$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json) Hash identifier: FJ+miciPfKT5SSN74FrOU/vCxWh1BBisnbE0512+sWw= Subject key identifier: 5B:9D:70:42:8B:DC:25:64:30:90:3E:DC:6F:50:F3:B6:CC:DD:C0:5A Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Certificate serial: 1179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft Manifest number: 1164 Signing time: Wed 16 Apr 2025 17:13:58 +0000 Manifest this update: Wed 16 Apr 2025 17:13:58 +0000 Manifest next update: Wed 23 Apr 2025 17:13:58 +0000 Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: /VJmBiZgCkgc9/2RlmcA8uGuT+RjjfNSsp+LLB+0jaA=) 2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: IU4SG15xY5pa/IoW3wwDCZ3o/ZxiWKB5Df2NzHDteOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 17:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4473 (0x1179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Validity Not Before: Apr 16 17:13:58 2025 GMT Not After : Apr 23 17:13:58 2025 GMT Subject: CN=67ffe556-ca58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:f5:37:92:64:25:22:5d:05:07:d6:3d:1c: ee:8c:3f:a7:39:65:d9:b6:37:b2:0e:cd:dc:96:be: 0e:d6:5a:e9:b8:b6:1c:13:d1:7b:66:42:12:7b:d5: e0:51:b4:17:f6:c1:d3:78:64:9b:e9:f3:71:89:28: 60:dd:6c:10:16:ee:29:8c:3c:a9:f2:e4:52:89:f3: 53:a6:b5:77:66:d1:08:66:70:c9:49:c5:91:19:65: 9a:a5:a0:f0:08:3e:39:ae:33:3c:dc:0d:d8:73:aa: 29:cd:08:a1:77:50:17:5e:f1:de:ef:24:ec:be:b3: 20:b1:5f:e7:cb:1c:ec:e6:a8:65:68:20:a1:8b:f6: 58:4f:35:94:02:ba:68:f1:1b:fc:4f:ac:91:a6:1c: 1d:a3:02:84:93:cf:2f:37:05:53:5e:fe:f5:03:1b: 12:ce:09:da:7d:47:9a:cd:1f:ba:d5:4e:c3:2c:4b: c1:76:20:03:aa:f3:ff:10:c3:63:85:1f:39:3f:ae: c0:d8:c4:bc:3a:b1:0b:31:59:56:dc:ca:e0:2b:4e: c1:0f:cc:f3:51:a4:0c:93:41:69:2a:d4:1f:12:7a: 21:aa:34:ba:28:51:db:35:ca:e1:1a:ce:a6:94:00: 39:12:bf:70:6c:81:33:bc:30:df:c1:11:59:27:85: 63:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9D:70:42:8B:DC:25:64:30:90:3E:DC:6F:50:F3:B6:CC:DD:C0:5A X509v3 Authority Key Identifier: keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:c1:8b:54:d0:ce:fc:48:70:90:f8:bc:f4:5a:cb:03:51:ba: 22:92:51:68:19:3b:8c:48:aa:62:07:d3:7a:79:ad:a2:20:40: 2d:8c:26:fc:2b:f7:01:14:a0:bf:d4:7b:9e:fa:2d:47:c8:70: 49:58:e5:e4:16:6b:af:c1:73:a5:88:f2:18:9d:b4:60:ef:5d: 06:ef:1a:49:74:1a:6e:48:f1:19:43:38:ad:c3:69:3b:62:b2: 0e:12:06:cc:d6:d4:60:ed:8c:05:00:45:47:33:0e:5c:3e:cc: 1f:93:8b:71:75:f2:49:fd:cc:68:4b:ec:58:fa:6a:18:af:d8: c8:fa:0d:b7:a4:cb:25:9c:04:bb:ac:e9:08:6c:85:2b:e7:2d: e7:02:a4:c9:3c:dd:01:e0:0a:ce:c1:5e:33:70:13:a2:2a:4a: d4:f8:53:9f:ac:de:a5:59:e9:43:14:40:f1:f9:83:66:4f:8c: 1e:68:4e:cc:2e:eb:ae:41:b6:c0:c1:e3:8f:62:5e:f9:f7:98: f4:7b:f3:f9:93:5a:7b:6a:30:19:37:f2:36:06:d5:e1:e9:8f: e5:ba:bc:f8:f8:1f:d6:b4:1a:13:17:ac:a9:fc:71:d9:c0:48: 9f:65:b4:e2:6f:d9:20:35:5b:9f:fa:a6:1c:4f:01:63:49:76: fc:e5:3c:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyN0MxMTAvBgNVBAUTKDFEODgyQzhDRjI0MzRDQzlCQkZENzkxOTFEQzJDNjk4 MjkyNkU4QUIwHhcNMjUwNDE2MTcxMzU4WhcNMjUwNDIzMTcxMzU4WjAYMRYwFAYD VQQDEw02N2ZmZTU1Ni1jYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB/1N5JkJSJdBQfWPRzujD+nOWXZtjeyDs3clr4O1lrpuLYcE9F7ZkISe9Xg UbQX9sHTeGSb6fNxiShg3WwQFu4pjDyp8uRSifNTprV3ZtEIZnDJScWRGWWapaDw CD45rjM83A3Yc6opzQihd1AXXvHe7yTsvrMgsV/nyxzs5qhlaCChi/ZYTzWUArpo 8Rv8T6yRphwdowKEk88vNwVTXv71AxsSzgnafUeazR+61U7DLEvBdiADqvP/EMNj hR85P67A2MS8OrELMVlW3MrgK07BD8zzUaQMk0FpKtQfEnohqjS6KFHbNcrhGs6m lAA5Er9wbIEzvDDfwRFZJ4VjhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFudcEKL 3CVkMJA+3G9Q87bM3cBaMB8GA1UdIwQYMBaAFB2ILIzyQ0zJu/15GR3CxpgpJuir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI3Qy85RDc3QzZENDAy OEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRNbTdfWGtaSGNMR21Da202 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hZZ3NqUEpEVE1tN19Ya1pIY0xHbUNrbTZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzI3Qy85RDc3QzZENDAyOEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRN bTdfWGtaSGNMR21Da202S3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4wYtU0M78SHCQ+Lz0WssDUboiklFoGTuMSKpiB9N6ea2iIEAtjCb8 K/cBFKC/1Hue+i1HyHBJWOXkFmuvwXOliPIYnbRg710G7xpJdBpuSPEZQzitw2k7 YrIOEgbM1tRg7YwFAEVHMw5cPswfk4txdfJJ/cxoS+xY+moYr9jI+g23pMslnAS7 rOkIbIUr5y3nAqTJPN0B4ArOwV4zcBOiKkrU+FOfrN6lWelDFEDx+YNmT4weaE7M LuuuQbbAweOPYl7595j0e/P5k1p7ajAZN/I2BtXh6Y/lurz4+B/WtBoTF6yp/HHZ wEifZbTib9kgNVuf+qYcTwFjSXb85Twu -----END CERTIFICATE-----Generated at Fri Apr 18 10:00:45 2025 by rpki-client