$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json) Hash identifier: xYToYn3tVtVrM9lSubxP8HWKiFrRGSDD8E/L3LrHqnU= Subject key identifier: DC:37:A0:A1:0F:25:06:BE:E6:F7:96:25:D0:59:FE:A2:84:8E:27:F7 Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft Manifest number: F5 Signing time: Tue 03 Jun 2025 05:02:29 +0000 Manifest this update: Tue 03 Jun 2025 05:02:29 +0000 Manifest next update: Tue 10 Jun 2025 05:02:29 +0000 Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: 8kIISl+qYum7E8fiOH8SSqJeTZFBEUDFvDe1dqfAVG8=) 2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: w6qwhTkmhaSB3ncvO8yCXadiw5lkWAA4VBrSx+fRpEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Validity Not Before: Jun 3 05:02:29 2025 GMT Not After : Jun 10 05:02:29 2025 GMT Subject: CN=683e81e5-4597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:58:33:d9:66:9a:f4:24:54:5f:4a:30:b7: c7:da:5d:24:67:b0:ad:a0:10:13:bf:64:06:ad:58: e4:f6:bc:24:f5:70:d2:0b:fa:00:78:c0:97:dc:bc: 8d:e5:f0:c5:d9:b0:71:39:2b:31:7b:e0:40:6b:51: ac:58:d0:79:32:63:51:43:d9:88:46:ae:3d:dc:71: 44:e8:0f:55:5b:5f:bd:ef:d8:26:d2:e2:fd:98:bf: b8:1d:82:74:b7:24:93:c6:c5:bb:f3:fc:0f:ea:c9: 74:5e:4b:4b:a7:3d:66:67:c3:1b:fb:07:85:95:00: 49:16:5b:0f:b3:60:cb:3e:a3:3e:86:b1:2b:98:ef: 37:ec:c0:06:4f:cf:05:29:0c:37:82:11:39:f7:04: 11:4b:bb:00:d4:1f:6b:a2:f8:d0:0c:5e:15:b2:cf: dc:41:a7:98:0b:af:13:a4:18:3d:89:9a:10:bb:53: 53:da:c5:6d:65:fc:87:a5:e1:1a:1c:87:9e:86:7f: 5f:33:94:a5:1e:77:e9:47:6b:d3:6b:fa:d1:18:b1: 11:77:80:6b:25:f3:3a:b9:d9:8e:46:04:2c:d2:b6: de:f8:48:a2:58:3f:24:8b:af:cd:99:ec:21:3b:e0: 9c:f9:e5:20:30:22:61:96:19:a5:70:ee:f3:48:44: 7d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:37:A0:A1:0F:25:06:BE:E6:F7:96:25:D0:59:FE:A2:84:8E:27:F7 X509v3 Authority Key Identifier: keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e7:b0:09:22:23:cd:3b:5c:ec:1a:c0:f4:4e:fd:b5:9e:3c: 75:30:36:ff:ea:58:18:dd:85:9f:2d:d9:43:19:c7:b3:ce:df: 1b:c0:21:e5:60:a5:ab:59:25:1e:99:b8:e8:f0:fe:6b:9e:e7: 22:2b:f2:af:95:3b:36:27:38:f1:1b:f9:fa:42:57:fa:86:91: ab:a6:5f:a7:3d:4d:5e:04:05:61:b0:d9:bd:7b:5d:17:3f:e9: 18:8a:85:90:f5:86:d5:92:74:27:f0:02:ad:e0:9e:cc:77:ee: a3:66:f5:f5:d0:28:27:33:3f:6a:57:84:1c:23:76:bf:68:6e: a1:ab:81:1b:1b:f7:87:0b:3a:55:2b:b7:f9:22:8a:9b:bb:52: b8:a6:15:a0:7d:f6:3d:30:51:03:a3:a4:46:ce:48:ce:37:23: 07:8b:88:49:17:db:18:6e:a6:d4:4a:45:4b:92:19:62:d1:df: 8a:93:71:bd:18:0f:bf:a1:37:71:aa:76:5d:26:b3:6b:f1:47: cd:b2:98:61:8e:2b:2f:c0:bb:a9:4e:fd:87:12:f9:04:51:2c: f6:18:64:7b:2d:8b:e0:84:bf:dd:2a:94:8f:1f:00:ff:c9:46: d4:68:64:e7:ff:c5:f5:67:e7:ac:a9:4c:04:45:0d:f7:d5:6d: 60:03:1f:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDg3MkM5MzY4NjU2Qzc3ODM1N0MyQTVBOTlCRUNGRkY2 Nzc1NTBBQzgwHhcNMjUwNjAzMDUwMjI5WhcNMjUwNjEwMDUwMjI5WjAYMRYwFAYD VQQDEw02ODNlODFlNS00NTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsN1YM9lmmvQkVF9KMLfH2l0kZ7CtoBATv2QGrVjk9rwk9XDSC/oAeMCX3LyN 5fDF2bBxOSsxe+BAa1GsWNB5MmNRQ9mIRq493HFE6A9VW1+979gm0uL9mL+4HYJ0 tySTxsW78/wP6sl0XktLpz1mZ8Mb+weFlQBJFlsPs2DLPqM+hrErmO837MAGT88F KQw3ghE59wQRS7sA1B9rovjQDF4Vss/cQaeYC68TpBg9iZoQu1NT2sVtZfyHpeEa HIeehn9fM5SlHnfpR2vTa/rRGLERd4BrJfM6udmORgQs0rbe+EiiWD8ki6/Nmewh O+Cc+eUgMCJhlhmlcO7zSER9WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNw3oKEP JQa+5veWJdBZ/qKEjif3MB8GA1UdIwQYMBaAFIcsk2hlbHeDV8KlqZvs//Z3VQrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83NUEwQ0QxNEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0Tlh3cVdwbS16XzluZFZD c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83NUEwQ0QxNEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0 Tlh3cVdwbS16XzluZFZDc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP57AJIiPNO1zsGsD0Tv21njx1MDb/6lgY3YWfLdlDGcezzt8bwCHl YKWrWSUembjo8P5rnuciK/KvlTs2JzjxG/n6Qlf6hpGrpl+nPU1eBAVhsNm9e10X P+kYioWQ9YbVknQn8AKt4J7Md+6jZvX10CgnMz9qV4QcI3a/aG6hq4EbG/eHCzpV K7f5Ioqbu1K4phWgffY9MFEDo6RGzkjONyMHi4hJF9sYbqbUSkVLkhli0d+Kk3G9 GA+/oTdxqnZdJrNr8UfNsphhjisvwLupTv2HEvkEUSz2GGR7LYvghL/dKpSPHwD/ yUbUaGTn/8X1Z+esqUwERQ331W1gAx9y -----END CERTIFICATE-----Generated at Tue Jun 3 23:53:50 2025 by rpki-client