$ rpki-client -vvf rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft File: hav4SAyQlji9zKZTrx5pD1crI-E.mft (raw, json) Hash identifier: tVcb3XRMpUFp4MaSF6QP81unIyy/oY3PpoYtc3z+Bk4= Subject key identifier: 7A:CA:C8:E7:39:9B:4A:81:C4:A1:C2:E0:93:E7:F0:DB:F5:52:4B:41 Authority key identifier: 85:AB:F8:48:0C:90:96:38:BD:CC:A6:53:AF:1E:69:0F:57:2B:23:E1 Certificate issuer: /CN=A91A03CB/serialNumber=85ABF8480C909638BDCCA653AF1E690F572B23E1 Certificate serial: 349C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft Manifest number: 3493 Signing time: Fri 30 May 2025 14:53:45 +0000 Manifest this update: Fri 30 May 2025 14:53:45 +0000 Manifest next update: Fri 06 Jun 2025 14:53:45 +0000 Files and hashes: 1: hav4SAyQlji9zKZTrx5pD1crI-E.crl (hash: QgOiSgpbjyE7vtjXtjefQJ2xVH0eoa948CvR9OH/5ik=) 2: ABF3C76E0C4B11EF87D4886FC4F9AE02.roa (hash: 4D8Gd5fcPnmWPe8Yaf2DxYR0OtX+KheAxOMoPi97yp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.crl rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13468 (0x349c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A03CB, serialNumber=85ABF8480C909638BDCCA653AF1E690F572B23E1 Validity Not Before: May 30 14:53:45 2025 GMT Not After : Jun 6 14:53:45 2025 GMT Subject: CN=6839c679-48fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:2f:c4:38:7e:d1:7f:00:84:9d:a5:b4:47: 17:04:69:f8:84:4b:f5:2a:22:b0:c0:49:cc:2a:08: 9e:1a:44:d8:bb:f4:0d:bd:76:f1:93:15:8f:20:67: d4:bd:7a:bb:02:35:95:76:4b:90:56:1d:04:97:6e: 6d:02:28:08:08:81:9d:04:9f:b9:48:26:24:88:ea: 28:f3:0d:6d:28:4e:e4:d6:26:5c:47:32:66:00:93: 6e:32:46:aa:f9:9d:6b:27:e2:9e:ed:21:a1:e6:ae: 40:bd:9b:dc:d1:21:57:2d:82:8f:e3:59:a0:0b:e6: 2d:70:a2:50:b3:0c:4b:1d:aa:d5:41:17:1b:63:69: d7:b4:24:05:46:b1:e9:3c:e2:a2:7f:72:07:b3:c7: ec:80:b7:33:a8:80:1b:e7:a2:19:01:91:9f:b4:54: ed:a6:a9:19:05:c5:31:74:cd:76:0e:b1:b6:b8:e6: a9:63:c8:8c:a9:c3:59:3f:2f:c0:70:3b:63:93:09: 93:81:61:a6:e7:f4:66:11:a2:43:7f:2d:c6:b5:97: b5:49:89:84:00:be:19:0d:ad:71:6b:31:7c:03:84: 56:5d:3b:1f:3a:c8:86:62:4c:e8:cd:19:6f:a1:9c: 59:f0:07:18:6f:62:70:49:cd:a3:6f:4e:fb:c9:93: de:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CA:C8:E7:39:9B:4A:81:C4:A1:C2:E0:93:E7:F0:DB:F5:52:4B:41 X509v3 Authority Key Identifier: keyid:85:AB:F8:48:0C:90:96:38:BD:CC:A6:53:AF:1E:69:0F:57:2B:23:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:3a:81:0d:9f:e1:7f:d3:66:4e:90:12:e4:18:2a:16:c8:74: 