$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft File: haOfEGRko23KJ0v8d_uvewMDh24.mft (raw, json) Hash identifier: WodYbvP9OL+5Aa5wUo89R3Ta+/9zm0d1FvPlEOcC8h4= Subject key identifier: 8A:91:EC:13:E2:B1:44:3B:F3:DC:F7:B4:00:73:23:AE:82:0F:AB:FC Authority key identifier: 85:A3:9F:10:64:64:A3:6D:CA:27:4B:FC:77:FB:AF:7B:03:03:87:6E Certificate issuer: /CN=A9131181/serialNumber=85A39F106464A36DCA274BFC77FBAF7B0303876E Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft Manifest number: 46 Signing time: Sat 09 Aug 2025 07:55:52 +0000 Manifest this update: Sat 09 Aug 2025 07:55:51 +0000 Manifest next update: Sat 16 Aug 2025 07:55:51 +0000 Files and hashes: 1: haOfEGRko23KJ0v8d_uvewMDh24.crl (hash: bpMvd7RslPpMK9CziebTmXxTaeHOtb1XQSYSJO79wbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.crl rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131181, serialNumber=85A39F106464A36DCA274BFC77FBAF7B0303876E Validity Not Before: Aug 9 07:55:51 2025 GMT Not After : Aug 16 07:55:51 2025 GMT Subject: CN=6896ff07-048d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:46:c6:d5:d9:ed:d3:b8:0c:27:3a:7f:eb: 24:14:9b:30:ff:19:f0:3d:b8:3c:b1:90:dd:5e:99: 06:db:c2:97:13:cb:44:d1:ec:81:1b:79:52:c2:3b: b9:8c:05:31:cb:b5:34:a1:ae:00:ca:18:c8:d5:5c: 72:70:46:29:ee:f9:25:f7:5f:5e:5b:52:76:b9:75: 1c:ca:ad:05:34:b6:ec:cd:a3:9e:ae:cc:7f:0d:d0: 2b:c3:09:65:9e:12:dd:c3:63:a2:85:cd:77:f7:16: 9b:76:b7:d2:85:27:de:e9:5d:55:bc:17:56:72:f8: bc:bb:bd:d2:ac:ae:e1:6e:33:2a:02:eb:74:d5:75: ea:e9:d6:5b:c4:6d:82:91:0a:a0:b2:e9:c1:9d:68: fa:e7:80:a3:0f:0d:d2:3c:19:5d:7b:49:f8:f9:24: ee:1e:ce:04:b6:82:e6:d8:b0:07:ce:2d:f8:ed:ea: 10:a8:b4:f0:f2:83:94:7d:75:43:54:e3:d0:11:e4: fe:7b:8f:74:4d:1b:53:51:ba:54:8e:61:fa:05:38: 85:00:e6:e1:d8:b0:3d:18:2e:c0:95:81:36:8c:74: dd:9d:45:72:50:1d:8d:91:73:b5:68:0b:30:8f:de: aa:af:86:09:39:0c:56:35:87:c3:e3:8b:9d:f0:ba: 03:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:91:EC:13:E2:B1:44:3B:F3:DC:F7:B4:00:73:23:AE:82:0F:AB:FC X509v3 Authority Key Identifier: keyid:85:A3:9F:10:64:64:A3:6D:CA:27:4B:FC:77:FB:AF:7B:03:03:87:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:3c:f5:df:9b:38:1a:72:96:56:bf:63:06:00:29:08:ec:40: d0:2f:3a:0e:77:2a:45:74:d4:29:b8:30:95:1d:a8:31:ce:9b: