$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json) Hash identifier: dkioNG4bbhgU75PWm+woxJibGV2/zeILDTox2BCSwyU= Subject key identifier: 28:D2:83:5A:60:21:1C:9A:5B:20:CC:CD:1A:25:02:08:62:57:39:B5 Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft Manifest number: DA Signing time: Wed 09 Apr 2025 04:31:58 +0000 Manifest this update: Wed 09 Apr 2025 04:31:57 +0000 Manifest next update: Wed 16 Apr 2025 04:31:57 +0000 Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: xS8VAGYTn/XuUymubJLC6rnwVWp+6/Pnd+hLs5aE5nc=) 2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: w6qwhTkmhaSB3ncvO8yCXadiw5lkWAA4VBrSx+fRpEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 04:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9 Validity Not Before: Apr 9 04:31:57 2025 GMT Not After : Apr 16 04:31:57 2025 GMT Subject: CN=67f5f83d-e0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:05:08:3f:72:0a:70:d4:c2:09:4a:ec:1f:f7: 7d:75:64:0c:5e:22:38:50:6e:f4:73:95:07:04:f0: 52:c0:68:c4:49:eb:5d:92:43:2e:6f:97:98:19:8e: 05:bf:56:c8:69:92:a3:1f:c5:38:8b:20:1b:12:46: f4:8f:e4:18:22:b5:3f:06:fd:4d:5c:47:68:01:a0: 99:d3:31:1e:92:d9:95:27:18:c8:3b:21:cb:5c:e8: 50:cb:b6:2a:81:ea:ed:cf:61:44:ad:aa:c3:28:b0: 10:28:81:62:5e:f2:bb:f6:4c:18:7f:1f:9b:84:1d: f0:59:98:15:a6:8a:28:e6:99:fd:c8:e2:e8:c4:62: c2:6c:47:34:b9:77:43:fd:0d:10:68:cc:c6:ee:2b: c1:77:95:97:ab:25:46:e9:d3:ac:81:3e:e3:d1:e4: f0:3d:27:c2:c6:91:9e:c7:5c:9a:16:a7:68:d2:23: 69:0b:0b:d0:72:ec:3b:2d:99:c6:fc:9b:08:7e:89: ac:30:d7:46:e2:95:91:52:c1:44:b6:3d:7a:20:3a: e9:94:2e:cc:03:8e:49:6b:99:f1:f2:81:65:29:e6: 0d:15:35:38:4b:4d:cf:36:f8:16:26:04:fb:43:6c: 0b:76:72:10:48:df:00:d3:5f:d3:28:76:ba:ec:f2: a1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D2:83:5A:60:21:1C:9A:5B:20:CC:CD:1A:25:02:08:62:57:39:B5 X509v3 Authority Key Identifier: keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:f0:28:2d:48:ad:66:61:85:40:6d:9e:ea:4d:c6:cf:5c:fa: 30:6d:57:e3:96:84:d0:70:a8:c1:04:f3:71:32:02:2f:bd:ae: 1c:e0:61:47:c3:f9:0f:fc:9c:b3:21:16:df:bb:54:90:c1:44: 9f:fd:7c:06:93:f7:94:82:38:a5:4f:41:e9:13:62:d7:60:39: 44:56:32:db:3e:19:f5:98:c0:c7:aa:38:a0:b2:5e:ca:24:f7: b3:b3:72:33:13:04:5e:17:a0:4e:da:e2:32:59:ec:44:d0:ee: 1c:21:ac:a0:c9:30:be:0a:f5:68:d5:f1:6c:24:ec:62:4b:4f: f7:8d:a5:17:c8:58:9d:6c:53:48:8d:b0:28:5a:2e:e2:cf:03: 0d:2d:c9:f9:97:f3:87:c0:31:47:a7:d8:44:a2:f5:2d:59:17: c5:22:50:9d:25:61:1d:52:ca:73:6b:3f:56:5b:09:48:2a:05: 0c:1b:4d:e2:6b:e5:4d:e3:c3:6a:a9:5a:17:a5:be:3b:51:d9: 2c:03:75:49:9c:59:e3:36:35:e6:5a:80:b3:f8:e1:c6:52:2d: 1c:e7:3e:9f:89:fe:a0:d2:bf:62:e0:62:5b:09:30:26:29:29: 6b:7d:78:9c:00:6e:2c:f1:b7:ba:da:96:5d:0e:bb:13:e0:2b: 26:a6:52:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDg3MkM5MzY4NjU2Qzc3ODM1N0MyQTVBOTlCRUNGRkY2 Nzc1NTBBQzgwHhcNMjUwNDA5MDQzMTU3WhcNMjUwNDE2MDQzMTU3WjAYMRYwFAYD VQQDEw02N2Y1ZjgzZC1lMGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgUIP3IKcNTCCUrsH/d9dWQMXiI4UG70c5UHBPBSwGjESetdkkMub5eYGY4F v1bIaZKjH8U4iyAbEkb0j+QYIrU/Bv1NXEdoAaCZ0zEektmVJxjIOyHLXOhQy7Yq gertz2FErarDKLAQKIFiXvK79kwYfx+bhB3wWZgVpooo5pn9yOLoxGLCbEc0uXdD /Q0QaMzG7ivBd5WXqyVG6dOsgT7j0eTwPSfCxpGex1yaFqdo0iNpCwvQcuw7LZnG /JsIfomsMNdG4pWRUsFEtj16IDrplC7MA45Ja5nx8oFlKeYNFTU4S03PNvgWJgT7 Q2wLdnIQSN8A01/TKHa67PKhwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjSg1pg IRyaWyDMzRolAghiVzm1MB8GA1UdIwQYMBaAFIcsk2hlbHeDV8KlqZvs//Z3VQrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83NUEwQ0QxNEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0Tlh3cVdwbS16XzluZFZD c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83NUEwQ0QxNEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0 Tlh3cVdwbS16XzluZFZDc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ8CgtSK1mYYVAbZ7qTcbPXPowbVfjloTQcKjBBPNxMgIvva4c4GFH w/kP/JyzIRbfu1SQwUSf/XwGk/eUgjilT0HpE2LXYDlEVjLbPhn1mMDHqjigsl7K JPezs3IzEwReF6BO2uIyWexE0O4cIaygyTC+CvVo1fFsJOxiS0/3jaUXyFidbFNI jbAoWi7izwMNLcn5l/OHwDFHp9hEovUtWRfFIlCdJWEdUspzaz9WWwlIKgUMG03i a+VN48NqqVoXpb47UdksA3VJnFnjNjXmWoCz+OHGUi0c5z6fif6g0r9i4GJbCTAm KSlrfXicAG4s8be62pZdDrsT4CsmplJo -----END CERTIFICATE-----Generated at Thu Apr 10 22:09:51 2025 by rpki-client