$ rpki-client -vvf rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft File: Rhwv4neii8iX8PzKT3yRCN2XSQM.mft (raw, json) Hash identifier: fc4F9EUfd+K1+Pawtoqx38BWfCXt4k1R0pBZyMR1o8A= Subject key identifier: 47:D0:77:9F:E6:4B:45:39:58:E2:34:F1:0D:8A:BA:08:B4:48:58:71 Authority key identifier: 46:1C:2F:E2:77:A2:8B:C8:97:F0:FC:CA:4F:7C:91:08:DD:97:49:03 Certificate issuer: /CN=A918711E/serialNumber=461C2FE277A28BC897F0FCCA4F7C9108DD974903 Certificate serial: 0AC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft Manifest number: 0AC4 Signing time: Wed 02 Jul 2025 19:40:08 +0000 Manifest this update: Wed 02 Jul 2025 19:40:08 +0000 Manifest next update: Wed 09 Jul 2025 19:40:08 +0000 Files and hashes: 1: Rhwv4neii8iX8PzKT3yRCN2XSQM.crl (hash: JrfNVgfuebnpl5qPntfLBCwm/CfJNir8AdLal6T/Hc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.crl rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2756 (0xac4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918711E, serialNumber=461C2FE277A28BC897F0FCCA4F7C9108DD974903 Validity Not Before: Jul 2 19:40:08 2025 GMT Not After : Jul 9 19:40:08 2025 GMT Subject: CN=68658b18-83e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8a:5d:bf:3d:bc:35:79:12:73:d4:fa:34:2d: e7:bb:04:a8:e9:6d:28:b6:b3:5d:76:fd:a7:86:e8: b3:ad:b6:74:29:6d:8f:04:ae:e1:f1:32:f9:9e:44: 1f:61:51:3b:d7:37:b6:45:34:ac:9e:e6:16:c1:2f: 7c:a3:1d:22:fb:16:ce:1b:55:19:50:e6:16:3d:8f: d7:45:4b:c5:26:55:a7:c3:c1:a5:ee:13:f2:41:77: 61:7a:0e:52:fd:ff:97:b0:31:7b:50:fc:f6:5b:09: ef:b9:6b:e4:8b:2e:ab:1c:41:6c:4d:95:e1:c7:c4: c5:30:5d:d1:1f:3c:40:a8:24:a5:20:73:76:46:70: 07:be:1e:a7:c5:b4:75:29:09:35:69:9b:83:f6:b2: 93:03:59:56:94:2c:9d:df:00:10:f8:ca:d9:25:92: 9f:ef:20:44:9d:32:4e:e3:2f:86:bb:6a:ee:eb:89: 8e:c1:8b:25:77:5c:af:e3:60:a6:a9:d4:72:24:a7: eb:01:fd:67:fb:8a:d2:68:28:20:72:c9:75:41:48: be:89:e0:13:d2:21:53:96:9f:2c:bf:ac:7b:8f:ee: 72:58:60:95:82:45:20:2c:2a:bc:4e:1f:9f:6b:88: b8:e9:da:95:cf:2d:5d:c4:b0:c6:50:64:bf:75:2f: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D0:77:9F:E6:4B:45:39:58:E2:34:F1:0D:8A:BA:08:B4:48:58:71 X509v3 Authority Key Identifier: keyid:46:1C:2F:E2:77:A2:8B:C8:97:F0:FC:CA:4F:7C:91:08:DD:97:49:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:15:20:2b:a9:0f:4b:72:9a:d1:fa:dc:6d:f6:f0:80:d6:c7: