$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft File: rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json) Hash identifier: UKDB8RZJwh2LZU+xdBP1cF4VPq6HMaQV9C2nPm1q/5k= Subject key identifier: EB:33:3F:A5:31:22:A4:63:15:9F:47:9A:3B:50:A1:23:87:C0:7A:89 Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Certificate serial: 34F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft Manifest number: 34EF Signing time: Tue 04 Nov 2025 14:27:45 +0000 Manifest this update: Tue 04 Nov 2025 14:27:44 +0000 Manifest next update: Tue 11 Nov 2025 14:27:44 +0000 Files and hashes: 1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: xRx7n2aq376p59JAaTVM/c6Kt1qCGdgRgLkVGrOGPIs=) 2: 2FA57B9A97B611EDAE9D4381C4F9AE02.roa (hash: /C/TeYf+QYgaRTA9LTGKRIOjHZCHFtEST+Y+0lrs4kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13561 (0x34f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Validity Not Before: Nov 4 14:27:44 2025 GMT Not After : Nov 11 14:27:44 2025 GMT Subject: CN=690a0d60-eafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2a:af:3b:ca:73:11:a5:87:a3:b0:df:a4:e8: d8:de:8b:d8:79:fd:62:ab:5d:58:04:a9:04:2f:fa: 57:a1:36:fa:59:7c:e1:a7:c2:dc:b2:d3:16:20:28: e0:bf:7e:da:aa:82:c9:58:b7:7d:cb:11:c6:64:94: fb:4a:ca:04:fe:28:b1:d8:1b:40:06:7f:76:c8:bb: ce:8f:83:d2:c6:22:cc:d3:83:1e:8f:f7:47:14:51: 63:d3:09:cd:b5:fd:d1:ee:5e:d9:f9:3a:ae:14:7f: 71:2e:cf:1c:e3:2b:90:c4:c4:fe:ca:0b:f7:ba:0c: 08:71:ac:a6:eb:60:07:83:1e:14:ec:b1:e7:9e:66: c0:fe:11:70:fe:2f:f4:0a:4b:46:80:d5:2f:0b:e0: 40:77:51:50:11:ce:0e:a4:0c:b7:cb:7a:86:82:d1: e9:32:fd:89:27:42:aa:79:0f:59:a2:da:17:40:e1: db:82:6e:0b:3f:f0:23:fe:99:05:77:bf:11:74:3c: f0:d4:0f:63:bb:2d:88:91:89:05:0e:f8:f0:96:5c: f3:f0:81:94:85:36:aa:18:2c:0e:f7:c2:f2:55:d7: d9:a3:60:de:89:9b:58:07:13:8f:2d:db:12:b5:cb: a9:36:9f:2f:23:44:e4:11:ee:5e:6c:1c:35:5a:3a: d0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:33:3F:A5:31:22:A4:63:15:9F:47:9A:3B:50:A1:23:87:C0:7A:89 X509v3 Authority Key Identifier: keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f3:a1:0c:7f:7c:6c:cb:5f:5a:94:cb:8a:e5:e6:b3:67:73: b9:67:45:6e:05:f0:49:a4:d3:ca:8f:27:3e:52:c7:52:c2:f9: ca:50:21:3b:bb:65:fb:9b:bd:f2:72:13:d7:8e:b8:1c:25:93: a1:39:76:13:98:04:ea:ac:a6:b6:ea:a1:ae:ae:00:13:44:bf: cc:f9:01:92:f5:87:17:d9:9e:97:a3:d2:75:75:22:bc:15:c8: 0f:30:d4:03:fb:e0:94:0b:ac:cf:6f:2a:46:de:f8:1c:e1:be: 7d:62:56:10:2f:d1:8d:55:8e:5f:66:08:57:ee:0b:13:cc:2f: 8e:47:d8:e8:c3:66:6f:af:50:ec:26:dd:78:a6:e6:0b:4e:46: 1b:98:8d:fe:51:2e:cc:20:65:5e:29:e6:ef:99:85:0d:26:fd: cb:60:b8:e5:21:b2:ec:d5:98:51:ea:27:a9:5d:b7:75:d2:81: b4:5f:a9:78:ad:55:10:29:11:ab:59:14:e7:fc:f5:63:d7:48: 1a:66:5b:2a:49:9c:ec:0c:19:4a:37:9a:8b:81:e2:ff:d9:d1: 0a:4f:e3:d8:20:aa:d5:1b:a7:8e:85:2d:12:12:1d:fc:5b:32: 39:f1:45:02:0e:72:84:cf:2b:e0:9a:ed:38:6f:4b:3e:3e:a1: 20:c4:13:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNEQxMTAvBgNVBAUTKEFFMTA3RjNDMjk3NzcxN0ExQ0QzNTcxRDE4Mzc0OEZE MDdEOUZDNUYwHhcNMjUxMTA0MTQyNzQ0WhcNMjUxMTExMTQyNzQ0WjAYMRYwFAYD VQQDEw02OTBhMGQ2MC1lYWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSqvO8pzEaWHo7DfpOjY3ovYef1iq11YBKkEL/pXoTb6WXzhp8LcstMWICjg v37aqoLJWLd9yxHGZJT7SsoE/iix2BtABn92yLvOj4PSxiLM04Mej/dHFFFj0wnN tf3R7l7Z+TquFH9xLs8c4yuQxMT+ygv3ugwIcaym62AHgx4U7LHnnmbA/hFw/i/0 CktGgNUvC+BAd1FQEc4OpAy3y3qGgtHpMv2JJ0KqeQ9ZotoXQOHbgm4LP/Aj/pkF d78RdDzw1A9juy2IkYkFDvjwllzz8IGUhTaqGCwO98LyVdfZo2DeiZtYBxOPLdsS tcupNp8vI0TkEe5ebBw1WjrQ9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOszP6Ux IqRjFZ9HmjtQoSOHwHqJMB8GA1UdIwQYMBaAFK4Qfzwpd3F6HNNXHRg3SP0H2fxf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0RC9FQTFCMUQ2QTFE ODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NYb2MwMWNkR0RkSV9RZlpf RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoQl9QQ2wzY1hvYzAxY2RHRGRJX1FmWl9GOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0RC9FQTFCMUQ2QTFEODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NY b2MwMWNkR0RkSV9RZlpfRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB686EMf3xsy19alMuK5eazZ3O5Z0VuBfBJpNPKjyc+UsdSwvnKUCE7 u2X7m73ychPXjrgcJZOhOXYTmATqrKa26qGurgATRL/M+QGS9YcX2Z6Xo9J1dSK8 FcgPMNQD++CUC6zPbypG3vgc4b59YlYQL9GNVY5fZghX7gsTzC+OR9jow2Zvr1Ds Jt14puYLTkYbmI3+US7MIGVeKebvmYUNJv3LYLjlIbLs1ZhR6iepXbd10oG0X6l4 rVUQKRGrWRTn/PVj10gaZlsqSZzsDBlKN5qLgeL/2dEKT+PYIKrVG6eOhS0SEh38 WzI58UUCDnKEzyvgmu04b0s+PqEgxBPZ -----END CERTIFICATE-----Generated at Wed Nov 5 07:53:10 2025 by rpki-client