$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft File: hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json) Hash identifier: aN9tsyrPXINVWYaq/cSRONrDABiE2Zu24oPEWeIodCY= Subject key identifier: 8D:F6:0C:4E:7A:09:B8:5D:50:A2:DE:68:32:1A:19:96:92:AA:A7:E3 Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Certificate serial: 0318 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft Manifest number: 030F Signing time: Tue 13 May 2025 01:01:51 +0000 Manifest this update: Tue 13 May 2025 01:01:51 +0000 Manifest next update: Tue 20 May 2025 01:01:51 +0000 Files and hashes: 1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: KbtyhY753ZruLUr2a3yiFZC+eSou/PdGmWA1QOCTiUE=) 2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: 3vg65+dFIA+BeOKO6jxWCKMxKp60+BuPw8DF4AA/5hM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 792 (0x318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Validity Not Before: May 13 01:01:51 2025 GMT Not After : May 20 01:01:51 2025 GMT Subject: CN=682299ff-40c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:72:5b:f5:d5:90:19:e3:3a:74:d3:c9:9f: 8f:c7:a7:dc:e8:57:16:cf:4d:21:af:4d:8f:81:5b: 77:99:d6:3e:cf:a1:27:50:c6:b6:34:71:0e:c4:51: 0c:e8:6d:88:ad:34:13:38:cc:41:f4:60:62:77:d0: 0c:9e:7b:4c:ce:72:97:d8:36:df:74:e5:50:a1:b7: 32:d5:30:dc:51:68:41:a2:ed:90:23:c2:19:bc:fe: fe:0e:56:3d:46:8a:f9:a7:a8:bc:84:62:08:64:6a: 75:e4:98:c8:77:38:89:3b:f5:e3:9c:16:ca:3c:85: e4:c5:3e:e6:c0:d0:e3:5d:f1:c3:48:cd:cc:47:a6: 22:69:6f:3f:b3:1d:50:55:6c:19:f8:9e:c6:3c:f2: e2:3c:d6:a4:31:7c:36:7e:84:a1:4f:3a:c4:f3:32: 70:93:01:dd:63:d3:64:b6:e2:5f:03:a7:c2:25:8d: 85:80:56:59:4e:3b:f6:8e:3e:84:7e:0a:c1:95:f7: ce:55:3b:f0:43:8a:fb:ef:f0:e1:ae:74:2b:10:d9: 07:b9:7a:e5:f0:26:f9:65:92:71:35:b9:07:6f:99: a7:36:b5:78:60:5f:cd:2c:ba:e6:a1:b3:1a:fb:60: 62:8b:f2:c3:6a:3c:a8:45:1f:bc:c7:b0:69:15:f1: a2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F6:0C:4E:7A:09:B8:5D:50:A2:DE:68:32:1A:19:96:92:AA:A7:E3 X509v3 Authority Key Identifier: keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:10:e5:43:95:53:28:78:70:b2:10:9a:5b:d8:a1:10:79:74: b5:cf:67:b0:ce:b1:28:a3:56:12:12:99:ef:73:ec:9b:2e:c3: 6b:dc:9f:9e:80:29:90:bc:c7:a4:78:24:86:b6:95:84:dd:43: b8:ee:88:43:f4:8a:18:5a:fb:72:29:1c:d8:ec:19:c6:86:c3: 28:ff:eb:0e:a5:58:76:38:20:99:69:53:0f:c7:25:7b:ce:da: b7:96:a8:dc:e6:d3:9f:4d:d4:c0:21:9a:55:63:0f:02:a8:58: 42:84:7b:38:ad:44:0b:f7:a0:5b:0f:46:c3:49:af:fe:b3:2d: 29:61:1c:62:0b:4e:32:d3:08:01:2d:d2:c8:e1:f2:6f:e6:e0: fa:ba:1e:6f:a0:47:fb:ad:d9:52:cb:c4:82:82:b0:27:d6:2b: dd:7a:9e:27:6b:c8:90:c1:61:df:ea:91:f3:7f:a6:36:d4:91: 7d:0d:fd:d9:d3:47:dc:cf:cd:7b:20:1a:53:7a:dc:08:19:8c: f8:0e:cd:fc:8b:7a:92:11:24:1d:b9:1a:40:ec:f9:4e:5c:34: 7b:e1:ee:24:fa:7f:e9:a4:5f:df:b9:05:d2:ff:1c:a8:b2:d0: d8:77:a7:d2:47:ba:fc:c2:2b:3e:53:f3:06:02:02:7b:c8:c3: 31:50:5d:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3 QjdEOUYxQzEwHhcNMjUwNTEzMDEwMTUxWhcNMjUwNTIwMDEwMTUxWjAYMRYwFAYD VQQDEw02ODIyOTlmZi00MGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSxyW/XVkBnjOnTTyZ+Px6fc6FcWz00hr02PgVt3mdY+z6EnUMa2NHEOxFEM 6G2IrTQTOMxB9GBid9AMnntMznKX2DbfdOVQobcy1TDcUWhBou2QI8IZvP7+DlY9 Ror5p6i8hGIIZGp15JjIdziJO/XjnBbKPIXkxT7mwNDjXfHDSM3MR6YiaW8/sx1Q VWwZ+J7GPPLiPNakMXw2foShTzrE8zJwkwHdY9NktuJfA6fCJY2FgFZZTjv2jj6E fgrBlffOVTvwQ4r77/DhrnQrENkHuXrl8Cb5ZZJxNbkHb5mnNrV4YF/NLLrmobMa +2Bii/LDajyoRR+8x7BpFfGiqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI32DE56 CbhdUKLeaDIaGZaSqqfjMB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkUyRS9EOEFCQUZFOEQwRkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0 LXVfYmlUdndiaHA3Zlo4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIEOVDlVMoeHCyEJpb2KEQeXS1z2ewzrEoo1YSEpnvc+ybLsNr3J+e gCmQvMekeCSGtpWE3UO47ohD9IoYWvtyKRzY7BnGhsMo/+sOpVh2OCCZaVMPxyV7 ztq3lqjc5tOfTdTAIZpVYw8CqFhChHs4rUQL96BbD0bDSa/+sy0pYRxiC04y0wgB LdLI4fJv5uD6uh5voEf7rdlSy8SCgrAn1ivdep4na8iQwWHf6pHzf6Y21JF9Df3Z 00fcz817IBpTetwIGYz4Ds38i3qSESQduRpA7PlOXDR74e4k+n/ppF/fuQXS/xyo stDYd6fSR7r8wis+U/MGAgJ7yMMxUF0R -----END CERTIFICATE-----Generated at Wed May 14 03:05:35 2025 by rpki-client