$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft File: PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft (raw, json) Hash identifier: DsF9pNSgzNPCDiNGh0hn/VbVm/dI3sa/lpxT67pJ2Qs= Subject key identifier: 0C:5E:E8:42:3A:04:A3:37:07:5C:D6:67:72:C8:71:C1:67:C7:D8:7A Authority key identifier: 3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 Certificate issuer: /CN=A914E6AA/serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft Manifest number: 08DA Signing time: Fri 30 May 2025 23:07:35 +0000 Manifest this update: Fri 30 May 2025 23:07:34 +0000 Manifest next update: Fri 06 Jun 2025 23:07:34 +0000 Files and hashes: 1: PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl (hash: 088ZvenedUR9Ya85h5wicTESgmfkM3i0p1S68nP2jmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Validity Not Before: May 30 23:07:34 2025 GMT Not After : Jun 6 23:07:34 2025 GMT Subject: CN=683a3a36-2d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:44:6e:66:96:86:56:71:e8:ec:68:25:75:e4: 0b:66:26:6c:19:21:af:91:ee:bb:11:12:74:99:86: 41:48:c6:4f:bf:7c:ea:b3:da:22:55:b3:bf:94:7a: 08:90:bb:c8:b3:a8:1f:f9:94:49:b6:50:36:28:c6: de:d4:34:50:7a:55:3c:af:2f:6b:06:da:ed:73:1c: 19:7a:10:54:50:06:a9:44:1d:98:45:8d:33:c5:1d: 35:ff:cb:99:2d:31:79:02:eb:5e:ce:5e:93:e4:5d: aa:28:c4:b2:75:66:3b:24:e9:56:ef:31:9f:9d:7d: bb:1f:61:91:b1:16:1b:58:3a:56:23:c8:35:55:57: 7f:e5:4f:71:53:e7:04:79:40:f1:c7:18:78:5f:cf: 37:ff:dc:c0:e0:75:aa:d6:be:7e:e2:24:6f:52:80: 8c:7f:f6:95:bb:a1:cb:7f:70:08:14:d0:09:d3:be: 79:26:25:fd:72:6b:f5:aa:8c:11:e8:a8:d9:f3:58: f0:32:0e:e4:ef:85:ec:f2:14:36:d4:c9:17:bd:fe: 68:93:69:7d:f7:c8:7f:41:9c:d5:f5:e1:b6:5f:04: 4d:41:11:24:ea:e1:f3:e5:db:13:e6:0e:45:6d:f9: 65:16:a7:37:61:59:43:38:4e:83:66:fb:0e:37:1a: b5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5E:E8:42:3A:04:A3:37:07:5C:D6:67:72:C8:71:C1:67:C7:D8:7A X509v3 Authority Key Identifier: keyid:3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b5:06:6a:c3:83:3d:c8:42:5a:6c:4b:f8:a3:dd:c8:86:ee: cc:68:8f:4b:3d:53:15:d2:ae:c8:73:43:0c:c0:bd:24:81:9f: 50:19:f6:c9:b1:eb:c7:20:0e:f4:89:47:3c:8b:a4:0d:8a:0a: 91:23:8d:2a:e3:b4:6e:5f:1d:74:be:a3:ec:f4:8d:d6:45:b9: 9a:90:c0:a7:f0:19:b4:e2:1e:9e:bc:b6:3a:05:9d:d3:db:0e: 17:a4:b6:78:38:91:0f:13:79:ff:aa:0a:bc:22:21:cd:1a:f2: 68:d1:1e:22:07:e1:14:6d:c3:3a:11:16:21:cd:7e:79:0e:2b: 72:d5:c0:91:8a:d4:d8:95:3e:13:83:87:65:62:4f:d3:b8:9e: 4d:2a:64:91:4c:7f:d5:cd:55:c6:66:bc:d0:25:9e:23:6e:e3: 12:3a:8e:12:56:e2:d8:1c:68:3e:30:0c:79:3d:5d:93:02:2c: 3c:34:8b:88:07:f7:4f:ee:34:ea:c2:d3:9f:76:36:70:1d:6b: 1e:88:4a:83:60:39:19:91:9f:a7:de:06:fb:dd:b6:96:97:4b: d7:a5:6e:82:a8:e6:06:91:7f:48:95:df:b1:11:58:0b:ad:87: 42:5f:0b:ad:ef:2b:2a:fb:69:d4:c0:e1:51:68:f7:0c:70:53: 1c:d7:6d:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDNENTFFREM0M0EzOTk5QjEzNzFDRTVDMDQxNDIwODNG RTI4N0QwRjIwHhcNMjUwNTMwMjMwNzM0WhcNMjUwNjA2MjMwNzM0WjAYMRYwFAYD VQQDEw02ODNhM2EzNi0yZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyERuZpaGVnHo7GgldeQLZiZsGSGvke67ERJ0mYZBSMZPv3zqs9oiVbO/lHoI kLvIs6gf+ZRJtlA2KMbe1DRQelU8ry9rBtrtcxwZehBUUAapRB2YRY0zxR01/8uZ LTF5Autezl6T5F2qKMSydWY7JOlW7zGfnX27H2GRsRYbWDpWI8g1VVd/5U9xU+cE eUDxxxh4X883/9zA4HWq1r5+4iRvUoCMf/aVu6HLf3AIFNAJ0755JiX9cmv1qowR 6KjZ81jwMg7k74Xs8hQ21MkXvf5ok2l998h/QZzV9eG2XwRNQREk6uHz5dsT5g5F bfllFqc3YVlDOE6DZvsONxq1+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxe6EI6 BKM3B1zWZ3LIccFnx9h6MB8GA1UdIwQYMBaAFD1R7cQ6OZmxNxzlwEFCCD/ih9Dy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1iRTNIT1hBUVVJSVAtS0gw UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWSHR4RG81bWJFM0hPWEFRVUlJUC1LSDBQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1i RTNIT1hBUVVJSVAtS0gwUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCetQZqw4M9yEJabEv4o93Ihu7MaI9LPVMV0q7Ic0MMwL0kgZ9QGfbJ sevHIA70iUc8i6QNigqRI40q47RuXx10vqPs9I3WRbmakMCn8Bm04h6evLY6BZ3T 2w4XpLZ4OJEPE3n/qgq8IiHNGvJo0R4iB+EUbcM6ERYhzX55Dity1cCRitTYlT4T g4dlYk/TuJ5NKmSRTH/VzVXGZrzQJZ4jbuMSOo4SVuLYHGg+MAx5PV2TAiw8NIuI B/dP7jTqwtOfdjZwHWseiEqDYDkZkZ+n3gb73baWl0vXpW6CqOYGkX9Ild+xEVgL rYdCXwut7ysq+2nUwOFRaPcMcFMc120H -----END CERTIFICATE-----Generated at Sat May 31 16:40:46 2025 by rpki-client