$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json) Hash identifier: wH2IqnXuGcvrT7iTW1qJ3wxtcJ9kHOlMzZP+9BK+Q/A= Subject key identifier: 8D:FC:C7:9A:64:7A:11:F1:56:9F:17:C0:33:FA:79:63:23:D7:5D:48 Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Certificate serial: 0AFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft Manifest number: 0AF7 Signing time: Thu 24 Apr 2025 19:14:49 +0000 Manifest this update: Thu 24 Apr 2025 19:14:48 +0000 Manifest next update: Thu 01 May 2025 19:14:48 +0000 Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: nUVT/UquR5iE/NOcRCblV27/DkExoJfWT+DKN9BtjXU=) 2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: Q+t5vtr4zi9qbMz+XlbKgiQudk9xrXCU2lb+B14yXgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2815 (0xaff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Validity Not Before: Apr 24 19:14:48 2025 GMT Not After : May 1 19:14:48 2025 GMT Subject: CN=680a8da8-881d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:30:b8:b3:de:3d:55:c4:5e:51:eb:ed:73: 25:06:b4:82:93:66:bb:34:7a:8c:5a:27:49:96:46: 42:ac:10:7e:eb:85:91:d0:cc:22:69:31:4f:6a:92: 89:42:3e:b5:51:d6:2a:20:95:6e:b2:1b:e2:df:0c: 23:ce:73:50:78:d9:95:c9:a9:19:e3:e7:3c:95:a3: bb:81:2e:66:96:04:51:c8:06:44:31:ce:2a:7e:95: 11:aa:be:98:39:a5:be:54:12:5a:20:ef:e3:ea:5f: f3:34:39:a4:50:46:36:17:3a:08:0a:32:17:78:a1: 4e:1b:f9:f6:ff:e0:23:85:4c:3c:05:3c:64:a8:a7: 36:4a:c3:3d:14:6e:b1:9e:c3:66:8e:ed:9a:ee:b3: 37:5f:52:10:d8:76:79:b9:b1:c3:35:ff:32:b5:8a: 17:c1:26:f4:7f:46:ae:86:b3:bf:28:18:2f:d2:e3: a2:28:9e:70:71:81:b4:a2:80:d2:5c:25:de:82:c9: e8:65:fc:73:c1:d3:3c:65:1e:b9:b2:6c:72:af:50: e4:bf:47:ae:ed:08:26:cb:b2:1c:26:e9:8a:32:eb: e6:21:c2:2e:b5:34:40:4f:c1:a1:47:af:0a:a4:8a: 33:44:a2:9b:de:b9:10:f6:dc:5d:b2:d6:e7:1b:f3: 5b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FC:C7:9A:64:7A:11:F1:56:9F:17:C0:33:FA:79:63:23:D7:5D:48 X509v3 Authority Key Identifier: keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:b1:ce:43:1a:90:d8:3d:a2:0b:0c:ca:5c:0f:17:a3:b9:ff: 85:0a:b6:ce:79:3e:fd:19:55:9b:f4:32:41:76:c1:32:6e:e0: 41:10:08:e7:69:3e:53:3a:1b:5a:63:cb:cd:1b:82:16:83:be: 30:fb:e2:44:77:c9:81:a9:f6:09:7f:38:2a:95:7e:76:31:62: c2:d6:a1:ba:4f:73:a4:77:fc:f1:ed:bb:a1:30:16:92:db:2b: 8c:c2:e0:e8:0b:8d:5b:ae:89:d2:3f:ae:34:6d:b4:df:bb:5e: 72:d6:28:eb:a5:65:4e:34:f7:7b:8b:b2:f6:bb:2d:e1:12:86: 9d:37:75:25:10:40:87:c1:27:73:97:22:23:76:06:a5:4d:c3: 8d:ac:ad:79:87:51:a1:d6:df:29:cb:71:82:3e:fa:24:c0:8e: c0:55:55:fb:69:18:ca:37:63:83:73:cb:75:37:82:71:7e:d1: aa:9c:7d:c0:4a:26:43:10:69:c4:2e:35:8e:7f:2a:69:07:02: c5:b2:4d:ad:47:1c:35:e9:30:dc:91:4d:fd:53:fa:0c:86:e9: 88:04:51:c2:a8:28:83:a6:a4:96:5f:47:53:61:fc:f2:8f:fb: a3:60:ff:9c:86:c3:51:24:73:4a:99:a5:44:61:a2:74:4e:92: 38:b3:f2:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKDNDREVGMTY5MkE0OEJCMTU5NjU2NzRCQzAwMkEzMTMz NThGNTJGRUYwHhcNMjUwNDI0MTkxNDQ4WhcNMjUwNTAxMTkxNDQ4WjAYMRYwFAYD VQQDEw02ODBhOGRhOC04ODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHUwuLPePVXEXlHr7XMlBrSCk2a7NHqMWidJlkZCrBB+64WR0MwiaTFPapKJ Qj61UdYqIJVushvi3wwjznNQeNmVyakZ4+c8laO7gS5mlgRRyAZEMc4qfpURqr6Y OaW+VBJaIO/j6l/zNDmkUEY2FzoICjIXeKFOG/n2/+AjhUw8BTxkqKc2SsM9FG6x nsNmju2a7rM3X1IQ2HZ5ubHDNf8ytYoXwSb0f0auhrO/KBgv0uOiKJ5wcYG0ooDS XCXegsnoZfxzwdM8ZR65smxyr1Dkv0eu7Qgmy7IcJumKMuvmIcIutTRAT8GhR68K pIozRKKb3rkQ9txdstbnG/NbdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI38x5pk ehHxVp8XwDP6eWMj111IMB8GA1UdIwQYMBaAFDze8WkqSLsVllZ0vAAqMTNY9S/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi9GOTk1MkE1QzQz MDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4V1dWblM4QUNveE0xajFM LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BON3hhU3BJdXhXV1ZuUzhBQ294TTFqMUwtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi9GOTk1MkE1QzQzMDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4 V1dWblM4QUNveE0xajFMLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqsc5DGpDYPaILDMpcDxejuf+FCrbOeT79GVWb9DJBdsEybuBBEAjn aT5TOhtaY8vNG4IWg74w++JEd8mBqfYJfzgqlX52MWLC1qG6T3Okd/zx7buhMBaS 2yuMwuDoC41bronSP640bbTfu15y1ijrpWVONPd7i7L2uy3hEoadN3UlEECHwSdz lyIjdgalTcONrK15h1Gh1t8py3GCPvokwI7AVVX7aRjKN2ODc8t1N4JxftGqnH3A SiZDEGnELjWOfyppBwLFsk2tRxw16TDckU39U/oMhumIBFHCqCiDpqSWX0dTYfzy j/ujYP+chsNRJHNKmaVEYaJ0TpI4s/IT -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:28 2025 by rpki-client