$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft File: hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json) Hash identifier: MPEJ8osWj7W2WcgmCS6NrCD4goeRcA2eb4RhdEcRokQ= Subject key identifier: 72:7D:F8:27:DE:56:D9:28:97:AA:CE:6E:D3:C2:B0:1E:AE:6B:52:08 Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60 Certificate issuer: /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft Manifest number: 012B Signing time: Sat 19 Jul 2025 04:49:28 +0000 Manifest this update: Sat 19 Jul 2025 04:49:28 +0000 Manifest next update: Sat 26 Jul 2025 04:49:28 +0000 Files and hashes: 1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: M4dw/gBl2CQfYFBYYtgEVVULHATzLqRaI3FItOaruaU=) 2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: vxxrjf6mh6He/Qk48r/ND4XKn6+HAksWQduimGVP494=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060 Validity Not Before: Jul 19 04:49:28 2025 GMT Not After : Jul 26 04:49:28 2025 GMT Subject: CN=687b23d8-633d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:c9:1c:05:9f:33:c9:e9:40:8b:e4:57:ad: 5f:9e:59:3c:56:76:78:1d:5c:89:56:34:8c:82:ab: dc:36:ca:45:01:26:ea:0e:8c:4b:34:57:11:2b:3e: 65:c8:8a:69:73:10:df:81:ff:5d:58:84:7c:9d:0d: bb:63:fa:30:b3:a9:a5:a0:d8:3a:7f:75:70:74:ea: 45:7f:1b:84:d4:eb:40:b7:f4:ce:65:71:17:b3:16: 84:05:2d:95:46:48:fc:f0:03:8b:97:67:52:c3:d6: c7:20:e5:b8:a1:a6:3a:56:6c:ac:e7:3d:a1:24:55: 95:62:52:b1:67:ad:18:93:4c:4b:f2:3f:e9:15:0b: 2a:4e:94:19:78:67:5c:0b:5f:d4:56:5b:85:46:f8: e4:46:1d:98:22:70:eb:c6:7d:49:b9:ae:54:12:5e: 33:06:e3:16:8b:33:af:37:53:11:7b:7c:54:1e:e2: 97:5c:0f:73:6e:32:6d:b2:16:ae:ed:e0:8c:05:7e: 3f:37:14:fe:c7:63:c3:ec:bd:2d:ba:e0:aa:b9:ce: a8:79:19:16:7c:a4:e5:42:66:01:57:06:d3:7e:51: 51:5a:01:97:bb:fe:77:56:06:64:6c:5d:7c:4b:36: b4:5c:72:2c:b2:b4:5f:2e:3f:f9:b1:45:24:d3:ee: a0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7D:F8:27:DE:56:D9:28:97:AA:CE:6E:D3:C2:B0:1E:AE:6B:52:08 X509v3 Authority Key Identifier: keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:52:ac:47:67:99:2a:76:da:df:66:73:70:78:a6:92:89:1a: a2:61:67:41:4d:01:08:31:8e:bd:87:f9:7c:9c:8e:b1:e1:b0: ef:3e:e8:12:a9:c6:15:01:64:d9:22:a8:85:58:f1:06:34:36: 18:95:5d:17:2f:59:3a:3e:47:d5:59:23:9c:79:f6:ef:9d:51: 71:a4:a1:25:6f:6a:f2:7f:3e:ab:31:a1:19:a6:01:23:95:3d: 13:8c:19:1f:b9:ea:0d:ea:e7:f0:f3:b3:dd:17:3b:b4:d8:46: 82:5d:13:0f:07:d4:80:16:7a:d4:e9:63:6a:bc:eb:e0:4a:a5: 3f:0f:29:cb:75:b8:bf:23:96:51:ea:c4:29:2d:95:c7:e7:32: e6:fb:34:41:77:a4:ee:f3:ec:42:f9:b6:de:b6:55:c5:59:a0: 8e:0f:9a:b2:a9:8a:e3:aa:e7:d8:bf:e1:96:82:7c:23:2a:49: 3a:50:9c:f1:da:72:91:e8:a9:de:a3:f8:67:1d:c1:5c:f7:07: db:b0:b2:62:c3:14:ee:30:c0:0f:c3:28:fa:e6:5d:f1:2b:d3: 4e:52:a6:06:0c:20:7d:3a:a8:cb:e6:04:9f:22:ba:89:9e:8a: 01:1d:c3:ee:e4:cc:89:a3:5e:7b:82:63:50:0a:4c:41:7c:c0: 50:5e:e3:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFDOUExMTAvBgNVBAUTKDg3MjhCODI4RjMxODYwM0U0NDcxMTA3MEMyNEVDQzA4 OEExOTAwNjAwHhcNMjUwNzE5MDQ0OTI4WhcNMjUwNzI2MDQ0OTI4WjAYMRYwFAYD VQQDEw02ODdiMjNkOC02MzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqvJHAWfM8npQIvkV61fnlk8VnZ4HVyJVjSMgqvcNspFASbqDoxLNFcRKz5l yIppcxDfgf9dWIR8nQ27Y/ows6mloNg6f3VwdOpFfxuE1OtAt/TOZXEXsxaEBS2V Rkj88AOLl2dSw9bHIOW4oaY6Vmys5z2hJFWVYlKxZ60Yk0xL8j/pFQsqTpQZeGdc C1/UVluFRvjkRh2YInDrxn1Jua5UEl4zBuMWizOvN1MRe3xUHuKXXA9zbjJtshau 7eCMBX4/NxT+x2PD7L0tuuCquc6oeRkWfKTlQmYBVwbTflFRWgGXu/53VgZkbF18 Sza0XHIssrRfLj/5sUUk0+6gYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJ9+Cfe Vtkol6rObtPCsB6ua1IIMB8GA1UdIwQYMBaAFIcouCjzGGA+RHEQcMJOzAiKGQBg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUM5QS9FMTlBMjU3ODk3 RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlENUVjUkJ3d2s3TUNJb1pB R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5aTRLUE1ZWUQ1RWNSQnd3azdNQ0lvWkFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUM5QS9FMTlBMjU3ODk3RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlE NUVjUkJ3d2s3TUNJb1pBR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACUqxHZ5kqdtrfZnNweKaSiRqiYWdBTQEIMY69h/l8nI6x4bDvPugS qcYVAWTZIqiFWPEGNDYYlV0XL1k6PkfVWSOcefbvnVFxpKElb2ryfz6rMaEZpgEj lT0TjBkfueoN6ufw87PdFzu02EaCXRMPB9SAFnrU6WNqvOvgSqU/DynLdbi/I5ZR 6sQpLZXH5zLm+zRBd6Tu8+xC+bbetlXFWaCOD5qyqYrjqufYv+GWgnwjKkk6UJzx 2nKR6Kneo/hnHcFc9wfbsLJiwxTuMMAPwyj65l3xK9NOUqYGDCB9OqjL5gSfIrqJ nooBHcPu5MyJo157gmNQCkxBfMBQXuOB -----END CERTIFICATE-----Generated at Sun Jul 20 14:24:22 2025 by rpki-client