$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft File: haOfEGRko23KJ0v8d_uvewMDh24.mft (raw, json) Hash identifier: CFUYCG60gCv6DoJIiu1MXf5qQE9ZUP2BHqrj/NJS33k= Subject key identifier: 51:84:1F:BA:2B:F2:CE:51:05:53:62:80:17:69:C8:1F:55:03:2C:34 Authority key identifier: 85:A3:9F:10:64:64:A3:6D:CA:27:4B:FC:77:FB:AF:7B:03:03:87:6E Certificate issuer: /CN=A9131181/serialNumber=85A39F106464A36DCA274BFC77FBAF7B0303876E Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft Manifest number: 22 Signing time: Sat 31 May 2025 07:26:06 +0000 Manifest this update: Sat 31 May 2025 07:26:06 +0000 Manifest next update: Sat 07 Jun 2025 07:26:06 +0000 Files and hashes: 1: haOfEGRko23KJ0v8d_uvewMDh24.crl (hash: pM2C6dG8rmGMvQCKteMuMM/brf2KLfLkaIiS7XK/PY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.crl rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131181, serialNumber=85A39F106464A36DCA274BFC77FBAF7B0303876E Validity Not Before: May 31 07:26:06 2025 GMT Not After : Jun 7 07:26:06 2025 GMT Subject: CN=683aaf0e-e8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8d:a9:5d:fc:02:c5:d4:94:0a:4b:db:93:a8: 6e:a6:b6:e4:7d:d6:cd:cb:9f:db:ca:37:c6:ed:9d: f2:6a:1a:c1:b2:5e:02:d9:50:91:dd:c2:af:04:d5: c8:ae:38:62:f1:98:16:aa:ac:11:03:75:63:96:3b: 86:c7:23:c3:06:07:a4:99:7c:b8:22:1c:28:e6:6e: 35:87:1b:f1:31:ef:94:62:4d:9d:a9:3f:c8:c6:53: 9f:97:8c:f1:87:e8:b4:3a:4e:3b:29:bb:7a:ef:ec: 1e:53:95:54:0f:7a:2c:df:cc:f0:aa:27:ef:10:06: 11:59:ce:92:27:aa:70:26:ed:b5:af:17:35:66:01: 1c:23:7d:fc:7b:ae:5c:1f:cd:64:98:be:86:14:bb: d9:b9:a3:3a:9e:3e:79:c8:17:fa:9f:84:54:91:fe: f4:01:45:bd:09:12:8c:bd:e1:06:44:60:10:f6:31: f6:83:75:e6:d4:b5:a1:40:e7:59:88:71:74:f7:9b: 4e:0a:38:b3:02:cf:3c:ea:30:41:70:00:62:ac:c3: 67:c1:4b:19:0d:7c:8d:a4:86:c2:d1:64:e6:5b:6e: 71:c4:76:94:c3:e1:03:6e:ae:d7:ca:10:bb:da:f0: d4:e7:fe:ae:43:a7:ea:20:ae:8a:a2:e4:42:30:94: ce:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:84:1F:BA:2B:F2:CE:51:05:53:62:80:17:69:C8:1F:55:03:2C:34 X509v3 Authority Key Identifier: keyid:85:A3:9F:10:64:64:A3:6D:CA:27:4B:FC:77:FB:AF:7B:03:03:87:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ee:fb:6e:6f:8e:99:24:a1:65:f6:9a:de:b4:a6:2d:6e:a6: c4:6d:55:06:5c:9f:c1:b8:e2:ea:6c:5f:92:5f:d7:a1:c3:cd: 