$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json) Hash identifier: ovE14SPDSYaLreRtGq7T2kXI62aFL3TeIcd8qGVYe7g= Subject key identifier: B2:EE:5A:ED:A6:D7:AE:5D:68:24:11:A0:28:0E:38:16:BC:36:70:9A Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Certificate serial: 1F15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft Manifest number: 1F0B Signing time: Fri 22 Aug 2025 16:04:51 +0000 Manifest this update: Fri 22 Aug 2025 16:04:50 +0000 Manifest next update: Fri 29 Aug 2025 16:04:50 +0000 Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: YRzSZr9ii3ETOVukPm/TXYDCuX+7i95HpHI1V5nrEgM=) 2: A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa (hash: C7LM+OrofkS8APK8eFVOJJHm9mqxZuAPAA0InGQkpPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7957 (0x1f15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Validity Not Before: Aug 22 16:04:50 2025 GMT Not After : Aug 29 16:04:50 2025 GMT Subject: CN=68a89523-56a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b9:b3:b2:8f:dc:58:7a:7b:f2:ec:45:7d:f8: 77:53:6c:2a:54:2b:af:d8:2d:85:82:f1:aa:bd:80: be:33:97:a0:c0:5f:82:2f:aa:22:81:a7:05:c2:c1: 5b:31:25:0b:bf:48:46:00:ca:13:52:6a:50:e0:98: ca:91:82:cd:92:dd:ca:9d:63:ab:74:66:4f:25:93: 2a:f2:2d:4b:db:23:9e:df:e5:7c:13:1e:7c:5e:aa: a5:b9:f1:aa:e7:a4:1d:58:c6:77:65:be:18:13:cc: d9:17:ae:d0:1b:5b:ce:af:67:dd:e1:c1:bf:64:ab: 96:e5:da:8b:92:ea:1b:a7:0f:b7:c8:6d:93:d7:14: ff:5b:79:02:2b:bb:89:b6:fa:e4:dc:e2:f0:6b:4f: 24:a2:44:15:48:3d:5a:9d:69:33:77:a5:ba:e0:de: d5:00:e0:07:dc:5f:4d:c1:29:15:33:c8:f7:68:d3: 13:3e:b4:68:b5:c1:0d:e8:1f:ba:55:65:97:0e:73: 22:70:3a:2d:4c:e5:14:e3:6f:ad:83:01:0c:5e:e7: a5:fe:c6:82:df:29:c6:f0:cd:5d:5c:18:ec:40:67: 59:43:60:d1:50:a7:a4:22:68:d5:b9:a2:e0:fb:52: 10:0b:67:63:e9:38:6b:0e:b9:c4:15:50:d7:f1:1f: fc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EE:5A:ED:A6:D7:AE:5D:68:24:11:A0:28:0E:38:16:BC:36:70:9A X509v3 Authority Key Identifier: keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:9c:1b:73:df:4c:ba:5b:87:18:fb:83:23:20:48:34:6c:9b: bc:fc:cc:e1:59:d3:ea:ad:a8:b1:b5:d7:6d:06:38:45:c8:cb: ca:dc:3d:65:89:fe:2e:9c:91:b8:99:bc:f6:31:45:08:21:2f: 0e:c2:ff:e6:8b:8e:fb:9c:dd:4f:47:c4:50:ef:0f:79:fc:be: 53:2c:d9:9c:40:e8:1e:11:21:76:05:ff:27:d8:10:03:54:5e: e7:00:f4:9a:f6:24:42:a1:13:da:49:75:98:5a:dc:9f:e4:a8: 60:a7:c6:7f:22:02:45:b8:26:c9:80:d3:3d:ed:1d:1d:01:ae: bb:6c:35:85:3d:ed:45:61:74:7f:02:5e:9c:62:0c:ce:0e:4c: b5:76:33:f3:f5:f1:cf:47:25:15:69:73:c5:c6:5a:5f:f6:f6: 14:9d:ea:c2:d3:80:85:18:2c:48:71:bd:b1:21:fb:4b:48:92: 8a:11:8c:64:30:5c:82:95:bd:e3:dc:07:94:43:2d:47:c4:ab: 45:16:d3:7c:4a:e4:ea:cd:b6:08:be:75:97:a6:81:db:46:e0: e7:8a:90:b9:f6:3b:f4:fd:7b:d0:3f:94:6c:8b:24:0d:64:f0: d5:89:c9:54:33:b8:41:dd:6e:a1:f0:52:d2:4c:ed:16:0e:ad: 3a:cf:cb:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxOEYxMTAvBgNVBAUTKDNGMTQ5Q0IyNDgxMDcxRjE0M0Y4RDE1NjA4Mjc5QUFG QzcxRDExNUMwHhcNMjUwODIyMTYwNDUwWhcNMjUwODI5MTYwNDUwWjAYMRYwFAYD VQQDEw02OGE4OTUyMy01NmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27mzso/cWHp78uxFffh3U2wqVCuv2C2FgvGqvYC+M5egwF+CL6oigacFwsFb MSULv0hGAMoTUmpQ4JjKkYLNkt3KnWOrdGZPJZMq8i1L2yOe3+V8Ex58XqqlufGq 56QdWMZ3Zb4YE8zZF67QG1vOr2fd4cG/ZKuW5dqLkuobpw+3yG2T1xT/W3kCK7uJ tvrk3OLwa08kokQVSD1anWkzd6W64N7VAOAH3F9NwSkVM8j3aNMTPrRotcEN6B+6 VWWXDnMicDotTOUU42+tgwEMXuel/saC3ynG8M1dXBjsQGdZQ2DRUKekImjVuaLg +1IQC2dj6ThrDrnEFVDX8R/82QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLuWu2m 165daCQRoCgOOBa8NnCaMB8GA1UdIwQYMBaAFD8UnLJIEHHxQ/jRVggnmq/HHRFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE4Ri84RTdBOUJBQzVF MTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNmRkQtTkZXQ0NlYXI4Y2RF VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4U2Nza2dRY2ZGRC1ORldDQ2VhcjhjZEVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE4Ri84RTdBOUJBQzVFMTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNm RkQtTkZXQ0NlYXI4Y2RFVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATnBtz30y6W4cY+4MjIEg0bJu8/MzhWdPqraixtddtBjhFyMvK3D1l if4unJG4mbz2MUUIIS8Owv/mi477nN1PR8RQ7w95/L5TLNmcQOgeESF2Bf8n2BAD VF7nAPSa9iRCoRPaSXWYWtyf5Khgp8Z/IgJFuCbJgNM97R0dAa67bDWFPe1FYXR/ Al6cYgzODky1djPz9fHPRyUVaXPFxlpf9vYUnerC04CFGCxIcb2xIftLSJKKEYxk MFyClb3j3AeUQy1HxKtFFtN8SuTqzbYIvnWXpoHbRuDnipC59jv0/XvQP5RsiyQN ZPDViclUM7hB3W6h8FLSTO0WDq06z8t8 -----END CERTIFICATE-----Generated at Sat Aug 23 14:17:45 2025 by rpki-client