$ rpki-client -vvf rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft File: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft (raw, json) Hash identifier: e5GtcZCxgaxqtsyhSHQplzAPlsGvvI4eupGNJv/RVXA= Subject key identifier: F0:49:D0:CF:12:3C:62:27:D3:B9:FB:DD:04:4D:B6:5C:AB:A8:C0:AD Authority key identifier: 1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 Certificate issuer: /CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Certificate serial: 06CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft Manifest number: 06CC Signing time: Mon 30 Jun 2025 22:21:29 +0000 Manifest this update: Mon 30 Jun 2025 22:21:28 +0000 Manifest next update: Mon 07 Jul 2025 22:21:28 +0000 Files and hashes: 1: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl (hash: Jt/wnigiMcuQxkLrKuMNDpmSQO3CcN/rUsTiJPPhnh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C52D, serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Validity Not Before: Jun 30 22:21:28 2025 GMT Not After : Jul 7 22:21:28 2025 GMT Subject: CN=68630de9-3d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d7:3b:25:52:c1:88:1d:76:d6:13:8b:59:5c: 5a:38:5d:0d:24:d8:e4:bc:85:45:fe:64:4c:1d:59: 40:ac:2a:9b:c7:3f:a2:d0:15:6d:d8:45:fb:a4:a3: b1:69:22:ce:fb:72:56:db:a0:72:76:ce:12:4a:13: c5:af:3c:01:1e:f1:30:c3:82:c4:5b:90:0f:eb:02: 49:3a:f7:3e:05:b7:c4:ff:15:1f:c7:59:6c:a0:00: 07:be:7d:94:8f:30:44:a3:6f:ec:b0:92:e9:aa:23: 91:56:9f:94:4a:80:99:32:ab:71:1e:b0:f2:98:12: 36:6a:6d:42:6a:28:b8:f0:4e:65:c7:e7:63:64:34: de:d8:fb:8f:d3:74:3f:05:00:95:b9:9f:17:1e:1b: d8:d3:44:95:b6:65:a5:5c:f2:4d:ef:56:67:97:64: 45:a7:63:c2:6d:e1:a8:d8:bc:75:c3:d2:60:da:09: 1c:42:cc:15:2a:e2:ed:57:89:e8:14:ed:1b:75:2f: 46:37:fe:d9:ee:43:21:fc:01:f0:0a:a1:46:f9:c2: ef:5e:35:18:47:bc:c3:f9:f3:be:dd:e8:8a:69:31: 16:d5:09:c0:37:f9:37:57:f0:4e:98:1a:0f:49:d2: c5:d2:be:69:62:31:52:6e:56:1a:09:09:16:5f:47: ce:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:49:D0:CF:12:3C:62:27:D3:B9:FB:DD:04:4D:B6:5C:AB:A8:C0:AD X509v3 Authority Key Identifier: keyid:1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:bc:b1:9e:97:16:39:86:0c:e7:ff:46:21:bf:47:b1:79:96: 13:ce:04:8b:83:50:a2:5f:55:1d:89:1f:07:12:90:af:cf:34: 5f:d3:23:36:90:03:71:a2:1c:52:94:16:89:3b:a0:24:57:73: 7e:c8:40:a6:94:eb:03:b4:be:ac:7a:34:1c:87:ff:12:14:ec: 33:23:89:9a:40:ae:f6:8b:8e:5d:82:34:44:eb:ff:3f:d8:f2: a4:20:aa:08:03:24:48:c9:eb:2e:4e:a0:60:65:66:1a:59:67: dc:0b:c8:7e:93:28:e1:ef:fc:34:71:73:e9:ad:f3:aa:93:31: e8:91:88:37:a6:8b:80:10:b3:39:89:28:6e:b0:80:02:43:e8: 2f:0f:8a:7c:c2:48:c6:cd:64:aa:7b:4c:80:ee:4d:67:1a:db: 93:20:24:b4:af:f0:84:95:03:e6:75:5c:b1:6a:93:6a:20:56: d7:ce:55:b8:cd:2b:1a:70:9d:82:b4:f4:a9:93:b6:0e:bd:40: 3c:47:14:45:96:ac:ce:41:e3:e3:f5:3a:41:84:6b:0e:60:9c: ed:99:59:f4:e2:a4:28:39:09:f9:a8:7d:b5:e7:29:c9:4c:4a: 72:23:34:2a:41:f8:0c:f4:2e:ba:2b:2d:f6:31:d0:06:ef:a5: 94:16:16:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M1MkQxMTAvBgNVBAUTKDFEM0E5QThGQzk3Q0ZDRDdBRTg0RkZEQzVBQTBCQkZC OTY5M0RDOTcwHhcNMjUwNjMwMjIyMTI4WhcNMjUwNzA3MjIyMTI4WjAYMRYwFAYD VQQDEw02ODYzMGRlOS0zZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dc7JVLBiB121hOLWVxaOF0NJNjkvIVF/mRMHVlArCqbxz+i0BVt2EX7pKOx aSLO+3JW26Byds4SShPFrzwBHvEww4LEW5AP6wJJOvc+BbfE/xUfx1lsoAAHvn2U jzBEo2/ssJLpqiORVp+USoCZMqtxHrDymBI2am1Caii48E5lx+djZDTe2PuP03Q/ BQCVuZ8XHhvY00SVtmWlXPJN71Znl2RFp2PCbeGo2Lx1w9Jg2gkcQswVKuLtV4no FO0bdS9GN/7Z7kMh/AHwCqFG+cLvXjUYR7zD+fO+3eiKaTEW1QnAN/k3V/BOmBoP SdLF0r5pYjFSblYaCQkWX0fOeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBJ0M8S PGIn07n73QRNtlyrqMCtMB8GA1UdIwQYMBaAFB06mo/JfPzXroT/3Fqgu/uWk9yX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzUyRC84RkE5NzZCRTVC QjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9OZXVoUF9jV3FDNy01YVQz SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUcWFqOGw4X05ldWhQX2NXcUM3LTVhVDNKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzUyRC84RkE5NzZCRTVCQjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9O ZXVoUF9jV3FDNy01YVQzSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByvLGelxY5hgzn/0Yhv0exeZYTzgSLg1CiX1UdiR8HEpCvzzRf0yM2 kANxohxSlBaJO6AkV3N+yECmlOsDtL6sejQch/8SFOwzI4maQK72i45dgjRE6/8/ 2PKkIKoIAyRIyesuTqBgZWYaWWfcC8h+kyjh7/w0cXPprfOqkzHokYg3pouAELM5 iShusIACQ+gvD4p8wkjGzWSqe0yA7k1nGtuTICS0r/CElQPmdVyxapNqIFbXzlW4 zSsacJ2CtPSpk7YOvUA8RxRFlqzOQePj9TpBhGsOYJztmVn04qQoOQn5qH215ynJ TEpyIzQqQfgM9C66Ky32MdAG76WUFhYG -----END CERTIFICATE-----Generated at Wed Jul 2 20:19:39 2025 by rpki-client