90:d0:84:43:fc:ff:b3:8d:6d:00:a2:44:67:a9:d3:f0:70:70: a2:69:2c:cb:b5:22:bd:f1:cc:47:40:dc:b2:e8:b8:d3:dd:27: cc:3b:13:78:91:2c:cf:1f:28:d8:ec:2b:3b:c8:7b:17:63:04: f4:7d:46:62:53:7d:02:0d:1c:58:89:dc:e3:3f:75:dc:0e:39: f9:41:4a:4a:ea:db:ee:58:f1:f9:6e:d7:3d:fd:a9:0a:9a:92: 01:8a:64:87:7e:55:bd:c4:a4:ea:73:e0:9d:cf:5d:0c:88:3b: 55:28:01:6f:cf:22:7e:14:87:bc:df:09:95:94:a3:5f:d2:f0: 49:76:17:dc:4e:84:c5:e1:66:4a:22:91:4a:14:79:04:27:05: 2c:7a:31:a4:ba:c9:8b:69:16:57:60:b4:bd:c8:c6:fa:c7:fe: db:8d:6d:cb:fa:54:7d:10:1d:d9:33:94:03:56:f8:79:93:7a: 18:6b:b0:1c:33:02:9c:6a:9d:07:70:fb:54:44:c2:ed:b1:6f: 6b:c8:cc:38:08:aa:38:71:e4:f6:80:14:68:ec:e9:00:8e:16: e4:4a:5b:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE4MTExMC8GA1UEBRMoODVBMzlGMTA2NDY0QTM2RENBMjc0QkZDNzdGQkFGN0Iw MzAzODc2RTAeFw0yNTA1MzEwNzI2MDZaFw0yNTA2MDcwNzI2MDZaMBgxFjAUBgNV BAMTDTY4M2FhZjBlLWU4ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRjald/ALF1JQKS9uTqG6mtuR91s3Ln9vKN8btnfJqGsGyXgLZUJHdwq8E1ciu OGLxmBaqrBEDdWOWO4bHI8MGB6SZfLgiHCjmbjWHG/Ex75RiTZ2pP8jGU5+XjPGH 6LQ6Tjspu3rv7B5TlVQPeizfzPCqJ+8QBhFZzpInqnAm7bWvFzVmARwjffx7rlwf zWSYvoYUu9m5ozqePnnIF/qfhFSR/vQBRb0JEoy94QZEYBD2MfaDdebUtaFA51mI cXT3m04KOLMCzzzqMEFwAGKsw2fBSxkNfI2khsLRZOZbbnHEdpTD4QNurtfKELva 8NTn/q5Dp+ogroqi5EIwlM6JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUYQfuivy zlEFU2KAF2nIH1UDLDQwHwYDVR0jBBgwFoAUhaOfEGRko23KJ0v8d/uvewMDh24w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTgxL0IyRTcxNDYyMEI3 OTExRjBCQjk5RUQ2QUM0RjlBRTAyL2hhT2ZFR1JrbzIzS0owdjhkX3V2ZXdNRGgy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGFPZkVHUmtvMjNLSjB2OGRfdXZld01EaDI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTgxL0IyRTcxNDYyMEI3OTExRjBCQjk5RUQ2QUM0RjlBRTAyL2hhT2ZFR1JrbzIz S0owdjhkX3V2ZXdNRGgyNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC/u+25vjpkkoWX2mt60pi1upsRtVQZcn8G44upsX5Jf16HDzZDQhEP8 /7ONbQCiRGep0/BwcKJpLMu1Ir3xzEdA3LLouNPdJ8w7E3iRLM8fKNjsKzvIexdj BPR9RmJTfQINHFiJ3OM/ddwOOflBSkrq2+5Y8flu1z39qQqakgGKZId+Vb3EpOpz 4J3PXQyIO1UoAW/PIn4Uh7zfCZWUo1/S8El2F9xOhMXhZkoikUoUeQQnBSx6MaS6 yYtpFldgtL3IxvrH/tuNbcv6VH0QHdkzlANW+HmTehhrsBwzApxqnQdw+1REwu2x b2vIzDgIqjhx5PaAFGjs6QCOFuRKW4U= -----END CERTIFICATE-----Generated at Sat May 31 17:08:58 2025 by rpki-client