$ rpki-client -vvf rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft File: Rhwv4neii8iX8PzKT3yRCN2XSQM.mft (raw, json) Hash identifier: Px1co61GMdiVrdYDA2SnHkX4kHARNbp7AV1riE3iojE= Subject key identifier: AC:01:A9:1D:49:5D:DC:32:9A:81:81:3C:AE:3F:94:A3:96:23:1A:89 Authority key identifier: 46:1C:2F:E2:77:A2:8B:C8:97:F0:FC:CA:4F:7C:91:08:DD:97:49:03 Certificate issuer: /CN=A918711E/serialNumber=461C2FE277A28BC897F0FCCA4F7C9108DD974903 Certificate serial: 0ADF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft Manifest number: 0ADF Signing time: Fri 22 Aug 2025 19:31:35 +0000 Manifest this update: Fri 22 Aug 2025 19:31:34 +0000 Manifest next update: Fri 29 Aug 2025 19:31:34 +0000 Files and hashes: 1: Rhwv4neii8iX8PzKT3yRCN2XSQM.crl (hash: BulsshkpqjrL/M/zgFTAC8FfCh0aJxrH5sNHomZLknY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.crl rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2783 (0xadf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918711E, serialNumber=461C2FE277A28BC897F0FCCA4F7C9108DD974903 Validity Not Before: Aug 22 19:31:34 2025 GMT Not After : Aug 29 19:31:34 2025 GMT Subject: CN=68a8c596-15ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e0:9d:6b:1b:a6:ea:51:a4:5b:87:ed:69:ae: ad:b1:9e:4d:04:5b:6f:8e:96:fa:48:aa:c3:ad:b6: 46:6d:3a:f3:b4:f3:06:e7:53:9c:28:c7:ca:43:e2: 80:67:5a:69:81:4c:f7:db:45:45:94:a3:4d:03:f2: 91:12:9f:d3:ee:f9:e3:67:2f:06:0a:e2:8c:18:81: 61:9a:5b:c0:1d:88:5d:e0:23:33:65:b7:3d:8e:89: c8:f2:b0:f2:e4:e2:13:ad:17:59:74:d2:48:72:d0: 0c:8b:06:52:fd:d4:86:6f:1e:cb:c2:03:20:2a:11: d2:06:88:ab:19:80:a1:20:10:4d:f4:0b:ed:1c:54: d1:6a:a6:2e:59:bb:7b:5e:17:0f:62:0c:33:6f:bf: 01:b6:48:ad:0c:27:c3:a5:e3:3d:9f:49:15:df:36: 7a:93:4b:06:e2:b1:e3:d8:b8:00:ac:2f:73:28:6b: ef:40:4f:6b:a7:c4:9e:47:f9:8b:8e:21:14:a6:f9: d8:11:04:65:73:07:7d:de:e7:43:ab:b4:a4:8f:9c: e8:6c:9b:ff:87:90:f3:0f:1e:3c:05:c9:80:78:d5: c7:75:83:16:ff:37:41:88:fd:a5:f9:13:0e:cf:7f: 03:96:b9:98:ad:03:93:b1:eb:84:22:dd:2b:7d:a1: 10:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:01:A9:1D:49:5D:DC:32:9A:81:81:3C:AE:3F:94:A3:96:23:1A:89 X509v3 Authority Key Identifier: keyid:46:1C:2F:E2:77:A2:8B:C8:97:F0:FC:CA:4F:7C:91:08:DD:97:49:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3e:fe:df:d0:91:dc:0f:d6:d5:e7:2b:bc:e9:b7:7f:c4:97: 