$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft File: PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft (raw, json) Hash identifier: xtMs6HyBUv8hfPa5s77+/ZkwpZbp5kzI/H6gW/POj3Y= Subject key identifier: 55:DB:B6:62:2F:EE:12:51:D4:1C:2E:68:1B:04:F8:63:6F:47:91:0D Authority key identifier: 3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 Certificate issuer: /CN=A914E6AA/serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft Manifest number: 08B6 Signing time: Sat 10 May 2025 22:33:12 +0000 Manifest this update: Sat 10 May 2025 22:33:11 +0000 Manifest next update: Sat 17 May 2025 22:33:11 +0000 Files and hashes: 1: PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl (hash: xmfa4AJmsth4eY5mwCauh5xq5+/sAJ7pqB3+7RzsyrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Validity Not Before: May 10 22:33:11 2025 GMT Not After : May 17 22:33:11 2025 GMT Subject: CN=681fd428-befa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:80:da:97:c0:7f:a9:6a:3b:a1:ad:1c:df:ee: 86:00:e9:4c:47:f2:df:c4:8a:8c:64:6e:46:2a:77: 0e:b4:5b:f2:c5:00:cd:b8:b1:cf:ac:dc:23:65:29: 82:40:76:6f:9c:60:2a:37:4a:92:9f:c0:d4:e1:8c: f7:d5:0c:c7:9d:02:4a:32:dc:a2:8b:b8:13:e3:45: 75:ca:f0:2a:63:b2:a3:70:cd:6b:a2:33:45:db:b4: aa:3e:2e:5d:a5:b2:7c:6e:13:19:e7:c6:db:8d:f3: a8:32:b2:e6:8f:7a:b2:87:9f:9b:59:35:ac:c4:25: ab:ff:ec:fc:a6:1e:18:1d:9d:a3:c2:e2:d9:b0:e0: a3:37:6d:77:de:b9:d0:0b:5f:69:f0:a3:7b:2d:a5: 98:ad:d3:21:c6:04:33:f5:64:f4:f3:d2:df:af:2e: 0c:d2:36:26:87:93:4a:2a:3e:e1:80:9e:66:4c:01: db:ce:91:d8:d7:35:bd:19:50:a4:76:7a:e2:b1:31: 59:6e:36:e6:59:9b:47:f3:eb:ff:9f:23:32:77:61: 5b:5a:37:bf:3d:51:99:67:cd:98:1a:56:9a:63:8a: d2:b2:4e:6c:15:44:31:02:74:d7:52:1b:3c:d1:08: 65:38:7b:f3:ff:5f:c7:95:ea:5d:64:ba:87:65:43: 5d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DB:B6:62:2F:EE:12:51:D4:1C:2E:68:1B:04:F8:63:6F:47:91:0D X509v3 Authority Key Identifier: keyid:3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:24:1e:ae:ad:68:29:35:8f:d8:c9:c1:24:71:74:48:cc:d1: 9e:b5:97:1b:c6:9f:65:9e:73:1a:98:4f:43:7b:3e:ff:99:ef: f5:50:5e:6c:e0:30:3d:d7:ac:23:de:c0:86:45:52:34:38:e2: 26:ff:2f:47:7c:96:6b:33:53:bd:4c:6a:3d:51:bb:da:9a:4b: f7:67:bc:84:15:7b:95:cb:b6:44:1a:27:eb:c3:b9:8a:10:d2: ac:7f:4f:93:b4:26:98:96:f0:67:26:b0:06:0b:e5:9e:9d:33: f2:c9:87:74:d1:e9:c3:b0:42:53:49:87:3d:fc:7b:1e:94:2c: 8a:f3:3b:b9:68:29:fd:bf:ff:dc:c3:34:06:c1:e2:ca:46:a5: 60:d1:ca:a9:d8:58:e3:71:28:7d:69:60:7d:e3:b1:33:04:76: b3:fe:30:89:0e:6c:46:d6:98:a4:16:f9:f1:4c:9c:cb:09:cc: 0a:fd:fe:dc:80:10:fb:1e:4e:d2:49:15:0b:3b:62:f5:05:ea: 66:b5:2c:c1:6c:1f:2b:88:77:0b:ba:ab:b7:8a:5f:89:b2:1f: 29:5d:12:6c:28:14:2d:43:8c:1f:a4:fb:e3:58:c1:f3:c5:b7: a8:46:58:79:26:b1:f2:35:c9:6a:04:52:67:07:22:ab:c4:64: ae:36:2c:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDNENTFFREM0M0EzOTk5QjEzNzFDRTVDMDQxNDIwODNG RTI4N0QwRjIwHhcNMjUwNTEwMjIzMzExWhcNMjUwNTE3MjIzMzExWjAYMRYwFAYD VQQDEw02ODFmZDQyOC1iZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIDal8B/qWo7oa0c3+6GAOlMR/LfxIqMZG5GKncOtFvyxQDNuLHPrNwjZSmC QHZvnGAqN0qSn8DU4Yz31QzHnQJKMtyii7gT40V1yvAqY7KjcM1rojNF27SqPi5d pbJ8bhMZ58bbjfOoMrLmj3qyh5+bWTWsxCWr/+z8ph4YHZ2jwuLZsOCjN2133rnQ C19p8KN7LaWYrdMhxgQz9WT089Lfry4M0jYmh5NKKj7hgJ5mTAHbzpHY1zW9GVCk dnrisTFZbjbmWZtH8+v/nyMyd2FbWje/PVGZZ82YGlaaY4rSsk5sFUQxAnTXUhs8 0QhlOHvz/1/HlepdZLqHZUNdyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXbtmIv 7hJR1BwuaBsE+GNvR5ENMB8GA1UdIwQYMBaAFD1R7cQ6OZmxNxzlwEFCCD/ih9Dy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1iRTNIT1hBUVVJSVAtS0gw UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWSHR4RG81bWJFM0hPWEFRVUlJUC1LSDBQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1i RTNIT1hBUVVJSVAtS0gwUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOJB6urWgpNY/YycEkcXRIzNGetZcbxp9lnnMamE9Dez7/me/1UF5s 4DA916wj3sCGRVI0OOIm/y9HfJZrM1O9TGo9Ubvamkv3Z7yEFXuVy7ZEGifrw7mK ENKsf0+TtCaYlvBnJrAGC+WenTPyyYd00enDsEJTSYc9/HselCyK8zu5aCn9v//c wzQGweLKRqVg0cqp2FjjcSh9aWB947EzBHaz/jCJDmxG1pikFvnxTJzLCcwK/f7c gBD7Hk7SSRULO2L1BepmtSzBbB8riHcLuqu3il+Jsh8pXRJsKBQtQ4wfpPvjWMHz xbeoRlh5JrHyNclqBFJnByKrxGSuNiyI -----END CERTIFICATE-----Generated at Sun May 11 15:34:32 2025 by rpki-client