71:db:a9:76:f6:d4:19:a7:cf:ee:70:97:3f:91:12:75:38:07: fc:4a:48:35:9d:6c:f8:83:af:48:80:50:86:33:d7:69:99:a0: 8b:cc:8c:49:d9:6a:0b:46:79:44:f2:11:33:c1:a2:c8:ca:5e: 2f:95:99:ba:26:53:a8:d3:fd:de:1e:7b:13:89:4f:c7:dd:4e: e1:39:7f:44:87:b4:8e:1c:56:7a:64:21:5e:36:36:a0:bc:a6: 93:af:57:6c:5f:16:99:47:7a:6a:6a:ac:4a:d8:16:15:c5:22: bb:46:2c:f7:13:b8:69:c6:2d:48:2c:b5:80:06:9b:70:d7:b8: 62:fe:03:f3:da:43:96:51:02:3b:ae:a0:08:88:b7:ca:c4:01: cf:28:24:25:2b:a6:c2:a5:fa:84:b1:a1:f4:6a:6b:00:34:7a: ad:28:2a:8f:a3:76:f6:4c:e6:af:f5:64:07:b4:bb:f8:a1:53: 78:36:09:4a:a2:a4:42:b9:87:c2:5c:6b:8d:7b:72:a6:01:2a: a9:ba:25:04:21:49:62:73:7c:ce:97:12:fd:a2:db:cb:48:fd: 40:96:e3:b4:9c:d5:50:b8:54:6d:e5:29:0e:a1:33:df:3c:e9: 4c:69:5b:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAzQ0IxMTAvBgNVBAUTKDg1QUJGODQ4MEM5MDk2MzhCRENDQTY1M0FGMUU2OTBG NTcyQjIzRTEwHhcNMjUwNTMwMTQ1MzQ1WhcNMjUwNjA2MTQ1MzQ1WjAYMRYwFAYD VQQDEw02ODM5YzY3OS00OGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApscvxDh+0X8AhJ2ltEcXBGn4hEv1KiKwwEnMKgieGkTYu/QNvXbxkxWPIGfU vXq7AjWVdkuQVh0El25tAigICIGdBJ+5SCYkiOoo8w1tKE7k1iZcRzJmAJNuMkaq +Z1rJ+Ke7SGh5q5AvZvc0SFXLYKP41mgC+YtcKJQswxLHarVQRcbY2nXtCQFRrHp POKif3IHs8fsgLczqIAb56IZAZGftFTtpqkZBcUxdM12DrG2uOapY8iMqcNZPy/A cDtjkwmTgWGm5/RmEaJDfy3GtZe1SYmEAL4ZDa1xazF8A4RWXTsfOsiGYkzozRlv oZxZ8AcYb2JwSc2jb077yZPe4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrKyOc5 m0qBxKHC4JPn8Nv1UktBMB8GA1UdIwQYMBaAFIWr+EgMkJY4vcymU68eaQ9XKyPh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDNDQi84MUQ5RTRBMDFE OTYxMUUyQUFDMjE0N0YwOEIwMkNEMi9oYXY0U0F5UWxqaTl6S1pUcng1cEQxY3JJ LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhdjRTQXlRbGppOXpLWlRyeDVwRDFjckktRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDNDQi84MUQ5RTRBMDFEOTYxMUUyQUFDMjE0N0YwOEIwMkNEMi9oYXY0U0F5UWxq aTl6S1pUcng1cEQxY3JJLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXOoENn+F/02ZOkBLkGCoWyHRx26l29tQZp8/ucJc/kRJ1OAf8Skg1 nWz4g69IgFCGM9dpmaCLzIxJ2WoLRnlE8hEzwaLIyl4vlZm6JlOo0/3eHnsTiU/H 3U7hOX9Eh7SOHFZ6ZCFeNjagvKaTr1dsXxaZR3pqaqxK2BYVxSK7Riz3E7hpxi1I LLWABptw17hi/gPz2kOWUQI7rqAIiLfKxAHPKCQlK6bCpfqEsaH0amsANHqtKCqP o3b2TOav9WQHtLv4oVN4NglKoqRCuYfCXGuNe3KmASqpuiUEIUlic3zOlxL9otvL SP1AluO0nNVQuFRt5SkOoTPfPOlMaVs9 -----END CERTIFICATE-----Generated at Sat May 31 17:11:22 2025 by rpki-client