04:bc:0d:10:3d:d1:46:46:6c:b1:73:c2:c5:f7:8f:df:c6:47: 5d:34:0c:ff:09:f6:52:0e:95:5c:50:da:33:a4:30:fc:04:76: ee:ab:3a:e4:86:f9:5f:04:b5:cf:5f:d0:2a:3a:e2:20:59:b6: 14:4f:eb:e6:06:99:58:73:4a:26:24:49:0b:32:c2:fd:0b:3c: 4b:a2:15:2f:13:62:a0:b4:5f:fd:e9:0b:99:62:08:90:05:ce: 3d:17:82:8e:46:2a:1e:d6:2b:b3:12:a5:8c:83:6c:31:56:27: 0c:bf:24:64:25:eb:fb:e4:ba:ff:d1:53:2d:c0:23:8f:4f:f6: 3d:06:5b:b5:1d:3e:23:2a:ea:1b:10:29:ea:ef:a3:d8:d2:de: e9:b0:69:d4:a9:3c:73:59:c8:9a:bf:28:14:ce:a7:77:30:45: 84:e0:12:7a:b9:7f:0a:c8:11:aa:32:0b:5f:c2:8a:51:a3:67: 49:2f:24:a7:85:f6:f3:39:fa:be:b7:b7:eb:b1:9b:9b:27:6d: 7e:5e:8e:5f:d7:28:ed:6e:35:c6:69:f7:ea:9c:b3:2b:05:45: 10:9a:20:da:11:16:d6:d5:0d:a8:12:1d:3e:0f:10:31:f6:70: bb:71:04:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxMUUxMTAvBgNVBAUTKDQ2MUMyRkUyNzdBMjhCQzg5N0YwRkNDQTRGN0M5MTA4 REQ5NzQ5MDMwHhcNMjUwODIyMTkzMTM0WhcNMjUwODI5MTkzMTM0WjAYMRYwFAYD VQQDEw02OGE4YzU5Ni0xNWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruCdaxum6lGkW4ftaa6tsZ5NBFtvjpb6SKrDrbZGbTrztPMG51OcKMfKQ+KA Z1ppgUz320VFlKNNA/KREp/T7vnjZy8GCuKMGIFhmlvAHYhd4CMzZbc9jonI8rDy 5OITrRdZdNJIctAMiwZS/dSGbx7LwgMgKhHSBoirGYChIBBN9AvtHFTRaqYuWbt7 XhcPYgwzb78BtkitDCfDpeM9n0kV3zZ6k0sG4rHj2LgArC9zKGvvQE9rp8SeR/mL jiEUpvnYEQRlcwd93udDq7Skj5zobJv/h5DzDx48BcmAeNXHdYMW/zdBiP2l+RMO z38DlrmYrQOTseuEIt0rfaEQLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwBqR1J XdwymoGBPK4/lKOWIxqJMB8GA1UdIwQYMBaAFEYcL+J3oovIl/D8yk98kQjdl0kD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzExRS8wQjU4NEM3ODUx MzYxMUVBQUQ2QTFFNEJDNEY5QUUwMi9SaHd2NG5laWk4aVg4UHpLVDN5UkNOMlhT UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jod3Y0bmVpaThpWDhQektUM3lSQ04yWFNRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzExRS8wQjU4NEM3ODUxMzYxMUVBQUQ2QTFFNEJDNEY5QUUwMi9SaHd2NG5laWk4 aVg4UHpLVDN5UkNOMlhTUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8Pv7f0JHcD9bV5yu86bd/xJcEvA0QPdFGRmyxc8LF94/fxkddNAz/ CfZSDpVcUNozpDD8BHbuqzrkhvlfBLXPX9AqOuIgWbYUT+vmBplYc0omJEkLMsL9 CzxLohUvE2KgtF/96QuZYgiQBc49F4KORioe1iuzEqWMg2wxVicMvyRkJev75Lr/ 0VMtwCOPT/Y9Blu1HT4jKuobECnq76PY0t7psGnUqTxzWciavygUzqd3MEWE4BJ6 uX8KyBGqMgtfwopRo2dJLySnhfbzOfq+t7frsZubJ21+Xo5f1yjtbjXGaffqnLMr BUUQmiDaERbW1Q2oEh0+DxAx9nC7cQRT -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:30 2025 by rpki-client