$ rpki-client -vvf rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft File: Rhwv4neii8iX8PzKT3yRCN2XSQM.mft (raw, json) Hash identifier: 1mFim8n80/aEaejGoUGM1KxuIW823SirpEdy6W+oEqM= Subject key identifier: 59:D4:ED:88:75:67:D2:5A:B9:17:9B:57:23:EE:F9:EB:E8:39:2C:67 Authority key identifier: 46:1C:2F:E2:77:A2:8B:C8:97:F0:FC:CA:4F:7C:91:08:DD:97:49:03 Certificate issuer: /CN=A918711E/serialNumber=461C2FE277A28BC897F0FCCA4F7C9108DD974903 Certificate serial: 0AB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft Manifest number: 0AB3 Signing time: Fri 30 May 2025 19:40:01 +0000 Manifest this update: Fri 30 May 2025 19:40:01 +0000 Manifest next update: Fri 06 Jun 2025 19:40:01 +0000 Files and hashes: 1: Rhwv4neii8iX8PzKT3yRCN2XSQM.crl (hash: 5h8t3q3zUwBoJPMBnHkMFZulZm1RPSxWjmMPp2spuHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.crl rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2739 (0xab3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918711E, serialNumber=461C2FE277A28BC897F0FCCA4F7C9108DD974903 Validity Not Before: May 30 19:40:01 2025 GMT Not After : Jun 6 19:40:01 2025 GMT Subject: CN=683a0991-c1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:87:04:35:6d:6c:7d:c5:ce:84:74:55:f0:3a: 9a:61:36:2e:53:f7:32:2a:ba:fa:7f:0e:c2:46:c9: f9:d3:ec:d3:80:d1:e4:21:db:9e:aa:f1:ef:ab:de: da:01:ff:0f:2b:72:73:8b:23:d7:c6:8e:18:1a:35: 07:82:05:14:3f:b9:23:bd:02:f1:33:21:e0:91:cf: ad:50:01:c4:f9:2d:b6:2c:aa:ef:30:91:b1:e4:19: 9e:d3:dc:45:a7:34:19:f2:75:d0:f3:70:97:e4:9e: 6f:bf:49:a3:01:a0:2b:c2:0e:88:5e:96:76:35:9d: 04:73:e2:2d:9e:54:40:6c:cc:f0:14:3d:93:54:de: 5b:ba:f3:60:86:4c:57:69:21:99:7d:0d:2d:0f:53: e5:25:a3:8d:e6:bb:e6:98:f9:81:36:72:e1:7c:93: 48:46:4e:61:ae:6d:da:01:3c:a7:db:1b:f5:b4:bf: 7a:96:96:82:75:ab:ed:90:81:b6:d3:2d:59:f6:48: ad:ae:74:e1:bc:36:49:4a:ec:f9:cf:96:0a:f3:f9: 88:c0:de:a8:9d:64:f1:13:c1:05:31:3a:86:b2:a4: d1:51:35:14:6e:63:2d:21:54:64:d0:aa:1c:b7:3a: 9e:c4:91:b8:7e:2b:ae:83:b6:c8:2c:ed:27:93:58: bf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D4:ED:88:75:67:D2:5A:B9:17:9B:57:23:EE:F9:EB:E8:39:2C:67 X509v3 Authority Key Identifier: keyid:46:1C:2F:E2:77:A2:8B:C8:97:F0:FC:CA:4F:7C:91:08:DD:97:49:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:17:40:a8:22:5a:e0:5d:ae:12:08:35:33:21:73:0c:f3:5f: