$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft File: hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json) Hash identifier: ECCBUY6GHFy9DP6Bls2vrZOK0CC95DZ9PoRVexORAnc= Subject key identifier: 08:9B:5C:AF:09:A1:36:47:24:E5:76:0E:C7:83:59:43:B3:73:47:3F Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft Manifest number: 032A Signing time: Thu 03 Jul 2025 01:30:50 +0000 Manifest this update: Thu 03 Jul 2025 01:30:49 +0000 Manifest next update: Thu 10 Jul 2025 01:30:49 +0000 Files and hashes: 1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: 4RZleKhr2XGHvrxQpakDP4fL4k9uJL6NUgHGo0zq1EU=) 2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: 7/5fZwleDVzsoLoxdmlvx46DZvj38NfAJm5JPzwN8K4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Validity Not Before: Jul 3 01:30:49 2025 GMT Not After : Jul 10 01:30:49 2025 GMT Subject: CN=6865dd49-a1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c6:df:14:47:97:7a:20:25:8a:a6:85:51:16: 6f:0f:71:23:4e:86:b8:ab:66:8b:c1:45:cc:17:31: 58:3f:27:67:b5:50:1a:a9:10:8e:58:f3:ec:9e:25: 60:ef:46:5c:f5:f0:2d:7f:33:58:3c:eb:b7:76:31: ae:15:60:e0:ee:e3:b8:41:43:9c:bb:36:2f:4a:5d: 14:7b:63:d2:dc:31:97:46:5a:24:61:ea:3c:3d:e5: 65:e8:dc:44:2e:e1:04:c5:a2:9a:ed:e7:be:38:fb: 1c:8d:8a:db:41:f8:31:f2:f3:61:50:9b:4c:90:ee: 69:61:1c:19:80:c5:20:25:17:19:a3:ce:ab:dc:1f: ab:94:cc:70:b6:08:16:6c:82:05:4a:08:a9:70:f9: 49:b5:7d:8b:7b:95:3d:ff:17:3c:42:a6:14:69:46: 9e:b1:33:bb:9d:0f:88:69:29:cd:ef:62:bc:1b:dc: 84:dd:64:49:9b:c9:c4:b7:ce:3e:e0:9d:ba:4d:2c: 81:d4:14:ab:71:b8:06:3d:ec:09:e2:5c:8d:ba:ee: 0d:68:77:11:5d:9f:ce:0b:3b:16:4b:a6:ac:7b:15: 2c:ac:26:65:6d:d1:68:fa:0d:68:66:00:5d:f9:9a: 02:5d:9e:da:dd:71:74:af:48:37:63:2e:3f:c3:16: 2a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9B:5C:AF:09:A1:36:47:24:E5:76:0E:C7:83:59:43:B3:73:47:3F X509v3 Authority Key Identifier: keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:5a:4b:f3:75:23:c4:ab:19:9c:e0:3e:e3:e8:30:65:32:c6: 15:87:25:70:40:e6:13:d0:28:d0:03:61:8a:6d:6c:c8:db:d2: 48:2a:8a:9b:96:e5:36:80:cd:97:da:2d:d0:64:1c:2c:11:5d: ee:50:6a:78:58:e6:27:36:70:f1:5f:f5:17:ea:ed:4d:97:4d: fa:ba:2c:65:f6:b6:e8:8b:99:d5:b1:c6:22:c1:48:24:fa:f0: d4:88:35:40:11:9c:17:28:7c:d3:42:59:f0:54:d9:f5:80:e9: b4:8a:ac:9e:e4:2a:45:0a:f1:2c:2b:6a:71:f7:26:3e:f8:a3: 48:14:e9:19:19:39:92:10:a8:a5:41:20:86:83:2d:76:e1:e3: 26:53:28:e3:5c:3a:63:1d:81:54:3c:5d:79:63:3f:7f:1a:c5: ce:db:26:a5:fc:7d:b0:a1:18:5d:dc:23:95:ae:ea:d4:e2:d0: 04:0c:36:36:e1:7c:d3:4e:04:3f:02:8d:f1:9b:b9:fc:33:ec: f3:58:50:3d:a8:21:4b:bc:0a:bf:73:23:57:f2:ab:a3:e0:b6: 41:65:cc:a5:c1:a1:94:c5:14:a7:e9:43:08:5c:01:df:2e:c8: 02:b6:db:06:fa:f1:c1:28:48:22:10:68:a4:ed:e3:83:60:22: f5:58:51:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3 QjdEOUYxQzEwHhcNMjUwNzAzMDEzMDQ5WhcNMjUwNzEwMDEzMDQ5WjAYMRYwFAYD VQQDEw02ODY1ZGQ0OS1hMWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsbfFEeXeiAliqaFURZvD3EjToa4q2aLwUXMFzFYPydntVAaqRCOWPPsniVg 70Zc9fAtfzNYPOu3djGuFWDg7uO4QUOcuzYvSl0Ue2PS3DGXRlokYeo8PeVl6NxE LuEExaKa7ee+OPscjYrbQfgx8vNhUJtMkO5pYRwZgMUgJRcZo86r3B+rlMxwtggW bIIFSgipcPlJtX2Le5U9/xc8QqYUaUaesTO7nQ+IaSnN72K8G9yE3WRJm8nEt84+ 4J26TSyB1BSrcbgGPewJ4lyNuu4NaHcRXZ/OCzsWS6asexUsrCZlbdFo+g1oZgBd +ZoCXZ7a3XF0r0g3Yy4/wxYq+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAibXK8J oTZHJOV2DseDWUOzc0c/MB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkUyRS9EOEFCQUZFOEQwRkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0 LXVfYmlUdndiaHA3Zlo4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1WkvzdSPEqxmc4D7j6DBlMsYVhyVwQOYT0CjQA2GKbWzI29JIKoqb luU2gM2X2i3QZBwsEV3uUGp4WOYnNnDxX/UX6u1Nl036uixl9rboi5nVscYiwUgk +vDUiDVAEZwXKHzTQlnwVNn1gOm0iqye5CpFCvEsK2px9yY++KNIFOkZGTmSEKil QSCGgy124eMmUyjjXDpjHYFUPF15Yz9/GsXO2yal/H2woRhd3COVrurU4tAEDDY2 4XzTTgQ/Ao3xm7n8M+zzWFA9qCFLvAq/cyNX8quj4LZBZcylwaGUxRSn6UMIXAHf LsgCttsG+vHBKEgiEGik7eODYCL1WFFr -----END CERTIFICATE-----Generated at Thu Jul 3 16:44:46 2025 by rpki-client