$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft File: hYtkVOIiRseB5RNSswVkEJhoV34.mft (raw, json) Hash identifier: 85yaUHvCmOfoK4qWNZ08Vt4tEBrfKOUC2b7aGSCPbww= Subject key identifier: 36:41:2B:15:56:25:33:EB:FD:73:19:2B:5B:E7:00:B3:9C:2C:AF:F9 Authority key identifier: 85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E Certificate issuer: /CN=A91F65C7/serialNumber=858B6454E22246C781E51352B30564109868577E Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft Manifest number: E9 Signing time: Mon 05 May 2025 04:14:01 +0000 Manifest this update: Mon 05 May 2025 04:14:00 +0000 Manifest next update: Mon 12 May 2025 04:14:00 +0000 Files and hashes: 1: hYtkVOIiRseB5RNSswVkEJhoV34.crl (hash: AcmcVY1uaV4NzsWBKy9wIzaedmJuIGKR2DWU5QZlE/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 04:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65C7, serialNumber=858B6454E22246C781E51352B30564109868577E Validity Not Before: May 5 04:14:00 2025 GMT Not After : May 12 04:14:00 2025 GMT Subject: CN=68183b08-45c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cd:f0:fc:72:46:04:d3:40:99:cf:a3:a1:86: 4f:dc:7e:88:40:18:92:77:1d:6f:45:b8:4d:42:dd: 29:75:21:7a:6a:76:4e:1a:62:29:ec:82:6a:1c:7f: e4:16:ef:10:b3:6d:5b:0c:ee:42:5b:d9:28:c1:b0: 9d:b7:58:b3:a4:44:cd:8e:e4:25:87:5b:49:0d:dc: 54:06:26:f0:3f:9e:8f:9a:8d:31:2e:f5:21:14:8b: a8:b8:a3:34:5d:59:be:89:39:11:7c:bf:89:a6:6e: f9:e4:2f:b2:09:9e:1e:73:9b:52:52:f4:0f:6c:88: 6a:6d:08:cb:3c:07:18:10:30:32:3e:52:72:0f:ab: cc:a9:b5:e1:0f:58:d6:a4:d6:37:4b:94:81:62:d1: c5:8b:ea:86:ca:6c:86:13:b8:98:2f:43:80:96:b3: 22:5a:05:1a:e2:95:d0:94:36:c6:81:2e:59:fa:52: da:19:5c:79:16:32:c7:a7:49:83:ba:0f:99:5b:e7: 7c:d8:6f:89:43:e4:ed:f8:bd:76:d6:10:dd:47:b2: 80:6d:c9:67:30:2c:09:f5:54:14:5b:c4:d2:e8:ae: ce:2c:8e:47:2c:88:a0:01:6b:34:7f:8e:0f:2c:67: b7:4e:9e:a4:89:a9:b3:97:bc:37:13:e3:d7:88:03: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:41:2B:15:56:25:33:EB:FD:73:19:2B:5B:E7:00:B3:9C:2C:AF:F9 X509v3 Authority Key Identifier: keyid:85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:01:26:af:4b:93:87:3c:0c:d2:31:ff:9f:3c:78:e3:37:37: 9f:a5:4b:36:a3:fd:ad:b9:74:e7:25:8b:08:52:d3:73:ad:33: b4:80:f6:cf:a6:ea:33:cc:32:9e:2d:96:2d:0e:40:73:18:36: b0:b5:ee:da:55:8b:a1:ce:bb:b3:8e:1b:4f:97:06:52:f3:f7: 56:d5:0a:e0:72:bd:16:28:d7:d3:ce:13:08:e0:81:72:47:66: 57:49:17:02:e1:e2:4e:7a:6f:da:09:fd:f8:a6:07:a0:1d:ff: df:df:e1:54:2d:b9:ce:79:c5:3d:44:25:42:1c:b4:34:93:4f: 5d:1e:d9:80:d2:4a:d7:58:16:fd:10:e3:5d:d3:9c:1e:46:e2: d0:06:35:97:ae:d2:72:87:83:d9:7b:4e:d2:c7:ad:dd:9e:3f: ff:1d:31:d4:84:e8:18:98:81:1f:74:c7:d1:37:8a:d0:52:b7: 3a:7c:2d:cf:b4:e1:5d:25:62:cd:e5:7b:bc:26:46:71:18:67: 23:44:fb:40:32:48:5b:9a:65:b0:b9:66:e5:08:dd:a2:f4:eb: 68:67:3c:66:8b:a8:2b:07:09:a3:61:83:03:37:bc:d9:d3:02: 15:ed:74:4e:27:42:17:50:42:01:e9:08:c2:fe:9a:36:be:f4: 66:0b:cc:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1QzcxMTAvBgNVBAUTKDg1OEI2NDU0RTIyMjQ2Qzc4MUU1MTM1MkIzMDU2NDEw OTg2ODU3N0UwHhcNMjUwNTA1MDQxNDAwWhcNMjUwNTEyMDQxNDAwWjAYMRYwFAYD VQQDEw02ODE4M2IwOC00NWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA283w/HJGBNNAmc+joYZP3H6IQBiSdx1vRbhNQt0pdSF6anZOGmIp7IJqHH/k Fu8Qs21bDO5CW9kowbCdt1izpETNjuQlh1tJDdxUBibwP56Pmo0xLvUhFIuouKM0 XVm+iTkRfL+Jpm755C+yCZ4ec5tSUvQPbIhqbQjLPAcYEDAyPlJyD6vMqbXhD1jW pNY3S5SBYtHFi+qGymyGE7iYL0OAlrMiWgUa4pXQlDbGgS5Z+lLaGVx5FjLHp0mD ug+ZW+d82G+JQ+Tt+L121hDdR7KAbclnMCwJ9VQUW8TS6K7OLI5HLIigAWs0f44P LGe3Tp6kiamzl7w3E+PXiAOrsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZBKxVW JTPr/XMZK1vnALOcLK/5MB8GA1UdIwQYMBaAFIWLZFTiIkbHgeUTUrMFZBCYaFd+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FRDBGQjY4NkMz RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJzZUI1Uk5Tc3dWa0VKaG9W MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZdGtWT0lpUnNlQjVSTlNzd1ZrRUpob1YzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVDNy9FRDBGQjY4NkMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJz ZUI1Uk5Tc3dWa0VKaG9WMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHASavS5OHPAzSMf+fPHjjNzefpUs2o/2tuXTnJYsIUtNzrTO0gPbP puozzDKeLZYtDkBzGDawte7aVYuhzruzjhtPlwZS8/dW1Qrgcr0WKNfTzhMI4IFy R2ZXSRcC4eJOem/aCf34pgegHf/f3+FULbnOecU9RCVCHLQ0k09dHtmA0krXWBb9 EONd05weRuLQBjWXrtJyh4PZe07Sx63dnj//HTHUhOgYmIEfdMfRN4rQUrc6fC3P tOFdJWLN5Xu8JkZxGGcjRPtAMkhbmmWwuWblCN2i9OtoZzxmi6grBwmjYYMDN7zZ 0wIV7XROJ0IXUEIB6QjC/po2vvRmC8zA -----END CERTIFICATE-----Generated at Mon May 5 07:30:19 2025 by rpki-client