e0:97:fa:65:f2:d2:1b:1d:8a:29:e7:ba:27:c4:3b:65:31:18: 4e:6a:6a:ac:ea:dd:3c:da:e1:c1:7e:8d:f1:c2:21:a0:03:6e: e3:f0:d4:3b:ef:94:db:fc:a3:40:47:9b:e6:3e:97:d4:f2:5b: 9e:44:04:f3:42:fb:f3:ce:e4:d4:ef:7e:98:4f:85:9a:b6:5d: 15:f3:58:d7:28:db:8c:29:a4:12:8f:fe:bc:79:2d:65:47:87: cd:48:0f:8d:70:f7:26:3d:61:1d:76:55:a0:98:35:e6:b6:07: 6a:7a:15:5e:af:d3:26:18:74:18:be:f1:17:d3:39:84:51:b4: 21:70:36:e0:d4:68:ad:c0:a5:c4:d5:ea:db:37:b7:ce:26:d5: 81:58:8c:50:28:68:8e:fe:f0:bb:b0:bc:a3:a5:82:f2:31:08: 5f:80:63:9e:40:df:ad:10:12:6c:ac:c6:0f:4c:4d:15:66:6f: 21:21:69:1f:bf:32:9c:70:8c:5e:39:fd:38:6f:95:00:2e:36: 9e:15:01:1d:22:4c:16:ef:af:37:27:d2:a8:e0:25:6d:8f:b2: 12:07:1b:92:30:7b:f6:54:b0:4b:5a:e5:89:11:d5:f9:5a:13: 59:0f:8c:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxMUUxMTAvBgNVBAUTKDQ2MUMyRkUyNzdBMjhCQzg5N0YwRkNDQTRGN0M5MTA4 REQ5NzQ5MDMwHhcNMjUwNTMwMTk0MDAxWhcNMjUwNjA2MTk0MDAxWjAYMRYwFAYD VQQDEw02ODNhMDk5MS1jMWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4IcENW1sfcXOhHRV8DqaYTYuU/cyKrr6fw7CRsn50+zTgNHkIdueqvHvq97a Af8PK3JziyPXxo4YGjUHggUUP7kjvQLxMyHgkc+tUAHE+S22LKrvMJGx5Bme09xF pzQZ8nXQ83CX5J5vv0mjAaArwg6IXpZ2NZ0Ec+ItnlRAbMzwFD2TVN5buvNghkxX aSGZfQ0tD1PlJaON5rvmmPmBNnLhfJNIRk5hrm3aATyn2xv1tL96lpaCdavtkIG2 0y1Z9kitrnThvDZJSuz5z5YK8/mIwN6onWTxE8EFMTqGsqTRUTUUbmMtIVRk0Koc tzqexJG4fiuug7bILO0nk1i/LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnU7Yh1 Z9JauRebVyPu+evoOSxnMB8GA1UdIwQYMBaAFEYcL+J3oovIl/D8yk98kQjdl0kD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzExRS8wQjU4NEM3ODUx MzYxMUVBQUQ2QTFFNEJDNEY5QUUwMi9SaHd2NG5laWk4aVg4UHpLVDN5UkNOMlhT UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jod3Y0bmVpaThpWDhQektUM3lSQ04yWFNRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzExRS8wQjU4NEM3ODUxMzYxMUVBQUQ2QTFFNEJDNEY5QUUwMi9SaHd2NG5laWk4 aVg4UHpLVDN5UkNOMlhTUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLF0CoIlrgXa4SCDUzIXMM81/gl/pl8tIbHYop57onxDtlMRhOamqs 6t082uHBfo3xwiGgA27j8NQ775Tb/KNAR5vmPpfU8lueRATzQvvzzuTU736YT4Wa tl0V81jXKNuMKaQSj/68eS1lR4fNSA+NcPcmPWEddlWgmDXmtgdqehVer9MmGHQY vvEX0zmEUbQhcDbg1GitwKXE1erbN7fOJtWBWIxQKGiO/vC7sLyjpYLyMQhfgGOe QN+tEBJsrMYPTE0VZm8hIWkfvzKccIxeOf04b5UALjaeFQEdIkwW7683J9Ko4CVt j7ISBxuSMHv2VLBLWuWJEdX5WhNZD4xs -----END CERTIFICATE-----Generated at Sat May 31 17:32:49 2025 by rpki-client