$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft File: PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft (raw, json) Hash identifier: p8Ame0Cv3evGWZ+d5gZXYWzp68tlA8NGor9TbkpROTw= Subject key identifier: 4F:27:85:1A:A3:51:AD:3E:C4:95:DC:3D:50:F2:D3:F6:97:EA:05:CB Authority key identifier: 3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 Certificate issuer: /CN=A914E6AA/serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft Manifest number: 0A16 Signing time: Sun 02 Nov 2025 22:40:42 +0000 Manifest this update: Sun 02 Nov 2025 22:40:42 +0000 Manifest next update: Sun 09 Nov 2025 22:40:42 +0000 Files and hashes: 1: PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl (hash: nEGl95bqcxtZnJJXyuoV67s841ua6BrVFAV2InLad4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Validity Not Before: Nov 2 22:40:42 2025 GMT Not After : Nov 9 22:40:42 2025 GMT Subject: CN=6907ddea-45db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fc:21:4b:2c:f0:ef:dd:17:dd:ae:42:9f:a5: a0:7c:59:bc:2f:c4:15:03:c1:a0:24:38:f9:3a:ee: 2f:88:65:e6:84:69:52:f3:b6:d8:4c:71:63:6e:cb: e8:e8:22:df:e9:5b:e0:fc:03:9b:b9:99:54:15:b8: 05:c9:90:29:cb:84:de:a6:03:9d:9b:9a:5c:4e:f5: f3:2e:87:d5:7c:b3:d2:ba:34:b1:cb:b1:fc:3c:95: 47:57:6b:35:fd:2e:84:6b:93:54:c5:a6:91:12:ba: 4b:85:e6:99:de:47:68:e5:ee:1f:e1:f8:88:8c:1f: 78:88:6a:ca:4b:88:07:02:67:62:d0:18:8e:4d:d8: e9:07:3a:15:b8:f3:ce:e2:72:05:c1:d5:d5:2b:d4: 8a:48:99:b3:1f:80:e5:02:46:b4:4d:a3:db:f9:f2: a8:ae:76:02:6f:73:35:6a:a6:20:32:2d:dd:91:c6: 24:c7:a4:a9:55:ed:b8:90:a5:33:27:b5:13:61:d8: 57:5d:ea:96:10:2b:3e:20:e3:53:83:42:e2:e4:55: b2:4e:4c:28:96:c1:7c:86:0e:70:1c:08:17:ba:12: 36:a6:ff:29:99:79:3c:b2:50:d9:0f:0c:e8:be:03: 7c:31:b9:7f:72:9f:43:68:4d:b0:e0:b2:33:2e:45: 32:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:27:85:1A:A3:51:AD:3E:C4:95:DC:3D:50:F2:D3:F6:97:EA:05:CB X509v3 Authority Key Identifier: keyid:3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:e1:bb:07:13:06:b2:e1:56:5e:02:86:44:85:e6:44:e5:21: c6:aa:5c:ac:fc:ad:e0:f5:88:32:d6:58:da:05:9a:eb:30:e8: af:19:d4:e7:09:17:93:f1:65:6e:2b:69:3b:52:5d:36:61:54: 0a:7d:06:7f:08:4e:b4:ad:1a:79:48:f3:dc:d1:bf:23:a2:7b: 71:47:74:9f:3a:c4:ab:8a:d0:b0:c4:df:98:84:06:18:29:83: 17:04:dc:d6:09:5d:70:2d:b1:58:99:18:04:6e:4c:7d:43:1a: 94:b5:18:2d:91:76:ed:69:c4:b8:39:a2:ad:95:d2:f2:ac:e7: c5:21:c4:8e:d5:b2:4c:26:3a:f3:f7:8d:54:21:56:e9:d6:e5: d1:f1:27:c1:98:de:b7:ec:f0:d3:02:87:f6:b3:0a:59:97:81: 4d:c4:0d:f9:63:65:bb:ba:e6:9b:3b:93:14:24:49:4d:b2:8c: ee:3d:eb:ee:2d:b5:1a:e0:2e:a3:0c:2b:36:47:6a:ab:8f:42: 96:69:93:a0:2c:4b:7e:1c:03:2c:e0:0f:f0:e9:22:03:29:3c: 65:81:bd:98:ad:ef:78:00:88:53:18:a4:57:6a:72:da:e7:87: 46:5c:98:94:2d:d3:69:d2:7a:07:e6:67:8f:cd:9f:0b:7e:4e: 57:4e:4f:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDNENTFFREM0M0EzOTk5QjEzNzFDRTVDMDQxNDIwODNG RTI4N0QwRjIwHhcNMjUxMTAyMjI0MDQyWhcNMjUxMTA5MjI0MDQyWjAYMRYwFAYD VQQDEw02OTA3ZGRlYS00NWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/whSyzw790X3a5Cn6WgfFm8L8QVA8GgJDj5Ou4viGXmhGlS87bYTHFjbsvo 6CLf6Vvg/AObuZlUFbgFyZApy4TepgOdm5pcTvXzLofVfLPSujSxy7H8PJVHV2s1 /S6Ea5NUxaaRErpLheaZ3kdo5e4f4fiIjB94iGrKS4gHAmdi0BiOTdjpBzoVuPPO 4nIFwdXVK9SKSJmzH4DlAka0TaPb+fKornYCb3M1aqYgMi3dkcYkx6SpVe24kKUz J7UTYdhXXeqWECs+IONTg0Li5FWyTkwolsF8hg5wHAgXuhI2pv8pmXk8slDZDwzo vgN8Mbl/cp9DaE2w4LIzLkUyCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8nhRqj Ua0+xJXcPVDy0/aX6gXLMB8GA1UdIwQYMBaAFD1R7cQ6OZmxNxzlwEFCCD/ih9Dy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1iRTNIT1hBUVVJSVAtS0gw UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWSHR4RG81bWJFM0hPWEFRVUlJUC1LSDBQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1i RTNIT1hBUVVJSVAtS0gwUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ4bsHEway4VZeAoZEheZE5SHGqlys/K3g9Ygy1ljaBZrrMOivGdTn CReT8WVuK2k7Ul02YVQKfQZ/CE60rRp5SPPc0b8jontxR3SfOsSritCwxN+YhAYY KYMXBNzWCV1wLbFYmRgEbkx9QxqUtRgtkXbtacS4OaKtldLyrOfFIcSO1bJMJjrz 941UIVbp1uXR8SfBmN637PDTAof2swpZl4FNxA35Y2W7uuabO5MUJElNsozuPevu LbUa4C6jDCs2R2qrj0KWaZOgLEt+HAMs4A/w6SIDKTxlgb2Yre94AIhTGKRXanLa 54dGXJiULdNp0noH5mePzZ8Lfk5XTk+U -----END CERTIFICATE-----Generated at Tue Nov 4 01:03:43 2025 by rpki-client