$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json) Hash identifier: VKpTmy1v1jWY1WVsMlUSUk59/R9MScce7H+WxuG9UOw= Subject key identifier: 95:2C:F8:B2:72:20:E9:6D:D5:CC:4B:DE:B1:F3:80:B9:0F:C5:38:4A Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Certificate serial: 0B21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft Manifest number: 0B19 Signing time: Wed 02 Jul 2025 19:30:34 +0000 Manifest this update: Wed 02 Jul 2025 19:30:34 +0000 Manifest next update: Wed 09 Jul 2025 19:30:34 +0000 Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: 7INebYL2Zjwh9nM/V9NXo28itcFa2dIxPpjB2LDq0fs=) 2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: Q+t5vtr4zi9qbMz+XlbKgiQudk9xrXCU2lb+B14yXgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2849 (0xb21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Validity Not Before: Jul 2 19:30:34 2025 GMT Not After : Jul 9 19:30:34 2025 GMT Subject: CN=686588da-578d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:12:fb:39:8c:00:48:bf:4d:15:c5:af:7b:69: a0:4b:c8:9e:fe:d0:cd:65:68:76:22:f9:07:dc:7c: df:5b:e8:60:07:31:7f:13:9a:f6:af:a5:68:f5:41: 23:73:9e:a5:60:09:b8:00:89:60:9e:ad:49:cb:d3: 98:2d:40:84:de:cf:d2:61:08:f9:09:03:74:da:f9: d6:6e:bc:c1:9e:88:4a:45:ef:50:a2:9a:da:40:81: cb:43:f0:7b:96:7d:48:14:50:9d:e4:9c:ef:24:36: 5e:d6:eb:ea:16:0c:da:c9:8c:7f:4a:43:f5:c0:09: 40:da:e9:91:a7:da:e3:14:47:93:4f:1f:a6:e8:07: 89:a4:3a:42:91:7c:1b:b5:33:a5:3b:87:bb:81:61: dc:ef:21:09:94:eb:c8:fe:bb:97:c4:e2:59:83:57: df:e6:92:ff:2d:f3:90:4d:14:b1:cf:d8:26:05:8a: 0f:8d:00:52:24:7d:59:23:3f:eb:bf:a4:cd:cc:03: d4:da:a3:db:b8:a5:64:39:99:c0:84:d8:58:84:be: 75:53:da:61:da:b6:80:f7:da:bb:24:e4:01:7c:4f: 1d:cb:72:e7:06:e4:e2:ae:ec:c1:18:b8:73:ea:a9: 21:13:79:18:27:20:b6:b2:b3:aa:d3:2b:4c:8d:5d: 10:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2C:F8:B2:72:20:E9:6D:D5:CC:4B:DE:B1:F3:80:B9:0F:C5:38:4A X509v3 Authority Key Identifier: keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:7f:19:93:78:c8:de:60:39:6b:cd:dd:31:cc:af:5e:e4:b5: 9d:51:14:14:d2:5b:bd:7d:c2:fe:39:cb:ef:6a:d3:f5:d7:b2: d0:be:dd:00:7d:81:f5:e2:d6:d7:b6:f6:51:35:06:00:6c:63: 55:49:37:0e:98:6e:dd:99:d2:d2:2b:fe:1d:7b:20:c3:ea:8e: 58:06:ae:d2:6f:c6:ae:2c:0c:aa:06:33:3d:08:34:42:60:b0: c2:92:c8:61:80:04:38:4f:25:a1:14:d1:d0:55:52:78:b8:5e: 3e:b4:95:76:01:59:e7:a1:96:63:98:dc:5c:21:ef:8f:1d:b5: 27:ab:65:e1:02:fe:5d:26:c0:64:bb:f7:a5:df:45:fd:3a:c3: f2:8e:17:ff:84:39:c0:be:b2:7d:08:14:c0:4d:0c:f2:91:d9: 38:dc:a9:2f:a6:d8:16:ff:2b:73:20:19:be:87:8c:b2:7b:0b: f7:a6:41:5e:66:e3:12:15:7f:ad:49:73:b6:d7:de:90:39:72: e0:29:d1:9e:a5:7f:e3:5d:d7:e5:cc:dc:ca:02:6a:83:1f:a6: ab:0d:25:71:02:bd:1d:8d:cd:af:78:8f:a4:9c:b7:98:1f:d7: e8:61:7e:44:b7:86:99:36:94:3d:86:87:44:dd:5e:65:09:e7: c6:62:af:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKDNDREVGMTY5MkE0OEJCMTU5NjU2NzRCQzAwMkEzMTMz NThGNTJGRUYwHhcNMjUwNzAyMTkzMDM0WhcNMjUwNzA5MTkzMDM0WjAYMRYwFAYD VQQDEw02ODY1ODhkYS01NzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8RL7OYwASL9NFcWve2mgS8ie/tDNZWh2IvkH3HzfW+hgBzF/E5r2r6Vo9UEj c56lYAm4AIlgnq1Jy9OYLUCE3s/SYQj5CQN02vnWbrzBnohKRe9QopraQIHLQ/B7 ln1IFFCd5JzvJDZe1uvqFgzayYx/SkP1wAlA2umRp9rjFEeTTx+m6AeJpDpCkXwb tTOlO4e7gWHc7yEJlOvI/ruXxOJZg1ff5pL/LfOQTRSxz9gmBYoPjQBSJH1ZIz/r v6TNzAPU2qPbuKVkOZnAhNhYhL51U9ph2raA99q7JOQBfE8dy3LnBuTiruzBGLhz 6qkhE3kYJyC2srOq0ytMjV0QywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUs+LJy IOlt1cxL3rHzgLkPxThKMB8GA1UdIwQYMBaAFDze8WkqSLsVllZ0vAAqMTNY9S/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi9GOTk1MkE1QzQz MDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4V1dWblM4QUNveE0xajFM LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BON3hhU3BJdXhXV1ZuUzhBQ294TTFqMUwtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi9GOTk1MkE1QzQzMDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4 V1dWblM4QUNveE0xajFMLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAifxmTeMjeYDlrzd0xzK9e5LWdURQU0lu9fcL+OcvvatP117LQvt0A fYH14tbXtvZRNQYAbGNVSTcOmG7dmdLSK/4deyDD6o5YBq7Sb8auLAyqBjM9CDRC YLDCkshhgAQ4TyWhFNHQVVJ4uF4+tJV2AVnnoZZjmNxcIe+PHbUnq2XhAv5dJsBk u/el30X9OsPyjhf/hDnAvrJ9CBTATQzykdk43KkvptgW/ytzIBm+h4yyewv3pkFe ZuMSFX+tSXO2196QOXLgKdGepX/jXdflzNzKAmqDH6arDSVxAr0djc2veI+knLeY H9foYX5Et4aZNpQ9hodE3V5lCefGYq/8 -----END CERTIFICATE-----Generated at Thu Jul 3 07:52:38 2025 by rpki-client