$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json) Hash identifier: 2Zj9Pigf2Ax9/57UPL2bzt8d8Rb2XSv7cBqIMlNYTro= Subject key identifier: C9:C9:62:9B:15:AF:E9:B7:1D:8C:05:0E:59:17:3C:6C:69:03:34:83 Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Certificate serial: 1EE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft Manifest number: 1ED6 Signing time: Sat 10 May 2025 15:58:24 +0000 Manifest this update: Sat 10 May 2025 15:58:23 +0000 Manifest next update: Sat 17 May 2025 15:58:23 +0000 Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: WotWHMyWOXSXpoC865Zgg4ioNiIXIVgq1XxbzsBnY5o=) 2: A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa (hash: C7LM+OrofkS8APK8eFVOJJHm9mqxZuAPAA0InGQkpPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7904 (0x1ee0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Validity Not Before: May 10 15:58:23 2025 GMT Not After : May 17 15:58:23 2025 GMT Subject: CN=681f77a0-40e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bc:3a:ca:24:f5:ea:b0:c9:21:c1:0c:6f:77: 70:31:01:e4:2f:be:7e:c0:71:39:6b:59:d4:61:31: 53:ec:cd:b3:42:94:7c:b5:1b:64:49:a9:48:b6:eb: 04:a3:8b:31:e0:2d:b1:dc:f3:ed:28:1b:e1:d6:ce: 3e:3c:0c:c7:04:24:91:11:3b:3b:5c:2f:de:32:98: 51:a2:36:57:a0:e1:78:7d:e4:e3:61:c4:6c:ec:0a: 13:a2:df:45:0f:da:0f:b2:cc:02:1b:c5:8a:50:27: 72:3a:3e:e6:18:4c:a2:90:be:63:6b:7d:3e:e2:d1: ed:8a:3f:93:eb:95:7a:50:43:ce:45:8b:65:20:42: bd:d7:0b:f7:d3:06:95:17:02:3f:66:6c:98:7f:dc: e6:41:bf:8b:ca:75:96:cf:6f:9a:bd:01:c9:e5:20: e1:3a:f7:eb:fe:ec:a3:b4:ba:df:aa:8a:2e:18:da: 85:05:fc:b7:d3:ad:4e:b9:06:8a:54:97:07:7c:1b: 3e:42:c1:76:95:21:fc:3f:53:9c:0a:0b:aa:70:7f: eb:ad:9a:76:da:4f:93:2c:90:5e:c0:a1:47:77:15: 45:1d:d3:ec:c0:5c:49:2b:f7:63:72:a0:f5:aa:3e: f7:4e:70:32:63:2d:3a:43:49:78:18:fc:a8:5b:b9: 55:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C9:62:9B:15:AF:E9:B7:1D:8C:05:0E:59:17:3C:6C:69:03:34:83 X509v3 Authority Key Identifier: keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:b7:c9:bf:40:cd:9b:75:53:06:0e:9b:01:9a:1f:05:b4:d8: cb:49:32:f1:68:ac:1e:5c:c1:39:bc:89:06:95:13:74:f0:ff: e5:28:dd:fb:82:f9:d0:b7:89:ff:48:ad:29:b5:83:25:90:77: a5:a7:c2:e0:c9:ab:63:d0:f5:1f:16:c1:fd:bb:10:1f:5f:8c: 1a:13:21:66:72:24:18:53:5a:7d:54:05:71:17:93:0b:4b:f8: 1e:c3:72:2e:e7:ab:b1:9d:74:9d:72:3c:e7:2f:83:4b:4b:87: 1c:a5:69:45:a9:29:fa:9d:13:0e:32:47:8a:29:9e:4d:c6:fd: 31:ac:36:85:d6:24:04:a6:99:7a:d1:26:85:10:4f:90:78:01: 69:3c:fd:44:03:b7:67:9c:2d:fc:a5:1e:78:35:a9:6e:74:4f: 28:77:94:ed:b5:89:fe:71:55:bf:0a:3c:90:1b:e9:0e:12:a3: 54:21:0a:81:de:4c:00:47:15:33:25:23:cd:75:0e:86:be:0a: 27:31:f7:b8:c1:74:32:8e:42:2a:9d:1d:18:45:d4:82:a2:aa: a9:07:db:81:f8:75:c3:e9:f5:b8:c5:ac:d8:b4:4d:4c:97:ee: 71:ff:6a:56:e5:d1:a0:70:41:db:32:21:22:82:bb:e8:15:28: e1:3f:17:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxOEYxMTAvBgNVBAUTKDNGMTQ5Q0IyNDgxMDcxRjE0M0Y4RDE1NjA4Mjc5QUFG QzcxRDExNUMwHhcNMjUwNTEwMTU1ODIzWhcNMjUwNTE3MTU1ODIzWjAYMRYwFAYD VQQDEw02ODFmNzdhMC00MGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLw6yiT16rDJIcEMb3dwMQHkL75+wHE5a1nUYTFT7M2zQpR8tRtkSalItusE o4sx4C2x3PPtKBvh1s4+PAzHBCSRETs7XC/eMphRojZXoOF4feTjYcRs7AoTot9F D9oPsswCG8WKUCdyOj7mGEyikL5ja30+4tHtij+T65V6UEPORYtlIEK91wv30waV FwI/ZmyYf9zmQb+LynWWz2+avQHJ5SDhOvfr/uyjtLrfqoouGNqFBfy3061OuQaK VJcHfBs+QsF2lSH8P1OcCguqcH/rrZp22k+TLJBewKFHdxVFHdPswFxJK/djcqD1 qj73TnAyYy06Q0l4GPyoW7lVTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnJYpsV r+m3HYwFDlkXPGxpAzSDMB8GA1UdIwQYMBaAFD8UnLJIEHHxQ/jRVggnmq/HHRFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE4Ri84RTdBOUJBQzVF MTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNmRkQtTkZXQ0NlYXI4Y2RF VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4U2Nza2dRY2ZGRC1ORldDQ2VhcjhjZEVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE4Ri84RTdBOUJBQzVFMTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNm RkQtTkZXQ0NlYXI4Y2RFVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADt8m/QM2bdVMGDpsBmh8FtNjLSTLxaKweXME5vIkGlRN08P/lKN37 gvnQt4n/SK0ptYMlkHelp8Lgyatj0PUfFsH9uxAfX4waEyFmciQYU1p9VAVxF5ML S/gew3Iu56uxnXSdcjznL4NLS4ccpWlFqSn6nRMOMkeKKZ5Nxv0xrDaF1iQEppl6 0SaFEE+QeAFpPP1EA7dnnC38pR54NaludE8od5TttYn+cVW/CjyQG+kOEqNUIQqB 3kwARxUzJSPNdQ6GvgonMfe4wXQyjkIqnR0YRdSCoqqpB9uB+HXD6fW4xazYtE1M l+5x/2pW5dGgcEHbMiEigrvoFSjhPxdN -----END CERTIFICATE-----Generated at Sun May 11 01:22:03 2025 by rpki-client