$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft File: H4-gq_qNf39-fqANVuoBxwky5gc.mft (raw, json) Hash identifier: 8n8mgehQvbPLanHK1KijdXtlYFScU64omjzGVvGiafY= Subject key identifier: 62:4A:DA:6A:C2:C5:E1:22:BE:E1:27:CB:A0:8C:0E:F3:CC:74:87:4D Authority key identifier: 1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 Certificate issuer: /CN=A91BDD82/serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Certificate serial: 0EA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft Manifest number: 0FD2 Signing time: Fri 30 May 2025 17:52:52 +0000 Manifest this update: Fri 30 May 2025 17:52:52 +0000 Manifest next update: Fri 06 Jun 2025 17:52:52 +0000 Files and hashes: 1: H4-gq_qNf39-fqANVuoBxwky5gc.crl (hash: Hm6WKjPExISHqhbZAh4oKIMcGX3WVQ980iRjp9vkVTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3746 (0xea2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Validity Not Before: May 30 17:52:52 2025 GMT Not After : Jun 6 17:52:52 2025 GMT Subject: CN=6839f074-b3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:b6:25:3b:cd:0a:38:10:e6:4d:aa:97:d0: 12:50:92:5c:a0:cb:ab:a7:e7:5a:20:f8:c9:37:57: 8c:49:4e:f7:8d:1e:95:54:7b:05:c1:c5:15:cb:51: a4:84:c6:5e:59:a2:d0:a0:e9:35:da:e8:eb:ef:d8: 2b:ea:51:aa:9f:a9:d4:d8:d5:e0:4e:f8:40:7e:73: 76:79:40:57:74:b8:3e:6a:97:6a:98:a9:cd:70:e9: cf:f8:d5:d6:bb:44:bb:93:90:dd:1c:d1:6d:64:05: 33:62:3c:7c:f5:87:94:42:53:d2:28:47:98:10:05: cc:fe:8f:58:43:5e:80:e9:1f:3e:2b:18:31:f2:15: 49:0a:ef:09:d8:db:4f:ea:c6:8c:fe:a9:b1:05:76: 96:d3:e8:9b:af:ae:58:f5:3b:b6:35:ac:99:9c:81: 9d:36:a4:96:5b:e3:4c:77:d5:68:e8:65:ee:5f:39: fb:f5:34:d0:ec:dc:df:e6:4c:43:72:1e:e9:7c:71: 73:cd:81:77:8f:04:31:1b:7e:70:22:95:8c:df:8e: db:83:14:5c:4e:5f:eb:e9:8d:b6:87:6a:b2:a4:2c: 8b:6f:21:28:a7:5d:c9:d2:59:2f:73:2c:0e:3f:3f: d1:6c:7a:d8:50:11:5b:e9:24:2d:1f:5c:99:08:fc: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4A:DA:6A:C2:C5:E1:22:BE:E1:27:CB:A0:8C:0E:F3:CC:74:87:4D X509v3 Authority Key Identifier: keyid:1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:d9:bd:d7:87:e1:3a:a7:26:dc:cd:e8:bc:c0:4b:67:8f:ff: 0d:c8:41:cc:43:f3:00:8d:91:48:4f:42:8d:a8:6b:49:88:41: 48:e4:7a:f8:e2:5f:d5:df:29:e2:c1:15:5b:66:70:76:1d:6c: e8:34:4f:24:84:65:8d:e4:b1:de:ba:32:c3:c0:00:29:94:be: fa:e4:e6:32:76:56:16:ee:34:da:2a:e5:e0:dd:c1:0c:12:e3: 6e:ec:86:e4:df:ca:78:db:95:0d:18:e5:42:a8:8b:a9:d0:f5: b1:e7:e1:e0:f3:17:e5:45:c5:e0:46:65:3c:cf:34:b5:d2:bb: 99:89:b2:10:b8:91:8d:83:1b:ef:7c:2e:f9:50:49:85:be:b2: 8b:77:f7:70:4c:f9:29:de:86:87:4e:c5:dd:4a:8e:52:ff:86: b2:94:8e:5f:9d:6a:11:63:b2:e2:c5:44:15:0e:a1:1a:26:04: db:52:23:07:5b:8c:22:89:85:75:f8:02:47:ea:6f:44:95:7b: d3:bd:0b:c9:09:80:12:8f:c9:a1:78:4c:6d:69:bd:98:5f:ff: 5b:c0:e3:34:5c:0a:5d:88:ad:ae:75:40:50:45:17:92:f5:c4: 8c:9d:ba:40:5f:3d:6d:c4:56:a5:c6:1c:36:81:31:81:0e:17: 47:59:0b:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKDFGOEZBMEFCRkE4RDdGN0Y3RTdFQTAwRDU2RUEwMUM3 MDkzMkU2MDcwHhcNMjUwNTMwMTc1MjUyWhcNMjUwNjA2MTc1MjUyWjAYMRYwFAYD VQQDEw02ODM5ZjA3NC1iM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7u2JTvNCjgQ5k2ql9ASUJJcoMurp+daIPjJN1eMSU73jR6VVHsFwcUVy1Gk hMZeWaLQoOk12ujr79gr6lGqn6nU2NXgTvhAfnN2eUBXdLg+apdqmKnNcOnP+NXW u0S7k5DdHNFtZAUzYjx89YeUQlPSKEeYEAXM/o9YQ16A6R8+Kxgx8hVJCu8J2NtP 6saM/qmxBXaW0+ibr65Y9Tu2NayZnIGdNqSWW+NMd9Vo6GXuXzn79TTQ7Nzf5kxD ch7pfHFzzYF3jwQxG35wIpWM347bgxRcTl/r6Y22h2qypCyLbyEop13J0lkvcywO Pz/RbHrYUBFb6SQtH1yZCPyA+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJK2mrC xeEivuEny6CMDvPMdIdNMB8GA1UdIwQYMBaAFB+PoKv6jX9/fn6gDVbqAccJMuYH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYzOS1mcUFOVnVvQnh3a3k1 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g0LWdxX3FOZjM5LWZxQU5WdW9CeHdreTVnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYz OS1mcUFOVnVvQnh3a3k1Z2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW2b3Xh+E6pybczei8wEtnj/8NyEHMQ/MAjZFIT0KNqGtJiEFI5Hr4 4l/V3yniwRVbZnB2HWzoNE8khGWN5LHeujLDwAAplL765OYydlYW7jTaKuXg3cEM EuNu7Ibk38p425UNGOVCqIup0PWx5+Hg8xflRcXgRmU8zzS10ruZibIQuJGNgxvv fC75UEmFvrKLd/dwTPkp3oaHTsXdSo5S/4aylI5fnWoRY7LixUQVDqEaJgTbUiMH W4wiiYV1+AJH6m9ElXvTvQvJCYASj8mheExtab2YX/9bwOM0XApdiK2udUBQRReS 9cSMnbpAXz1txFalxhw2gTGBDhdHWQvi -----END CERTIFICATE-----Generated at Sat May 31 17:04:54 2025 by rpki-client