$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft File: hypmcnatRHCKRH_b6IHxYueQ3WM.mft (raw, json) Hash identifier: OFwxljkY2uPSI+69q0Xr+zvve1wK22drw1dBhI4p2eo= Subject key identifier: 6F:AE:93:3C:65:A2:59:D9:09:EB:BE:30:A9:C8:68:6E:38:A7:4F:9E Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 Certificate issuer: /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Certificate serial: 064C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft Manifest number: 0644 Signing time: Fri 30 May 2025 22:49:56 +0000 Manifest this update: Fri 30 May 2025 22:49:55 +0000 Manifest next update: Fri 06 Jun 2025 22:49:55 +0000 Files and hashes: 1: hypmcnatRHCKRH_b6IHxYueQ3WM.crl (hash: Z1DyDumj25aM/AI8SDnn8FZocdDV63uRasbMiKAu8HM=) 2: 5B194E5EDFF311EBBC814169C4F9AE02.roa (hash: bolwxGi/eUOKWmqsmWqcMpF1AWqbvnFw3vWt3JpNOcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1612 (0x64c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5153, serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Validity Not Before: May 30 22:49:55 2025 GMT Not After : Jun 6 22:49:55 2025 GMT Subject: CN=683a3614-7027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:37:5f:c6:66:42:dd:1e:4d:75:a9:bb:b6:a9: fe:83:84:b6:42:7d:7a:5e:f7:c0:84:10:14:97:aa: fb:8c:3e:55:cf:7a:2e:f8:4c:0b:ad:d6:a7:63:a7: 44:3b:9c:10:f8:58:c8:63:7d:53:e6:c2:0c:5b:de: 8f:a4:ae:01:4d:be:b4:b8:a4:e3:4b:96:54:0c:55: d6:5f:6b:8a:09:91:b3:5c:ff:de:fc:22:ac:d6:88: 24:97:9e:4f:4f:dc:60:52:7c:62:cc:b1:f3:d6:95: 50:fc:9d:10:8e:56:8b:48:5c:dc:34:9f:ed:93:42: a6:c4:00:98:4f:6d:88:2b:41:05:1b:82:0b:b5:7f: 8d:9d:55:3f:fd:f5:56:f7:ea:c0:a3:e6:20:8d:d6: fc:a2:9d:a9:cc:cf:85:13:37:5e:f2:0e:47:dc:09: bc:1d:92:ef:89:40:dc:15:f6:35:87:22:8e:8b:de: 57:e8:ed:0e:a5:5c:61:79:69:74:ab:f4:ed:4b:5d: f7:01:af:d1:74:68:35:0f:7d:06:a4:92:d3:1f:85: cb:dd:3d:f4:30:fc:56:11:b6:43:dd:3a:77:83:11: 32:3d:fe:a6:ed:4a:1d:86:87:ab:89:13:93:df:8e: 94:b7:62:44:e4:e3:cf:54:b9:b1:a3:39:f5:1e:bd: f6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AE:93:3C:65:A2:59:D9:09:EB:BE:30:A9:C8:68:6E:38:A7:4F:9E X509v3 Authority Key Identifier: keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:06:4d:d8:93:ab:74:ba:0d:f9:45:86:2f:41:af:18:03:9d: 4d:0c:04:4c:22:57:25:bd:fe:a2:2c:d4:32:53:c8:bd:95:0e: 6f:e0:d0:d3:2f:22:36:9b:42:a1:de:ff:44:65:f1:31:31:98: ed:ac:c4:78:7c:91:00:67:b3:75:39:4b:85:95:72:b8:b0:66: ec:22:f7:0f:90:74:ae:aa:29:c0:44:38:04:9f:b0:b1:63:bf: 0a:23:f6:52:d2:47:aa:4c:a3:f9:89:8a:16:56:22:bc:9c:03: 4d:0d:28:bc:3a:c3:cf:fa:5f:03:12:b9:21:e5:d0:1e:b7:d9: d2:75:5c:a5:bd:f4:6b:41:fc:a1:80:a8:4f:6f:b1:97:14:5c: 83:09:8d:5f:c1:b6:14:84:33:da:c6:9f:26:7e:4e:12:04:06: f3:1b:be:1a:4c:97:7a:17:9d:56:b5:76:9d:49:32:29:32:a6: 26:3e:cc:97:f2:b1:0c:bb:00:2f:21:09:99:c0:11:d3:10:e4: d6:a3:48:13:2b:e0:0e:f6:82:55:a8:6e:57:91:b5:18:fa:0b: 64:59:95:1f:53:d1:32:a1:4a:45:7a:8c:ec:13:5a:b9:7b:cf: 45:8d:ea:e1:c3:21:aa:6e:2a:9b:da:7d:2f:52:6e:d5:a4:96: a8:61:c7:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxNTMxMTAvBgNVBAUTKDg3MkE2NjcyNzZBRDQ0NzA4QTQ0N0ZEQkU4ODFGMTYy RTc5MERENjMwHhcNMjUwNTMwMjI0OTU1WhcNMjUwNjA2MjI0OTU1WjAYMRYwFAYD VQQDEw02ODNhMzYxNC03MDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TdfxmZC3R5Ndam7tqn+g4S2Qn16XvfAhBAUl6r7jD5Vz3ou+EwLrdanY6dE O5wQ+FjIY31T5sIMW96PpK4BTb60uKTjS5ZUDFXWX2uKCZGzXP/e/CKs1ogkl55P T9xgUnxizLHz1pVQ/J0QjlaLSFzcNJ/tk0KmxACYT22IK0EFG4ILtX+NnVU//fVW 9+rAo+Ygjdb8op2pzM+FEzde8g5H3Am8HZLviUDcFfY1hyKOi95X6O0OpVxheWl0 q/TtS133Aa/RdGg1D30GpJLTH4XL3T30MPxWEbZD3Tp3gxEyPf6m7UodhoeriROT 346Ut2JE5OPPVLmxozn1Hr322QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+ukzxl olnZCeu+MKnIaG44p0+eMB8GA1UdIwQYMBaAFIcqZnJ2rURwikR/2+iB8WLnkN1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTE1My85NTQyODFDMjkw NDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJIQ0tSSF9iNklIeFl1ZVEz V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5cG1jbmF0UkhDS1JIX2I2SUh4WXVlUTNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTE1My85NTQyODFDMjkwNDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJI Q0tSSF9iNklIeFl1ZVEzV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOBk3Yk6t0ug35RYYvQa8YA51NDARMIlclvf6iLNQyU8i9lQ5v4NDT LyI2m0Kh3v9EZfExMZjtrMR4fJEAZ7N1OUuFlXK4sGbsIvcPkHSuqinARDgEn7Cx Y78KI/ZS0keqTKP5iYoWViK8nANNDSi8OsPP+l8DErkh5dAet9nSdVylvfRrQfyh gKhPb7GXFFyDCY1fwbYUhDPaxp8mfk4SBAbzG74aTJd6F51WtXadSTIpMqYmPsyX 8rEMuwAvIQmZwBHTEOTWo0gTK+AO9oJVqG5XkbUY+gtkWZUfU9EyoUpFeozsE1q5 e89FjerhwyGqbiqb2n0vUm7VpJaoYceq -----END CERTIFICATE-----Generated at Sat May 31 17:53:06 2025 by rpki-client