$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft File: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json) Hash identifier: NGcVFdPKzorrRdkRnS/WJ/rFsT6zyGyXQwEWOR6UD9k= Subject key identifier: 52:79:0E:EC:1E:53:66:66:C9:75:2E:B7:0D:48:4E:97:AB:A8:F0:C4 Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Certificate serial: 0BC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft Manifest number: 0BB9 Signing time: Wed 14 May 2025 19:02:09 +0000 Manifest this update: Wed 14 May 2025 19:02:08 +0000 Manifest next update: Wed 21 May 2025 19:02:08 +0000 Files and hashes: 1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: N+zkTtqbqVU9VSecmlV219e+GONHTYNefvz9euxNSHQ=) 2: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: EeQ1Nt52m1hyZ6VPZEPVHxza1Z77ig7QYE1EDDBnm08=) 3: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: TRjcmxyqZohfOlB4LLbzqsFvH4uXUeHEH5tCE+DExYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3011 (0xbc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA15, serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Validity Not Before: May 14 19:02:08 2025 GMT Not After : May 21 19:02:08 2025 GMT Subject: CN=6824e8b1-cb1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:10:0f:0e:98:42:7d:3d:46:46:32:f9:13: c1:4c:17:ad:fc:59:1f:53:e7:1a:1b:c3:bd:66:49: 1d:0d:67:8d:72:71:31:01:39:17:74:60:c2:62:81: 00:7d:57:5e:3f:66:2b:5f:29:67:67:bf:03:3b:f3: bb:8b:d2:c7:c5:a7:ad:ab:60:2d:0c:ed:70:f7:a3: 9f:e2:33:48:73:90:88:8c:f7:48:08:c7:fd:84:f4: a6:db:08:30:8a:ca:44:1a:e7:33:a5:95:87:22:e5: d7:05:d4:d7:ef:10:fa:56:b6:82:e1:47:1e:5c:d6: 2b:65:a4:40:fb:d4:a6:6b:37:70:4c:61:3e:3a:44: 15:5b:41:9f:b0:ea:28:d3:68:ee:47:c1:81:5c:09: a0:0d:06:84:c8:ea:a3:7c:08:22:2a:05:6a:4a:63: 4a:2c:fc:ec:ee:9c:07:00:40:aa:5d:db:f2:9b:d9: cf:d4:63:49:be:43:b8:e9:37:ce:77:02:21:52:70: b6:36:4d:61:97:90:f3:42:a7:15:78:e2:a4:b2:d6: 35:9a:80:60:25:fa:b6:b9:54:a9:d5:b3:31:83:cc: cc:bf:d8:3f:89:ae:f0:9e:cf:93:bf:54:44:4f:38: fd:1d:bd:d4:e6:fe:da:9c:f7:e9:6b:44:c9:54:bc: 5a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:79:0E:EC:1E:53:66:66:C9:75:2E:B7:0D:48:4E:97:AB:A8:F0:C4 X509v3 Authority Key Identifier: keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:1f:00:46:9c:ba:9c:48:a7:69:e1:e4:39:df:19:cd:52:a9: 74:5e:30:19:14:21:3f:1c:79:d9:20:3e:1e:4d:27:d6:a2:3a: cb:5e:89:be:81:0a:45:ca:67:23:bf:df:32:e3:3e:53:54:25: 00:76:27:59:7b:2e:01:88:55:05:6b:7a:a5:34:1d:e2:19:1d: a2:54:51:fd:f4:ad:97:33:e1:f6:d0:15:62:7f:9d:e0:d3:cf: fc:b3:d7:2b:97:4c:ff:c3:27:93:d0:34:b8:b4:31:c0:4f:2f: 9c:6c:9f:16:86:bf:2e:4b:1f:86:3e:fe:86:20:7e:03:aa:a1: 66:41:9c:92:cf:69:8a:5b:05:bb:5c:8a:e7:da:f9:8b:22:52: 13:3f:a0:33:c4:bc:fc:9e:d1:8a:7d:4d:2f:47:b6:d1:bc:d5: 41:19:c2:c9:e0:06:d7:4c:de:0e:e7:1c:53:e3:a8:5f:e2:91: 62:b6:e2:c2:4f:cb:b6:90:60:c7:72:58:e3:1a:d1:75:c9:a7: 71:4f:03:22:39:38:be:39:15:17:c0:b1:2a:1a:c6:3f:39:22: c5:a7:f6:bf:e3:12:2e:2e:b5:32:9d:7e:37:a6:00:94:f7:2e: 86:24:66:4c:b0:39:d3:a0:3a:b6:f2:0b:ba:30:60:e1:11:97: 2a:5c:a0:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZBMTUxMTAvBgNVBAUTKDg3MjM3RkY2ODkwMjREOTRGREI0OUVDMjVDNUIxMjBE MEJCOTQyOTcwHhcNMjUwNTE0MTkwMjA4WhcNMjUwNTIxMTkwMjA4WjAYMRYwFAYD VQQDEw02ODI0ZThiMS1jYjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZIQDw6YQn09RkYy+RPBTBet/FkfU+caG8O9ZkkdDWeNcnExATkXdGDCYoEA fVdeP2YrXylnZ78DO/O7i9LHxaetq2AtDO1w96Of4jNIc5CIjPdICMf9hPSm2wgw ispEGuczpZWHIuXXBdTX7xD6VraC4UceXNYrZaRA+9SmazdwTGE+OkQVW0GfsOoo 02juR8GBXAmgDQaEyOqjfAgiKgVqSmNKLPzs7pwHAECqXdvym9nP1GNJvkO46TfO dwIhUnC2Nk1hl5DzQqcVeOKkstY1moBgJfq2uVSp1bMxg8zMv9g/ia7wns+Tv1RE Tzj9Hb3U5v7anPfpa0TJVLxaYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJ5Duwe U2ZmyXUutw1ITperqPDEMB8GA1UdIwQYMBaAFIcjf/aJAk2U/bSewlxbEg0LuUKX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkExNS83MDFGNTNEMjFE ODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1RaVDl0SjdDWEZzU0RRdTVR cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5Tl85b2tDVFpUOXRKN0NYRnNTRFF1NVFwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkExNS83MDFGNTNEMjFEODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1Ra VDl0SjdDWEZzU0RRdTVRcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEHwBGnLqcSKdp4eQ53xnNUql0XjAZFCE/HHnZID4eTSfWojrLXom+ gQpFymcjv98y4z5TVCUAdidZey4BiFUFa3qlNB3iGR2iVFH99K2XM+H20BVif53g 08/8s9crl0z/wyeT0DS4tDHATy+cbJ8Whr8uSx+GPv6GIH4DqqFmQZySz2mKWwW7 XIrn2vmLIlITP6AzxLz8ntGKfU0vR7bRvNVBGcLJ4AbXTN4O5xxT46hf4pFituLC T8u2kGDHcljjGtF1yadxTwMiOTi+ORUXwLEqGsY/OSLFp/a/4xIuLrUynX43pgCU 9y6GJGZMsDnToDq28gu6MGDhEZcqXKB3 -----END CERTIFICATE-----Generated at Thu May 15 18:50:38 2025 by rpki-client