$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft File: rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json) Hash identifier: bfGwHhIgeTxIBu9tRuu/J6CGTYhuKsVRTbdlJPqIVF4= Subject key identifier: 32:E2:16:55:65:D6:EA:D1:8E:0A:B5:13:86:FF:31:57:94:BC:58:17 Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Certificate serial: 34ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft Manifest number: 34E4 Signing time: Sat 18 Oct 2025 14:28:23 +0000 Manifest this update: Sat 18 Oct 2025 14:28:22 +0000 Manifest next update: Sat 25 Oct 2025 14:28:22 +0000 Files and hashes: 1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: u/XESDcbxKAFgzg21I/qJ8kY+pVtm03sHXVOy2u1Irc=) 2: 2FA57B9A97B611EDAE9D4381C4F9AE02.roa (hash: lxqMNiae0D1WCp5yu5bfMqSlo/P+rEmoNXBcqzUVjb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13549 (0x34ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Validity Not Before: Oct 18 14:28:22 2025 GMT Not After : Oct 25 14:28:22 2025 GMT Subject: CN=68f3a407-19a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b9:83:53:31:dc:7b:0e:bd:60:9b:20:69:f0: cd:8f:d1:ee:60:85:d8:88:94:01:4e:78:9b:c5:08: 4c:3d:ee:9b:1a:f5:7a:d6:28:d5:f3:54:ca:1f:72: 35:e6:6c:8f:e6:dc:44:5a:00:fa:2f:c8:62:4b:01: 4f:03:cf:c9:ea:e5:bf:8a:82:5b:21:8c:76:46:30: e9:e0:33:44:8b:65:82:30:4c:ee:cb:42:a4:7e:ee: 69:7b:51:8f:7a:3a:c8:58:2e:72:51:26:f9:19:3f: d5:8c:74:46:01:11:ce:c4:ac:38:90:bf:46:f8:d1: a5:fd:c3:98:e0:ce:4a:ee:aa:16:ab:77:5a:86:a6: 04:d3:f4:97:a7:31:cd:db:2b:f0:87:45:b0:0f:12: 70:05:c1:6e:7d:da:69:81:44:ec:53:68:19:5e:63: 77:e3:3e:02:0b:c9:97:3b:91:74:ca:ba:7e:50:ba: e9:9b:7b:58:2a:4e:5d:d0:ac:1b:fa:f6:18:ca:2a: 40:cf:5e:02:fc:39:52:1b:55:71:6e:cf:77:db:f1: da:4e:0a:4a:63:07:25:0b:97:45:b0:0f:a4:8f:98: ac:05:77:22:aa:32:dd:ec:38:b5:c4:bf:d2:fe:8c: cc:ee:0b:21:33:db:33:9f:b0:83:11:23:2e:40:f4: 33:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E2:16:55:65:D6:EA:D1:8E:0A:B5:13:86:FF:31:57:94:BC:58:17 X509v3 Authority Key Identifier: keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:2d:96:63:6a:32:ba:fc:ae:18:37:f8:e1:14:71:2c:e3:76: fa:e4:8c:db:9b:6a:f9:43:6c:08:7d:5c:61:45:58:a7:60:a8: e7:f0:fc:50:b7:16:3d:b6:83:c7:df:18:e8:be:c5:82:1e:06: 00:49:0c:4f:08:cf:56:f2:c0:8c:fd:e7:f9:ca:f2:b4:5d:05: 20:8f:0f:d7:34:ba:74:bf:9d:e5:46:60:b7:1d:17:31:01:81: b8:bc:de:84:2d:0c:c0:14:ca:be:79:98:a4:86:e0:b0:5b:e2: df:85:0a:83:06:28:e7:ac:3d:d5:df:67:3b:3b:0b:e8:84:fa: 34:04:e0:1c:d6:ef:92:79:d1:59:3c:43:9f:03:1a:cb:86:9f: bd:d8:83:1b:9b:bd:0f:fe:51:7c:d9:86:c9:a5:51:21:ec:15: b9:56:ad:38:3a:24:62:46:20:9a:70:37:95:80:c6:0e:34:9e: 86:19:23:15:a0:2f:49:a5:77:24:01:9b:de:11:95:67:7e:1e: f8:f3:65:c0:22:64:90:fb:f1:53:f9:0b:35:1d:37:53:05:d8: 50:39:98:b0:ef:13:66:40:fc:e6:dd:a3:31:86:7e:cc:fb:16: ba:b7:d4:18:5b:b1:65:c0:3c:4c:9b:95:ce:b5:05:44:70:f4: 44:d3:fe:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNEQxMTAvBgNVBAUTKEFFMTA3RjNDMjk3NzcxN0ExQ0QzNTcxRDE4Mzc0OEZE MDdEOUZDNUYwHhcNMjUxMDE4MTQyODIyWhcNMjUxMDI1MTQyODIyWjAYMRYwFAYD VQQDEw02OGYzYTQwNy0xOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57mDUzHcew69YJsgafDNj9HuYIXYiJQBTnibxQhMPe6bGvV61ijV81TKH3I1 5myP5txEWgD6L8hiSwFPA8/J6uW/ioJbIYx2RjDp4DNEi2WCMEzuy0Kkfu5pe1GP ejrIWC5yUSb5GT/VjHRGARHOxKw4kL9G+NGl/cOY4M5K7qoWq3dahqYE0/SXpzHN 2yvwh0WwDxJwBcFufdppgUTsU2gZXmN34z4CC8mXO5F0yrp+ULrpm3tYKk5d0Kwb +vYYyipAz14C/DlSG1Vxbs932/HaTgpKYwclC5dFsA+kj5isBXciqjLd7Di1xL/S /ozM7gshM9szn7CDESMuQPQzeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLiFlVl 1urRjgq1E4b/MVeUvFgXMB8GA1UdIwQYMBaAFK4Qfzwpd3F6HNNXHRg3SP0H2fxf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0RC9FQTFCMUQ2QTFE ODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NYb2MwMWNkR0RkSV9RZlpf RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoQl9QQ2wzY1hvYzAxY2RHRGRJX1FmWl9GOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0RC9FQTFCMUQ2QTFEODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NY b2MwMWNkR0RkSV9RZlpfRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3LZZjajK6/K4YN/jhFHEs43b65Izbm2r5Q2wIfVxhRVinYKjn8PxQ txY9toPH3xjovsWCHgYASQxPCM9W8sCM/ef5yvK0XQUgjw/XNLp0v53lRmC3HRcx AYG4vN6ELQzAFMq+eZikhuCwW+LfhQqDBijnrD3V32c7OwvohPo0BOAc1u+SedFZ PEOfAxrLhp+92IMbm70P/lF82YbJpVEh7BW5Vq04OiRiRiCacDeVgMYONJ6GGSMV oC9JpXckAZveEZVnfh7482XAImSQ+/FT+Qs1HTdTBdhQOZiw7xNmQPzm3aMxhn7M +xa6t9QYW7FlwDxMm5XOtQVEcPRE0/6F -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:00 2025 by rpki-client