$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json) Hash identifier: osuVyzZs1qqmjheq5niYVsovraKvXNGK7AaRi+Ybtqw= Subject key identifier: C4:E2:9B:8F:C0:DF:98:F2:64:F9:60:FD:66:60:D2:AC:43:55:BB:0D Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Certificate serial: 1ED8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft Manifest number: 1ECE Signing time: Thu 24 Apr 2025 16:03:19 +0000 Manifest this update: Thu 24 Apr 2025 16:03:18 +0000 Manifest next update: Thu 01 May 2025 16:03:18 +0000 Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: UXrusyHesO866DH8V5jZcqKOFG9P/HMdAXzEMl6PMfc=) 2: A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa (hash: C7LM+OrofkS8APK8eFVOJJHm9mqxZuAPAA0InGQkpPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7896 (0x1ed8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Validity Not Before: Apr 24 16:03:18 2025 GMT Not After : May 1 16:03:18 2025 GMT Subject: CN=680a60c6-261a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:da:e1:63:83:0f:46:c3:ac:1a:32:f6:b0:50: 6c:90:c5:36:40:bd:0e:bf:13:9a:74:1e:7f:65:92: ab:c1:9f:6f:83:69:64:aa:1d:47:12:18:ab:f4:1a: 6b:1c:03:ba:5c:b9:83:52:46:09:f5:ae:6a:4f:b2: 20:72:3b:72:2e:db:4b:0a:2f:74:95:9d:6c:26:53: 2c:15:76:de:65:c1:8c:6c:c6:7a:7e:eb:28:ac:50: 75:bb:b2:20:89:ab:c4:db:5c:1b:26:5a:1a:ce:62: 90:d8:94:2d:8e:57:b9:b2:79:e4:94:c5:8d:53:cc: 1e:e4:79:36:8d:fd:c8:fe:e0:fc:7f:70:1e:66:c9: dd:56:3d:ac:3a:4a:15:03:2e:48:cd:9b:61:a9:4a: a7:96:49:e3:5d:44:27:4a:60:7d:7c:70:a6:77:f5: 5e:4d:fa:0b:6f:ab:91:af:78:81:33:ea:16:18:b0: 4e:6e:f3:fa:0e:bd:e9:cf:ae:c4:0f:5b:ee:f7:e3: 39:37:c0:fe:6d:9d:1f:30:b7:b9:fd:9f:24:bb:80: 65:e6:89:c3:16:8a:b9:04:db:f0:54:11:fe:8b:8d: fa:87:cf:e1:45:de:fb:27:25:0c:a9:46:01:43:c4: bd:5b:c2:8c:e0:a9:7c:9b:80:44:15:10:5b:5b:37: 34:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E2:9B:8F:C0:DF:98:F2:64:F9:60:FD:66:60:D2:AC:43:55:BB:0D X509v3 Authority Key Identifier: keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:1c:c9:f3:2e:6a:6e:99:46:18:50:c0:97:82:58:4e:9c:64: e3:a5:dd:a8:5e:79:9d:9a:08:c7:c8:db:25:d3:94:72:eb:06: 16:05:d3:10:30:34:1f:9a:69:ed:d1:4a:c4:3f:64:7c:09:98: ff:ad:8b:f4:af:06:83:47:6d:9b:a0:ab:70:c5:96:29:16:f7: 1a:e5:83:d4:d7:e1:48:50:7b:06:6a:19:3b:63:86:1a:f8:ba: ae:b8:f3:b5:86:59:7c:03:b6:f4:12:05:6e:b3:90:16:de:75: aa:f4:a7:df:e5:bc:3e:72:ee:47:95:1e:9f:3f:f5:f4:96:e2: eb:3e:df:72:67:c4:d5:44:1f:83:f3:3f:b6:2d:72:58:4a:08: 86:9e:fb:7c:c5:bc:c9:74:3a:b7:e5:ca:fd:dc:ac:f6:8d:27: 03:a7:57:f1:f3:55:95:00:ca:0b:a9:35:df:56:10:91:0f:a3: 90:d7:f1:1a:ea:7d:bc:8c:37:f9:75:ce:1b:48:69:71:c5:c9: 98:3f:14:51:fd:3a:a3:33:f9:86:8f:5f:b1:ae:c2:65:bc:c8: bc:d9:a5:55:66:a0:12:30:6f:a2:34:f1:0e:71:40:6e:96:5c: 5a:59:c0:34:f6:20:67:9c:51:61:5f:13:ad:51:b4:be:86:72: 73:6d:d0:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxOEYxMTAvBgNVBAUTKDNGMTQ5Q0IyNDgxMDcxRjE0M0Y4RDE1NjA4Mjc5QUFG QzcxRDExNUMwHhcNMjUwNDI0MTYwMzE4WhcNMjUwNTAxMTYwMzE4WjAYMRYwFAYD VQQDEw02ODBhNjBjNi0yNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5trhY4MPRsOsGjL2sFBskMU2QL0OvxOadB5/ZZKrwZ9vg2lkqh1HEhir9Bpr HAO6XLmDUkYJ9a5qT7IgcjtyLttLCi90lZ1sJlMsFXbeZcGMbMZ6fusorFB1u7Ig iavE21wbJloazmKQ2JQtjle5snnklMWNU8we5Hk2jf3I/uD8f3AeZsndVj2sOkoV Ay5IzZthqUqnlknjXUQnSmB9fHCmd/VeTfoLb6uRr3iBM+oWGLBObvP6Dr3pz67E D1vu9+M5N8D+bZ0fMLe5/Z8ku4Bl5onDFoq5BNvwVBH+i436h8/hRd77JyUMqUYB Q8S9W8KM4Kl8m4BEFRBbWzc0BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTim4/A 35jyZPlg/WZg0qxDVbsNMB8GA1UdIwQYMBaAFD8UnLJIEHHxQ/jRVggnmq/HHRFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE4Ri84RTdBOUJBQzVF MTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNmRkQtTkZXQ0NlYXI4Y2RF VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4U2Nza2dRY2ZGRC1ORldDQ2VhcjhjZEVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE4Ri84RTdBOUJBQzVFMTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNm RkQtTkZXQ0NlYXI4Y2RFVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQHMnzLmpumUYYUMCXglhOnGTjpd2oXnmdmgjHyNsl05Ry6wYWBdMQ MDQfmmnt0UrEP2R8CZj/rYv0rwaDR22boKtwxZYpFvca5YPU1+FIUHsGahk7Y4Ya +LquuPO1hll8A7b0EgVus5AW3nWq9Kff5bw+cu5HlR6fP/X0luLrPt9yZ8TVRB+D 8z+2LXJYSgiGnvt8xbzJdDq35cr93Kz2jScDp1fx81WVAMoLqTXfVhCRD6OQ1/Ea 6n28jDf5dc4bSGlxxcmYPxRR/TqjM/mGj1+xrsJlvMi82aVVZqASMG+iNPEOcUBu llxaWcA09iBnnFFhXxOtUbS+hnJzbdDY -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:00 2025 by rpki-client