$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft File: hYBFlRf-HXfU04pCnx0hxskt6TQ.mft (raw, json) Hash identifier: JM6Mmice5MpCIAsgGmqqH0khMzY7w6EneuJirqfF6qg= Subject key identifier: 17:67:C6:F8:0D:E3:18:7D:E1:1A:9D:FE:D2:B1:4D:91:3A:7B:BE:AA Authority key identifier: 85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34 Certificate issuer: /CN=A9145B5E/serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft Manifest number: A2 Signing time: Sat 31 May 2025 05:47:46 +0000 Manifest this update: Sat 31 May 2025 05:47:46 +0000 Manifest next update: Sat 07 Jun 2025 05:47:46 +0000 Files and hashes: 1: hYBFlRf-HXfU04pCnx0hxskt6TQ.crl (hash: rvjDahlM+VN1is+qly2h2AolpkOs7lk/7USQ5OMhLek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B5E, serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934 Validity Not Before: May 31 05:47:46 2025 GMT Not After : Jun 7 05:47:46 2025 GMT Subject: CN=683a9802-dfdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:c8:d4:65:5a:89:0b:b3:d9:49:a4:37:34: 70:c4:bf:c5:17:8d:f5:39:45:b3:59:6a:a8:19:7e: c4:8b:53:ab:71:13:f3:06:3f:15:57:00:78:88:f8: fb:01:19:9c:98:da:ce:9f:bf:71:ea:f5:d2:0f:75: d8:7f:5e:7a:ce:aa:b0:8e:ec:2a:36:fc:43:56:e8: 72:c7:09:05:80:f6:ac:62:04:88:5c:fe:71:50:79: 53:26:22:d8:ae:2d:16:d4:88:a9:8a:16:5d:12:16: 53:85:5a:f8:a0:b3:b6:d2:83:fb:14:e4:27:f4:86: 59:d5:58:da:b8:e9:17:04:7d:43:6e:21:ca:b5:48: 41:99:05:af:a6:98:02:11:b3:97:49:aa:0d:aa:d6: d0:de:ef:74:41:dd:ca:7b:8b:11:31:5c:74:5b:38: be:fa:19:06:77:00:15:69:b9:e4:6f:db:c8:58:dc: 19:f2:b0:98:d1:ac:a0:7a:7a:38:dd:a1:d1:30:d8: 7d:d2:4d:f2:0b:e5:37:60:e4:84:69:82:fc:a2:e6: 15:df:f9:7a:c6:df:4a:7f:fb:df:ba:f2:f2:30:87: b5:3e:66:d1:51:c3:9a:b5:6f:6e:c2:43:f6:0a:17: 4f:e2:99:a1:9a:89:81:73:5c:f6:28:81:ff:8b:fd: 91:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:67:C6:F8:0D:E3:18:7D:E1:1A:9D:FE:D2:B1:4D:91:3A:7B:BE:AA X509v3 Authority Key Identifier: keyid:85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:23:37:0c:90:d6:7d:ab:a6:58:6b:43:48:e4:52:05:7c:27: cc:a6:af:93:f7:13:00:f3:e5:f6:63:83:d1:9b:1f:71:96:12: c9:ba:0c:95:ec:b1:f0:9b:b0:d7:6a:97:67:a4:1f:7f:71:57: 57:bd:ea:92:99:76:64:5b:07:e8:a7:ed:e5:73:a1:40:ee:bd: b9:22:8a:ff:4e:54:bf:99:47:c7:e8:e8:c6:43:74:e7:7f:66: 62:38:b2:98:8f:5a:28:3e:66:0c:a8:2c:49:95:9b:83:0f:4b: d7:ef:93:69:1a:f9:41:bb:00:89:94:8c:b8:d8:5d:e6:46:9e: bf:bf:af:e6:37:fb:95:af:e6:b0:ee:57:e8:4a:77:7a:b6:05: cf:f6:ac:db:6b:b1:6a:95:a7:3a:96:71:ee:a6:01:b1:71:50: cc:1b:df:e8:5c:66:b6:c1:27:5a:dd:dc:2f:8a:5f:15:69:be: df:1f:1d:13:2d:3c:d9:66:9a:46:6b:31:17:84:f8:50:32:ea: 1e:e0:9f:55:7f:f6:00:78:c2:86:d9:19:c0:ea:d6:6a:04:b5: c8:eb:28:f6:ab:98:c2:b6:de:18:f4:1b:7a:57:eb:c3:05:e4: 1b:34:34:50:80:44:d9:aa:a0:01:04:a9:c2:a8:ec:51:69:e6: 1c:48:fb:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCNUUxMTAvBgNVBAUTKDg1ODA0NTk1MTdGRTFENzdENEQzOEE0MjlGMUQyMUM2 QzkyREU5MzQwHhcNMjUwNTMxMDU0NzQ2WhcNMjUwNjA3MDU0NzQ2WjAYMRYwFAYD VQQDEw02ODNhOTgwMi1kZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLnI1GVaiQuz2UmkNzRwxL/FF431OUWzWWqoGX7Ei1OrcRPzBj8VVwB4iPj7 ARmcmNrOn79x6vXSD3XYf156zqqwjuwqNvxDVuhyxwkFgPasYgSIXP5xUHlTJiLY ri0W1IipihZdEhZThVr4oLO20oP7FOQn9IZZ1VjauOkXBH1DbiHKtUhBmQWvppgC EbOXSaoNqtbQ3u90Qd3Ke4sRMVx0Wzi++hkGdwAVabnkb9vIWNwZ8rCY0aygeno4 3aHRMNh90k3yC+U3YOSEaYL8ouYV3/l6xt9Kf/vfuvLyMIe1PmbRUcOatW9uwkP2 ChdP4pmhmomBc1z2KIH/i/2R2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdnxvgN 4xh94Rqd/tKxTZE6e76qMB8GA1UdIwQYMBaAFIWARZUX/h131NOKQp8dIcbJLek0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUI1RS84NUJDRUU0QzQ1 QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9oWUJGbFJmLUhYZlUwNHBDbngwaHhza3Q2 VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZQkZsUmYtSFhmVTA0cENueDBoeHNrdDZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUI1RS84NUJDRUU0QzQ1QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9oWUJGbFJmLUhY ZlUwNHBDbngwaHhza3Q2VFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7IzcMkNZ9q6ZYa0NI5FIFfCfMpq+T9xMA8+X2Y4PRmx9xlhLJugyV 7LHwm7DXapdnpB9/cVdXveqSmXZkWwfop+3lc6FA7r25Ior/TlS/mUfH6OjGQ3Tn f2ZiOLKYj1ooPmYMqCxJlZuDD0vX75NpGvlBuwCJlIy42F3mRp6/v6/mN/uVr+aw 7lfoSnd6tgXP9qzba7Fqlac6lnHupgGxcVDMG9/oXGa2wSda3dwvil8Vab7fHx0T LTzZZppGazEXhPhQMuoe4J9Vf/YAeMKG2RnA6tZqBLXI6yj2q5jCtt4Y9Bt6V+vD BeQbNDRQgETZqqABBKnCqOxRaeYcSPs5 -----END CERTIFICATE-----Generated at Sat May 31 16:35:48 2025 by rpki-client