$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json) Hash identifier: SZzVcn5LlTEOc6IXZ6lXX+yO+9W1PiJ6OGgAeM90VBk= Subject key identifier: 90:10:A5:CC:95:0B:3D:C6:8B:B5:24:81:46:96:75:BF:92:AA:34:87 Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Certificate serial: 1F0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft Manifest number: 1F02 Signing time: Mon 04 Aug 2025 16:10:23 +0000 Manifest this update: Mon 04 Aug 2025 16:10:22 +0000 Manifest next update: Mon 11 Aug 2025 16:10:22 +0000 Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: RfvX200irj7BU051czpPI591oE5k7DxDs7e5NhWNN2g=) 2: A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa (hash: C7LM+OrofkS8APK8eFVOJJHm9mqxZuAPAA0InGQkpPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 16:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7948 (0x1f0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Validity Not Before: Aug 4 16:10:22 2025 GMT Not After : Aug 11 16:10:22 2025 GMT Subject: CN=6890db6e-ad22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b3:8d:a0:c2:82:93:57:24:26:ac:91:78:bc: 80:ff:15:d6:13:2e:f4:79:1d:a2:6b:c4:a7:1f:f7: 12:71:46:ea:33:94:8d:ff:b7:2d:3d:d0:28:b3:24: cf:bf:02:54:9a:36:6d:8b:e4:a8:b1:a6:dd:45:6a: 87:08:38:9c:df:37:6d:49:b3:ea:95:a8:6c:b7:76: e3:af:50:22:d6:b3:94:1f:2d:1c:25:35:7c:05:c0: 02:c9:35:30:aa:a6:c0:35:96:30:da:9e:ae:44:8c: ac:cc:0c:6c:e5:f8:80:05:8d:cb:55:5e:9f:ef:63: 4b:43:51:19:df:ce:2e:37:0b:a8:93:e4:d8:39:b1: 5f:20:4e:e1:c5:9e:2e:7a:82:34:94:bd:6e:57:f8: 9e:ce:f9:72:8d:e4:e3:8f:81:4b:46:b5:05:19:cb: 1d:74:d0:aa:14:32:e7:7a:a5:27:76:41:0c:89:53: 5d:3d:3a:26:b2:1c:f4:12:2b:4b:c6:a5:f3:fe:40: 3e:98:ba:6b:66:7a:e9:72:3c:e8:64:e3:9e:80:f8: bb:c2:2b:28:68:70:3a:1d:fe:5d:30:98:94:88:a9: fc:e3:b6:b6:ad:62:69:6b:b4:a2:62:61:27:c2:41: 2a:d4:da:22:f0:33:c4:4c:3d:24:d4:5c:57:5d:67: 86:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:10:A5:CC:95:0B:3D:C6:8B:B5:24:81:46:96:75:BF:92:AA:34:87 X509v3 Authority Key Identifier: keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:3c:be:99:2b:ce:8d:80:59:be:b7:03:4c:49:18:93:b4:46: 1c:de:12:b5:a7:c0:2c:5c:87:40:aa:c8:f5:a7:d7:0f:98:ca: f5:07:12:15:a5:98:58:4b:d9:db:4f:a8:a9:ee:7a:42:f5:30: 47:42:b1:8a:cf:56:c8:18:b3:65:52:81:f0:c2:a0:f1:d0:59: 4a:24:37:94:47:64:3b:d5:ee:20:e5:52:c8:51:22:dd:8c:c6: 59:7c:5d:4f:c3:ca:d1:46:2b:fd:31:47:4d:d4:9c:55:be:b2: ed:77:26:ba:eb:91:62:ee:78:22:fe:5c:80:a5:77:f8:92:42: c3:0a:6f:a5:0c:8d:01:a8:06:06:d2:f7:c4:94:86:5c:6e:5a: 17:89:4b:c6:97:0a:cf:5f:94:12:ea:19:0a:88:c4:aa:a6:cd: c4:84:ab:8f:e1:12:5c:46:82:a5:97:2e:54:c2:c6:f5:51:19: 86:5e:c1:f8:34:d6:7e:a8:46:27:33:3e:c2:4a:3d:3b:92:9c: 82:8d:0c:39:60:29:b7:19:4e:2d:84:18:e5:24:09:98:af:74: 25:f7:28:e0:6d:5b:6e:87:73:7b:c6:cb:f1:75:47:0f:8c:2f: 2f:60:7f:91:2d:09:f1:a2:57:3c:0b:09:c6:9c:0b:fd:4b:63: b4:65:a5:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxOEYxMTAvBgNVBAUTKDNGMTQ5Q0IyNDgxMDcxRjE0M0Y4RDE1NjA4Mjc5QUFG QzcxRDExNUMwHhcNMjUwODA0MTYxMDIyWhcNMjUwODExMTYxMDIyWjAYMRYwFAYD VQQDEw02ODkwZGI2ZS1hZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47ONoMKCk1ckJqyReLyA/xXWEy70eR2ia8SnH/cScUbqM5SN/7ctPdAosyTP vwJUmjZti+SosabdRWqHCDic3zdtSbPqlahst3bjr1Ai1rOUHy0cJTV8BcACyTUw qqbANZYw2p6uRIyszAxs5fiABY3LVV6f72NLQ1EZ384uNwuok+TYObFfIE7hxZ4u eoI0lL1uV/iezvlyjeTjj4FLRrUFGcsddNCqFDLneqUndkEMiVNdPTomshz0EitL xqXz/kA+mLprZnrpcjzoZOOegPi7wisoaHA6Hf5dMJiUiKn847a2rWJpa7SiYmEn wkEq1Noi8DPETD0k1FxXXWeGcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAQpcyV Cz3Gi7UkgUaWdb+SqjSHMB8GA1UdIwQYMBaAFD8UnLJIEHHxQ/jRVggnmq/HHRFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE4Ri84RTdBOUJBQzVF MTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNmRkQtTkZXQ0NlYXI4Y2RF VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4U2Nza2dRY2ZGRC1ORldDQ2VhcjhjZEVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE4Ri84RTdBOUJBQzVFMTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNm RkQtTkZXQ0NlYXI4Y2RFVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoPL6ZK86NgFm+twNMSRiTtEYc3hK1p8AsXIdAqsj1p9cPmMr1BxIV pZhYS9nbT6ip7npC9TBHQrGKz1bIGLNlUoHwwqDx0FlKJDeUR2Q71e4g5VLIUSLd jMZZfF1Pw8rRRiv9MUdN1JxVvrLtdya665Fi7ngi/lyApXf4kkLDCm+lDI0BqAYG 0vfElIZcbloXiUvGlwrPX5QS6hkKiMSqps3EhKuP4RJcRoKlly5Uwsb1URmGXsH4 NNZ+qEYnMz7CSj07kpyCjQw5YCm3GU4thBjlJAmYr3Ql9yjgbVtuh3N7xsvxdUcP jC8vYH+RLQnxolc8CwnGnAv9S2O0ZaUA -----END CERTIFICATE-----Generated at Wed Aug 6 14:19:26 2025 by rpki-client