$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft File: rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json) Hash identifier: j6pGCZdaecZPG8T8I18RYVizTwaAaGmuHO2T6kMRWQI= Subject key identifier: 68:04:9C:3F:80:3F:B8:E8:84:0D:C5:18:B5:56:66:41:BC:8B:64:7D Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Certificate serial: 34D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft Manifest number: 34C7 Signing time: Fri 22 Aug 2025 14:26:28 +0000 Manifest this update: Fri 22 Aug 2025 14:26:28 +0000 Manifest next update: Fri 29 Aug 2025 14:26:28 +0000 Files and hashes: 1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: NICRoWKqnsvb43xjgxLkHpbXTNev1pLP4GA5nSLNjBg=) 2: 2FA57B9A97B611EDAE9D4381C4F9AE02.roa (hash: lxqMNiae0D1WCp5yu5bfMqSlo/P+rEmoNXBcqzUVjb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13520 (0x34d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Validity Not Before: Aug 22 14:26:28 2025 GMT Not After : Aug 29 14:26:28 2025 GMT Subject: CN=68a87e14-1906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4f:ee:64:d4:c1:f2:8b:bb:d8:1f:c9:cd:51: 3e:07:2f:3a:13:9c:12:6d:10:eb:28:5a:67:56:48: 63:31:68:cf:2e:a5:74:2b:92:22:7a:cd:14:8b:a3: 6f:98:d5:60:e4:90:e0:0f:56:e3:4e:58:ee:f2:a0: b0:12:d6:5b:31:2f:8d:10:37:c7:d4:96:f6:01:f5: ad:80:d2:f0:c2:47:0c:5a:f0:30:53:eb:56:ef:93: 06:73:52:a7:45:f2:46:12:04:a2:2b:44:81:2e:46: 8f:f7:f5:d6:06:0c:94:18:fd:70:80:9d:34:a1:66: 9c:83:07:cc:44:2f:75:ec:b6:3e:46:83:01:72:c5: 74:49:e9:5f:da:8b:7f:4d:e2:88:5b:ae:a1:c8:b7: 41:f8:e0:51:5b:c2:58:f8:f9:02:b1:80:0d:27:83: c7:ae:03:8f:e0:6f:1d:93:b8:18:75:98:32:74:f2: d8:1a:84:a3:4d:15:47:91:94:16:3f:9f:4f:07:45: 24:20:d5:26:1d:7f:72:a5:81:b7:42:e3:61:52:d1: cb:72:ac:7c:8c:4e:b9:2e:9d:76:1e:2b:50:13:59: e2:ae:31:6f:39:c9:fa:54:b5:78:e9:d7:48:25:1a: 1e:29:2f:01:60:ed:d8:ff:34:c9:9e:aa:a4:59:72: 62:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:04:9C:3F:80:3F:B8:E8:84:0D:C5:18:B5:56:66:41:BC:8B:64:7D X509v3 Authority Key Identifier: keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ab:d1:17:13:8b:17:03:4d:8c:d7:d1:74:3b:17:dd:67:ee: 13:c3:26:e5:d3:c5:0b:94:9b:85:14:cf:19:2c:16:25:ee:c9: a4:31:f9:59:f4:d1:e6:e7:ce:29:d0:ed:f7:40:dd:e9:2b:a6: 3b:d6:2a:09:7a:01:e4:f1:df:03:67:98:a6:5e:ff:87:07:92: b2:55:1e:43:5b:86:f2:cd:16:60:fa:0c:e8:3e:c7:15:e7:66: ec:b7:e4:47:08:5f:95:cb:5f:99:20:5b:f7:e1:1a:b6:54:cc: c6:2f:0f:85:be:6e:c1:72:c6:2d:20:c4:d0:c6:b5:fc:c0:3c: 6f:64:4c:9e:7e:31:ec:bd:56:bb:96:5e:48:50:7e:03:3a:f9: 6e:17:c3:98:a0:23:f5:08:c6:7a:db:7f:e1:44:8d:40:41:87: e7:8b:98:49:f4:b0:6f:57:83:0f:9a:5c:d7:42:f1:0f:10:d8: 49:5b:90:5c:c9:aa:0a:3c:ff:bb:31:a0:64:e2:af:68:09:be: e1:35:60:64:ec:0a:3a:7f:09:fc:61:00:9c:92:2d:a6:a0:4b: 1d:24:cd:30:a2:53:32:e3:8f:4f:24:40:51:14:ee:c1:13:39: 34:08:f7:ee:80:70:a5:65:66:c5:02:69:06:f7:51:d5:9f:f7: 86:4a:d2:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNEQxMTAvBgNVBAUTKEFFMTA3RjNDMjk3NzcxN0ExQ0QzNTcxRDE4Mzc0OEZE MDdEOUZDNUYwHhcNMjUwODIyMTQyNjI4WhcNMjUwODI5MTQyNjI4WjAYMRYwFAYD VQQDEw02OGE4N2UxNC0xOTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0E/uZNTB8ou72B/JzVE+By86E5wSbRDrKFpnVkhjMWjPLqV0K5Iies0Ui6Nv mNVg5JDgD1bjTlju8qCwEtZbMS+NEDfH1Jb2AfWtgNLwwkcMWvAwU+tW75MGc1Kn RfJGEgSiK0SBLkaP9/XWBgyUGP1wgJ00oWacgwfMRC917LY+RoMBcsV0Self2ot/ TeKIW66hyLdB+OBRW8JY+PkCsYANJ4PHrgOP4G8dk7gYdZgydPLYGoSjTRVHkZQW P59PB0UkINUmHX9ypYG3QuNhUtHLcqx8jE65Lp12HitQE1nirjFvOcn6VLV46ddI JRoeKS8BYO3Y/zTJnqqkWXJibQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgEnD+A P7johA3FGLVWZkG8i2R9MB8GA1UdIwQYMBaAFK4Qfzwpd3F6HNNXHRg3SP0H2fxf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0RC9FQTFCMUQ2QTFE ODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NYb2MwMWNkR0RkSV9RZlpf RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoQl9QQ2wzY1hvYzAxY2RHRGRJX1FmWl9GOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0RC9FQTFCMUQ2QTFEODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NY b2MwMWNkR0RkSV9RZlpfRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKq9EXE4sXA02M19F0OxfdZ+4Twybl08ULlJuFFM8ZLBYl7smkMflZ 9NHm584p0O33QN3pK6Y71ioJegHk8d8DZ5imXv+HB5KyVR5DW4byzRZg+gzoPscV 52bst+RHCF+Vy1+ZIFv34Rq2VMzGLw+Fvm7BcsYtIMTQxrX8wDxvZEyefjHsvVa7 ll5IUH4DOvluF8OYoCP1CMZ623/hRI1AQYfni5hJ9LBvV4MPmlzXQvEPENhJW5Bc yaoKPP+7MaBk4q9oCb7hNWBk7Ao6fwn8YQCcki2moEsdJM0wolMy449PJEBRFO7B Ezk0CPfugHClZWbFAmkG91HVn/eGStLV -----END CERTIFICATE-----Generated at Sun Aug 24 00:07:52 2025 by rpki-client