$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft File: h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json) Hash identifier: YpjYtPwObTSrBCA08YLINezhRpvZERk/9HLxmstRYX8= Subject key identifier: 01:C7:F6:01:D2:E9:71:CA:5C:8D:88:FE:AB:F7:44:8A:0C:75:3A:6B Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 Certificate issuer: /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Certificate serial: 34B9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft Manifest number: 34B9 Signing time: Fri 22 Aug 2025 14:16:49 +0000 Manifest this update: Fri 22 Aug 2025 14:16:49 +0000 Manifest next update: Fri 29 Aug 2025 14:16:49 +0000 Files and hashes: 1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: 8HMfAHW+xmj9PQQQiV+538i/unPAk6S5AtUUxwxYpus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13497 (0x34b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Validity Not Before: Aug 22 14:16:49 2025 GMT Not After : Aug 29 14:16:49 2025 GMT Subject: CN=68a87bd1-0f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1c:94:82:48:d2:2c:40:d7:eb:6c:81:26:3a: 76:77:63:42:cd:b8:71:43:81:e2:cd:7a:a6:2d:1a: d1:69:4c:07:8b:9c:20:66:86:bc:d5:16:6b:f2:27: 66:92:a5:00:20:75:c3:97:08:c8:ba:51:b1:95:39: a6:ea:42:11:22:c9:46:68:91:d1:3f:bc:24:ad:05: dd:81:a5:3e:54:57:38:0b:d7:8e:f9:cd:9b:c6:4c: 1a:64:2d:78:f4:3b:88:e4:4c:2c:66:22:90:2d:6e: 3e:e3:24:20:1b:9e:4a:75:fd:19:ad:5c:e5:4d:59: 36:30:41:7f:a9:b8:06:19:9e:84:6d:0c:d2:f7:a8: 96:63:94:5c:55:82:9d:ae:9d:f7:cf:39:c3:43:6b: 59:3f:1d:3f:69:f1:bd:b4:d3:de:6b:52:2a:5a:d7: 21:9d:17:e2:7d:0d:10:ed:8e:80:1d:46:27:d7:17: 34:0e:e7:28:36:5c:e9:9f:3c:9c:3c:bc:24:ed:f1: c3:9c:ef:45:db:2a:8b:e0:fe:0a:e5:46:ed:53:7b: 60:2e:56:e2:d3:06:86:50:32:9b:85:c9:ce:00:be: f7:49:83:da:22:5c:23:1d:ac:b4:38:4a:d2:39:fc: 66:4a:df:bb:e5:ef:aa:0d:1c:b9:ef:56:a9:6c:99: f2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C7:F6:01:D2:E9:71:CA:5C:8D:88:FE:AB:F7:44:8A:0C:75:3A:6B X509v3 Authority Key Identifier: keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:34:ec:59:b0:dc:8d:3c:be:f8:24:ff:ac:b7:2c:43:c8:40: d2:06:43:15:86:5a:b8:98:21:92:1c:6e:6d:e4:c7:f0:1d:22: fd:6f:dc:62:88:9c:e3:58:c3:0a:3d:c3:eb:9e:5e:fd:de:35: 35:7e:3a:00:7c:ab:f8:ac:d4:6c:e6:c3:5a:b2:f1:1d:af:7c: ac:b3:f8:c0:fe:08:98:25:45:7b:b2:39:e3:93:54:36:06:a1: 5b:57:0a:7c:b4:ee:9e:81:7a:99:07:10:7c:d2:70:b6:d6:96: 95:b3:02:b9:12:2d:aa:f0:83:2d:66:af:2e:02:c3:d9:d5:ae: 6a:13:d9:27:0e:bc:c6:e7:75:ce:bb:fd:65:2f:86:f0:23:97: dc:59:05:91:c0:3b:17:45:d4:f2:ac:be:d0:12:5b:4a:9e:bd: b2:e9:f6:af:05:91:60:03:4f:75:11:52:12:90:39:f5:a2:be: 72:91:da:0b:81:fb:73:81:47:ec:e0:26:aa:fb:20:33:4a:0d: 7d:de:cd:70:90:9b:a4:3e:7c:ac:b5:5d:69:a7:d4:70:59:58: 9a:5d:f2:f6:39:55:7d:18:26:80:7d:e5:92:31:63:82:26:fd: bb:13:f4:44:2f:9f:5c:c8:5e:64:0e:5d:6f:02:84:c9:0c:a8: d4:33:8c:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDg3OTA2MjUwM0ZEMjA4NDY2Rjc0RUE5QUY4NzY3MEE4 N0Q4NkE3MzYwHhcNMjUwODIyMTQxNjQ5WhcNMjUwODI5MTQxNjQ5WjAYMRYwFAYD VQQDEw02OGE4N2JkMS0wZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RyUgkjSLEDX62yBJjp2d2NCzbhxQ4HizXqmLRrRaUwHi5wgZoa81RZr8idm kqUAIHXDlwjIulGxlTmm6kIRIslGaJHRP7wkrQXdgaU+VFc4C9eO+c2bxkwaZC14 9DuI5EwsZiKQLW4+4yQgG55Kdf0ZrVzlTVk2MEF/qbgGGZ6EbQzS96iWY5RcVYKd rp33zznDQ2tZPx0/afG9tNPea1IqWtchnRfifQ0Q7Y6AHUYn1xc0DucoNlzpnzyc PLwk7fHDnO9F2yqL4P4K5UbtU3tgLlbi0waGUDKbhcnOAL73SYPaIlwjHay0OErS OfxmSt+75e+qDRy571apbJny5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHH9gHS 6XHKXI2I/qv3RIoMdTprMB8GA1UdIwQYMBaAFIeQYlA/0ghGb3Tqmvh2cKh9hqc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC84NDZFQzA0MDFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NFWnZkT3FhLUhad3FIMkdw elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2g1QmlVRF9TQ0VadmRPcWEtSFp3cUgyR3B6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC84NDZFQzA0MDFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NF WnZkT3FhLUhad3FIMkdwelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiNOxZsNyNPL74JP+styxDyEDSBkMVhlq4mCGSHG5t5MfwHSL9b9xi iJzjWMMKPcPrnl793jU1fjoAfKv4rNRs5sNasvEdr3yss/jA/giYJUV7sjnjk1Q2 BqFbVwp8tO6egXqZBxB80nC21paVswK5Ei2q8IMtZq8uAsPZ1a5qE9knDrzG53XO u/1lL4bwI5fcWQWRwDsXRdTyrL7QEltKnr2y6favBZFgA091EVISkDn1or5ykdoL gftzgUfs4Caq+yAzSg193s1wkJukPnystV1pp9RwWViaXfL2OVV9GCaAfeWSMWOC Jv27E/REL59cyF5kDl1vAoTJDKjUM4x0 -----END CERTIFICATE-----Generated at Sun Aug 24 02:32:30 2025 by rpki-client