$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft File: h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft (raw, json) Hash identifier: AHJpOleG+oQEalwAWwg8gFCBIQIk7xcmsJikOayfJDI= Subject key identifier: 09:60:7E:CB:5E:D9:A5:03:09:61:77:5B:9B:83:27:16:59:32:8C:B5 Authority key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 Certificate issuer: /CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft Manifest number: 81 Signing time: Tue 17 Jun 2025 05:32:11 +0000 Manifest this update: Tue 17 Jun 2025 05:32:11 +0000 Manifest next update: Tue 24 Jun 2025 05:32:11 +0000 Files and hashes: 1: h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl (hash: VSJBw7O6Wn28JAtIbqLCCDzG7HWAVUZZAfMa3FIxiyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7, serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Validity Not Before: Jun 17 05:32:11 2025 GMT Not After : Jun 24 05:32:11 2025 GMT Subject: CN=6850fddb-dcc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:93:88:73:3e:87:51:ad:e5:35:d6:64:a5: e0:78:8a:31:4c:e9:74:d6:81:5b:4e:50:25:55:92: 24:b0:de:41:9c:90:f9:8a:20:43:27:cc:e9:87:cd: c6:6d:41:3b:ca:f0:ce:b1:fc:97:b7:4b:63:a3:cf: d0:d3:72:dc:16:34:50:3d:a4:53:cc:45:df:7b:7f: 91:5c:69:b3:ae:8c:53:bf:02:9d:c2:4a:2a:be:ef: 13:8e:ea:8d:f1:bc:eb:0d:b8:c6:26:54:4b:fa:a7: 6b:ae:bc:1e:f6:5d:a4:7c:60:f3:60:06:5d:14:22: 80:59:9e:f2:da:30:9a:34:fc:4c:b7:16:97:5f:e6: 77:ae:29:8a:fb:a1:6e:a3:7e:11:4b:92:04:7b:f0: 53:4a:2a:1d:d5:e1:76:7d:b7:3d:7e:21:d6:63:5a: e2:43:92:57:c1:14:bf:c4:ba:30:6c:f8:f5:e1:84: e8:37:34:b4:10:e9:ab:73:3a:8c:6a:21:e6:1a:11: b4:fd:61:33:f9:c9:0f:30:45:12:f5:92:ca:74:e6: b5:70:ed:dc:93:6c:8c:18:91:85:c0:a1:b9:23:a1: 11:ef:25:16:ee:ac:4f:be:72:cb:0e:a0:c0:54:29: b6:7a:ee:76:9d:b7:29:bf:4c:9d:ed:a0:e1:23:61: 7e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:60:7E:CB:5E:D9:A5:03:09:61:77:5B:9B:83:27:16:59:32:8C:B5 X509v3 Authority Key Identifier: keyid:87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:9e:89:b9:4f:cb:ac:97:b6:ea:02:1f:da:db:59:12:52:8c: 2e:cc:2f:bc:4b:75:78:7b:8e:92:d6:4b:70:64:f9:53:40:3b: ad:13:64:c5:0e:b0:c2:17:c7:1b:68:c6:35:91:bd:68:65:ae: f6:e3:93:86:7d:a7:38:fb:73:04:86:cc:81:30:c5:6d:8f:dd: 0e:64:9d:77:b3:64:f5:c5:7f:66:1a:35:ea:c2:c5:27:4c:4a: 67:48:1b:40:6b:f8:9c:b8:50:c1:03:1b:bc:c1:c6:f6:90:4b: 4f:35:60:0f:fe:17:c4:ce:0c:e3:c6:96:cb:bc:0f:b1:b8:48: e6:d4:52:19:b7:cc:3b:31:fc:42:c3:eb:39:d7:6d:d3:94:99: 69:67:cd:83:11:e4:1b:99:b5:f9:d4:88:d6:e9:9c:63:e6:18: ba:01:a7:f4:6e:50:c8:96:6b:1d:87:2b:a6:a2:73:16:0e:3e: 62:5d:6d:62:8c:7c:83:cb:e7:b1:6b:a7:5c:64:08:08:69:24: 7e:1b:60:48:99:c7:bd:56:08:b3:56:1b:3a:ef:66:6e:b1:57: 87:c7:2b:90:ba:69:e5:4b:c8:15:63:f1:b0:8b:dc:fa:ed:b6: 5a:a0:a3:7f:9e:b8:eb:8e:2c:7f:81:a1:83:cd:46:60:6a:e9: e9:4e:0d:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE0RjcxMTAvBgNVBAUTKDg3OTJERTM5OUNGNjMxOTNEREMyOUQzMEZCRjBBNTgx RTAyNEYwMDMwHhcNMjUwNjE3MDUzMjExWhcNMjUwNjI0MDUzMjExWjAYMRYwFAYD VQQDEw02ODUwZmRkYi1kY2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/KTiHM+h1Gt5TXWZKXgeIoxTOl01oFbTlAlVZIksN5BnJD5iiBDJ8zph83G bUE7yvDOsfyXt0tjo8/Q03LcFjRQPaRTzEXfe3+RXGmzroxTvwKdwkoqvu8TjuqN 8bzrDbjGJlRL+qdrrrwe9l2kfGDzYAZdFCKAWZ7y2jCaNPxMtxaXX+Z3rimK+6Fu o34RS5IEe/BTSiod1eF2fbc9fiHWY1riQ5JXwRS/xLowbPj14YToNzS0EOmrczqM aiHmGhG0/WEz+ckPMEUS9ZLKdOa1cO3ck2yMGJGFwKG5I6ER7yUW7qxPvnLLDqDA VCm2eu52nbcpv0yd7aDhI2F+fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlgfste 2aUDCWF3W5uDJxZZMoy1MB8GA1UdIwQYMBaAFIeS3jmc9jGT3cKdMPvwpYHgJPAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTRGNy9BM0RENkI5QTg1 RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi9oNUxlT1p6Mk1aUGR3cDB3LV9DbGdlQWs4 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g1TGVPWnoyTVpQZHdwMHctX0NsZ2VBazhBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTRGNy9BM0RENkI5QTg1RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi9oNUxlT1p6Mk1a UGR3cDB3LV9DbGdlQWs4QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjnom5T8usl7bqAh/a21kSUowuzC+8S3V4e46S1ktwZPlTQDutE2TF DrDCF8cbaMY1kb1oZa7245OGfac4+3MEhsyBMMVtj90OZJ13s2T1xX9mGjXqwsUn TEpnSBtAa/icuFDBAxu8wcb2kEtPNWAP/hfEzgzjxpbLvA+xuEjm1FIZt8w7MfxC w+s5123TlJlpZ82DEeQbmbX51IjW6Zxj5hi6Aaf0blDIlmsdhyumonMWDj5iXW1i jHyDy+exa6dcZAgIaSR+G2BImce9VgizVhs672ZusVeHxyuQumnlS8gVY/Gwi9z6 7bZaoKN/nrjrjix/gaGDzUZgaunpTg0S -----END CERTIFICATE-----Generated at Wed Jun 18 08:24:22 2025 by rpki-client