$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft File: rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json) Hash identifier: bCf+3imsKtEdfPe/e7rOm6jdyuT7ktzMez6UtN07Sw0= Subject key identifier: 17:FB:23:49:C5:D6:EB:85:BF:FC:AE:1C:9C:EB:E8:51:A7:8C:9C:C4 Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Certificate serial: 34C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft Manifest number: 34C0 Signing time: Fri 08 Aug 2025 14:26:30 +0000 Manifest this update: Fri 08 Aug 2025 14:26:29 +0000 Manifest next update: Fri 15 Aug 2025 14:26:29 +0000 Files and hashes: 1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: p9jjdbBZ5YfD3xJqi99IncFqn3MkgWIKmDIe0fMdE30=) 2: 2FA57B9A97B611EDAE9D4381C4F9AE02.roa (hash: lxqMNiae0D1WCp5yu5bfMqSlo/P+rEmoNXBcqzUVjb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13513 (0x34c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Validity Not Before: Aug 8 14:26:29 2025 GMT Not After : Aug 15 14:26:29 2025 GMT Subject: CN=68960916-0b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c8:b4:b9:1d:88:20:69:4a:eb:c4:e8:c4:41: 71:e6:58:0b:f1:33:56:60:84:08:9c:2c:b2:0b:c5: d1:65:53:26:54:d6:57:f2:d9:be:ca:7c:ab:47:c9: 31:c6:52:ec:11:a5:70:2f:4b:37:df:6a:5b:87:1b: 2a:2d:a6:52:9e:03:0a:ee:04:7f:cd:44:28:a2:3e: 53:14:13:98:05:1e:62:16:26:d5:da:81:dd:01:da: 84:60:41:63:89:81:35:1d:0f:2c:0c:00:f2:67:ed: 0d:53:72:59:2b:ec:49:9b:2f:e7:02:18:51:58:35: 02:55:6a:44:d3:64:b8:89:e7:52:75:11:50:bd:65: aa:1f:80:b6:b6:9c:51:78:20:31:cc:82:2a:12:95: fc:c8:dc:a3:96:6a:c3:eb:2f:b2:3e:28:70:91:56: 49:0d:91:58:e3:d7:b7:90:9f:d5:c4:81:fd:72:3b: aa:76:0d:29:ef:87:5e:51:28:04:c5:8a:0f:35:5e: d6:60:2d:2d:a1:ea:7a:8f:21:da:b1:38:61:32:23: 04:f2:23:37:fe:af:25:4d:37:80:69:fc:f2:04:8f: b2:41:8f:d2:9a:82:00:71:04:4c:c9:31:b5:1a:f4: 36:38:b0:b6:98:3f:81:f4:6a:39:39:b3:1f:35:f6: b0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FB:23:49:C5:D6:EB:85:BF:FC:AE:1C:9C:EB:E8:51:A7:8C:9C:C4 X509v3 Authority Key Identifier: keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:eb:ec:06:c5:90:9a:16:e3:e4:8f:84:df:f1:85:e3:65:d1: 18:71:d1:6d:a1:8f:fe:e6:2a:91:02:76:5c:65:d4:ec:b9:c1: 1c:ed:69:74:09:ce:a4:46:95:11:d8:32:5c:d4:7a:e6:c7:60: 74:2f:ab:5b:9b:d3:65:8c:d9:e3:5d:28:aa:b8:6c:3d:6d:08: 99:ef:9a:34:30:db:68:a8:be:1f:08:a5:62:38:7c:70:97:82: f0:f8:fe:f2:27:f5:9e:d1:9c:bc:91:0e:67:f8:78:1f:62:07: 04:ee:63:e1:db:10:f0:5b:27:7b:cd:47:4a:76:f7:bf:38:36: 68:e3:77:3f:cc:d3:73:bf:9a:90:05:2b:66:5b:f8:30:e2:98: f4:0d:7d:76:6a:d9:10:7e:5a:ea:cf:21:34:c7:d5:08:aa:27: 99:95:39:57:8a:0b:dd:04:8a:1d:c3:14:c3:cf:a9:77:3f:a6: 42:67:be:67:76:13:d7:f6:19:e2:ac:d1:4c:01:8a:4b:57:64: c7:d6:16:03:86:5d:dd:9b:7a:e5:0e:a2:97:a0:80:d4:2a:70: cb:44:e0:a0:74:bd:92:3b:ff:80:22:4e:f4:b3:2c:14:6d:d5: 79:98:f6:41:98:aa:b2:84:48:5a:6b:84:46:32:4c:d2:69:30: 7f:e0:0f:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNEQxMTAvBgNVBAUTKEFFMTA3RjNDMjk3NzcxN0ExQ0QzNTcxRDE4Mzc0OEZE MDdEOUZDNUYwHhcNMjUwODA4MTQyNjI5WhcNMjUwODE1MTQyNjI5WjAYMRYwFAYD VQQDEw02ODk2MDkxNi0wYjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxci0uR2IIGlK68ToxEFx5lgL8TNWYIQInCyyC8XRZVMmVNZX8tm+ynyrR8kx xlLsEaVwL0s332pbhxsqLaZSngMK7gR/zUQooj5TFBOYBR5iFibV2oHdAdqEYEFj iYE1HQ8sDADyZ+0NU3JZK+xJmy/nAhhRWDUCVWpE02S4iedSdRFQvWWqH4C2tpxR eCAxzIIqEpX8yNyjlmrD6y+yPihwkVZJDZFY49e3kJ/VxIH9cjuqdg0p74deUSgE xYoPNV7WYC0toep6jyHasThhMiME8iM3/q8lTTeAafzyBI+yQY/SmoIAcQRMyTG1 GvQ2OLC2mD+B9Go5ObMfNfawjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBf7I0nF 1uuFv/yuHJzr6FGnjJzEMB8GA1UdIwQYMBaAFK4Qfzwpd3F6HNNXHRg3SP0H2fxf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0RC9FQTFCMUQ2QTFE ODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NYb2MwMWNkR0RkSV9RZlpf RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoQl9QQ2wzY1hvYzAxY2RHRGRJX1FmWl9GOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0RC9FQTFCMUQ2QTFEODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NY b2MwMWNkR0RkSV9RZlpfRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL6+wGxZCaFuPkj4Tf8YXjZdEYcdFtoY/+5iqRAnZcZdTsucEc7Wl0 Cc6kRpUR2DJc1Hrmx2B0L6tbm9NljNnjXSiquGw9bQiZ75o0MNtoqL4fCKViOHxw l4Lw+P7yJ/We0Zy8kQ5n+HgfYgcE7mPh2xDwWyd7zUdKdve/ODZo43c/zNNzv5qQ BStmW/gw4pj0DX12atkQflrqzyE0x9UIqieZlTlXigvdBIodwxTDz6l3P6ZCZ75n dhPX9hnirNFMAYpLV2TH1hYDhl3dm3rlDqKXoIDUKnDLROCgdL2SO/+AIk70sywU bdV5mPZBmKqyhEhaa4RGMkzSaTB/4A+5 -----END CERTIFICATE-----Generated at Sun Aug 10 10:33:16 2025 by rpki-client