$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft File: rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json) Hash identifier: suBVTnQDhKutOSNl5yPJ1F4LcvWvmLBpVuAI31dyrNc= Subject key identifier: 86:1A:A9:B1:C0:87:48:23:9E:64:28:6A:29:49:D2:04:8E:09:2B:AE Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 Certificate issuer: /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Certificate serial: 0444 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft Manifest number: 043B Signing time: Sun 04 May 2025 23:55:55 +0000 Manifest this update: Sun 04 May 2025 23:55:55 +0000 Manifest next update: Sun 11 May 2025 23:55:55 +0000 Files and hashes: 1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: JCPIxeO0Q6hdHnJFUGr5nrar1yfIGwKqjhccPs2Rfvg=) 2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: vuA1aYKkB68NvYwo7uB0J5bfujQe8Me2IIkrPlSzC4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 23:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1092 (0x444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Validity Not Before: May 4 23:55:55 2025 GMT Not After : May 11 23:55:55 2025 GMT Subject: CN=6817fe8b-82c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:51:3e:48:65:c6:fd:81:89:a2:b8:d6:2a:8b: a2:4f:0b:07:b6:c7:c5:eb:b3:20:96:b2:32:c8:5d: 50:3f:40:6f:64:2c:b3:b0:c0:52:41:7e:fd:b9:bd: 88:77:9c:fc:aa:d0:db:f9:5f:eb:16:59:ab:65:c6: 2c:be:ff:0a:40:17:7f:b3:f9:98:fd:43:03:37:bf: ce:34:9f:a9:c1:2d:1b:47:a6:65:b3:37:7d:9e:8c: b2:57:60:63:37:e1:99:d8:1c:d0:cc:1d:58:f5:70: 0b:7d:95:8c:da:ad:a4:4b:32:43:aa:c4:34:03:86: 99:5d:9c:d2:de:a5:a0:4d:58:c2:5e:77:65:66:67: a8:7a:87:5e:af:36:fc:1f:1c:0a:c4:97:08:6e:fb: fb:fc:6e:86:1f:fe:1f:74:3c:bc:95:a2:6f:a5:44: 15:fc:a1:e0:0c:b5:52:1b:47:d5:92:f0:33:96:d1: f9:ab:15:d0:7b:a5:78:bc:42:69:60:15:1c:5c:4c: 10:3f:2f:88:8c:a5:ed:e5:61:75:fe:7d:3b:e1:27: 23:9c:b1:f2:b2:24:26:ff:3c:11:88:76:53:95:a9: b6:cb:93:20:fb:66:b8:c2:07:d6:b1:cf:90:9b:1b: 98:d1:10:ff:0c:4c:9b:fe:f6:a8:7b:45:70:2f:e6: b8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1A:A9:B1:C0:87:48:23:9E:64:28:6A:29:49:D2:04:8E:09:2B:AE X509v3 Authority Key Identifier: keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:60:0d:e9:c7:4e:b7:ec:c8:35:1a:5f:af:32:e6:b3:cf:4e: 24:5c:85:42:25:07:5c:e6:d5:9c:81:b6:8b:fe:d6:be:a6:89: 41:43:2c:5c:96:9a:d0:c1:3d:f1:21:bd:de:b2:bc:c3:3f:e0: 63:3f:6b:82:82:7b:d9:4e:2e:70:f1:b5:de:57:f0:97:c4:10: 2f:c3:02:81:79:0e:eb:b3:27:b7:66:06:d8:a6:a6:48:f1:d4: c2:11:84:52:55:9b:72:41:b2:1e:81:24:bb:59:33:75:f2:b5: d1:22:b4:74:17:30:b3:a8:73:02:05:6c:88:61:46:1d:26:f0: 9a:12:d7:b7:84:ea:68:35:e9:75:2f:6b:4c:e5:58:34:04:b3: 72:f2:a1:ef:18:73:b7:d2:ce:e7:2e:3d:0b:26:4a:ff:0f:a4: c2:48:c3:87:5b:ff:3b:b3:e8:26:ec:0b:b4:c9:fd:20:c1:c9: 9a:3a:7e:ed:c6:34:ae:a8:a0:31:29:68:6e:fc:4d:5c:1b:26: 45:79:52:4e:9b:15:c8:c7:ef:4c:56:51:83:a3:b5:f7:46:b7: c0:c8:d2:6f:be:64:c4:06:aa:ee:a1:e4:aa:23:7a:7c:07:52: d0:e9:ac:dd:cb:22:eb:ff:f8:55:34:88:64:fc:7c:d2:b3:c2: 15:5a:2e:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCQjMxMTAvBgNVBAUTKEFDN0M5RTcxODIyQzA1NjE4NTE4NjQ1M0Y5NjBCMkMx RThDQTk0RTMwHhcNMjUwNTA0MjM1NTU1WhcNMjUwNTExMjM1NTU1WjAYMRYwFAYD VQQDEw02ODE3ZmU4Yi04MmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVE+SGXG/YGJorjWKouiTwsHtsfF67MglrIyyF1QP0BvZCyzsMBSQX79ub2I d5z8qtDb+V/rFlmrZcYsvv8KQBd/s/mY/UMDN7/ONJ+pwS0bR6Zlszd9noyyV2Bj N+GZ2BzQzB1Y9XALfZWM2q2kSzJDqsQ0A4aZXZzS3qWgTVjCXndlZmeoeoderzb8 HxwKxJcIbvv7/G6GH/4fdDy8laJvpUQV/KHgDLVSG0fVkvAzltH5qxXQe6V4vEJp YBUcXEwQPy+IjKXt5WF1/n074ScjnLHysiQm/zwRiHZTlam2y5Mg+2a4wgfWsc+Q mxuY0RD/DEyb/vaoe0VwL+a47QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYaqbHA h0gjnmQoailJ0gSOCSuuMB8GA1UdIwQYMBaAFKx8nnGCLAVhhRhkU/lgssHoypTj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEJCMy9BRUE4NzNFQzVC QzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JXR0ZHR1JULVdDeXdlakts T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JIeWVjWUlzQldHRkdHUlQtV0N5d2VqS2xPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEJCMy9BRUE4NzNFQzVCQzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JX R0ZHR1JULVdDeXdlaktsT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdYA3px0637Mg1Gl+vMuazz04kXIVCJQdc5tWcgbaL/ta+polBQyxc lprQwT3xIb3esrzDP+BjP2uCgnvZTi5w8bXeV/CXxBAvwwKBeQ7rsye3ZgbYpqZI 8dTCEYRSVZtyQbIegSS7WTN18rXRIrR0FzCzqHMCBWyIYUYdJvCaEte3hOpoNel1 L2tM5Vg0BLNy8qHvGHO30s7nLj0LJkr/D6TCSMOHW/87s+gm7Au0yf0gwcmaOn7t xjSuqKAxKWhu/E1cGyZFeVJOmxXIx+9MVlGDo7X3RrfAyNJvvmTEBqruoeSqI3p8 B1LQ6azdyyLr//hVNIhk/HzSs8IVWi7S -----END CERTIFICATE-----Generated at Mon May 5 21:50:33 2025 by rpki-client