$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft File: Hy55yPeszIoD-1tKOvzF9pMbN4I.mft (raw, json) Hash identifier: QvhuRi/tM3vOIAkHMmq6/MbORiExssjKtb5xYeIUCg8= Subject key identifier: 11:C6:57:89:54:F2:6C:A8:14:A9:D5:FC:34:9A:3B:43:25:20:EA:CB Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 Certificate issuer: /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Certificate serial: 1734 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft Manifest number: 172A Signing time: Fri 30 May 2025 16:48:34 +0000 Manifest this update: Fri 30 May 2025 16:48:33 +0000 Manifest next update: Fri 06 Jun 2025 16:48:33 +0000 Files and hashes: 1: Hy55yPeszIoD-1tKOvzF9pMbN4I.crl (hash: yIVNW7QAdOrzzVkFWWDvrhfz4avXn4fIOpV+QBlwMkI=) 2: 02181C4CE13511E7B0D71C83C4F9AE02.roa (hash: kYdi56Vh70Qo/SN0C8R4CSPhNox0X9SfOcU95n5XzCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5940 (0x1734) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB09C, serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Validity Not Before: May 30 16:48:33 2025 GMT Not After : Jun 6 16:48:33 2025 GMT Subject: CN=6839e162-b724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:23:5a:f1:84:25:18:92:28:db:00:38:56:29: 9b:9c:76:00:86:48:31:73:de:32:c6:6b:00:cc:3f: 86:ac:86:c7:0a:88:86:d9:19:6d:96:f9:1b:23:fa: 57:fc:4c:18:31:4d:f4:03:22:90:e9:32:7b:23:dc: e7:87:43:97:e9:54:f6:3d:98:de:b6:a3:bf:ba:ee: ff:1a:8e:46:e2:0c:7b:a4:f7:b8:df:21:d3:db:35: 53:9b:de:19:0a:9d:5f:4d:6c:0b:93:69:48:99:a2: e8:46:9d:da:8b:02:8c:89:c8:e4:7c:1c:f2:34:4e: ad:66:26:e1:d4:d1:2a:a2:af:b5:bf:be:7a:64:00: ca:a4:77:50:8a:16:d5:81:3d:b4:1b:22:f2:30:ed: 93:5e:d0:f5:da:97:fd:4d:e7:9a:45:f8:9b:6a:a0: 1f:a6:4c:f3:5b:b0:e9:83:21:9b:ab:34:46:62:69: 21:90:8e:7a:10:72:6a:ee:aa:b6:2e:14:3c:09:47: 1a:51:bc:44:2a:ba:cf:ad:30:28:78:78:0b:8b:bf: 0f:7b:c4:b9:44:b5:52:8d:44:88:14:f6:50:94:45: fa:0a:01:90:8d:82:61:08:75:2d:8b:5f:16:48:8f: 76:43:60:00:08:f2:64:2b:fa:c5:4c:ab:f2:62:19: 6b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C6:57:89:54:F2:6C:A8:14:A9:D5:FC:34:9A:3B:43:25:20:EA:CB X509v3 Authority Key Identifier: keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:64:d0:74:a1:42:bc:85:65:1a:d1:32:4b:38:66:6e:4a:a3: 90:ab:2e:25:90:58:8e:16:95:3a:b0:15:ce:40:21:9e:5c:fa: 67:b5:2c:19:62:48:20:0f:a3:73:df:12:20:c6:ac:2f:0e:8d: 4b:39:88:7f:65:1b:35:b0:42:ae:3f:46:f2:5e:43:f1:e1:75: 7c:b8:44:38:93:13:e2:f2:3c:e6:f2:52:9f:ce:8a:7d:f5:81: ad:c5:82:40:6c:fd:ff:57:05:99:74:ee:78:e0:74:2b:38:94: 7b:2b:9c:08:e6:09:b4:f5:a4:d0:73:33:f9:c0:3a:34:ee:e6: ba:82:db:46:62:78:e6:6c:9c:e3:b6:ca:e6:23:51:54:62:bb: 8c:64:90:ae:94:43:0a:ff:30:d7:db:c6:9b:01:d4:be:4e:86: c5:89:d6:de:29:31:7c:0a:41:7f:88:31:c9:2d:56:1c:db:58: 85:eb:1e:42:92:23:d4:6b:29:03:39:55:5d:de:05:30:29:1a: e7:d7:e2:6f:91:2e:36:ce:08:87:80:73:e1:f8:b8:51:35:f2: f0:28:06:86:fb:dd:97:99:74:64:ab:3c:20:c2:14:8c:d0:e4: cb:dd:68:03:15:cb:1e:f4:42:c5:f6:b7:7d:6b:b6:be:20:45: 92:3b:bb:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIwOUMxMTAvBgNVBAUTKDFGMkU3OUM4RjdBQ0NDOEEwM0ZCNUI0QTNBRkNDNUY2 OTMxQjM3ODIwHhcNMjUwNTMwMTY0ODMzWhcNMjUwNjA2MTY0ODMzWjAYMRYwFAYD VQQDEw02ODM5ZTE2Mi1iNzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7SNa8YQlGJIo2wA4VimbnHYAhkgxc94yxmsAzD+GrIbHCoiG2RltlvkbI/pX /EwYMU30AyKQ6TJ7I9znh0OX6VT2PZjetqO/uu7/Go5G4gx7pPe43yHT2zVTm94Z Cp1fTWwLk2lImaLoRp3aiwKMicjkfBzyNE6tZibh1NEqoq+1v756ZADKpHdQihbV gT20GyLyMO2TXtD12pf9TeeaRfibaqAfpkzzW7DpgyGbqzRGYmkhkI56EHJq7qq2 LhQ8CUcaUbxEKrrPrTAoeHgLi78Pe8S5RLVSjUSIFPZQlEX6CgGQjYJhCHUti18W SI92Q2AACPJkK/rFTKvyYhlrNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHGV4lU 8myoFKnV/DSaO0MlIOrLMB8GA1UdIwQYMBaAFB8uecj3rMyKA/tbSjr8xfaTGzeC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjA5Qy8xRkNEMTVFMEUx MzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJb0QtMXRLT3Z6RjlwTWJO NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h5NTV5UGVzeklvRC0xdEtPdnpGOXBNYk40SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjA5Qy8xRkNEMTVFMEUxMzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJ b0QtMXRLT3Z6RjlwTWJONEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoZNB0oUK8hWUa0TJLOGZuSqOQqy4lkFiOFpU6sBXOQCGeXPpntSwZ YkggD6Nz3xIgxqwvDo1LOYh/ZRs1sEKuP0byXkPx4XV8uEQ4kxPi8jzm8lKfzop9 9YGtxYJAbP3/VwWZdO544HQrOJR7K5wI5gm09aTQczP5wDo07ua6gttGYnjmbJzj tsrmI1FUYruMZJCulEMK/zDX28abAdS+TobFidbeKTF8CkF/iDHJLVYc21iF6x5C kiPUaykDOVVd3gUwKRrn1+JvkS42zgiHgHPh+LhRNfLwKAaG+92XmXRkqzwgwhSM 0OTL3WgDFcse9ELF9rd9a7a+IEWSO7uJ -----END CERTIFICATE-----Generated at Sat May 31 16:08:59 2025 by rpki-client