$ rpki-client -vvf rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft File: hQaYWfujzd6OwbgaHgTdYFCzgRM.mft (raw, json) Hash identifier: kJAVemaAl2qNFGcn83dCSymQ00h/1rC9mrltmOr9Aak= Subject key identifier: 72:8B:7F:20:B2:EB:1A:6F:58:A0:DA:9F:60:71:71:F7:1E:27:6A:66 Authority key identifier: 85:06:98:59:FB:A3:CD:DE:8E:C1:B8:1A:1E:04:DD:60:50:B3:81:13 Certificate issuer: /CN=A91509C4/serialNumber=85069859FBA3CDDE8EC1B81A1E04DD6050B38113 Certificate serial: 3486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft Manifest number: 3486 Signing time: Sat 31 May 2025 14:34:08 +0000 Manifest this update: Sat 31 May 2025 14:34:07 +0000 Manifest next update: Sat 07 Jun 2025 14:34:07 +0000 Files and hashes: 1: hQaYWfujzd6OwbgaHgTdYFCzgRM.crl (hash: aSaeKAcbMSLx519KX2q2n+zHvqdlTpZboSiSTwf+3Ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.crl rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13446 (0x3486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509C4, serialNumber=85069859FBA3CDDE8EC1B81A1E04DD6050B38113 Validity Not Before: May 31 14:34:07 2025 GMT Not After : Jun 7 14:34:07 2025 GMT Subject: CN=683b1360-6563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:36:4d:22:7f:70:f6:7e:14:c3:78:46:52: 25:3f:ea:ef:15:f4:e2:41:14:45:e9:7f:6a:ee:46: 22:20:a2:c9:cb:aa:92:20:c6:80:aa:7c:7a:88:9f: 8a:b5:59:51:44:ef:e6:2c:f4:c5:5c:e2:bd:ec:2a: 2b:8f:15:d4:7f:6b:b9:dc:0c:41:83:7f:18:ff:09: 9a:a6:d0:d1:4c:c3:1d:d5:6b:ca:aa:3d:ea:e4:e4: 91:2f:83:16:e3:d4:b0:7b:e9:b3:c1:ac:56:e0:ae: 47:27:88:52:cf:38:88:47:e3:81:41:92:3f:de:85: f8:87:be:42:31:b9:f0:78:4b:cb:c5:6d:d2:cc:4c: 7f:e9:8f:2c:8f:75:7d:93:96:27:2f:16:36:72:32: 8e:fe:b7:35:80:5c:37:22:b7:35:0a:72:f2:e7:fc: 4f:c3:20:2c:c5:0a:9c:fa:61:2a:5b:e8:93:f4:53: e8:5a:fa:8c:5d:87:b7:3b:07:9f:77:cb:f0:6a:ac: 2b:4f:c8:a6:d1:91:eb:da:4f:1b:e1:59:0b:ed:40: c6:0e:46:da:cb:5b:49:c1:67:52:b9:96:f8:ac:bd: e0:ec:55:e5:79:92:a8:16:43:99:49:b9:b6:8c:6e: 41:4f:40:ea:87:fb:cd:40:0f:f9:4d:9b:e9:4a:af: be:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8B:7F:20:B2:EB:1A:6F:58:A0:DA:9F:60:71:71:F7:1E:27:6A:66 X509v3 Authority Key Identifier: keyid:85:06:98:59:FB:A3:CD:DE:8E:C1:B8:1A:1E:04:DD:60:50:B3:81:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:3d:1a:29:ab:3e:b3:8a:e9:ad:97:1a:34:d6:e9:2f:8a:d4: 