$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft File: h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json) Hash identifier: Z8qmjXRQ5PZKaNjg1OoaRd9ANJ+TX/lXKqP/0Oe7NjI= Subject key identifier: AF:E2:8B:C0:0D:28:89:63:C9:1C:3B:01:10:5C:09:D5:5E:73:96:69 Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 Certificate issuer: /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Certificate serial: 3495 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft Manifest number: 3495 Signing time: Thu 12 Jun 2025 14:16:41 +0000 Manifest this update: Thu 12 Jun 2025 14:16:41 +0000 Manifest next update: Thu 19 Jun 2025 14:16:41 +0000 Files and hashes: 1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: FuZA7EbcKDOWzFaopSNRihZbTzUIljD8Zv6l5XXmbJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 14:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13461 (0x3495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Validity Not Before: Jun 12 14:16:41 2025 GMT Not After : Jun 19 14:16:41 2025 GMT Subject: CN=684ae149-cb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:c5:32:88:d1:cd:42:00:90:49:2a:72:fc: 74:e4:c7:0d:d2:57:10:03:fc:c5:05:a8:8c:10:d5: 4a:16:71:7d:13:1d:bb:10:51:45:71:ff:6d:d0:0b: a6:2f:69:84:9e:c7:bb:64:73:99:db:b2:74:bf:4b: 4d:b3:4c:0b:90:da:fc:15:fe:87:13:da:12:e0:84: a2:ed:97:f6:e1:87:f3:ff:d6:3a:8a:17:18:d9:29: 26:ef:25:47:aa:da:d5:7a:66:a5:a7:05:c2:88:47: cf:e0:53:3e:a7:37:21:a7:55:23:ba:35:f7:19:2c: 34:e3:e0:66:0e:14:b1:72:72:df:1e:db:3c:ea:fe: c3:82:27:de:6a:06:28:74:c0:d5:2f:56:c8:6d:cb: 53:6a:2e:db:7e:31:b4:85:94:af:53:70:f2:17:32: f5:0f:76:24:15:49:ad:89:41:94:30:64:a4:9c:88: 42:42:be:6a:5a:32:8f:ef:9d:ba:84:9f:43:07:ef: db:fa:84:5c:20:76:bd:ae:dd:81:07:63:d0:4b:a7: 33:14:6d:65:59:0b:6f:01:ae:74:20:43:72:c0:43: a3:9f:c0:aa:aa:60:17:ed:97:5a:ae:93:5d:25:32: 36:0d:7f:a1:f4:95:50:4c:b3:18:a6:e7:ce:2c:52: be:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E2:8B:C0:0D:28:89:63:C9:1C:3B:01:10:5C:09:D5:5E:73:96:69 X509v3 Authority Key Identifier: keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f3:19:c5:6a:cd:79:ff:2b:89:d2:eb:78:25:dc:1e:c2:fe: 51:ff:66:54:07:88:88:9e:db:ef:d4:c5:a4:f2:70:91:90:9d: 49:56:a8:90:8d:e1:90:61:cf:fd:6d:8d:17:6a:b8:fa:25:fc: 48:3a:db:1d:7c:ca:2a:c6:53:b8:22:6a:f4:18:b0:b3:1b:f2: 3a:0e:d0:de:a1:e9:21:25:40:06:91:ee:fd:4c:45:8d:cb:e1: fd:22:65:0d:22:8b:f8:31:60:1d:92:b7:3d:c8:c4:2d:f3:e3: 6e:9a:5d:10:c6:86:1c:cd:d9:c7:93:67:a9:76:08:be:20:4c: 98:ee:15:3c:ec:70:f9:77:88:b7:f3:72:9a:53:cb:30:68:5d: 22:fe:b4:dc:84:b9:b7:75:e8:87:87:9e:da:83:c5:4b:6d:c4: 29:ec:08:f4:44:23:a4:75:13:c5:2e:96:89:6d:92:c9:78:4c: 45:72:92:f0:f9:41:86:4f:76:bc:3f:82:1c:7a:a5:0d:79:3f: 04:ed:ea:13:29:68:93:e0:00:76:b8:37:c0:f7:2b:17:f0:04: 78:59:51:29:dd:a2:9a:e9:b2:8b:fe:6d:ea:12:84:44:e0:99: 08:12:04:8c:13:09:cf:80:65:9e:ca:3d:9f:26:d8:60:98:1a: 84:5c:31:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDg3OTA2MjUwM0ZEMjA4NDY2Rjc0RUE5QUY4NzY3MEE4 N0Q4NkE3MzYwHhcNMjUwNjEyMTQxNjQxWhcNMjUwNjE5MTQxNjQxWjAYMRYwFAYD VQQDEw02ODRhZTE0OS1jYjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVLFMojRzUIAkEkqcvx05McN0lcQA/zFBaiMENVKFnF9Ex27EFFFcf9t0Aum L2mEnse7ZHOZ27J0v0tNs0wLkNr8Ff6HE9oS4ISi7Zf24Yfz/9Y6ihcY2Skm7yVH qtrVemalpwXCiEfP4FM+pzchp1UjujX3GSw04+BmDhSxcnLfHts86v7DgifeagYo dMDVL1bIbctTai7bfjG0hZSvU3DyFzL1D3YkFUmtiUGUMGSknIhCQr5qWjKP7526 hJ9DB+/b+oRcIHa9rt2BB2PQS6czFG1lWQtvAa50IENywEOjn8CqqmAX7ZdarpNd JTI2DX+h9JVQTLMYpufOLFK+XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/ii8AN KIljyRw7ARBcCdVec5ZpMB8GA1UdIwQYMBaAFIeQYlA/0ghGb3Tqmvh2cKh9hqc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC84NDZFQzA0MDFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NFWnZkT3FhLUhad3FIMkdw elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2g1QmlVRF9TQ0VadmRPcWEtSFp3cUgyR3B6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC84NDZFQzA0MDFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NF WnZkT3FhLUhad3FIMkdwelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP8xnFas15/yuJ0ut4Jdwewv5R/2ZUB4iIntvv1MWk8nCRkJ1JVqiQ jeGQYc/9bY0Xarj6JfxIOtsdfMoqxlO4Imr0GLCzG/I6DtDeoekhJUAGke79TEWN y+H9ImUNIov4MWAdkrc9yMQt8+Numl0QxoYczdnHk2epdgi+IEyY7hU87HD5d4i3 83KaU8swaF0i/rTchLm3deiHh57ag8VLbcQp7Aj0RCOkdRPFLpaJbZLJeExFcpLw +UGGT3a8P4IceqUNeT8E7eoTKWiT4AB2uDfA9ysX8AR4WVEp3aKa6bKL/m3qEoRE 4JkIEgSMEwnPgGWeyj2fJthgmBqEXDGA -----END CERTIFICATE-----Generated at Fri Jun 13 12:43:28 2025 by rpki-client