$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft File: rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json) Hash identifier: MjGq8pFu2LRW6PsSwI5D3nKlC8fMD//2TnBHaXhprHQ= Subject key identifier: 2A:FB:3A:E3:44:3B:2E:36:88:B3:A2:35:D9:E1:5D:3B:E3:FF:A1:E4 Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Certificate serial: 34B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft Manifest number: 34AD Signing time: Wed 02 Jul 2025 14:26:31 +0000 Manifest this update: Wed 02 Jul 2025 14:26:30 +0000 Manifest next update: Wed 09 Jul 2025 14:26:30 +0000 Files and hashes: 1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: hPJOH7E/3fTV0xhZaIterKcqxuyYCazIWxSBs6nSy+8=) 2: 2FA57B9A97B611EDAE9D4381C4F9AE02.roa (hash: lxqMNiae0D1WCp5yu5bfMqSlo/P+rEmoNXBcqzUVjb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13494 (0x34b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Validity Not Before: Jul 2 14:26:30 2025 GMT Not After : Jul 9 14:26:30 2025 GMT Subject: CN=68654196-b7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a9:1c:9a:c4:0b:8b:82:40:0a:5b:d0:d6:c2: 6d:7e:b1:07:a0:17:6e:43:04:76:da:88:ed:3a:7b: 95:aa:fb:0c:96:c2:21:1f:67:39:6e:ad:12:34:51: 51:38:b4:b2:9a:f2:59:98:3d:a0:8a:08:68:db:9d: 66:83:21:61:de:33:ac:45:15:84:d9:66:65:17:b4: f0:40:f3:24:c9:07:ec:47:2b:b3:11:7f:71:af:84: d1:88:49:e6:a6:5a:92:79:38:61:31:88:7d:51:44: 8e:74:67:7d:70:24:6b:cd:0e:e1:88:d4:e5:d2:3f: 31:fa:7e:9f:81:d2:f8:26:fa:50:df:4c:4f:5c:b7: eb:73:92:96:ad:24:60:be:c4:52:71:a9:d8:10:ee: 84:d0:70:c7:c2:8a:68:e0:6d:52:e0:77:d8:78:b0: fc:8a:18:2e:f6:9f:35:6c:98:03:b1:5b:a0:5d:d8: d6:ef:f4:e1:4b:6b:53:c9:63:a5:af:b4:ef:56:84: d6:ad:16:db:c5:9c:04:59:fd:4b:2c:58:3d:f2:46: d0:4d:5c:bc:35:df:92:d1:3e:a2:5b:c5:a2:f7:d2: 41:a5:e7:7b:30:f4:20:80:5c:f8:a6:2d:2f:63:6c: c8:69:cd:62:67:e8:9e:65:16:6c:0b:f8:75:ab:f6: f5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FB:3A:E3:44:3B:2E:36:88:B3:A2:35:D9:E1:5D:3B:E3:FF:A1:E4 X509v3 Authority Key Identifier: keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c2:04:6c:53:2d:05:a4:b0:32:de:c2:39:f3:63:4e:28:0f: ad:ad:52:bf:d7:34:8e:28:42:a7:4c:11:26:58:5b:0d:5c:85: fe:8a:36:38:e8:46:e0:c5:dd:1f:39:d1:00:f3:45:bc:55:78: b7:71:8c:56:8c:1b:29:ed:49:34:54:7c:f9:73:c5:2c:0c:d4: 68:f5:4e:c2:4d:f0:08:d8:a9:65:bb:e7:fe:e3:74:f4:b7:99: 20:c7:d7:e8:bd:b5:89:44:82:02:35:ad:09:d2:7a:34:1a:bb: e0:b6:7a:85:f5:ab:76:f8:c5:77:22:b6:9d:af:51:08:71:7e: 94:d4:11:9d:75:56:81:2a:20:6b:2e:ef:be:68:1d:2b:41:20: 6b:73:29:20:d9:86:80:a3:03:c1:05:45:93:db:3c:05:95:4c: 18:ec:ab:c4:c0:44:62:ec:55:ec:4b:87:c3:e9:a5:33:dc:fb: 8e:22:be:9f:5a:ec:eb:75:fe:60:ec:53:ba:26:63:3d:dd:4b: ad:74:de:d0:43:70:ed:eb:b5:f8:2c:c2:d5:65:c6:b0:7f:e7: f6:73:70:bf:78:53:29:45:8b:b6:01:81:2f:27:b2:b5:ce:fa: e3:40:0d:06:3a:69:d9:e6:68:7d:31:3a:ca:ea:26:0a:09:19: d1:97:d2:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNEQxMTAvBgNVBAUTKEFFMTA3RjNDMjk3NzcxN0ExQ0QzNTcxRDE4Mzc0OEZE MDdEOUZDNUYwHhcNMjUwNzAyMTQyNjMwWhcNMjUwNzA5MTQyNjMwWjAYMRYwFAYD VQQDEw02ODY1NDE5Ni1iN2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KkcmsQLi4JAClvQ1sJtfrEHoBduQwR22ojtOnuVqvsMlsIhH2c5bq0SNFFR OLSymvJZmD2gigho251mgyFh3jOsRRWE2WZlF7TwQPMkyQfsRyuzEX9xr4TRiEnm plqSeThhMYh9UUSOdGd9cCRrzQ7hiNTl0j8x+n6fgdL4JvpQ30xPXLfrc5KWrSRg vsRScanYEO6E0HDHwopo4G1S4HfYeLD8ihgu9p81bJgDsVugXdjW7/ThS2tTyWOl r7TvVoTWrRbbxZwEWf1LLFg98kbQTVy8Nd+S0T6iW8Wi99JBped7MPQggFz4pi0v Y2zIac1iZ+ieZRZsC/h1q/b1nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCr7OuNE Oy42iLOiNdnhXTvj/6HkMB8GA1UdIwQYMBaAFK4Qfzwpd3F6HNNXHRg3SP0H2fxf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0RC9FQTFCMUQ2QTFE ODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NYb2MwMWNkR0RkSV9RZlpf RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoQl9QQ2wzY1hvYzAxY2RHRGRJX1FmWl9GOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0RC9FQTFCMUQ2QTFEODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NY b2MwMWNkR0RkSV9RZlpfRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfwgRsUy0FpLAy3sI582NOKA+trVK/1zSOKEKnTBEmWFsNXIX+ijY4 6Ebgxd0fOdEA80W8VXi3cYxWjBsp7Uk0VHz5c8UsDNRo9U7CTfAI2Kllu+f+43T0 t5kgx9fovbWJRIICNa0J0no0GrvgtnqF9at2+MV3Iradr1EIcX6U1BGddVaBKiBr Lu++aB0rQSBrcykg2YaAowPBBUWT2zwFlUwY7KvEwERi7FXsS4fD6aUz3PuOIr6f Wuzrdf5g7FO6JmM93UutdN7QQ3Dt67X4LMLVZcawf+f2c3C/eFMpRYu2AYEvJ7K1 zvrjQA0GOmnZ5mh9MTrK6iYKCRnRl9IP -----END CERTIFICATE-----Generated at Wed Jul 2 22:40:28 2025 by rpki-client