$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft File: h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json) Hash identifier: YE3BICg71KWV5TcCuTXlF1lHdDAYdG6R3jPy4E5S0RM= Subject key identifier: 21:EF:58:68:78:59:71:32:92:AA:31:24:EF:C4:C6:02:57:76:F6:70 Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 Certificate issuer: /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Certificate serial: 3493 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft Manifest number: 3493 Signing time: Sun 08 Jun 2025 14:16:42 +0000 Manifest this update: Sun 08 Jun 2025 14:16:42 +0000 Manifest next update: Sun 15 Jun 2025 14:16:42 +0000 Files and hashes: 1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: ZuzrcufX2op4mSm9yad7jDK2t5BzddEbd0+F+BxO/p0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 14:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13459 (0x3493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Validity Not Before: Jun 8 14:16:42 2025 GMT Not After : Jun 15 14:16:42 2025 GMT Subject: CN=68459b4a-11ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e3:c5:87:f1:06:dc:19:35:dc:9f:da:b1:3b: c8:3d:84:8d:a1:b4:d7:43:c9:d0:51:36:e3:74:53: b9:8f:ed:dd:78:b3:c4:ec:58:2b:95:22:94:55:d0: 1c:db:c5:7f:4b:d3:2e:54:3e:53:4e:c0:4a:29:b7: 64:62:c4:25:9a:53:5a:53:b9:64:64:b4:c9:05:f8: 97:3d:af:9f:f8:71:e1:5e:29:b3:a1:bd:d2:8d:57: 95:5d:2e:39:97:32:66:6a:46:f1:83:df:f3:55:e0: 19:a2:37:02:54:bf:e3:c8:59:96:b3:16:77:a7:11: 76:3d:da:19:07:30:c9:07:b4:61:16:07:4b:20:f7: 4b:0b:50:84:4e:49:97:2d:2c:18:5c:29:05:e5:22: ec:24:69:c6:34:15:45:04:35:f9:b9:f8:61:5e:9a: 6d:c4:bf:22:09:bd:3c:99:ac:13:de:18:54:5f:e8: 2f:7a:dd:39:8b:a1:7d:67:e1:fb:22:fd:ce:6b:d9: 3b:75:0f:ef:7f:4c:a1:36:aa:e4:51:6f:06:1e:b1: 52:51:a8:58:8c:89:9a:53:9c:c3:4c:87:be:e9:8b: 62:5e:96:bd:ef:e2:9b:df:17:64:fb:75:e8:fe:e4: cc:f9:54:f2:01:f1:fd:60:d5:ff:34:0d:e8:58:5d: e1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EF:58:68:78:59:71:32:92:AA:31:24:EF:C4:C6:02:57:76:F6:70 X509v3 Authority Key Identifier: keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:1e:67:9c:9c:9f:ca:a9:f9:7e:a6:0c:f5:a7:29:92:4f:39: 01:c9:d6:6c:80:87:68:e1:b7:b0:ae:07:ad:f9:30:7d:63:de: e2:76:08:47:f3:73:c6:12:c5:81:ed:1f:1f:9a:0f:7b:ef:30: 70:92:5f:5f:99:d8:e4:d2:15:a3:57:0f:f4:9b:c8:0b:6b:56: bd:5a:63:0e:89:97:93:4c:97:62:11:23:79:c8:fc:2b:be:df: d4:59:ae:3f:d5:9d:79:68:c1:c9:f2:b0:77:62:71:4d:2c:00: 63:1e:3d:c1:52:5f:be:b4:4f:97:67:71:4c:06:37:33:85:5e: 6c:56:b9:f5:94:ee:33:9b:da:24:99:92:f5:4d:e4:3e:97:38: 9a:1d:69:5c:60:e8:18:1d:a0:8e:86:55:9b:a7:9b:d6:5f:f0: 9f:20:cc:60:5c:d4:36:6e:78:aa:30:62:dd:7a:3d:30:a0:98: 98:d0:e7:8a:db:6a:f4:58:05:78:49:96:eb:1b:88:5d:5e:94: 22:6f:3e:f6:a0:62:0f:a1:52:de:a6:b8:99:4f:34:ba:8d:0e: 67:d6:e6:96:eb:cd:58:09:07:2e:40:bb:74:64:a1:5b:6a:84: b2:13:de:b6:92:cb:fa:33:74:f7:8d:06:85:65:b2:e0:4c:bc: 7d:d9:ce:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDg3OTA2MjUwM0ZEMjA4NDY2Rjc0RUE5QUY4NzY3MEE4 N0Q4NkE3MzYwHhcNMjUwNjA4MTQxNjQyWhcNMjUwNjE1MTQxNjQyWjAYMRYwFAYD VQQDEw02ODQ1OWI0YS0xMWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquPFh/EG3Bk13J/asTvIPYSNobTXQ8nQUTbjdFO5j+3deLPE7FgrlSKUVdAc 28V/S9MuVD5TTsBKKbdkYsQlmlNaU7lkZLTJBfiXPa+f+HHhXimzob3SjVeVXS45 lzJmakbxg9/zVeAZojcCVL/jyFmWsxZ3pxF2PdoZBzDJB7RhFgdLIPdLC1CETkmX LSwYXCkF5SLsJGnGNBVFBDX5ufhhXpptxL8iCb08mawT3hhUX+gvet05i6F9Z+H7 Iv3Oa9k7dQ/vf0yhNqrkUW8GHrFSUahYjImaU5zDTIe+6YtiXpa97+Kb3xdk+3Xo /uTM+VTyAfH9YNX/NA3oWF3hKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHvWGh4 WXEykqoxJO/ExgJXdvZwMB8GA1UdIwQYMBaAFIeQYlA/0ghGb3Tqmvh2cKh9hqc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC84NDZFQzA0MDFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NFWnZkT3FhLUhad3FIMkdw elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2g1QmlVRF9TQ0VadmRPcWEtSFp3cUgyR3B6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC84NDZFQzA0MDFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NF WnZkT3FhLUhad3FIMkdwelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADHmecnJ/Kqfl+pgz1pymSTzkBydZsgIdo4bewrget+TB9Y97idghH 83PGEsWB7R8fmg977zBwkl9fmdjk0hWjVw/0m8gLa1a9WmMOiZeTTJdiESN5yPwr vt/UWa4/1Z15aMHJ8rB3YnFNLABjHj3BUl++tE+XZ3FMBjczhV5sVrn1lO4zm9ok mZL1TeQ+lziaHWlcYOgYHaCOhlWbp5vWX/CfIMxgXNQ2bniqMGLdej0woJiY0OeK 22r0WAV4SZbrG4hdXpQibz72oGIPoVLepriZTzS6jQ5n1uaW681YCQcuQLt0ZKFb aoSyE962ksv6M3T3jQaFZbLgTLx92c5A -----END CERTIFICATE-----Generated at Mon Jun 9 08:29:49 2025 by rpki-client