$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft File: h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json) Hash identifier: LMIBjvl4ZOEZcszGkRBRd9sNTG62y3yGmV2JRyW8avk= Subject key identifier: E4:43:6F:EE:BD:CC:74:3D:C5:FB:15:24:22:5B:18:E3:09:30:9E:13 Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 Certificate issuer: /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Certificate serial: 349F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft Manifest number: 349F Signing time: Wed 02 Jul 2025 14:16:48 +0000 Manifest this update: Wed 02 Jul 2025 14:16:47 +0000 Manifest next update: Wed 09 Jul 2025 14:16:47 +0000 Files and hashes: 1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: NGd43Wns1asTZKsTu2n7Pv8+z+sGn13NcYTNDeTbpHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13471 (0x349f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Validity Not Before: Jul 2 14:16:47 2025 GMT Not After : Jul 9 14:16:47 2025 GMT Subject: CN=68653f50-1175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:11:26:57:92:12:ab:a7:d4:54:35:28:cb: bc:0a:e6:0d:79:5e:ff:96:e4:92:a4:f7:2f:be:42: ec:e4:d8:37:49:53:e5:05:ad:24:25:93:69:86:8d: f7:7f:df:04:9e:1f:54:67:01:d7:ea:b7:43:bb:1e: 41:d5:2f:be:95:ea:ac:05:66:56:0e:4f:33:f9:cf: 10:5b:aa:83:15:90:35:74:f4:51:d9:1c:9c:76:5f: 7e:32:a0:9b:08:01:56:94:71:61:8d:e0:4f:4c:f8: b6:11:4d:96:fd:61:8c:78:49:0f:6e:77:c1:6a:e8: 8a:8c:25:61:15:08:59:81:2e:2c:37:b6:92:22:eb: f7:7b:df:9f:d5:81:4e:82:f7:58:0f:0f:90:73:98: a0:db:c2:b5:00:e8:11:07:32:b3:3f:d3:ad:c9:a0: 38:e4:62:5b:2e:8c:d2:fa:82:b0:af:90:46:63:eb: 6d:8b:3d:e7:22:b7:51:da:99:93:8b:db:47:06:58: 12:6b:2e:35:2a:56:bb:9d:86:ff:2e:16:50:50:e1: 43:0c:29:16:50:f3:09:ff:8f:1b:65:10:cf:26:01: ef:ec:5a:ec:96:e6:db:77:c2:eb:f8:de:ba:a8:69: 33:55:99:37:b6:48:94:b7:89:3c:42:1d:49:6f:9e: 48:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:43:6F:EE:BD:CC:74:3D:C5:FB:15:24:22:5B:18:E3:09:30:9E:13 X509v3 Authority Key Identifier: keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:1e:91:8f:4a:06:13:d0:31:2d:6f:25:99:87:9c:11:08:23: 83:a3:22:2a:55:db:c5:b8:f3:5d:b0:92:b8:7f:41:90:ab:2d: 72:a2:4c:cc:56:ba:a1:c2:7b:d8:57:e8:4f:bb:4b:7f:de:49: f1:9a:94:17:de:d0:bd:b1:ec:cd:d3:4a:19:8d:9e:61:fe:56: 0a:ad:c6:77:2e:ab:e6:84:e0:7d:71:dd:54:95:d0:02:d8:1d: fa:7d:66:56:3a:71:5e:f9:96:b8:2c:01:63:6e:6f:d8:dc:db: 5d:e2:1a:b4:51:7f:ef:d0:d3:a2:16:d1:bf:ad:c0:fa:59:84: 6a:9d:61:30:1e:fc:e5:aa:fe:ce:00:fc:39:d3:bf:c6:a9:5e: 18:21:0f:e0:af:0a:54:75:a0:85:ad:77:15:12:8c:e0:f3:74: 4e:10:5d:04:d2:91:0d:87:0e:0b:3a:bd:bc:1c:5f:a9:55:64: a9:c2:61:b9:ef:e3:34:56:dd:e9:2e:57:ff:2e:51:c6:48:9d: 97:08:ac:dd:a5:01:f3:70:88:97:f6:1b:98:9b:35:e1:a5:69: 84:22:3f:0e:13:9f:dd:9b:a7:a1:73:ac:49:6f:9a:66:af:3e: 0e:aa:67:7e:8f:e4:0e:e4:43:32:28:02:0a:9a:05:01:10:4c: d1:e6:bc:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDg3OTA2MjUwM0ZEMjA4NDY2Rjc0RUE5QUY4NzY3MEE4 N0Q4NkE3MzYwHhcNMjUwNzAyMTQxNjQ3WhcNMjUwNzA5MTQxNjQ3WjAYMRYwFAYD VQQDEw02ODY1M2Y1MC0xMTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAIRJleSEqun1FQ1KMu8CuYNeV7/luSSpPcvvkLs5Ng3SVPlBa0kJZNpho33 f98Enh9UZwHX6rdDux5B1S++leqsBWZWDk8z+c8QW6qDFZA1dPRR2Rycdl9+MqCb CAFWlHFhjeBPTPi2EU2W/WGMeEkPbnfBauiKjCVhFQhZgS4sN7aSIuv3e9+f1YFO gvdYDw+Qc5ig28K1AOgRBzKzP9OtyaA45GJbLozS+oKwr5BGY+ttiz3nIrdR2pmT i9tHBlgSay41Kla7nYb/LhZQUOFDDCkWUPMJ/48bZRDPJgHv7Frslubbd8Lr+N66 qGkzVZk3tkiUt4k8Qh1Jb55IXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORDb+69 zHQ9xfsVJCJbGOMJMJ4TMB8GA1UdIwQYMBaAFIeQYlA/0ghGb3Tqmvh2cKh9hqc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC84NDZFQzA0MDFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NFWnZkT3FhLUhad3FIMkdw elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2g1QmlVRF9TQ0VadmRPcWEtSFp3cUgyR3B6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC84NDZFQzA0MDFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NF WnZkT3FhLUhad3FIMkdwelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCHpGPSgYT0DEtbyWZh5wRCCODoyIqVdvFuPNdsJK4f0GQqy1yokzM VrqhwnvYV+hPu0t/3knxmpQX3tC9sezN00oZjZ5h/lYKrcZ3LqvmhOB9cd1UldAC 2B36fWZWOnFe+Za4LAFjbm/Y3Ntd4hq0UX/v0NOiFtG/rcD6WYRqnWEwHvzlqv7O APw507/GqV4YIQ/grwpUdaCFrXcVEozg83ROEF0E0pENhw4LOr28HF+pVWSpwmG5 7+M0Vt3pLlf/LlHGSJ2XCKzdpQHzcIiX9huYmzXhpWmEIj8OE5/dm6ehc6xJb5pm rz4Oqmd+j+QO5EMyKAIKmgUBEEzR5ryH -----END CERTIFICATE-----Generated at Fri Jul 4 06:26:39 2025 by rpki-client