$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft File: PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft (raw, json) Hash identifier: eGL3itcFx6/lKb7uRzv2+N92f3w7Fl0jOXNL2fz4tD8= Subject key identifier: 9C:64:0E:AE:0C:3C:B9:46:51:0D:27:6B:5E:FB:DE:06:DF:26:41:ED Authority key identifier: 3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 Certificate issuer: /CN=A914E6AA/serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft Manifest number: 09FA Signing time: Sun 19 Oct 2025 00:16:46 +0000 Manifest this update: Sun 19 Oct 2025 00:16:45 +0000 Manifest next update: Sun 26 Oct 2025 00:16:45 +0000 Files and hashes: 1: PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl (hash: o5y40RSU5jjVwrIaMMUVtHyAfLvlWhcCTycce3+Hq1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Validity Not Before: Oct 19 00:16:45 2025 GMT Not After : Oct 26 00:16:45 2025 GMT Subject: CN=68f42ded-5645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:53:4c:b5:55:a7:27:29:7a:5c:0b:58:d2:eb: 4f:16:95:4c:84:ee:d7:e4:95:da:43:74:2a:02:51: 12:7c:2c:15:36:ea:71:f8:b7:7e:a6:e8:c3:03:01: 6b:52:75:22:99:fb:e9:c3:5f:35:f1:3d:cb:5b:fe: 52:b3:ed:ff:38:3a:53:28:a5:96:c9:c4:bb:42:b0: 6b:0e:08:73:4f:6f:c4:58:e3:6b:6f:c4:53:56:69: bb:7c:4d:cf:6a:48:37:8b:87:d6:d6:41:06:b7:31: 2f:34:48:b8:43:a6:9b:3d:86:0a:ac:ac:4a:09:22: a3:37:bb:30:27:f4:a7:82:f8:de:5e:d4:3f:20:ed: c1:47:0f:63:85:40:dd:7a:96:30:1a:1b:51:a0:4e: 90:b3:7f:93:f1:b0:90:31:c7:c1:cd:01:be:3c:0f: 69:97:9a:08:29:ca:0e:d2:02:34:81:16:01:a7:d3: c7:2d:15:0e:87:d4:11:5d:11:aa:e6:3b:33:de:bc: d9:eb:f2:c3:30:20:b1:93:91:7a:fd:71:ef:a6:d8: 0c:48:14:1f:ee:e5:33:87:92:a8:e1:89:da:3f:4a: 60:5c:17:13:a8:0d:d3:bd:93:50:b2:ee:a5:dd:45: 3e:50:7a:f4:17:b0:dd:c5:35:12:55:23:e2:5b:d2: 9d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:64:0E:AE:0C:3C:B9:46:51:0D:27:6B:5E:FB:DE:06:DF:26:41:ED X509v3 Authority Key Identifier: keyid:3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:eb:8c:2c:a8:74:1d:e8:79:71:52:ac:84:d2:af:cf:5b:43: 73:a5:a2:f9:b5:a5:7a:78:d5:d3:24:65:32:d7:f2:07:4b:01: 7e:bb:e8:08:ab:3c:6f:1e:77:2b:48:74:02:22:b9:14:0b:72: 5e:ab:69:eb:d5:fe:66:73:18:bc:f1:25:cc:53:3a:3f:bd:f5: 0f:e8:82:03:0e:05:4c:e3:af:b7:13:61:18:29:f1:2b:71:71: a1:03:1a:f4:5d:7b:94:3c:1d:6c:fc:11:b1:7a:38:f2:eb:c0: b2:86:44:f8:46:17:09:3d:f2:4d:b5:03:9d:89:3f:c7:8e:80: 68:a7:81:1b:8d:f9:f8:2f:16:fb:19:c4:ce:3f:3e:35:93:54: 3e:11:9f:93:b6:96:2c:de:be:b7:e9:12:39:95:41:08:f2:7c: 99:93:4b:67:14:04:90:e3:eb:88:b1:5c:9c:38:4d:74:32:ba: 66:48:90:e2:41:d3:3f:70:40:94:39:b9:9d:3b:2d:99:b2:b6: 9a:b6:68:a5:17:c2:59:34:3b:a6:6f:25:63:1c:1f:0f:b8:1b: d7:df:12:ca:f6:01:e9:41:35:26:6a:16:1e:1a:a7:ce:c1:6a: 3e:87:3f:d0:f9:99:2e:5d:cb:0b:52:0f:41:2e:88:c1:78:f3: e3:f7:65:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDNENTFFREM0M0EzOTk5QjEzNzFDRTVDMDQxNDIwODNG RTI4N0QwRjIwHhcNMjUxMDE5MDAxNjQ1WhcNMjUxMDI2MDAxNjQ1WjAYMRYwFAYD VQQDEw02OGY0MmRlZC01NjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlNMtVWnJyl6XAtY0utPFpVMhO7X5JXaQ3QqAlESfCwVNupx+Ld+pujDAwFr UnUimfvpw1818T3LW/5Ss+3/ODpTKKWWycS7QrBrDghzT2/EWONrb8RTVmm7fE3P akg3i4fW1kEGtzEvNEi4Q6abPYYKrKxKCSKjN7swJ/SngvjeXtQ/IO3BRw9jhUDd epYwGhtRoE6Qs3+T8bCQMcfBzQG+PA9pl5oIKcoO0gI0gRYBp9PHLRUOh9QRXRGq 5jsz3rzZ6/LDMCCxk5F6/XHvptgMSBQf7uUzh5Ko4YnaP0pgXBcTqA3TvZNQsu6l 3UU+UHr0F7DdxTUSVSPiW9KdyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxkDq4M PLlGUQ0na1773gbfJkHtMB8GA1UdIwQYMBaAFD1R7cQ6OZmxNxzlwEFCCD/ih9Dy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1iRTNIT1hBUVVJSVAtS0gw UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWSHR4RG81bWJFM0hPWEFRVUlJUC1LSDBQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1i RTNIT1hBUVVJSVAtS0gwUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT64wsqHQd6HlxUqyE0q/PW0NzpaL5taV6eNXTJGUy1/IHSwF+u+gI qzxvHncrSHQCIrkUC3Jeq2nr1f5mcxi88SXMUzo/vfUP6IIDDgVM46+3E2EYKfEr cXGhAxr0XXuUPB1s/BGxejjy68CyhkT4RhcJPfJNtQOdiT/HjoBop4Ebjfn4Lxb7 GcTOPz41k1Q+EZ+TtpYs3r636RI5lUEI8nyZk0tnFASQ4+uIsVycOE10MrpmSJDi QdM/cECUObmdOy2ZsraatmilF8JZNDumbyVjHB8PuBvX3xLK9gHpQTUmahYeGqfO wWo+hz/Q+ZkuXcsLUg9BLojBePPj92Va -----END CERTIFICATE-----Generated at Mon Oct 20 07:59:14 2025 by rpki-client