91:98:de:d8:16:00:42:70:97:67:c2:b4:19:4a:3f:51:7b:21: a4:93:52:4c:d6:b9:c1:d1:0e:21:44:71:ea:ad:9d:44:11:ef: 3a:ea:00:e5:00:f5:de:86:d6:10:bc:cb:1f:4a:fc:0b:04:7c: 8e:82:4c:b6:38:56:2c:3a:ba:49:ec:b7:9c:d7:75:da:e4:7f: fa:b6:64:7c:c6:a5:a5:1e:70:53:ad:d7:34:1e:c3:4c:f1:75: c1:4d:2f:e2:9d:84:6b:95:54:ea:83:c8:a3:54:ab:d2:7b:ef: b8:e9:87:0f:26:a7:6c:04:7a:0d:1e:e4:92:04:6d:92:30:5d: 4b:05:1f:4b:44:33:3c:c9:bf:3b:99:c8:00:c8:d8:a7:83:38: a8:d2:09:13:5b:cf:45:b7:b7:45:45:33:3b:ee:fd:03:ca:b2: 70:b7:f4:05:39:c7:53:6e:75:e7:c2:d6:05:7b:5e:b3:c9:20: 25:05:fa:6e:28:99:2f:44:5e:74:d7:28:fd:c7:a6:55:d7:0d: 21:8d:8f:32:f9:30:6f:df:88:8c:fa:ee:95:06:19:54:6d:c8: 7c:6f:2e:dd:31:a8:38:9e:0b:8d:a7:ea:4a:fe:41:50:b0:ee: e1:d7:95:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QzQxMTAvBgNVBAUTKDg1MDY5ODU5RkJBM0NEREU4RUMxQjgxQTFFMDRERDYw NTBCMzgxMTMwHhcNMjUwNTMxMTQzNDA3WhcNMjUwNjA3MTQzNDA3WjAYMRYwFAYD VQQDEw02ODNiMTM2MC02NTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTg2TSJ/cPZ+FMN4RlIlP+rvFfTiQRRF6X9q7kYiIKLJy6qSIMaAqnx6iJ+K tVlRRO/mLPTFXOK97CorjxXUf2u53AxBg38Y/wmaptDRTMMd1WvKqj3q5OSRL4MW 49Swe+mzwaxW4K5HJ4hSzziIR+OBQZI/3oX4h75CMbnweEvLxW3SzEx/6Y8sj3V9 k5YnLxY2cjKO/rc1gFw3Irc1CnLy5/xPwyAsxQqc+mEqW+iT9FPoWvqMXYe3Owef d8vwaqwrT8im0ZHr2k8b4VkL7UDGDkbay1tJwWdSuZb4rL3g7FXleZKoFkOZSbm2 jG5BT0Dqh/vNQA/5TZvpSq++lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKLfyCy 6xpvWKDan2BxcfceJ2pmMB8GA1UdIwQYMBaAFIUGmFn7o83ejsG4Gh4E3WBQs4ET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlDNC80Qjg5NjEzODFE OEIxMUUyOEEzM0M3RTUwOEIwMkNEMi9oUWFZV2Z1anpkNk93YmdhSGdUZFlGQ3pn Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hRYVlXZnVqemQ2T3diZ2FIZ1RkWUZDemdSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlDNC80Qjg5NjEzODFEOEIxMUUyOEEzM0M3RTUwOEIwMkNEMi9oUWFZV2Z1anpk Nk93YmdhSGdUZFlGQ3pnUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpPRopqz6ziumtlxo01ukvitSRmN7YFgBCcJdnwrQZSj9ReyGkk1JM 1rnB0Q4hRHHqrZ1EEe866gDlAPXehtYQvMsfSvwLBHyOgky2OFYsOrpJ7Lec13Xa 5H/6tmR8xqWlHnBTrdc0HsNM8XXBTS/inYRrlVTqg8ijVKvSe++46YcPJqdsBHoN HuSSBG2SMF1LBR9LRDM8yb87mcgAyNingzio0gkTW89Ft7dFRTM77v0DyrJwt/QF OcdTbnXnwtYFe16zySAlBfpuKJkvRF501yj9x6ZV1w0hjY8y+TBv34iM+u6VBhlU bch8by7dMag4nguNp+pK/kFQsO7h15WG -----END CERTIFICATE-----Generated at Sat May 31 17:07:36 2025 by rpki-client