$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft File: PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft (raw, json) Hash identifier: ZJUHTFadI7BVj3lHkyUipxtgtFf0QrpzBBX6YB+7ktw= Subject key identifier: 47:FF:EB:56:CC:70:48:7A:4B:77:25:43:91:D8:74:32:F8:29:CF:C9 Authority key identifier: 3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 Certificate issuer: /CN=A914E6AA/serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft Manifest number: 091A Signing time: Mon 30 Jun 2025 23:13:29 +0000 Manifest this update: Mon 30 Jun 2025 23:13:28 +0000 Manifest next update: Mon 07 Jul 2025 23:13:28 +0000 Files and hashes: 1: PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl (hash: YMiW2tSSZ6+klQVVYnz4vqUSeJ+eUFRBy0kQbbUgm24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Validity Not Before: Jun 30 23:13:28 2025 GMT Not After : Jul 7 23:13:28 2025 GMT Subject: CN=68631a18-7328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6d:26:7e:2b:00:62:e9:5d:e5:98:53:4d:c4: ae:a3:c0:af:fa:03:fa:b6:9c:47:af:8d:71:7e:98: a6:70:bc:58:c6:23:46:0a:d4:c4:82:83:69:5c:d3: 11:75:f7:3f:86:9d:c2:57:9e:6c:66:1c:2e:d0:8d: 2b:ef:c6:fd:a3:d7:43:f8:07:ca:5d:aa:a9:6f:d8: 43:e1:53:f0:cd:59:93:e6:ae:57:11:a4:fa:ea:79: 35:bb:3a:e9:d7:c2:c7:67:ed:85:fa:8a:2c:82:a8: 54:e2:f4:ed:aa:32:e6:92:1c:f4:8e:27:9b:90:6a: 89:32:ed:ba:9a:23:47:ab:d8:be:51:4c:90:33:ee: 87:1f:c3:ae:3b:ea:f5:be:6d:3d:14:10:8a:2f:07: ef:d4:64:c4:0d:7d:90:b2:1a:b8:97:79:20:37:16: de:a0:3d:35:18:88:58:5f:f3:6b:7a:b9:e8:e3:bf: 41:43:18:b0:7a:5b:0a:b8:b2:88:f6:7c:98:71:18: 95:8a:2f:71:7b:02:82:c4:53:32:88:d9:41:99:51: d7:cd:54:ff:15:26:e1:26:cd:86:db:fa:bb:0d:7c: 13:02:ed:4d:97:40:57:c4:e7:57:34:aa:14:1e:e9: d9:08:88:63:f3:f2:6c:4c:05:a8:b2:ad:e0:9a:eb: a1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FF:EB:56:CC:70:48:7A:4B:77:25:43:91:D8:74:32:F8:29:CF:C9 X509v3 Authority Key Identifier: keyid:3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:df:36:57:d7:59:57:d6:5f:70:7e:ae:15:32:8d:84:2c:20: 33:cc:6a:13:ef:8f:c0:10:e9:6e:75:6c:48:94:ae:91:2a:01: f3:02:b7:f5:0d:63:aa:b6:8a:ef:76:f8:de:54:34:d3:26:1f: 97:16:e3:d3:b6:be:0e:0e:94:5a:23:9b:c8:35:1f:1f:4c:3f: c5:b5:c0:f3:89:19:c2:9f:c0:27:23:3e:23:2a:55:2e:55:62: 47:b3:a9:07:81:21:ac:96:dc:b7:85:65:ff:ba:88:0f:20:74: c3:a3:9c:71:57:bb:d1:7a:1d:e9:bb:f4:38:b5:f9:9c:89:cb: 29:d5:94:75:bc:2f:2e:26:c3:2d:d5:e1:da:c6:bc:07:d1:7d: cd:55:d4:c6:84:62:83:71:f0:c7:dc:91:65:b1:0a:c8:70:de: 25:e2:6f:44:96:5b:20:78:8c:30:50:7c:b4:38:b9:90:28:58: bc:fe:67:e0:7e:92:21:95:d4:cb:91:88:e4:4c:97:39:93:05: 01:65:9b:d2:ca:e8:ec:d3:17:0e:b2:92:2b:c7:81:31:14:c8: f0:58:3f:a3:6c:76:4a:7f:7c:c9:8c:39:27:b0:14:80:c0:51: 90:0f:ac:fa:87:40:ab:c5:22:ed:20:8a:2c:1e:0c:b2:02:71: bb:61:66:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDNENTFFREM0M0EzOTk5QjEzNzFDRTVDMDQxNDIwODNG RTI4N0QwRjIwHhcNMjUwNjMwMjMxMzI4WhcNMjUwNzA3MjMxMzI4WjAYMRYwFAYD VQQDEw02ODYzMWExOC03MzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp20mfisAYuld5ZhTTcSuo8Cv+gP6tpxHr41xfpimcLxYxiNGCtTEgoNpXNMR dfc/hp3CV55sZhwu0I0r78b9o9dD+AfKXaqpb9hD4VPwzVmT5q5XEaT66nk1uzrp 18LHZ+2F+oosgqhU4vTtqjLmkhz0jiebkGqJMu26miNHq9i+UUyQM+6HH8OuO+r1 vm09FBCKLwfv1GTEDX2Qshq4l3kgNxbeoD01GIhYX/Nrerno479BQxiwelsKuLKI 9nyYcRiVii9xewKCxFMyiNlBmVHXzVT/FSbhJs2G2/q7DXwTAu1Nl0BXxOdXNKoU HunZCIhj8/JsTAWosq3gmuuhiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEf/61bM cEh6S3clQ5HYdDL4Kc/JMB8GA1UdIwQYMBaAFD1R7cQ6OZmxNxzlwEFCCD/ih9Dy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1iRTNIT1hBUVVJSVAtS0gw UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWSHR4RG81bWJFM0hPWEFRVUlJUC1LSDBQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1i RTNIT1hBUVVJSVAtS0gwUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA73zZX11lX1l9wfq4VMo2ELCAzzGoT74/AEOludWxIlK6RKgHzArf1 DWOqtorvdvjeVDTTJh+XFuPTtr4ODpRaI5vINR8fTD/FtcDziRnCn8AnIz4jKlUu VWJHs6kHgSGslty3hWX/uogPIHTDo5xxV7vReh3pu/Q4tfmcicsp1ZR1vC8uJsMt 1eHaxrwH0X3NVdTGhGKDcfDH3JFlsQrIcN4l4m9EllsgeIwwUHy0OLmQKFi8/mfg fpIhldTLkYjkTJc5kwUBZZvSyujs0xcOspIrx4ExFMjwWD+jbHZKf3zJjDknsBSA wFGQD6z6h0CrxSLtIIosHgyyAnG7YWY+ -----END CERTIFICATE-----Generated at Tue Jul 1 18:29:54 2025 by rpki-client