$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft File: h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft (raw, json) Hash identifier: S7K8cpWboLU5JonHgwDakBSKL5v+RIC2j6j0KkTB3H4= Subject key identifier: 24:80:06:6D:ED:4C:2E:29:A9:F9:03:9E:D7:69:F5:46:86:E8:48:9B Authority key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 Certificate issuer: /CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft Manifest number: 88 Signing time: Tue 01 Jul 2025 07:15:32 +0000 Manifest this update: Tue 01 Jul 2025 07:15:31 +0000 Manifest next update: Tue 08 Jul 2025 07:15:31 +0000 Files and hashes: 1: h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl (hash: KToewcJ2PEkiyCkRNUB6eXSsSnUcvn+I5AYUApx4CoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7, serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Validity Not Before: Jul 1 07:15:31 2025 GMT Not After : Jul 8 07:15:31 2025 GMT Subject: CN=68638b14-1332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7f:4a:51:b6:54:8f:d6:3c:47:81:1d:8a:f4: fc:87:24:70:da:07:f4:97:1c:4e:15:07:ea:c2:17: 0d:dd:8f:6f:3b:e7:a2:ec:c9:c8:b8:c7:46:84:0b: 2b:cb:0c:63:c8:c5:cb:ad:df:bd:98:fc:43:cc:7a: 55:bd:62:e8:64:15:63:54:e3:17:1e:a9:4d:43:5a: 6c:74:fc:3e:f9:a5:03:3d:1f:af:91:2e:81:5c:c1: 1b:c7:6f:a4:a1:51:1d:48:97:73:9c:9d:49:a3:d4: fd:89:f7:8b:16:b4:01:0c:f9:97:d5:8e:22:fa:15: fa:f9:97:de:b9:85:84:e3:cc:85:bf:f0:0b:0f:03: 23:74:0f:11:a5:fe:01:c3:68:6e:bb:1a:61:cf:80: 5c:d5:45:25:ee:93:b2:04:d9:77:85:80:99:0a:8e: 7e:29:73:c4:5a:7b:f8:5b:25:1a:21:4c:db:c0:ef: 30:0a:b9:14:42:27:f7:dd:63:98:c9:6c:44:60:c8: 7f:5d:d6:f6:82:9f:dc:f2:b0:b7:d8:55:6e:fd:8f: f8:0c:42:2b:d5:46:37:6d:d4:c5:04:c6:d3:a5:34: 1f:ad:1e:64:25:7a:4d:ce:84:58:53:5d:32:00:80: 9e:c7:80:0c:6f:b0:a9:89:57:9d:d8:49:b3:64:b7: 6a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:80:06:6D:ED:4C:2E:29:A9:F9:03:9E:D7:69:F5:46:86:E8:48:9B X509v3 Authority Key Identifier: keyid:87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:06:ab:00:b7:84:3f:f4:9e:d0:d6:68:5f:5b:0a:b0:c2:f0: c0:a2:f5:0b:a5:02:85:cb:37:1e:d8:27:33:a2:f1:b7:91:35: 4f:2a:e2:f5:0a:2b:6f:a8:8e:ab:f7:d1:d0:ca:6a:74:22:ce: e6:f6:2b:43:88:84:7f:90:94:64:31:51:2f:66:fa:69:83:c5: d0:d2:bb:2c:87:23:b9:99:3a:8f:28:2a:1d:d9:16:83:e2:41: ac:99:32:45:16:55:05:80:93:78:e5:06:e7:bd:38:b2:84:42: 87:b2:28:e3:e3:d1:a2:f9:d5:dd:fe:f1:44:18:85:71:cd:33: c8:38:22:72:59:e9:d4:e4:52:3a:3b:c5:04:af:ce:46:79:3e: 19:c1:07:f4:84:ee:e4:fe:00:a6:f4:f8:d4:1a:e8:79:76:9e: 4a:d2:19:6e:a7:ae:7a:b4:36:bb:83:f1:51:5e:f6:e5:09:24: 67:f5:4c:4b:30:97:a6:c4:d5:2f:1e:6b:26:35:7c:cd:01:92: a6:50:41:b7:ec:61:66:a2:6f:89:2a:50:55:08:4f:cb:cd:52: 75:fa:a3:bd:e6:79:4d:de:45:d0:96:d3:83:81:35:b1:35:47: 39:17:65:72:a8:78:46:65:e8:07:8a:cd:a3:96:01:90:f0:e1: 2f:08:f9:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE0RjcxMTAvBgNVBAUTKDg3OTJERTM5OUNGNjMxOTNEREMyOUQzMEZCRjBBNTgx RTAyNEYwMDMwHhcNMjUwNzAxMDcxNTMxWhcNMjUwNzA4MDcxNTMxWjAYMRYwFAYD VQQDEw02ODYzOGIxNC0xMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxn9KUbZUj9Y8R4EdivT8hyRw2gf0lxxOFQfqwhcN3Y9vO+ei7MnIuMdGhAsr ywxjyMXLrd+9mPxDzHpVvWLoZBVjVOMXHqlNQ1psdPw++aUDPR+vkS6BXMEbx2+k oVEdSJdznJ1Jo9T9ifeLFrQBDPmX1Y4i+hX6+ZfeuYWE48yFv/ALDwMjdA8Rpf4B w2huuxphz4Bc1UUl7pOyBNl3hYCZCo5+KXPEWnv4WyUaIUzbwO8wCrkUQif33WOY yWxEYMh/Xdb2gp/c8rC32FVu/Y/4DEIr1UY3bdTFBMbTpTQfrR5kJXpNzoRYU10y AICex4AMb7CpiVed2EmzZLdqpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSABm3t TC4pqfkDntdp9UaG6EibMB8GA1UdIwQYMBaAFIeS3jmc9jGT3cKdMPvwpYHgJPAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTRGNy9BM0RENkI5QTg1 RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi9oNUxlT1p6Mk1aUGR3cDB3LV9DbGdlQWs4 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g1TGVPWnoyTVpQZHdwMHctX0NsZ2VBazhBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTRGNy9BM0RENkI5QTg1RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi9oNUxlT1p6Mk1a UGR3cDB3LV9DbGdlQWs4QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIBqsAt4Q/9J7Q1mhfWwqwwvDAovULpQKFyzce2CczovG3kTVPKuL1 CitvqI6r99HQymp0Is7m9itDiIR/kJRkMVEvZvppg8XQ0rsshyO5mTqPKCod2RaD 4kGsmTJFFlUFgJN45QbnvTiyhEKHsijj49Gi+dXd/vFEGIVxzTPIOCJyWenU5FI6 O8UEr85GeT4ZwQf0hO7k/gCm9PjUGuh5dp5K0hlup656tDa7g/FRXvblCSRn9UxL MJemxNUvHmsmNXzNAZKmUEG37GFmom+JKlBVCE/LzVJ1+qO95nlN3kXQltODgTWx NUc5F2VyqHhGZegHis2jlgGQ8OEvCPmi -----END CERTIFICATE-----Generated at Thu Jul 3 00:53:07 2025 by rpki-client