b2:04:bc:88:b2:72:f2:2f:98:1d:7e:86:f9:a7:2a:9e:3b:55: e9:0f:40:4d:34:68:63:aa:da:d9:7b:a2:e6:45:4c:d6:59:51: f6:53:28:38:04:3f:a9:52:ed:aa:12:29:db:2f:08:13:c2:62: 26:ab:f0:c5:80:01:4d:f9:ec:dc:6e:ea:36:26:6b:b5:16:36: ca:bd:10:3d:80:2f:9b:db:84:e1:49:ef:24:6a:3a:41:99:6a: cf:bb:1f:bd:bd:b4:86:a1:73:f5:7e:75:52:5b:c9:ac:fe:fb: 06:2d:cc:20:e6:37:76:82:21:bd:84:55:4d:c4:a5:b5:44:a4: 32:41:ff:37:b6:74:9e:87:5f:60:24:10:94:96:cc:0f:02:6e: d9:06:43:06:1e:9b:6f:72:f5:0c:b4:b8:e9:00:94:62:ad:b1: 1d:50:09:fd:bd:a7:7e:ba:4c:bb:7a:c8:b2:1a:fa:8f:e0:30: 11:91:7a:c7:61:e1:8f:39:97:62:ad:e5:02:14:e2:ac:e6:b8: 3d:e9:98:d3:dd:cb:72:dd:a2:8a:c4:93:aa:cf:85:eb:63:40: 2a:39:59:2a:83:03:fc:6b:9b:85:c1:c3:30:81:30:96:b4:2d: e1:e1:f9:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxMUUxMTAvBgNVBAUTKDQ2MUMyRkUyNzdBMjhCQzg5N0YwRkNDQTRGN0M5MTA4 REQ5NzQ5MDMwHhcNMjUwNzAyMTk0MDA4WhcNMjUwNzA5MTk0MDA4WjAYMRYwFAYD VQQDEw02ODY1OGIxOC04M2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04pdvz28NXkSc9T6NC3nuwSo6W0otrNddv2nhuizrbZ0KW2PBK7h8TL5nkQf YVE71ze2RTSsnuYWwS98ox0i+xbOG1UZUOYWPY/XRUvFJlWnw8Gl7hPyQXdheg5S /f+XsDF7UPz2WwnvuWvkiy6rHEFsTZXhx8TFMF3RHzxAqCSlIHN2RnAHvh6nxbR1 KQk1aZuD9rKTA1lWlCyd3wAQ+MrZJZKf7yBEnTJO4y+Gu2ru64mOwYsld1yv42Cm qdRyJKfrAf1n+4rSaCggcsl1QUi+ieAT0iFTlp8sv6x7j+5yWGCVgkUgLCq8Th+f a4i46dqVzy1dxLDGUGS/dS/PHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfQd5/m S0U5WOI08Q2Kugi0SFhxMB8GA1UdIwQYMBaAFEYcL+J3oovIl/D8yk98kQjdl0kD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzExRS8wQjU4NEM3ODUx MzYxMUVBQUQ2QTFFNEJDNEY5QUUwMi9SaHd2NG5laWk4aVg4UHpLVDN5UkNOMlhT UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jod3Y0bmVpaThpWDhQektUM3lSQ04yWFNRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzExRS8wQjU4NEM3ODUxMzYxMUVBQUQ2QTFFNEJDNEY5QUUwMi9SaHd2NG5laWk4 aVg4UHpLVDN5UkNOMlhTUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFFSArqQ9LcprR+txt9vCA1seyBLyIsnLyL5gdfob5pyqeO1XpD0BN NGhjqtrZe6LmRUzWWVH2Uyg4BD+pUu2qEinbLwgTwmImq/DFgAFN+ezcbuo2Jmu1 FjbKvRA9gC+b24ThSe8kajpBmWrPux+9vbSGoXP1fnVSW8ms/vsGLcwg5jd2giG9 hFVNxKW1RKQyQf83tnSeh19gJBCUlswPAm7ZBkMGHptvcvUMtLjpAJRirbEdUAn9 vad+uky7esiyGvqP4DARkXrHYeGPOZdireUCFOKs5rg96ZjT3cty3aKKxJOqz4Xr Y0AqOVkqgwP8a5uFwcMwgTCWtC3h4fkF -----END CERTIFICATE-----Generated at Thu Jul 3 03:11:04 2025 by rpki-client