$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft File: PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft (raw, json) Hash identifier: evXVP+nHG8vJji4/gA8x8KwQV2zKRwb7GAzfaxDsnO4= Subject key identifier: 7E:FB:2F:A5:77:CE:18:C2:FB:24:06:4F:13:51:D0:75:35:7F:5B:0B Authority key identifier: 3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 Certificate issuer: /CN=A914E6AA/serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft Manifest number: 0982 Signing time: Wed 20 Aug 2025 22:53:11 +0000 Manifest this update: Wed 20 Aug 2025 22:53:10 +0000 Manifest next update: Wed 27 Aug 2025 22:53:10 +0000 Files and hashes: 1: PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl (hash: Bgm4qj4+lYCKvpkEXTj6qpP+hFj3/Z6SGzIacw+ngME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Validity Not Before: Aug 20 22:53:10 2025 GMT Not After : Aug 27 22:53:10 2025 GMT Subject: CN=68a651d7-d18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:2a:26:59:6e:ce:8b:32:95:51:c9:b1:a0: ee:df:ed:87:5f:88:22:15:8d:7b:08:44:36:e3:3e: e7:17:fa:58:45:b5:6a:80:e9:1b:31:d6:96:5e:60: 96:21:f0:4b:7e:f4:7d:a0:89:51:83:c8:62:76:a4: af:a6:e3:04:f4:e0:62:95:21:8b:d1:3f:08:50:6f: 65:b8:45:c9:64:a3:52:41:40:a4:b2:ca:86:64:cf: 73:fa:e8:5f:20:86:6a:b4:a1:ca:d6:b8:ce:23:a7: ed:f5:18:7b:8e:47:29:40:a5:bc:fa:94:d1:51:ee: 04:ae:d0:7f:b1:ec:b2:4b:16:93:8f:e1:6a:ce:f3: 06:c6:2e:ff:3c:fe:8c:ff:96:aa:d6:12:ab:d3:55: 45:ca:b9:ef:c5:b4:27:f4:28:3c:b9:62:6f:9b:53: 64:88:ca:29:1f:5d:fd:e6:4b:21:b9:30:18:3c:5a: ff:fd:9d:ab:16:95:ed:80:e0:fb:95:c3:ed:ec:e1: da:75:10:55:bc:3a:6b:eb:38:12:94:c0:1d:3f:fc: 7a:02:36:ac:ab:89:b5:c5:83:bb:36:e5:1c:39:44: 5a:c3:18:50:f1:b3:ef:74:e8:54:5d:bf:20:a6:10: fc:ee:3f:d7:bd:ea:6a:18:71:07:ed:43:17:4a:0f: 9f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FB:2F:A5:77:CE:18:C2:FB:24:06:4F:13:51:D0:75:35:7F:5B:0B X509v3 Authority Key Identifier: keyid:3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:42:2b:05:f4:52:9d:4a:85:40:a7:1e:05:f8:b2:28:47:3d: bd:ab:57:93:d8:d1:09:aa:91:da:a7:ee:17:b9:80:1a:e1:56: 7b:89:4c:9a:07:f0:e8:73:9f:66:01:5f:74:33:38:36:78:98: a7:44:03:05:2e:fe:c7:00:f4:8f:85:8f:96:f7:d7:a5:c8:d0: 21:84:f9:ec:90:60:c1:17:16:1d:96:30:33:59:5b:29:e7:0b: c2:47:16:1d:62:2d:b9:c3:bd:7c:d6:e9:67:39:3a:64:7c:50: d0:01:d5:d6:9b:02:12:89:a8:e3:a3:94:10:da:2d:98:c7:c2: c6:60:e6:42:e1:de:33:eb:e7:2a:0e:48:c5:8a:1f:32:8a:d0: 15:69:97:d1:3f:9f:13:bb:ca:f4:32:a0:83:e7:43:b8:bd:47: b2:a9:36:72:15:93:77:5e:09:3d:41:08:31:da:8d:c0:6a:71: 2e:7f:29:35:f2:5d:19:f8:bc:0a:98:84:cc:44:32:93:78:0f: 5f:d1:9b:a8:81:4a:bd:73:21:02:ae:b8:c3:29:6a:91:92:00: 37:3c:4a:51:c6:cf:aa:12:c9:63:6f:16:c5:b1:1b:03:34:28: e0:3f:86:94:70:44:21:0d:e2:c3:f3:30:f3:af:9f:62:2b:84: d2:30:42:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDNENTFFREM0M0EzOTk5QjEzNzFDRTVDMDQxNDIwODNG RTI4N0QwRjIwHhcNMjUwODIwMjI1MzEwWhcNMjUwODI3MjI1MzEwWjAYMRYwFAYD VQQDEw02OGE2NTFkNy1kMThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHMqJlluzosylVHJsaDu3+2HX4giFY17CEQ24z7nF/pYRbVqgOkbMdaWXmCW IfBLfvR9oIlRg8hidqSvpuME9OBilSGL0T8IUG9luEXJZKNSQUCkssqGZM9z+uhf IIZqtKHK1rjOI6ft9Rh7jkcpQKW8+pTRUe4ErtB/seyySxaTj+FqzvMGxi7/PP6M /5aq1hKr01VFyrnvxbQn9Cg8uWJvm1NkiMopH1395kshuTAYPFr//Z2rFpXtgOD7 lcPt7OHadRBVvDpr6zgSlMAdP/x6Ajasq4m1xYO7NuUcOURawxhQ8bPvdOhUXb8g phD87j/XvepqGHEH7UMXSg+fEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH77L6V3 zhjC+yQGTxNR0HU1f1sLMB8GA1UdIwQYMBaAFD1R7cQ6OZmxNxzlwEFCCD/ih9Dy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1iRTNIT1hBUVVJSVAtS0gw UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWSHR4RG81bWJFM0hPWEFRVUlJUC1LSDBQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1i RTNIT1hBUVVJSVAtS0gwUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5QisF9FKdSoVApx4F+LIoRz29q1eT2NEJqpHap+4XuYAa4VZ7iUya B/Doc59mAV90Mzg2eJinRAMFLv7HAPSPhY+W99elyNAhhPnskGDBFxYdljAzWVsp 5wvCRxYdYi25w7181ulnOTpkfFDQAdXWmwISiajjo5QQ2i2Yx8LGYOZC4d4z6+cq DkjFih8yitAVaZfRP58Tu8r0MqCD50O4vUeyqTZyFZN3Xgk9QQgx2o3AanEufyk1 8l0Z+LwKmITMRDKTeA9f0ZuogUq9cyECrrjDKWqRkgA3PEpRxs+qEsljbxbFsRsD NCjgP4aUcEQhDeLD8zDzr59iK4TSMELl -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:42 2025 by rpki-client