$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json) Hash identifier: A+Vy/hA3s8qoNXh8oi0XXnYB/94x27oxTJUuJmYdgEA= Subject key identifier: 9B:2E:74:56:7C:88:BB:9E:A8:29:A8:53:90:73:59:D7:C2:07:38:CF Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Certificate serial: 0B3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft Manifest number: 0B33 Signing time: Fri 22 Aug 2025 19:22:22 +0000 Manifest this update: Fri 22 Aug 2025 19:22:21 +0000 Manifest next update: Fri 29 Aug 2025 19:22:21 +0000 Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: i4+6r22iCAJPHDx8bSM5POKcejhuG1FN2V6Bk9S2MOw=) 2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: Q+t5vtr4zi9qbMz+XlbKgiQudk9xrXCU2lb+B14yXgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2875 (0xb3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Validity Not Before: Aug 22 19:22:21 2025 GMT Not After : Aug 29 19:22:21 2025 GMT Subject: CN=68a8c36d-ab6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:28:94:05:3b:47:12:d9:1a:70:bd:36:36:c8: 9e:f0:2c:3b:9d:07:0f:79:78:7d:1c:48:43:f1:94: cf:99:fe:df:df:81:8c:b6:72:36:a8:c9:42:68:e7: fe:58:43:d6:7b:4e:44:62:8f:5c:6f:14:12:09:95: 12:4e:95:e0:e5:05:8d:1c:6b:2d:e8:c4:04:86:b3: 10:2b:2f:d3:49:4f:b0:9a:92:bf:72:b2:b3:a9:9b: 34:a6:95:42:70:ee:c7:4b:4a:85:6b:c6:5d:d9:49: 42:8a:af:11:af:c8:36:bb:66:38:05:6e:d8:fe:87: 4c:be:84:7f:20:46:52:d1:36:7a:cd:7e:67:7c:f3: 77:44:50:58:cd:0a:4e:40:2c:ae:13:7a:a6:b7:d8: 4a:21:c8:9d:57:ee:ab:89:01:55:e9:b3:41:13:45: f4:23:6f:13:8f:71:3c:72:41:1b:3a:a2:a8:aa:13: ec:0d:e4:b9:40:b7:35:f0:f6:7b:42:6f:72:99:60: 5e:71:cd:7b:da:5e:f0:93:03:55:0d:07:84:bc:81: b4:45:01:55:17:ef:b2:e8:40:11:74:e9:da:b7:f9: c6:69:81:22:00:14:17:38:46:bc:d7:b7:df:ea:f2: 27:87:39:51:80:e9:1d:5c:44:63:38:19:d5:00:ea: 7b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2E:74:56:7C:88:BB:9E:A8:29:A8:53:90:73:59:D7:C2:07:38:CF X509v3 Authority Key Identifier: keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:4a:2d:35:ce:e9:bf:ce:c0:25:df:35:7d:85:5f:ad:c6:dd: fd:d2:5c:e2:3a:22:2c:f7:87:ca:d3:53:1b:89:29:2b:87:25: 8f:1e:12:e3:af:16:d5:c4:e2:1e:0f:0f:61:f8:ec:31:fa:91: 6a:90:81:d0:b7:ae:37:fc:7f:03:ca:49:b3:4e:27:51:13:e3: 02:3a:4a:33:de:97:b9:2c:c8:1e:4a:7c:30:47:90:fb:ea:f7: 83:fd:56:4e:9f:1e:8b:2e:a3:35:c3:af:95:2c:52:4d:bb:fd: 7e:9d:2a:93:07:46:ec:2d:ee:27:d7:98:3c:1d:2a:10:95:ff: 9e:a8:fb:03:3f:af:cb:9a:20:c6:aa:01:4a:3e:e9:5e:f6:03: ef:2a:77:05:c8:ce:16:bb:a7:7f:b8:60:d9:fb:22:05:21:b5: 1f:c0:af:22:7c:64:98:e2:d7:7f:5c:f0:11:9b:fc:5f:ac:16: ff:e4:b0:12:40:5e:da:a0:05:b8:36:df:64:1e:c7:ba:9f:9e: 4b:07:bc:02:53:97:f1:35:e9:4a:4f:00:26:75:d5:1e:5e:77: f5:f9:53:de:aa:b7:0a:b2:4d:72:1d:1b:92:89:71:75:a9:0e: 83:e1:bf:16:8b:5b:e9:3d:d6:af:a1:72:8c:65:92:2c:ff:7a: 93:8b:9b:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKDNDREVGMTY5MkE0OEJCMTU5NjU2NzRCQzAwMkEzMTMz NThGNTJGRUYwHhcNMjUwODIyMTkyMjIxWhcNMjUwODI5MTkyMjIxWjAYMRYwFAYD VQQDEw02OGE4YzM2ZC1hYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yiUBTtHEtkacL02Nsie8Cw7nQcPeXh9HEhD8ZTPmf7f34GMtnI2qMlCaOf+ WEPWe05EYo9cbxQSCZUSTpXg5QWNHGst6MQEhrMQKy/TSU+wmpK/crKzqZs0ppVC cO7HS0qFa8Zd2UlCiq8Rr8g2u2Y4BW7Y/odMvoR/IEZS0TZ6zX5nfPN3RFBYzQpO QCyuE3qmt9hKIcidV+6riQFV6bNBE0X0I28Tj3E8ckEbOqKoqhPsDeS5QLc18PZ7 Qm9ymWBecc172l7wkwNVDQeEvIG0RQFVF++y6EARdOnat/nGaYEiABQXOEa817ff 6vInhzlRgOkdXERjOBnVAOp7fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsudFZ8 iLueqCmoU5BzWdfCBzjPMB8GA1UdIwQYMBaAFDze8WkqSLsVllZ0vAAqMTNY9S/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi9GOTk1MkE1QzQz MDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4V1dWblM4QUNveE0xajFM LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BON3hhU3BJdXhXV1ZuUzhBQ294TTFqMUwtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi9GOTk1MkE1QzQzMDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4 V1dWblM4QUNveE0xajFMLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQSi01zum/zsAl3zV9hV+txt390lziOiIs94fK01MbiSkrhyWPHhLj rxbVxOIeDw9h+Owx+pFqkIHQt643/H8DykmzTidRE+MCOkoz3pe5LMgeSnwwR5D7 6veD/VZOnx6LLqM1w6+VLFJNu/1+nSqTB0bsLe4n15g8HSoQlf+eqPsDP6/LmiDG qgFKPule9gPvKncFyM4Wu6d/uGDZ+yIFIbUfwK8ifGSY4td/XPARm/xfrBb/5LAS QF7aoAW4Nt9kHse6n55LB7wCU5fxNelKTwAmddUeXnf1+VPeqrcKsk1yHRuSiXF1 qQ6D4b8Wi1vpPdavoXKMZZIs/3qTi5tM -----END CERTIFICATE-----Generated at Sun Aug 24 00:06:51 2025 by rpki-client