$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft File: H4-gq_qNf39-fqANVuoBxwky5gc.mft (raw, json) Hash identifier: EjI5/mOItz9PovcKcK9PnIJWcg8yGV9WoXSugB0Ayg0= Subject key identifier: 50:1C:45:A4:A4:59:61:2B:CB:CE:8C:E3:D1:B2:78:C7:89:F6:19:B6 Authority key identifier: 1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 Certificate issuer: /CN=A91BDD82/serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Certificate serial: 0EB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft Manifest number: 0FF4 Signing time: Wed 02 Jul 2025 17:53:55 +0000 Manifest this update: Wed 02 Jul 2025 17:53:55 +0000 Manifest next update: Wed 09 Jul 2025 17:53:55 +0000 Files and hashes: 1: H4-gq_qNf39-fqANVuoBxwky5gc.crl (hash: h0WRj5IQsKVKcF0QIIaHWHDTZXRnYJoRw24aU2CZVwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3763 (0xeb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Validity Not Before: Jul 2 17:53:55 2025 GMT Not After : Jul 9 17:53:55 2025 GMT Subject: CN=68657233-8224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3c:ed:02:d7:dd:c0:8c:56:ed:0c:6f:68:0a: ae:d2:08:db:f2:44:da:73:1a:44:f6:07:9c:2a:94: 66:03:d9:08:0b:19:93:f3:1a:fa:32:e6:ff:63:5f: b1:0c:a4:bb:48:23:22:27:e2:50:e0:40:c4:41:45: 99:b7:56:b3:d4:de:a7:3d:db:65:b9:0b:61:92:fb: ad:1f:26:c9:80:1f:b3:ee:bd:2b:84:59:93:fd:78: cd:be:40:25:6e:59:ad:02:f6:cf:e4:69:dd:a6:44: 12:83:7e:c6:2e:d2:f0:82:ee:27:3b:51:01:67:a5: 37:1f:dc:f5:6c:43:d8:65:df:9d:2a:dc:63:71:27: cb:74:67:bf:f0:9f:ab:47:1a:cc:7d:40:1d:09:8c: b0:63:e3:ac:28:8a:53:33:53:70:db:04:a3:d1:49: dd:08:46:81:36:c7:09:f2:ca:2c:b0:8d:db:6c:70: 8a:aa:6a:16:6d:62:72:cd:67:b2:49:e7:2e:07:29: a3:5c:d2:6d:21:72:1b:cf:5d:67:09:4f:f0:1d:20: e5:e1:1a:1c:2e:2d:0a:45:cb:ea:6e:72:ef:22:aa: 3c:39:71:1b:fc:7f:26:28:26:70:b4:a8:bc:d8:64: 06:7b:55:31:5a:16:76:ce:81:77:01:01:be:96:8d: cb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1C:45:A4:A4:59:61:2B:CB:CE:8C:E3:D1:B2:78:C7:89:F6:19:B6 X509v3 Authority Key Identifier: keyid:1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ef:11:9b:ca:e3:d2:32:d3:31:b0:b9:de:3f:87:a1:9e:cc: 9b:f0:ce:39:f3:b3:b9:54:1b:a6:d5:fd:44:30:90:85:f0:89: 38:9d:be:0a:eb:79:25:39:0b:49:74:a1:28:72:9e:ec:1a:d1: 8b:3f:4e:b7:b4:06:70:0c:fa:f1:9f:e6:a3:d8:52:7b:33:9a: b0:6a:d6:c0:9b:d4:ef:5a:b0:2e:37:d9:c4:a4:60:4c:4a:1f: 0b:d1:24:99:af:1b:b1:39:8e:09:09:e3:33:99:34:93:c5:5b: 9b:40:0f:8e:ad:2f:0b:db:6d:20:72:ef:33:fc:37:20:85:72: c5:6f:18:f7:a9:d5:1e:14:e3:10:30:70:1c:64:53:80:c0:ea: 9d:02:23:83:f8:f5:e1:4b:25:e3:8c:ef:d7:55:f9:92:66:9a: 15:36:a6:a8:b0:a0:56:90:7c:9a:56:c7:15:6f:ed:58:39:85: 9f:b6:ba:79:6e:df:e7:b2:4d:00:b1:d2:52:13:06:ab:27:96: a5:e9:8a:4d:1a:87:0b:d9:5d:ce:c2:82:c8:9a:29:d3:50:e4: 3c:54:32:3d:fe:4a:4e:70:51:cf:e6:72:29:76:9d:33:79:95: f0:2d:26:ea:e3:5b:f9:e6:c0:cc:7c:31:b3:26:d9:3a:87:31: ae:c5:79:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKDFGOEZBMEFCRkE4RDdGN0Y3RTdFQTAwRDU2RUEwMUM3 MDkzMkU2MDcwHhcNMjUwNzAyMTc1MzU1WhcNMjUwNzA5MTc1MzU1WjAYMRYwFAYD VQQDEw02ODY1NzIzMy04MjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzztAtfdwIxW7QxvaAqu0gjb8kTacxpE9gecKpRmA9kICxmT8xr6Mub/Y1+x DKS7SCMiJ+JQ4EDEQUWZt1az1N6nPdtluQthkvutHybJgB+z7r0rhFmT/XjNvkAl blmtAvbP5GndpkQSg37GLtLwgu4nO1EBZ6U3H9z1bEPYZd+dKtxjcSfLdGe/8J+r RxrMfUAdCYywY+OsKIpTM1Nw2wSj0UndCEaBNscJ8sossI3bbHCKqmoWbWJyzWey SecuBymjXNJtIXIbz11nCU/wHSDl4RocLi0KRcvqbnLvIqo8OXEb/H8mKCZwtKi8 2GQGe1UxWhZ2zoF3AQG+lo3LvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAcRaSk WWEry86M49GyeMeJ9hm2MB8GA1UdIwQYMBaAFB+PoKv6jX9/fn6gDVbqAccJMuYH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYzOS1mcUFOVnVvQnh3a3k1 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g0LWdxX3FOZjM5LWZxQU5WdW9CeHdreTVnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYz OS1mcUFOVnVvQnh3a3k1Z2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx7xGbyuPSMtMxsLneP4ehnsyb8M4587O5VBum1f1EMJCF8Ik4nb4K 63klOQtJdKEocp7sGtGLP063tAZwDPrxn+aj2FJ7M5qwatbAm9TvWrAuN9nEpGBM Sh8L0SSZrxuxOY4JCeMzmTSTxVubQA+OrS8L220gcu8z/DcghXLFbxj3qdUeFOMQ MHAcZFOAwOqdAiOD+PXhSyXjjO/XVfmSZpoVNqaosKBWkHyaVscVb+1YOYWftrp5 bt/nsk0AsdJSEwarJ5al6YpNGocL2V3OwoLIminTUOQ8VDI9/kpOcFHP5nIpdp0z eZXwLSbq41v55sDMfDGzJtk6hzGuxXnE -----END CERTIFICATE-----Generated at Wed Jul 2 20:59:26 2025 by rpki-client