$ rpki-client -vvf rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft File: hav4SAyQlji9zKZTrx5pD1crI-E.mft (raw, json) Hash identifier: QUkrRIC1wXa4FpNPlL4gksmL5CuXdMGcGWqpaF54Vzk= Subject key identifier: 02:ED:6F:45:43:53:D4:A0:04:76:7A:D1:1F:CB:61:B1:C3:76:59:17 Authority key identifier: 85:AB:F8:48:0C:90:96:38:BD:CC:A6:53:AF:1E:69:0F:57:2B:23:E1 Certificate issuer: /CN=A91A03CB/serialNumber=85ABF8480C909638BDCCA653AF1E690F572B23E1 Certificate serial: 34C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft Manifest number: 34BD Signing time: Wed 20 Aug 2025 14:50:57 +0000 Manifest this update: Wed 20 Aug 2025 14:50:56 +0000 Manifest next update: Wed 27 Aug 2025 14:50:56 +0000 Files and hashes: 1: hav4SAyQlji9zKZTrx5pD1crI-E.crl (hash: BuUh9MA1t5ddkSKE4Nsm+IrGjnd5lfm5QVutk4nhe2w=) 2: ABF3C76E0C4B11EF87D4886FC4F9AE02.roa (hash: 4D8Gd5fcPnmWPe8Yaf2DxYR0OtX+KheAxOMoPi97yp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.crl rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 14:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13510 (0x34c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A03CB, serialNumber=85ABF8480C909638BDCCA653AF1E690F572B23E1 Validity Not Before: Aug 20 14:50:56 2025 GMT Not After : Aug 27 14:50:56 2025 GMT Subject: CN=68a5e0d1-6742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:b8:95:b9:d7:84:41:ea:82:a4:d0:43:95: 9c:5c:5a:72:e9:85:6c:8b:22:0d:48:30:b3:c8:62: 54:d6:d7:1b:35:96:84:6d:df:5d:d9:4b:be:ed:b2: c6:4b:84:f8:94:dc:13:78:d3:a2:e1:c5:fd:b6:ee: aa:90:24:8b:9d:18:e4:38:41:2f:99:9f:90:ca:23: 3c:d9:20:35:40:e8:19:63:04:f2:52:ef:b3:a6:96: 59:dc:4e:1e:39:02:35:82:8a:7a:39:97:53:b9:5f: e8:e1:58:bc:1d:20:e7:19:b1:50:8e:f1:f2:13:85: da:ff:47:60:64:c8:3c:58:ed:18:8f:ae:bb:5e:8d: 24:c6:2c:a4:94:12:e7:95:be:94:76:2f:f4:80:24: f3:f2:dc:fa:46:25:95:53:f4:a6:2f:54:2e:ef:3a: 33:d4:15:74:56:a0:28:40:92:5d:73:19:07:6c:06: 81:5f:a7:14:aa:cd:e5:7a:59:40:50:d1:ab:57:88: e8:30:8d:e6:65:06:bf:62:e9:b5:48:13:a1:e4:fc: 43:7b:8e:b2:4a:38:22:bc:b3:67:cb:64:90:58:9b: a4:8d:a3:4c:c0:20:08:e9:56:75:60:cc:f5:da:a2: e2:52:00:c8:d3:8b:7d:3e:1d:f1:f5:b0:ed:b1:ce: 6a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:ED:6F:45:43:53:D4:A0:04:76:7A:D1:1F:CB:61:B1:C3:76:59:17 X509v3 Authority Key Identifier: keyid:85:AB:F8:48:0C:90:96:38:BD:CC:A6:53:AF:1E:69:0F:57:2B:23:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:1e:15:49:be:a1:a2:53:4d:97:8d:9d:c4:13:92:8f:d8:7c: