMTVFMEUx MzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJb0QtMXRLT3Z6RjlwTWJO NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h5NTV5UGVzeklvRC0xdEtPdnpGOXBNYk40SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjA5Qy8xRkNEMTVFMEUxMzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJ b0QtMXRLT3Z6RjlwTWJONEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtTbfU/H7M++oBht0AzIqB1GVkWdJepclThKuY8PikMi2Jq2NfXclv wG0RZ8Sc44OGoX61p91b3Xbi8G6nV0Tg/0SwywjD8bKSQrk4uItO/z+4VE3ld6LO NlftcIM5wpgDfP9SdhtLxRhc7xck2YCGlG5IDe2nIInCvBRcLl62nfnLwoq4HuID Zck/zxV+llz5V8f9hZ6jjHJHduMRVEKrAkk3kRhq4O2xno4jqVwCfR+uXh5T8PlM uv9CzxdCGqhTQ+TYOUL0AXsSx8+8SbyLpAx1c9PTnICvpnwctb41Xok4XYxE6H5O CLfJx5CBn+hpexEEoQ2T2KRKuMp6A+lJ -----END CERTIFICATE-----Generated at Thu Jul 3 02:47:49 2025 by rpki-client