$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft File: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json) Hash identifier: ctH5q/56x/TqfPPlDhexk7muYKDO1T4wqDjtefjGols= Subject key identifier: 10:0E:A7:61:C1:BD:1A:F4:13:7D:4A:6E:FF:D9:5D:1C:9E:8B:BF:1B Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Certificate serial: 0BDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft Manifest number: 0BD1 Signing time: Wed 02 Jul 2025 19:05:41 +0000 Manifest this update: Wed 02 Jul 2025 19:05:40 +0000 Manifest next update: Wed 09 Jul 2025 19:05:40 +0000 Files and hashes: 1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: 2v5jnyJJLpTjSrFE+3KyD+0BLrlHr82gIkxMl8AtneQ=) 2: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: EeQ1Nt52m1hyZ6VPZEPVHxza1Z77ig7QYE1EDDBnm08=) 3: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: TRjcmxyqZohfOlB4LLbzqsFvH4uXUeHEH5tCE+DExYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3035 (0xbdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA15, serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Validity Not Before: Jul 2 19:05:40 2025 GMT Not After : Jul 9 19:05:40 2025 GMT Subject: CN=68658305-9a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:4d:3b:47:69:4f:a6:8a:a9:cf:c6:bf:d4: 74:6b:df:5d:f7:1c:63:7f:88:43:20:61:20:47:dd: 93:e1:f0:f7:81:91:8e:f8:9f:da:f0:a4:cb:2d:b7: 91:12:35:4d:b6:e0:19:bd:08:9d:2e:d0:cc:ca:14: 89:97:b8:a0:0c:9f:b1:6d:9f:e8:fd:ea:92:68:1f: 6f:67:4c:eb:72:3a:2a:26:a4:ac:d1:f5:25:6d:54: 22:28:62:67:f5:b8:52:64:08:bd:a6:f2:4b:d0:fb: 90:ac:7c:2c:30:5f:ce:2b:ea:fc:54:4e:8e:ea:c9: 5f:8c:53:22:7a:fe:9f:ad:20:83:6e:4d:86:be:e4: 99:e3:12:43:60:87:99:97:86:0f:c9:12:ac:89:d8: 76:90:c6:bc:bf:de:ee:ef:c0:b9:8d:a7:d7:e0:a8: dc:0e:14:29:bd:17:de:29:d0:c5:e5:a2:72:1d:a8: 32:f9:a7:1e:93:5f:b8:47:21:ef:01:d4:ed:f9:e0: 2a:d0:88:56:5c:1b:c5:ac:89:6f:02:34:7b:51:eb: 51:b6:9a:68:17:3b:40:cf:4e:02:5c:e1:f3:7e:49: 4b:d3:39:05:8b:33:15:e5:83:91:91:35:91:d4:2f: d5:bb:57:e7:d0:14:4f:84:e2:4b:41:2f:48:5e:ab: a6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0E:A7:61:C1:BD:1A:F4:13:7D:4A:6E:FF:D9:5D:1C:9E:8B:BF:1B X509v3 Authority Key Identifier: keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:66:d5:73:a7:6e:c8:c7:51:2f:bc:b9:d6:6a:98:2f:f4:a0: 71:cd:5f:a0:70:a6:6c:55:7a:12:74:77:49:36:6a:42:fd:72: c8:4c:a1:4d:c2:36:2e:2f:8b:6f:d5:8e:e9:21:09:9b:3f:91: a6:ef:a8:c5:be:6a:c3:6a:5a:9f:40:78:bb:b3:66:f1:11:09: f9:a4:b4:36:54:2e:0b:e7:23:67:49:2f:0c:d9:5c:5b:ed:d2: b5:07:c8:d3:27:1c:7f:bc:58:c7:f8:b7:72:62:bb:85:0e:75: d8:fb:3e:c8:22:03:61:88:5f:e7:ff:b4:8f:84:31:26:32:eb: 68:a1:73:ec:67:ce:dc:69:83:e8:c0:f4:eb:b3:ce:d1:44:33: 0f:e5:98:6c:50:2d:ea:fd:31:2b:43:9f:24:1a:9c:8c:2b:78: d7:c9:e0:e3:8e:cd:31:86:28:5d:09:4e:b5:5b:f1:06:ef:bd: d9:c5:32:b8:b0:b9:b8:fb:ee:aa:8e:e1:28:29:c3:14:3f:57: 28:dc:9a:60:95:56:e7:24:de:2d:f1:a0:dd:d0:99:ba:a8:93: 33:db:b3:33:2d:61:26:3c:c5:e3:ba:a3:85:cc:37:68:4c:66: 44:43:5d:a6:3e:b0:70:b7:2b:d7:22:00:18:12:77:ef:4e:26: 17:c8:15:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZBMTUxMTAvBgNVBAUTKDg3MjM3RkY2ODkwMjREOTRGREI0OUVDMjVDNUIxMjBE MEJCOTQyOTcwHhcNMjUwNzAyMTkwNTQwWhcNMjUwNzA5MTkwNTQwWjAYMRYwFAYD VQQDEw02ODY1ODMwNS05YTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUtNO0dpT6aKqc/Gv9R0a99d9xxjf4hDIGEgR92T4fD3gZGO+J/a8KTLLbeR EjVNtuAZvQidLtDMyhSJl7igDJ+xbZ/o/eqSaB9vZ0zrcjoqJqSs0fUlbVQiKGJn 9bhSZAi9pvJL0PuQrHwsMF/OK+r8VE6O6slfjFMiev6frSCDbk2GvuSZ4xJDYIeZ l4YPyRKsidh2kMa8v97u78C5jafX4KjcDhQpvRfeKdDF5aJyHagy+acek1+4RyHv AdTt+eAq0IhWXBvFrIlvAjR7UetRtppoFztAz04CXOHzfklL0zkFizMV5YORkTWR 1C/Vu1fn0BRPhOJLQS9IXqumTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAOp2HB vRr0E31Kbv/ZXRyei78bMB8GA1UdIwQYMBaAFIcjf/aJAk2U/bSewlxbEg0LuUKX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkExNS83MDFGNTNEMjFE ODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1RaVDl0SjdDWEZzU0RRdTVR cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5Tl85b2tDVFpUOXRKN0NYRnNTRFF1NVFwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkExNS83MDFGNTNEMjFEODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1Ra VDl0SjdDWEZzU0RRdTVRcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzZtVzp27Ix1EvvLnWapgv9KBxzV+gcKZsVXoSdHdJNmpC/XLITKFN wjYuL4tv1Y7pIQmbP5Gm76jFvmrDalqfQHi7s2bxEQn5pLQ2VC4L5yNnSS8M2Vxb 7dK1B8jTJxx/vFjH+LdyYruFDnXY+z7IIgNhiF/n/7SPhDEmMutooXPsZ87caYPo wPTrs87RRDMP5ZhsUC3q/TErQ58kGpyMK3jXyeDjjs0xhihdCU61W/EG773ZxTK4 sLm4++6qjuEoKcMUP1co3JpglVbnJN4t8aDd0Jm6qJMz27MzLWEmPMXjuqOFzDdo TGZEQ12mPrBwtyvXIgAYEnfvTiYXyBVs -----END CERTIFICATE-----Generated at Fri Jul 4 03:26:05 2025 by rpki-client