b2:a6:c6:2c:b7:2f:26:8f:76:59:82:5c:ff:d3:90:da:b8:38: b8:0f:bd:90:d1:e1:84:fd:00:fb:ee:89:fa:0e:7a:7d:fa:c0: 36:59:83:0a:60:45:b6:fa:13:dd:82:b9:3b:05:fd:97:3f:2b: 49:10:71:6a:84:db:9c:e1:87:8c:66:4b:28:8b:0f:40:58:f2: 09:08:16:7b:5b:14:b3:f9:4b:db:dc:85:ba:f4:d9:24:b7:27: c1:3d:bb:8e:f2:43:23:21:a9:c8:ae:e5:f8:aa:06:ca:c4:5f: b2:03:3e:77:42:13:ae:b4:4b:6e:1b:9f:ce:2c:59:73:83:a2: 45:3c:3a:c3:35:1b:08:5c:e1:56:96:3b:ea:4a:4c:43:b4:d7: 5b:36:e9:1c:69:6f:8d:79:f5:10:45:ab:c4:5a:ef:be:a8:3a: a4:0f:3a:69:59:71:fe:3d:5b:ae:01:cd:fc:d0:35:2b:51:af: 2c:df:1a:d9:81:5b:6f:09:21:80:02:71:9a:4c:fc:e9:90:28: 17:2f:3b:0a:7f:6d:c6:f8:94:de:96:35:3e:fe:8d:7f:fd:4b: 9d:be:bb:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE4MTExMC8GA1UEBRMoODVBMzlGMTA2NDY0QTM2RENBMjc0QkZDNzdGQkFGN0Iw MzAzODc2RTAeFw0yNTA4MDkwNzU1NTFaFw0yNTA4MTYwNzU1NTFaMBgxFjAUBgNV BAMTDTY4OTZmZjA3LTA0OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxGkbG1dnt07gMJzp/6yQUmzD/GfA9uDyxkN1emQbbwpcTy0TR7IEbeVLCO7mM BTHLtTShrgDKGMjVXHJwRinu+SX3X15bUna5dRzKrQU0tuzNo56uzH8N0CvDCWWe Et3DY6KFzXf3Fpt2t9KFJ97pXVW8F1Zy+Ly7vdKsruFuMyoC63TVderp1lvEbYKR CqCy6cGdaPrngKMPDdI8GV17Sfj5JO4ezgS2gubYsAfOLfjt6hCotPDyg5R9dUNU 49AR5P57j3RNG1NRulSOYfoFOIUA5uHYsD0YLsCVgTaMdN2dRXJQHY2Rc7VoCzCP 3qqvhgk5DFY1h8Pji53wugNNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUipHsE+Kx RDvz3Pe0AHMjroIPq/wwHwYDVR0jBBgwFoAUhaOfEGRko23KJ0v8d/uvewMDh24w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTgxL0IyRTcxNDYyMEI3 OTExRjBCQjk5RUQ2QUM0RjlBRTAyL2hhT2ZFR1JrbzIzS0owdjhkX3V2ZXdNRGgy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGFPZkVHUmtvMjNLSjB2OGRfdXZld01EaDI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTgxL0IyRTcxNDYyMEI3OTExRjBCQjk5RUQ2QUM0RjlBRTAyL2hhT2ZFR1JrbzIz S0owdjhkX3V2ZXdNRGgyNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIU89d+bOBpylla/YwYAKQjsQNAvOg53KkV01Cm4MJUdqDHOm7Kmxiy3 LyaPdlmCXP/TkNq4OLgPvZDR4YT9APvuifoOen36wDZZgwpgRbb6E92CuTsF/Zc/ K0kQcWqE25zhh4xmSyiLD0BY8gkIFntbFLP5S9vchbr02SS3J8E9u47yQyMhqciu 5fiqBsrEX7IDPndCE660S24bn84sWXODokU8OsM1Gwhc4VaWO+pKTEO011s26Rxp b4159RBFq8Ra776oOqQPOmlZcf49W64BzfzQNStRryzfGtmBW28JIYACcZpM/OmQ KBcvOwp/bcb4lN6WNT7+jX/9S52+u4k= -----END CERTIFICATE-----Generated at Sun Aug 10 10:45:44 2025 by rpki-client