$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json) Hash identifier: h+j/nbeR79TC92jtjBrtaSSS6fQxrz+JiPVvmjM9xAQ= Subject key identifier: A9:01:53:E2:9B:95:91:C1:50:F7:3E:E8:E5:65:86:A4:16:23:05:B7 Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Certificate serial: 1EF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft Manifest number: 1EE8 Signing time: Sat 14 Jun 2025 16:00:07 +0000 Manifest this update: Sat 14 Jun 2025 16:00:06 +0000 Manifest next update: Sat 21 Jun 2025 16:00:06 +0000 Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: yZgNLwDSTBu/OtL5g8/epWHpXNdP1o+1jM8K2CkGvwk=) 2: A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa (hash: C7LM+OrofkS8APK8eFVOJJHm9mqxZuAPAA0InGQkpPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7922 (0x1ef2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Validity Not Before: Jun 14 16:00:06 2025 GMT Not After : Jun 21 16:00:06 2025 GMT Subject: CN=684d9c87-7f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:1d:36:07:7f:df:f0:af:2e:fa:fc:a8:fd: ac:80:bf:82:38:3b:14:d2:39:b9:c6:1b:3c:a5:7e: 75:5f:41:54:d3:eb:56:0e:5b:ab:3d:c5:54:0c:3d: 24:3a:78:1f:68:c8:3a:87:43:d1:5b:60:bf:ea:ad: 7c:ad:c1:9d:fb:fd:d5:9e:f6:9b:fb:4e:59:73:a4: bf:4b:9d:58:59:4d:83:37:ce:c3:9b:85:0e:f8:56: 1c:03:01:7b:4d:f4:e6:aa:6c:b7:b6:9a:a3:9c:eb: b2:7e:7a:50:86:62:76:e8:d1:e6:dc:8f:d8:2f:51: f9:3a:1a:c6:ab:27:e2:7b:af:62:f6:3b:8d:25:25: af:b4:e6:bb:90:da:96:3c:dc:cf:7f:09:ba:dd:13: c7:9d:75:3f:e7:d3:ed:bc:e9:d4:ab:40:ec:d0:15: 3e:d8:32:77:0f:07:45:e3:cf:1d:2f:40:60:e9:26: 12:cd:fe:73:8f:c9:5f:4e:7c:d6:fc:5d:b9:d1:32: a9:ee:73:aa:36:2d:da:2a:13:89:44:97:01:77:6f: 2b:c3:bd:15:e4:ea:75:2b:97:fb:7b:55:cf:00:f2: b8:77:c9:54:16:e6:f7:d8:a6:71:91:fc:62:d5:85: e9:88:b1:59:0a:26:66:f1:df:4a:62:3c:82:79:67: b1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:01:53:E2:9B:95:91:C1:50:F7:3E:E8:E5:65:86:A4:16:23:05:B7 X509v3 Authority Key Identifier: keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b8:89:d2:c0:f8:13:0f:53:29:69:c3:9b:98:6b:6f:c5:22: 5f:f8:e9:1a:06:ae:b4:1e:dd:93:6f:68:8f:c8:f0:0a:54:d4: a8:27:0a:a4:4a:88:ce:1a:5d:35:d8:1d:23:59:c5:ad:91:71: 9e:c9:41:78:38:a2:71:27:25:9e:d5:f6:74:25:8a:a5:77:c1: 3a:b9:7d:46:b2:63:57:f9:c0:33:72:61:9c:fb:c3:dd:e4:6b: 46:f9:e2:3e:66:f0:0d:d1:d9:fb:d6:e8:27:2e:52:d7:c6:61: 76:a7:03:2d:86:7c:3c:ba:a8:4c:ca:d4:ae:fd:c1:f9:ec:ba: 34:c5:d1:65:61:85:16:ef:0c:92:a3:75:d6:a3:12:9d:71:6f: 32:ac:81:0a:03:e0:10:13:46:7d:35:ee:63:e7:6e:a2:cb:6b: 25:15:9d:cd:5e:a3:90:aa:0d:79:d3:30:0b:59:45:8a:ed:87: 02:2e:7e:f8:17:8c:87:bc:b5:72:64:da:53:a2:15:ec:bf:34: b8:87:38:e8:f1:42:b6:63:6c:53:2d:8d:73:c3:ef:3f:0c:3a: ad:8d:42:7b:d3:19:b9:3f:96:ea:74:25:98:a0:85:b2:0f:a5: 58:f9:37:c1:fd:10:47:d3:54:56:ee:a8:e4:81:f3:21:f8:e9: da:44:74:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxOEYxMTAvBgNVBAUTKDNGMTQ5Q0IyNDgxMDcxRjE0M0Y4RDE1NjA4Mjc5QUFG QzcxRDExNUMwHhcNMjUwNjE0MTYwMDA2WhcNMjUwNjIxMTYwMDA2WjAYMRYwFAYD VQQDEw02ODRkOWM4Ny03ZjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtc0dNgd/3/CvLvr8qP2sgL+CODsU0jm5xhs8pX51X0FU0+tWDlurPcVUDD0k OngfaMg6h0PRW2C/6q18rcGd+/3Vnvab+05Zc6S/S51YWU2DN87Dm4UO+FYcAwF7 TfTmqmy3tpqjnOuyfnpQhmJ26NHm3I/YL1H5OhrGqyfie69i9juNJSWvtOa7kNqW PNzPfwm63RPHnXU/59PtvOnUq0Ds0BU+2DJ3DwdF488dL0Bg6SYSzf5zj8lfTnzW /F250TKp7nOqNi3aKhOJRJcBd28rw70V5Op1K5f7e1XPAPK4d8lUFub32KZxkfxi 1YXpiLFZCiZm8d9KYjyCeWexWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkBU+Kb lZHBUPc+6OVlhqQWIwW3MB8GA1UdIwQYMBaAFD8UnLJIEHHxQ/jRVggnmq/HHRFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE4Ri84RTdBOUJBQzVF MTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNmRkQtTkZXQ0NlYXI4Y2RF VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4U2Nza2dRY2ZGRC1ORldDQ2VhcjhjZEVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE4Ri84RTdBOUJBQzVFMTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNm RkQtTkZXQ0NlYXI4Y2RFVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcuInSwPgTD1MpacObmGtvxSJf+OkaBq60Ht2Tb2iPyPAKVNSoJwqk SojOGl012B0jWcWtkXGeyUF4OKJxJyWe1fZ0JYqld8E6uX1GsmNX+cAzcmGc+8Pd 5GtG+eI+ZvAN0dn71ugnLlLXxmF2pwMthnw8uqhMytSu/cH57Lo0xdFlYYUW7wyS o3XWoxKdcW8yrIEKA+AQE0Z9Ne5j526iy2slFZ3NXqOQqg150zALWUWK7YcCLn74 F4yHvLVyZNpTohXsvzS4hzjo8UK2Y2xTLY1zw+8/DDqtjUJ70xm5P5bqdCWYoIWy D6VY+TfB/RBH01RW7qjkgfMh+OnaRHSr -----END CERTIFICATE-----Generated at Sun Jun 15 06:04:13 2025 by rpki-client