$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json) Hash identifier: U3FMFkECbon58IRi/jIfN12yzMjFffYXU6y8pHDcM2o= Subject key identifier: 7B:5B:EB:A4:58:A7:A5:41:68:E9:BD:2B:E5:10:0D:05:A6:24:75:87 Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Certificate serial: 0B08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft Manifest number: 0B00 Signing time: Mon 12 May 2025 19:10:57 +0000 Manifest this update: Mon 12 May 2025 19:10:56 +0000 Manifest next update: Mon 19 May 2025 19:10:56 +0000 Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: IiEj6Uh45y2YR169yolcZRw6/rA5re12oPYWStfpRmM=) 2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: Q+t5vtr4zi9qbMz+XlbKgiQudk9xrXCU2lb+B14yXgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2824 (0xb08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Validity Not Before: May 12 19:10:56 2025 GMT Not After : May 19 19:10:56 2025 GMT Subject: CN=682247c0-848d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a0:f4:10:0e:91:a6:2c:37:0d:da:d2:11:e8: d1:e4:8a:81:be:8f:83:01:c1:2d:d4:9f:a9:88:96: 2e:42:d7:50:73:09:0d:ac:3f:db:6d:ff:03:06:52: cc:20:f7:a2:b3:e0:d9:94:0a:44:78:82:5a:54:e7: 92:95:81:65:54:86:46:88:89:f5:69:ca:e8:aa:69: 34:df:27:ac:71:64:0c:2f:9d:d6:be:0e:d5:fd:1f: 98:21:dd:29:e3:f6:ac:4c:eb:91:5e:0d:71:7f:87: 35:cb:cb:3e:4a:9f:6b:38:52:4d:b1:b0:04:e8:a3: 23:e4:9e:43:ba:75:e9:fc:39:49:6e:b8:19:f9:02: f3:89:10:66:42:ab:91:8a:f0:a4:e9:78:47:21:fb: 0a:8b:08:a4:d2:9a:4b:fa:c2:ea:01:42:2d:81:21: 71:42:1d:4a:3d:39:99:ec:64:8d:5b:41:3a:2b:4c: 03:76:d2:65:48:e1:b4:aa:2d:ad:ca:a6:84:14:92: d4:bd:92:a0:42:9c:35:a8:5e:c4:c8:e2:c4:c4:23: db:7f:37:a0:f9:20:8f:41:19:93:2f:84:77:96:e6: bb:6e:a7:05:ce:d0:d2:a4:36:d8:12:64:bb:80:c4: 0c:bb:4c:38:c8:e6:fc:fe:c7:b0:df:60:dd:6f:82: e1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5B:EB:A4:58:A7:A5:41:68:E9:BD:2B:E5:10:0D:05:A6:24:75:87 X509v3 Authority Key Identifier: keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:85:9d:93:4e:04:be:83:05:7e:96:9a:85:24:3f:db:d8:e6: fd:bf:d6:c3:8b:76:da:73:3b:b1:71:9b:5c:39:2e:be:f6:04: 19:42:ee:15:c8:9b:98:ac:37:77:d7:a4:6b:e4:e4:27:30:e7: b5:5d:ab:66:ad:75:04:ba:b2:0d:e8:0b:76:43:d2:08:a3:2d: 7e:96:41:0e:ea:09:58:14:95:c4:7c:8d:df:c2:e3:28:86:27: a8:ba:fd:2a:1f:29:33:7f:92:68:b1:46:da:38:e5:1a:be:33: a2:a5:14:60:68:17:cd:6d:b8:a0:ef:4f:de:56:8f:cc:cc:ae: c4:c8:db:db:e4:e6:82:9b:5d:74:a8:cf:95:23:45:23:32:2a: d3:ae:7f:3c:73:63:c5:3e:52:1d:c6:a7:41:18:f0:2b:56:5e: a2:b4:f6:a2:b3:66:1b:d9:91:4c:3b:61:64:af:6a:f6:1a:8e: 5f:0c:1b:24:bb:5a:02:cc:21:e4:03:b4:27:69:b7:32:e7:5a: 56:96:a2:de:cf:c9:8b:d0:ba:2b:b4:47:59:a1:a7:a4:6b:e8: 58:56:60:26:da:f5:43:75:f5:c6:2b:87:9f:af:cb:3d:e6:c1: 00:90:21:e6:29:d6:b3:04:b5:68:a0:09:12:06:85:71:e5:78: de:1f:5f:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKDNDREVGMTY5MkE0OEJCMTU5NjU2NzRCQzAwMkEzMTMz NThGNTJGRUYwHhcNMjUwNTEyMTkxMDU2WhcNMjUwNTE5MTkxMDU2WjAYMRYwFAYD VQQDEw02ODIyNDdjMC04NDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqD0EA6Rpiw3DdrSEejR5IqBvo+DAcEt1J+piJYuQtdQcwkNrD/bbf8DBlLM IPeis+DZlApEeIJaVOeSlYFlVIZGiIn1acroqmk03yescWQML53Wvg7V/R+YId0p 4/asTOuRXg1xf4c1y8s+Sp9rOFJNsbAE6KMj5J5DunXp/DlJbrgZ+QLziRBmQquR ivCk6XhHIfsKiwik0ppL+sLqAUItgSFxQh1KPTmZ7GSNW0E6K0wDdtJlSOG0qi2t yqaEFJLUvZKgQpw1qF7EyOLExCPbfzeg+SCPQRmTL4R3lua7bqcFztDSpDbYEmS7 gMQMu0w4yOb8/sew32Ddb4LhPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtb66RY p6VBaOm9K+UQDQWmJHWHMB8GA1UdIwQYMBaAFDze8WkqSLsVllZ0vAAqMTNY9S/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi9GOTk1MkE1QzQz MDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4V1dWblM4QUNveE0xajFM LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BON3hhU3BJdXhXV1ZuUzhBQ294TTFqMUwtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi9GOTk1MkE1QzQzMDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4 V1dWblM4QUNveE0xajFMLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRhZ2TTgS+gwV+lpqFJD/b2Ob9v9bDi3baczuxcZtcOS6+9gQZQu4V yJuYrDd316Rr5OQnMOe1XatmrXUEurIN6At2Q9IIoy1+lkEO6glYFJXEfI3fwuMo hieouv0qHykzf5JosUbaOOUavjOipRRgaBfNbbig70/eVo/MzK7EyNvb5OaCm110 qM+VI0UjMirTrn88c2PFPlIdxqdBGPArVl6itPais2Yb2ZFMO2Fkr2r2Go5fDBsk u1oCzCHkA7Qnabcy51pWlqLez8mL0LortEdZoaeka+hYVmAm2vVDdfXGK4efr8s9 5sEAkCHmKdazBLVooAkSBoVx5XjeH1/4 -----END CERTIFICATE-----Generated at Tue May 13 19:34:56 2025 by rpki-client