$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft File: PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft (raw, json) Hash identifier: 9u9GobrlfFe8EA1o2nJfj4OuWTVoFB+ZHsRg7yeK+TI= Subject key identifier: BE:E1:67:BF:E3:F6:44:61:AC:B2:2D:B1:7C:3E:B8:93:5A:26:05:5E Authority key identifier: 3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 Certificate issuer: /CN=A914E6AA/serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft Manifest number: 0986 Signing time: Fri 22 Aug 2025 22:57:51 +0000 Manifest this update: Fri 22 Aug 2025 22:57:50 +0000 Manifest next update: Fri 29 Aug 2025 22:57:50 +0000 Files and hashes: 1: PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl (hash: FIlDnKfDfMfBC5RT12QI7d+xjxA2on3up+ep/x4H4/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Validity Not Before: Aug 22 22:57:50 2025 GMT Not After : Aug 29 22:57:50 2025 GMT Subject: CN=68a8f5ef-eadf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7f:3c:a8:63:c5:b6:e9:cc:a4:1f:7c:7c:9c: 1a:fc:e1:d6:2c:1b:3c:c7:54:ec:10:50:fc:98:c8: 70:42:de:50:2d:0b:5d:1a:b4:e2:a7:5f:f9:28:26: 87:88:d7:5b:87:d9:d9:4b:62:84:1b:3c:0a:f5:ae: e6:8c:e9:a5:fe:db:ea:5f:32:2f:53:a7:6e:bd:b9: 63:0c:c7:d5:37:1a:16:4f:a8:2e:4a:52:f3:36:42: 1b:9f:6d:79:97:17:06:24:fd:2f:b4:14:51:d3:8a: 4e:c2:b3:7c:c2:8e:9d:e2:e6:b1:9b:c7:65:c6:15: 8f:32:3a:38:26:8e:8d:07:15:a6:c4:f1:fc:b2:38: e9:fa:16:13:51:bc:60:4e:06:3d:b1:0b:a5:96:9b: 65:35:4d:65:e4:86:50:39:f8:30:90:93:5f:21:fa: 66:8d:90:74:29:d1:b9:74:21:f0:7f:b6:0c:a3:36: 7b:7d:2a:42:2a:5d:7d:43:a9:b7:89:2f:47:f2:23: ba:38:19:cd:9b:cf:6b:70:8e:66:a3:2e:6d:e4:7e: 63:7f:f3:39:cf:4e:16:e8:f6:fe:5e:ea:17:07:2c: 7b:f9:c0:10:4a:3e:e6:e5:17:b4:6d:2c:8c:92:d1: c6:4c:d3:09:65:9a:27:21:a9:ea:f3:a8:2b:57:ad: f5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E1:67:BF:E3:F6:44:61:AC:B2:2D:B1:7C:3E:B8:93:5A:26:05:5E X509v3 Authority Key Identifier: keyid:3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:34:e2:4e:b2:b6:1e:b2:40:2f:ab:bb:27:f9:b3:61:92:e3: dd:7b:1d:8b:f1:e9:87:a2:44:e1:35:6c:da:c7:90:1a:c7:36: eb:97:89:8e:7b:8c:fb:c9:11:a2:39:33:3b:ae:b6:1f:29:8a: 57:30:16:89:fb:b1:62:a4:15:51:a0:65:37:b6:f6:54:9c:3d: 06:65:ef:90:cb:d9:f0:5b:5b:8e:ce:3d:d6:f4:96:cb:43:9c: 4a:c7:15:34:84:c9:15:f2:2b:78:66:9f:12:34:21:5f:8d:b5: e7:32:26:b2:15:07:e8:b7:ac:95:44:f1:d3:aa:42:34:e5:2d: 60:15:cd:31:69:05:6f:df:aa:d1:88:b8:d1:96:0b:a1:13:63: a6:c9:9c:fc:cc:6e:41:61:c1:cd:27:0c:87:77:f6:d0:70:e9: 64:6b:19:62:d6:9c:c3:6b:3b:55:99:d8:03:03:a1:27:55:54: 67:5a:d1:5a:31:bd:61:e7:8f:4c:56:23:6b:9c:e2:0f:4f:5d: 8a:9e:3f:cd:c6:30:fb:c0:b6:37:78:c1:af:08:1f:da:0e:93: 41:a7:47:ee:6e:10:1f:4d:13:06:88:38:f4:35:2f:2a:af:5e: 93:5a:04:1a:f9:d5:f2:bd:16:f3:46:d7:2b:0c:6b:6e:f0:f6: ea:5b:bb:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDNENTFFREM0M0EzOTk5QjEzNzFDRTVDMDQxNDIwODNG RTI4N0QwRjIwHhcNMjUwODIyMjI1NzUwWhcNMjUwODI5MjI1NzUwWjAYMRYwFAYD VQQDEw02OGE4ZjVlZi1lYWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlH88qGPFtunMpB98fJwa/OHWLBs8x1TsEFD8mMhwQt5QLQtdGrTip1/5KCaH iNdbh9nZS2KEGzwK9a7mjOml/tvqXzIvU6duvbljDMfVNxoWT6guSlLzNkIbn215 lxcGJP0vtBRR04pOwrN8wo6d4uaxm8dlxhWPMjo4Jo6NBxWmxPH8sjjp+hYTUbxg TgY9sQullptlNU1l5IZQOfgwkJNfIfpmjZB0KdG5dCHwf7YMozZ7fSpCKl19Q6m3 iS9H8iO6OBnNm89rcI5moy5t5H5jf/M5z04W6Pb+XuoXByx7+cAQSj7m5Re0bSyM ktHGTNMJZZonIanq86grV6314QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7hZ7/j 9kRhrLItsXw+uJNaJgVeMB8GA1UdIwQYMBaAFD1R7cQ6OZmxNxzlwEFCCD/ih9Dy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1iRTNIT1hBUVVJSVAtS0gw UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWSHR4RG81bWJFM0hPWEFRVUlJUC1LSDBQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1i RTNIT1hBUVVJSVAtS0gwUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDjNOJOsrYeskAvq7sn+bNhkuPdex2L8emHokThNWzax5Aaxzbrl4mO e4z7yRGiOTM7rrYfKYpXMBaJ+7FipBVRoGU3tvZUnD0GZe+Qy9nwW1uOzj3W9JbL Q5xKxxU0hMkV8it4Zp8SNCFfjbXnMiayFQfot6yVRPHTqkI05S1gFc0xaQVv36rR iLjRlguhE2OmyZz8zG5BYcHNJwyHd/bQcOlkaxli1pzDaztVmdgDA6EnVVRnWtFa Mb1h549MViNrnOIPT12Knj/NxjD7wLY3eMGvCB/aDpNBp0fubhAfTRMGiDj0NS8q r16TWgQa+dXyvRbzRtcrDGtu8PbqW7sh -----END CERTIFICATE-----Generated at Sat Aug 23 22:35:27 2025 by rpki-client