$ rpki-client -vvf rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft File: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft (raw, json) Hash identifier: 7sSAn78dLEXuGZJk3HNPN61oNjd0eTB0LJBrgz3tNVw= Subject key identifier: 31:02:55:D9:05:6B:D6:E1:D4:C0:CD:6F:6C:8E:A8:DC:5C:FC:B0:34 Authority key identifier: 1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 Certificate issuer: /CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Certificate serial: 06BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft Manifest number: 06BC Signing time: Fri 30 May 2025 22:18:27 +0000 Manifest this update: Fri 30 May 2025 22:18:26 +0000 Manifest next update: Fri 06 Jun 2025 22:18:26 +0000 Files and hashes: 1: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl (hash: Z6BEayw3Emt85hIOLr8Bk0uW6jj2emZ4ciYd/Y+4wuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1724 (0x6bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C52D, serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Validity Not Before: May 30 22:18:26 2025 GMT Not After : Jun 6 22:18:26 2025 GMT Subject: CN=683a2eb3-3a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:53:3a:22:08:7a:96:9c:fa:32:2e:65:20:5b: fc:1c:14:4e:8d:62:62:60:70:ef:06:34:98:31:14: f6:cd:33:30:20:fa:2a:4f:2b:19:e9:d4:78:74:ee: a7:22:42:e9:ef:e8:8f:86:76:69:8c:73:3e:57:8d: 25:4d:a4:6c:2b:06:b4:9e:6f:44:d7:60:7f:60:a7: 75:5b:e2:b6:ee:85:d0:80:65:c2:cb:cf:4d:6c:aa: 98:a7:c3:df:6c:09:3c:4c:df:aa:f6:e2:71:3c:34: 59:fc:47:2f:9c:0a:9a:a2:15:7e:21:4f:ec:ff:81: a5:4c:0f:bb:23:c3:11:1e:08:df:a1:07:e6:c2:6f: 68:e6:4e:9a:7d:8a:93:dc:38:4a:48:5b:1b:c0:08: 0b:59:64:b3:6b:64:d9:23:29:f7:11:df:ef:31:35: 57:e1:41:d0:95:9c:73:6a:04:e0:62:91:f8:3f:1e: ea:bb:d9:23:20:ac:3b:23:44:b0:02:c6:84:d5:e9: a7:e4:96:0b:4a:5a:5f:87:9b:26:c9:3d:9f:e6:ed: bd:59:3a:7a:95:57:82:95:01:7e:24:a4:ad:ed:99: 38:28:49:06:a6:49:79:9f:87:a5:7a:95:f9:9e:90: 13:5e:24:33:f9:15:db:dd:c8:66:ba:20:96:ea:80: 08:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:02:55:D9:05:6B:D6:E1:D4:C0:CD:6F:6C:8E:A8:DC:5C:FC:B0:34 X509v3 Authority Key Identifier: keyid:1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0b:61:05:9d:1c:09:bd:c7:de:17:b3:c4:19:50:ab:27:5f: 69:f2:bb:36:dd:4b:6d:9a:e1:1e:a8:3a:d3:b1:94:07:6b:cd: 00:e3:f0:9f:1c:1b:0a:80:46:c1:64:8c:82:27:0b:8e:5d:30: 2e:4d:ff:1c:ce:be:bc:46:a6:82:56:0d:7e:9f:28:88:62:28: b0:d3:8f:7f:a7:b2:16:ae:05:79:31:6b:ff:17:60:9b:be:f1: 34:7d:e1:08:c9:c6:97:6a:df:80:d2:be:4c:ac:d2:4d:09:53: 62:88:3a:de:98:90:bf:6b:60:f2:c1:15:74:f8:ef:7a:d1:0a: ab:ab:91:4c:54:20:04:f8:29:6f:26:b7:9c:65:6f:79:85:90: c1:af:81:1b:a6:03:99:e1:1e:20:f3:4c:63:14:fb:a1:47:5e: 42:c1:12:33:c2:79:9e:74:61:b3:26:b7:ae:d0:29:da:af:7c: 33:b2:8e:70:37:84:f8:98:36:56:63:13:28:93:b7:e7:34:ab: 1e:7c:63:c7:ec:a5:7d:d7:09:c1:14:e2:89:9d:43:56:e7:4b: b3:a0:0f:a1:bc:e0:7d:c4:2e:4b:e3:15:a7:d1:78:6d:a1:19: 15:02:33:27:12:ff:fb:2f:f0:c2:35:13:0e:e8:a6:1a:3d:97: 88:1b:57:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M1MkQxMTAvBgNVBAUTKDFEM0E5QThGQzk3Q0ZDRDdBRTg0RkZEQzVBQTBCQkZC OTY5M0RDOTcwHhcNMjUwNTMwMjIxODI2WhcNMjUwNjA2MjIxODI2WjAYMRYwFAYD VQQDEw02ODNhMmViMy0zYThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlM6Igh6lpz6Mi5lIFv8HBROjWJiYHDvBjSYMRT2zTMwIPoqTysZ6dR4dO6n IkLp7+iPhnZpjHM+V40lTaRsKwa0nm9E12B/YKd1W+K27oXQgGXCy89NbKqYp8Pf bAk8TN+q9uJxPDRZ/EcvnAqaohV+IU/s/4GlTA+7I8MRHgjfoQfmwm9o5k6afYqT 3DhKSFsbwAgLWWSza2TZIyn3Ed/vMTVX4UHQlZxzagTgYpH4Px7qu9kjIKw7I0Sw AsaE1emn5JYLSlpfh5smyT2f5u29WTp6lVeClQF+JKSt7Zk4KEkGpkl5n4elepX5 npATXiQz+RXb3chmuiCW6oAIiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDECVdkF a9bh1MDNb2yOqNxc/LA0MB8GA1UdIwQYMBaAFB06mo/JfPzXroT/3Fqgu/uWk9yX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzUyRC84RkE5NzZCRTVC QjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9OZXVoUF9jV3FDNy01YVQz SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUcWFqOGw4X05ldWhQX2NXcUM3LTVhVDNKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzUyRC84RkE5NzZCRTVCQjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9O ZXVoUF9jV3FDNy01YVQzSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPC2EFnRwJvcfeF7PEGVCrJ19p8rs23UttmuEeqDrTsZQHa80A4/Cf HBsKgEbBZIyCJwuOXTAuTf8czr68RqaCVg1+nyiIYiiw049/p7IWrgV5MWv/F2Cb vvE0feEIycaXat+A0r5MrNJNCVNiiDremJC/a2DywRV0+O960Qqrq5FMVCAE+Clv JrecZW95hZDBr4EbpgOZ4R4g80xjFPuhR15CwRIzwnmedGGzJreu0Cnar3wzso5w N4T4mDZWYxMok7fnNKsefGPH7KV91wnBFOKJnUNW50uzoA+hvOB9xC5L4xWn0Xht oRkVAjMnEv/7L/DCNRMO6KYaPZeIG1dk -----END CERTIFICATE-----Generated at Sat May 31 17:00:25 2025 by rpki-client