$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft File: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json) Hash identifier: xRfeXQP1kskkNm4R1VDQmnzwYB13X8y5CX3Tq22UEF8= Subject key identifier: 58:2B:95:35:8A:68:1C:AA:6D:AB:AE:26:23:36:AF:2C:F4:3E:B8:30 Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Certificate serial: 0BAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft Manifest number: 0BA1 Signing time: Fri 28 Mar 2025 19:07:30 +0000 Manifest this update: Fri 28 Mar 2025 19:07:30 +0000 Manifest next update: Fri 04 Apr 2025 19:07:30 +0000 Files and hashes: 1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: CNqSzlKVhVFUAZ8lQum2YjXNeV9c2nSzQzwMYysXq1k=) 2: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: EeQ1Nt52m1hyZ6VPZEPVHxza1Z77ig7QYE1EDDBnm08=) 3: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: TRjcmxyqZohfOlB4LLbzqsFvH4uXUeHEH5tCE+DExYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 19:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2987 (0xbab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA15 Validity Not Before: Mar 28 19:07:30 2025 GMT Not After : Apr 4 19:07:30 2025 GMT Subject: CN=67e6f372-65a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:10:ae:9d:50:19:3e:5f:db:b6:c2:8d:27: c9:04:b9:0f:4f:10:54:64:98:78:91:8e:6f:e6:4a: 40:25:b7:36:2d:bf:76:0d:e8:7f:1f:f8:94:76:b9: b5:99:1e:e8:95:53:1f:c3:08:7c:43:a9:4e:b7:ee: 88:1b:ec:87:cc:9d:8d:f0:d4:a9:11:3d:98:9c:35: 06:f5:5b:05:ca:40:08:88:72:41:74:fe:e1:97:19: 84:43:34:9a:e3:5e:d7:22:05:f1:4d:fb:e2:f3:27: 0f:23:52:92:76:de:d3:19:f8:3a:93:eb:f1:54:07: 2e:ee:24:40:60:a0:8e:40:92:2b:fb:65:e3:22:dd: a4:d4:dd:43:90:d6:20:79:5e:77:5d:5f:16:2a:d2: da:39:74:0a:e9:14:3c:2e:d2:1d:cb:9f:56:87:fd: a4:30:37:07:4c:a3:77:e4:02:cc:39:64:39:35:5e: f0:9c:bb:f7:32:1f:4e:6c:51:18:af:94:8d:ad:e6: 98:dd:c4:94:30:95:c3:d6:89:7d:2b:83:40:37:93: ee:c4:ed:52:b0:af:3c:01:80:00:db:ab:65:08:39: 42:68:99:78:b0:32:f0:d5:5c:89:a6:8f:02:e6:f3: c0:0e:24:e6:a0:94:6e:26:f4:35:7f:86:b5:0a:60: 7c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2B:95:35:8A:68:1C:AA:6D:AB:AE:26:23:36:AF:2C:F4:3E:B8:30 X509v3 Authority Key Identifier: keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d4:8d:fc:d3:d0:d3:86:a5:94:a6:6a:f4:d4:8f:80:1d:1a: 55:78:d4:7e:94:86:57:fd:3c:be:3c:6d:7b:55:ac:e3:ca:c3: 9e:ef:a2:e6:d7:8a:2b:88:b5:24:67:41:50:bd:2a:86:48:49: 3b:24:63:fd:3d:1f:15:c1:c1:b6:f7:5c:86:fc:0f:bf:61:86: da:76:dc:06:47:77:39:ec:f0:34:4c:12:2a:95:b3:41:81:af: 67:ab:da:b7:71:e4:ce:c8:0a:fb:4d:d9:e0:fe:2d:b8:47:69: 81:46:9c:fd:00:42:9f:eb:7a:9e:df:df:41:7c:79:16:d9:c2: c3:b8:77:43:22:f9:eb:f7:70:72:99:a6:cd:16:c6:a2:36:ea: c9:12:ee:e7:41:9a:21:9c:3c:50:b0:1a:fe:cc:39:3f:c2:43: 32:ab:41:ed:3e:97:de:e6:bc:be:a2:da:c4:47:c2:36:d7:16: 89:e2:e8:57:f4:98:7a:5e:51:cf:5a:7f:c1:6d:69:a9:c7:67: 57:8e:53:b5:94:55:38:26:65:27:c8:f1:a4:37:9b:c3:04:b0: fe:ba:3e:37:a3:08:15:75:88:6e:39:e7:63:ff:89:af:b1:78: c3:b2:5f:09:e4:81:a0:28:0d:4a:a1:f0:17:8d:d0:aa:5b:71: 63:d4:7a:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZBMTUxMTAvBgNVBAUTKDg3MjM3RkY2ODkwMjREOTRGREI0OUVDMjVDNUIxMjBE MEJCOTQyOTcwHhcNMjUwMzI4MTkwNzMwWhcNMjUwNDA0MTkwNzMwWjAYMRYwFAYD VQQDEw02N2U2ZjM3Mi02NWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgwQrp1QGT5f27bCjSfJBLkPTxBUZJh4kY5v5kpAJbc2Lb92Deh/H/iUdrm1 mR7olVMfwwh8Q6lOt+6IG+yHzJ2N8NSpET2YnDUG9VsFykAIiHJBdP7hlxmEQzSa 417XIgXxTfvi8ycPI1KSdt7TGfg6k+vxVAcu7iRAYKCOQJIr+2XjIt2k1N1DkNYg eV53XV8WKtLaOXQK6RQ8LtIdy59Wh/2kMDcHTKN35ALMOWQ5NV7wnLv3Mh9ObFEY r5SNreaY3cSUMJXD1ol9K4NAN5PuxO1SsK88AYAA26tlCDlCaJl4sDLw1VyJpo8C 5vPADiTmoJRuJvQ1f4a1CmB86QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgrlTWK aByqbauuJiM2ryz0PrgwMB8GA1UdIwQYMBaAFIcjf/aJAk2U/bSewlxbEg0LuUKX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkExNS83MDFGNTNEMjFE ODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1RaVDl0SjdDWEZzU0RRdTVR cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5Tl85b2tDVFpUOXRKN0NYRnNTRFF1NVFwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkExNS83MDFGNTNEMjFEODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1Ra VDl0SjdDWEZzU0RRdTVRcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL1I3809DThqWUpmr01I+AHRpVeNR+lIZX/Ty+PG17VazjysOe76Lm 14oriLUkZ0FQvSqGSEk7JGP9PR8VwcG291yG/A+/YYbadtwGR3c57PA0TBIqlbNB ga9nq9q3ceTOyAr7Tdng/i24R2mBRpz9AEKf63qe399BfHkW2cLDuHdDIvnr93By mabNFsaiNurJEu7nQZohnDxQsBr+zDk/wkMyq0HtPpfe5ry+otrER8I21xaJ4uhX 9Jh6XlHPWn/BbWmpx2dXjlO1lFU4JmUnyPGkN5vDBLD+uj43owgVdYhuOedj/4mv sXjDsl8J5IGgKA1KofAXjdCqW3Fj1Hoq -----END CERTIFICATE-----Generated at Fri Apr 4 18:27:46 2025 by rpki-client