b4:f7:08:85:b6:47:eb:ef:1e:2e:7b:32:88:a7:12:31:7b:98: ef:fb:bc:9a:f3:33:fd:1c:b8:3b:c5:c0:b7:3b:16:77:14:7f: 0e:46:6f:61:57:f1:3d:69:a5:62:2d:52:7e:c0:f6:ef:a1:c5: 60:84:29:1b:22:79:79:7b:1e:50:b6:2e:ab:d8:72:29:2c:81: a0:e1:25:ee:5c:90:4e:d1:73:8c:5f:5d:24:91:7c:52:1a:f3: 4c:47:20:8d:48:b4:7b:f8:1d:77:96:ac:31:5a:5f:b7:eb:cb: 3b:a6:a4:1c:12:6e:6b:2b:a1:8d:6a:75:b2:95:a2:cb:ed:76: c5:fd:c1:ca:94:67:e6:03:bf:02:dd:9c:e2:86:06:d7:9a:c5: 0a:db:34:c8:b1:26:9e:b2:76:89:1d:bf:ee:c0:ac:c7:47:a3: 0f:cc:97:14:fe:78:36:44:b1:24:6f:47:b0:c8:28:38:12:55: 69:4f:d5:41:4f:24:31:14:40:dc:7e:30:30:21:92:eb:16:fe: 73:9d:24:50:b8:08:f5:4b:d1:46:6c:fb:c6:37:29:c1:c3:df: b2:0f:16:bf:41:78:3e:19:7a:0b:12:a8:03:90:f9:42:ad:0e: b3:dc:8a:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAzQ0IxMTAvBgNVBAUTKDg1QUJGODQ4MEM5MDk2MzhCRENDQTY1M0FGMUU2OTBG NTcyQjIzRTEwHhcNMjUwODIwMTQ1MDU2WhcNMjUwODI3MTQ1MDU2WjAYMRYwFAYD VQQDEw02OGE1ZTBkMS02NzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMa4lbnXhEHqgqTQQ5WcXFpy6YVsiyINSDCzyGJU1tcbNZaEbd9d2Uu+7bLG S4T4lNwTeNOi4cX9tu6qkCSLnRjkOEEvmZ+QyiM82SA1QOgZYwTyUu+zppZZ3E4e OQI1gop6OZdTuV/o4Vi8HSDnGbFQjvHyE4Xa/0dgZMg8WO0Yj667Xo0kxiyklBLn lb6Udi/0gCTz8tz6RiWVU/SmL1Qu7zoz1BV0VqAoQJJdcxkHbAaBX6cUqs3lellA UNGrV4joMI3mZQa/Yum1SBOh5PxDe46ySjgivLNny2SQWJukjaNMwCAI6VZ1YMz1 2qLiUgDI04t9Ph3x9bDtsc5q0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALtb0VD U9SgBHZ60R/LYbHDdlkXMB8GA1UdIwQYMBaAFIWr+EgMkJY4vcymU68eaQ9XKyPh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDNDQi84MUQ5RTRBMDFE OTYxMUUyQUFDMjE0N0YwOEIwMkNEMi9oYXY0U0F5UWxqaTl6S1pUcng1cEQxY3JJ LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhdjRTQXlRbGppOXpLWlRyeDVwRDFjckktRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDNDQi84MUQ5RTRBMDFEOTYxMUUyQUFDMjE0N0YwOEIwMkNEMi9oYXY0U0F5UWxq aTl6S1pUcng1cEQxY3JJLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASHhVJvqGiU02XjZ3EE5KP2Hy09wiFtkfr7x4uezKIpxIxe5jv+7ya 8zP9HLg7xcC3OxZ3FH8ORm9hV/E9aaViLVJ+wPbvocVghCkbInl5ex5Qti6r2HIp LIGg4SXuXJBO0XOMX10kkXxSGvNMRyCNSLR7+B13lqwxWl+368s7pqQcEm5rK6GN anWylaLL7XbF/cHKlGfmA78C3ZzihgbXmsUK2zTIsSaesnaJHb/uwKzHR6MPzJcU /ng2RLEkb0ewyCg4ElVpT9VBTyQxFEDcfjAwIZLrFv5znSRQuAj1S9FGbPvGNynB w9+yDxa/QXg+GXoLEqgDkPlCrQ6z3IrF -----END CERTIFICATE-----Generated at Fri Aug 22 16:30:41 2025 by rpki-client