$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft File: HAF157M3En5uwlH0Og0qxhMRv04.mft (raw, json) Hash identifier: pUBwNRi5Bu9CrfcWYH05wZTi4zZ2wbaNbf9Do/EzfdA= Subject key identifier: 87:3A:D2:11:A7:C5:CB:43:F0:2E:7A:C3:CE:C1:46:9C:C5:FE:58:F3 Authority key identifier: 1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E Certificate issuer: /CN=A91E3584/serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E Certificate serial: 3486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft Manifest number: 3483 Signing time: Sat 31 May 2025 14:25:57 +0000 Manifest this update: Sat 31 May 2025 14:25:57 +0000 Manifest next update: Sat 07 Jun 2025 14:25:57 +0000 Files and hashes: 1: HAF157M3En5uwlH0Og0qxhMRv04.crl (hash: 70P4OK8OiOrJWzVuoSBeRLRxvwA6M8UfI8g+8JU1pBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13446 (0x3486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3584, serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E Validity Not Before: May 31 14:25:57 2025 GMT Not After : Jun 7 14:25:57 2025 GMT Subject: CN=683b1175-1801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:27:51:f9:aa:38:90:43:20:33:39:50:8e: 93:3f:b8:6d:6b:92:b9:e5:d7:eb:a9:4c:1f:5d:e4: f8:39:3a:08:20:84:88:31:f2:e1:a3:89:55:19:37: c8:8a:00:b0:fc:0c:f7:f8:bc:42:b1:67:5b:23:9e: 65:05:a7:aa:8a:ce:54:6c:ca:b9:96:b2:c6:4e:fd: 08:80:77:ba:92:22:c6:85:9d:ad:81:26:e9:0d:b5: 62:85:02:33:47:f4:22:20:6a:b1:a0:f3:dc:80:0e: 71:ca:a4:ff:6d:74:69:89:a0:8e:dd:13:89:d8:5b: 85:a6:bb:e2:14:5e:69:6f:99:ca:90:17:af:c8:d2: 44:e9:68:34:b2:0f:0c:db:96:72:68:1e:12:c4:61: 97:c6:ef:13:4a:59:73:68:96:d1:3f:c9:f9:ad:47: ce:07:30:06:87:60:18:e1:77:f8:3e:4b:02:54:5a: e8:f0:5f:63:24:57:e7:f2:7c:72:86:1b:92:e5:ff: f9:6d:b2:2c:b5:15:40:23:d8:6a:6f:bf:9d:4e:fc: 08:f5:e0:cf:f4:b7:22:de:3a:3d:05:ff:fb:6a:a5: e4:63:8d:fb:03:45:ae:55:e2:ed:92:cc:e6:d7:9f: 9d:c0:75:24:53:10:ae:95:cb:2f:02:0f:c6:cf:67: 0c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3A:D2:11:A7:C5:CB:43:F0:2E:7A:C3:CE:C1:46:9C:C5:FE:58:F3 X509v3 Authority Key Identifier: keyid:1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:83:cf:7c:21:24:62:45:99:da:eb:2d:ee:81:04:b6:7c:96: 6a:2f:58:15:88:73:59:ab:2f:4c:26:9a:cc:5f:15:d5:a5:71: e2:e3:08:29:ad:4e:8d:14:43:c4:ba:d6:56:dd:fb:eb:1d:67: 6a:89:09:24:f0:05:15:26:75:25:6d:48:e0:d3:ac:40:22:53: ae:eb:99:bc:69:d6:d6:65:de:04:f3:a6:7a:7b:52:4b:41:4e: 74:cf:27:51:24:04:05:3e:90:d3:69:37:a3:98:0a:8a:91:86: 07:1b:a7:1b:bd:af:44:15:1d:92:f8:b2:89:9d:7d:b7:31:ae: 28:7d:90:52:23:ca:34:72:06:8f:13:d1:65:20:1e:23:b4:a7: 90:52:c5:53:00:61:10:f1:93:5f:a3:87:a1:a1:2c:55:07:8a: f5:34:22:88:e8:92:ce:9c:4b:81:03:15:3e:14:4e:d1:4f:96: 67:28:36:7c:e9:c6:f5:39:bb:d0:7f:c3:b3:28:76:ed:72:ce: c8:eb:6a:33:13:3e:f5:0c:97:02:ad:c7:5e:d2:f1:cb:ae:06: a6:2d:a1:8b:fd:21:57:6f:e1:d1:5e:c6:2e:78:03:a5:55:d4: 80:e6:92:f2:e0:f1:e8:8f:4e:3d:de:94:17:a5:7e:46:7f:bb: 0a:53:ce:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM1ODQxMTAvBgNVBAUTKDFDMDE3NUU3QjMzNzEyN0U2RUMyNTFGNDNBMEQyQUM2 MTMxMUJGNEUwHhcNMjUwNTMxMTQyNTU3WhcNMjUwNjA3MTQyNTU3WjAYMRYwFAYD VQQDEw02ODNiMTE3NS0xODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwu0nUfmqOJBDIDM5UI6TP7hta5K55dfrqUwfXeT4OToIIISIMfLho4lVGTfI igCw/Az3+LxCsWdbI55lBaeqis5UbMq5lrLGTv0IgHe6kiLGhZ2tgSbpDbVihQIz R/QiIGqxoPPcgA5xyqT/bXRpiaCO3ROJ2FuFprviFF5pb5nKkBevyNJE6Wg0sg8M 25ZyaB4SxGGXxu8TSllzaJbRP8n5rUfOBzAGh2AY4Xf4PksCVFro8F9jJFfn8nxy hhuS5f/5bbIstRVAI9hqb7+dTvwI9eDP9Lci3jo9Bf/7aqXkY437A0WuVeLtkszm 15+dwHUkUxCulcsvAg/Gz2cM0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIc60hGn xctD8C56w87BRpzF/ljzMB8GA1UdIwQYMBaAFBwBdeezNxJ+bsJR9DoNKsYTEb9O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzU4NC9EMUExMjk0NjFE ODUxMUUyQkI0RkE0REMwOEIwMkNEMi9IQUYxNTdNM0VuNXV3bEgwT2cwcXhoTVJ2 MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBRjE1N00zRW41dXdsSDBPZzBxeGhNUnYwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzU4NC9EMUExMjk0NjFEODUxMUUyQkI0RkE0REMwOEIwMkNEMi9IQUYxNTdNM0Vu NXV3bEgwT2cwcXhoTVJ2MDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6g898ISRiRZna6y3ugQS2fJZqL1gViHNZqy9MJprMXxXVpXHi4wgp rU6NFEPEutZW3fvrHWdqiQkk8AUVJnUlbUjg06xAIlOu65m8adbWZd4E86Z6e1JL QU50zydRJAQFPpDTaTejmAqKkYYHG6cbva9EFR2S+LKJnX23Ma4ofZBSI8o0cgaP E9FlIB4jtKeQUsVTAGEQ8ZNfo4ehoSxVB4r1NCKI6JLOnEuBAxU+FE7RT5ZnKDZ8 6cb1ObvQf8OzKHbtcs7I62ozEz71DJcCrcde0vHLrgamLaGL/SFXb+HRXsYueAOl VdSA5pLy4PHoj0493pQXpX5Gf7sKU86W -----END CERTIFICATE-----Generated at Sat May 31 16:28:45 2025 by rpki-client