$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json) Hash identifier: eSTs4i47vD7LX7fxXNO8gm1BJRx62cZaBhAV8PHVgRg= Subject key identifier: AE:42:45:5C:D4:A6:A4:A5:5E:2C:60:D5:C3:3A:1A:EC:4B:D5:1D:8C Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Certificate serial: 0B34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft Manifest number: 0B2C Signing time: Fri 08 Aug 2025 19:30:45 +0000 Manifest this update: Fri 08 Aug 2025 19:30:45 +0000 Manifest next update: Fri 15 Aug 2025 19:30:45 +0000 Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: 8y1uPvvcjPlsDjP2hqIuzDUjea0FqG41f05/WLVYnAQ=) 2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: Q+t5vtr4zi9qbMz+XlbKgiQudk9xrXCU2lb+B14yXgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2868 (0xb34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Validity Not Before: Aug 8 19:30:45 2025 GMT Not After : Aug 15 19:30:45 2025 GMT Subject: CN=68965065-a855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:db:07:ef:f3:3a:a9:6e:1c:70:03:40:0a:ea: 3f:b2:72:8d:87:9a:e5:7c:6d:60:da:fd:8c:dc:08: e9:99:4e:0a:ba:cd:a2:ed:95:ee:74:e1:d9:48:20: 24:ca:f6:c0:fa:1c:4b:eb:fc:97:3a:b2:b8:1c:5c: fe:17:d9:0b:83:5f:8d:b4:9c:0a:6d:07:2b:49:6a: 4c:cb:c5:18:09:1e:a3:59:23:50:f7:8e:30:97:c1: 77:36:7a:c6:07:b3:52:39:de:1b:da:6d:6f:f5:31: 70:0a:48:13:43:d0:a0:9e:72:4a:42:a6:01:ca:ca: e8:81:5f:ab:5c:6a:cf:f1:61:25:39:a0:11:36:6a: 0e:63:c8:46:b7:3a:55:dd:f6:e5:e7:d0:ff:44:87: ba:ea:3a:7b:22:a0:67:e4:e0:c2:bc:d2:83:fb:17: d0:ad:16:91:1b:a6:f0:13:75:72:74:6b:1c:d0:4f: 4a:c4:b6:6b:0c:8b:7c:d7:96:b0:f8:2e:34:82:da: 09:27:24:6a:e5:c8:38:6e:fc:1f:b1:d9:ab:bb:86: 0a:28:7e:84:72:e6:f9:1c:e9:02:be:b4:4b:ac:63: e3:d2:d7:68:32:6b:14:ae:b8:87:2e:17:fa:31:aa: c9:33:6a:35:71:96:3b:78:d0:18:9e:77:ee:6e:c3: e7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:42:45:5C:D4:A6:A4:A5:5E:2C:60:D5:C3:3A:1A:EC:4B:D5:1D:8C X509v3 Authority Key Identifier: keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:33:fe:3b:d2:d8:9d:96:e6:55:65:a4:80:a4:d7:2d:77:23: c1:68:ad:f2:6d:6c:30:e4:4f:ea:b8:48:93:3f:df:b4:da:57: f3:0f:9a:a2:78:d2:c7:d6:ab:c2:0c:c2:5b:3e:8e:35:bf:25: 2a:a1:0b:f8:b6:8a:bc:66:2a:b5:c6:61:da:a9:db:bf:20:0d: e8:0f:2e:0b:f8:73:e2:80:4b:3a:da:07:fd:3b:05:2b:ea:65: 81:ba:d3:72:fb:68:0b:e4:3e:9c:d2:d4:d5:b7:dc:c2:c3:4c: d6:c9:e7:f5:76:5a:1f:96:f8:4f:56:7a:63:f3:aa:04:03:b8: a4:75:4b:de:0c:39:ec:25:27:21:a1:f4:0e:f0:3b:78:c7:32: 1c:8a:47:e4:dd:50:9f:df:6b:4a:0f:75:7b:cd:0b:13:c3:6c: 62:91:12:44:1c:b9:7d:35:02:a2:17:a5:d7:21:e6:49:8e:13: b6:c3:b6:5b:2f:0e:3c:cb:34:05:23:da:f3:a2:c7:17:39:e2: 00:48:06:11:99:f7:0d:7d:7f:97:b9:0d:d1:3e:cd:79:bc:b4: ce:fc:a6:ed:1c:dc:c9:0f:af:55:e3:52:09:cc:8e:37:88:8a: f0:24:e5:9b:61:91:b2:84:4f:3a:6d:fc:32:bb:c5:54:57:df: a3:ec:5e:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKDNDREVGMTY5MkE0OEJCMTU5NjU2NzRCQzAwMkEzMTMz NThGNTJGRUYwHhcNMjUwODA4MTkzMDQ1WhcNMjUwODE1MTkzMDQ1WjAYMRYwFAYD VQQDEw02ODk2NTA2NS1hODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytsH7/M6qW4ccANACuo/snKNh5rlfG1g2v2M3AjpmU4Kus2i7ZXudOHZSCAk yvbA+hxL6/yXOrK4HFz+F9kLg1+NtJwKbQcrSWpMy8UYCR6jWSNQ944wl8F3NnrG B7NSOd4b2m1v9TFwCkgTQ9CgnnJKQqYBysrogV+rXGrP8WElOaARNmoOY8hGtzpV 3fbl59D/RIe66jp7IqBn5ODCvNKD+xfQrRaRG6bwE3VydGsc0E9KxLZrDIt815aw +C40gtoJJyRq5cg4bvwfsdmru4YKKH6Ecub5HOkCvrRLrGPj0tdoMmsUrriHLhf6 MarJM2o1cZY7eNAYnnfubsPn7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5CRVzU pqSlXixg1cM6GuxL1R2MMB8GA1UdIwQYMBaAFDze8WkqSLsVllZ0vAAqMTNY9S/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi9GOTk1MkE1QzQz MDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4V1dWblM4QUNveE0xajFM LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BON3hhU3BJdXhXV1ZuUzhBQ294TTFqMUwtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi9GOTk1MkE1QzQzMDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4 V1dWblM4QUNveE0xajFMLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADM/470tidluZVZaSApNctdyPBaK3ybWww5E/quEiTP9+02lfzD5qi eNLH1qvCDMJbPo41vyUqoQv4toq8Ziq1xmHaqdu/IA3oDy4L+HPigEs62gf9OwUr 6mWButNy+2gL5D6c0tTVt9zCw0zWyef1dloflvhPVnpj86oEA7ikdUveDDnsJSch ofQO8Dt4xzIcikfk3VCf32tKD3V7zQsTw2xikRJEHLl9NQKiF6XXIeZJjhO2w7Zb Lw48yzQFI9rzoscXOeIASAYRmfcNfX+XuQ3RPs15vLTO/KbtHNzJD69V41IJzI43 iIrwJOWbYZGyhE86bfwyu8VUV9+j7F4z -----END CERTIFICATE-----Generated at Sun Aug 10 04:15:19 2025 by rpki-client