$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft File: h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json) Hash identifier: EWAirTodsIZ61NEwF5dPVZwN7axVH+JB4c5xnx8gfZ8= Subject key identifier: 53:D3:D2:7D:72:17:9D:87:3F:E9:4D:3D:52:DD:4A:53:B7:08:60:80 Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 Certificate issuer: /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Certificate serial: 3485 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft Manifest number: 3485 Signing time: Mon 12 May 2025 14:16:47 +0000 Manifest this update: Mon 12 May 2025 14:16:46 +0000 Manifest next update: Mon 19 May 2025 14:16:46 +0000 Files and hashes: 1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: 1D43yqQdo2H9BaR38aGdwDdcUPjB8J59vtMEsoeua6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13445 (0x3485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Validity Not Before: May 12 14:16:46 2025 GMT Not After : May 19 14:16:46 2025 GMT Subject: CN=682202cf-6514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ab:74:50:35:8c:dc:41:2c:3d:76:02:78:80: ad:f1:5e:2f:03:21:94:0f:94:61:98:f5:3e:97:31: ea:84:1c:3c:84:71:54:9d:37:79:12:8c:2f:41:8c: 33:92:45:57:a7:c3:e6:45:8a:d3:7f:a9:81:03:d4: 05:3b:58:21:ec:87:6e:51:ea:4a:9a:a7:a8:df:ac: e0:16:0a:2e:68:8d:20:59:af:05:c8:78:e0:12:1f: 1b:fb:50:7e:8e:e8:ec:d0:3a:56:34:c7:a2:e0:a5: 61:25:f5:12:f4:bc:12:20:63:14:17:c5:0c:f6:1d: 00:26:d8:fd:46:a7:b2:37:55:1f:a8:1b:57:e3:cd: 65:f4:2a:05:f4:41:7a:bf:f6:1f:b9:34:b5:00:d4: c1:8c:9f:7d:de:a0:b1:23:39:d6:d5:3b:de:99:5b: 2a:b8:0e:96:da:21:b3:dd:2e:fe:0a:41:09:d0:a6: e5:6e:41:07:d0:ea:30:11:f6:4b:98:75:16:5b:8d: 2a:b2:ba:16:e2:6e:72:fb:72:95:3b:e0:4d:d3:45: 5e:35:a5:d8:db:73:7c:da:f5:64:bf:ed:7d:75:1e: df:5b:c0:42:1f:f6:9c:d0:e7:a3:36:3e:25:9f:1c: e3:8a:89:5e:58:9d:0f:ec:f5:20:56:41:e2:5e:18: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D3:D2:7D:72:17:9D:87:3F:E9:4D:3D:52:DD:4A:53:B7:08:60:80 X509v3 Authority Key Identifier: keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:fe:c6:59:6a:b1:a8:c7:b9:d9:63:a8:0f:70:eb:32:50:26: c7:48:3f:28:57:36:30:bb:01:4b:ac:59:0b:dd:49:29:a9:21: 56:ba:5c:0b:31:46:ef:c1:86:d5:d1:8a:f8:0c:74:b3:92:1c: b3:7b:a6:1a:b8:98:d4:f4:5c:e7:c5:09:f1:55:76:d3:d1:1f: 18:84:63:83:7d:2e:6e:4c:8e:2e:66:72:f3:82:5b:e5:bf:4c: 46:96:ec:a5:92:73:7a:9e:ef:a1:a4:62:c8:89:b3:27:f1:7e: 50:f7:f8:ea:ed:e5:36:cd:53:f9:f2:3b:52:e5:42:0d:89:47: d1:4f:de:28:75:57:13:44:e5:b5:f3:be:c4:aa:98:4e:ea:11: 1f:f6:8e:b9:33:89:b0:0b:e0:b9:c9:bf:41:58:57:69:f9:fa: f9:d2:2b:d6:44:1b:14:4c:3c:ca:52:6d:6d:9c:df:d5:c3:6e: 70:22:45:cb:66:ea:d2:d6:63:08:36:3d:6c:1c:b0:db:09:6a: 7c:a6:0c:7d:3d:84:cf:2c:eb:d6:fb:27:c5:6c:ab:1d:a9:7f: 70:8f:7d:5d:f0:e5:bc:07:a4:e2:90:4f:1b:cc:29:36:aa:f3: be:1a:15:c8:fc:6c:27:75:9c:41:9a:82:8b:3e:34:43:82:e7: 3b:55:0b:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDg3OTA2MjUwM0ZEMjA4NDY2Rjc0RUE5QUY4NzY3MEE4 N0Q4NkE3MzYwHhcNMjUwNTEyMTQxNjQ2WhcNMjUwNTE5MTQxNjQ2WjAYMRYwFAYD VQQDEw02ODIyMDJjZi02NTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6t0UDWM3EEsPXYCeICt8V4vAyGUD5RhmPU+lzHqhBw8hHFUnTd5EowvQYwz kkVXp8PmRYrTf6mBA9QFO1gh7IduUepKmqeo36zgFgouaI0gWa8FyHjgEh8b+1B+ jujs0DpWNMei4KVhJfUS9LwSIGMUF8UM9h0AJtj9RqeyN1UfqBtX481l9CoF9EF6 v/YfuTS1ANTBjJ993qCxIznW1TvemVsquA6W2iGz3S7+CkEJ0KblbkEH0OowEfZL mHUWW40qsroW4m5y+3KVO+BN00VeNaXY23N82vVkv+19dR7fW8BCH/ac0OejNj4l nxzjioleWJ0P7PUgVkHiXhjGLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPT0n1y F52HP+lNPVLdSlO3CGCAMB8GA1UdIwQYMBaAFIeQYlA/0ghGb3Tqmvh2cKh9hqc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC84NDZFQzA0MDFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NFWnZkT3FhLUhad3FIMkdw elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2g1QmlVRF9TQ0VadmRPcWEtSFp3cUgyR3B6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC84NDZFQzA0MDFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NF WnZkT3FhLUhad3FIMkdwelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI/sZZarGox7nZY6gPcOsyUCbHSD8oVzYwuwFLrFkL3UkpqSFWulwL MUbvwYbV0Yr4DHSzkhyze6YauJjU9FznxQnxVXbT0R8YhGODfS5uTI4uZnLzglvl v0xGluylknN6nu+hpGLIibMn8X5Q9/jq7eU2zVP58jtS5UINiUfRT94odVcTROW1 877EqphO6hEf9o65M4mwC+C5yb9BWFdp+fr50ivWRBsUTDzKUm1tnN/Vw25wIkXL ZurS1mMINj1sHLDbCWp8pgx9PYTPLOvW+yfFbKsdqX9wj31d8OW8B6TikE8bzCk2 qvO+GhXI/GwndZxBmoKLPjRDguc7VQsP -----END CERTIFICATE-----Generated at Wed May 14 03:04:28 2025 by rpki-client