$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json) Hash identifier: jIbesU/2RU0KJfOGnSF50apktzOzYQfgM7eK6WA64JE= Subject key identifier: C0:8B:4F:FE:52:53:D0:5E:11:75:8B:48:70:8E:26:E2:EA:3E:FA:B1 Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Certificate serial: 0B29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft Manifest number: 0B21 Signing time: Fri 18 Jul 2025 19:29:11 +0000 Manifest this update: Fri 18 Jul 2025 19:29:11 +0000 Manifest next update: Fri 25 Jul 2025 19:29:11 +0000 Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: SXtJ93tmnjqeNRF9KaFlu2PoEt23nOlUwHbnWqr71Q8=) 2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: Q+t5vtr4zi9qbMz+XlbKgiQudk9xrXCU2lb+B14yXgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2857 (0xb29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Validity Not Before: Jul 18 19:29:11 2025 GMT Not After : Jul 25 19:29:11 2025 GMT Subject: CN=687aa087-674f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1b:df:b2:36:1a:68:a0:9c:1a:f0:a0:5a:e7: c8:ce:e3:cd:4c:d3:e5:5a:e0:73:4f:1e:be:d6:90: c4:5f:16:37:47:48:34:24:4b:30:f7:83:2c:56:9a: 53:8a:70:db:dd:8b:cb:a5:7f:38:ff:7c:51:4e:9f: 68:3a:1d:20:41:69:2a:81:05:95:25:62:f1:55:af: d4:01:7d:3f:83:2a:6c:c1:a1:1e:84:4c:86:85:14: a3:c5:99:4a:bd:7d:1a:95:69:a6:c5:52:35:4d:36: c3:76:60:98:3b:13:4a:56:ba:a3:73:fe:00:7b:4b: 3b:d1:23:fd:e8:9a:7a:42:67:16:f9:77:aa:9b:6d: e9:59:b0:44:10:79:a3:ca:38:e3:ac:45:1e:2b:8a: 4a:71:dc:49:15:e6:b7:31:f5:4e:ac:a4:35:71:77: b6:98:32:c0:7c:dc:39:02:82:e0:eb:e5:62:20:5e: 7d:21:e3:e8:bd:8a:5e:46:64:93:7a:8b:cb:30:d1: 3b:ad:02:36:af:be:d1:0b:6b:88:22:4c:0a:db:00: bd:e6:eb:64:0d:c5:40:c6:7c:ba:02:ac:da:38:f0: 5b:12:07:b1:79:cb:e6:8e:06:86:46:b2:24:f1:0d: 97:4a:0d:1b:18:e3:41:81:d2:82:c9:8a:94:b6:4b: 21:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8B:4F:FE:52:53:D0:5E:11:75:8B:48:70:8E:26:E2:EA:3E:FA:B1 X509v3 Authority Key Identifier: keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2f:44:6b:f0:bf:43:20:d7:98:cc:48:5c:8d:c8:3b:e1:9d: bb:6e:89:88:0c:78:83:a6:89:71:46:6e:f8:18:23:fc:18:20: 71:3b:f8:74:0c:4d:b0:4f:2b:02:7e:fa:7a:36:27:02:77:d5: a0:65:0f:ed:a8:42:fe:4b:d8:55:22:ee:cc:ee:83:26:a4:88: a0:15:4b:ee:3e:b4:82:cc:93:21:53:93:22:5a:6f:7b:25:17: b8:87:dc:de:26:9b:22:6a:0a:9f:41:5e:9b:1c:b4:a6:6c:bd: 23:b4:46:fe:ee:49:7f:60:e9:ad:cb:38:01:bc:42:b3:48:30: 1f:8f:11:38:5d:f3:73:8f:37:d0:df:a5:01:d8:0c:29:71:22: 22:27:0f:31:fb:6a:c5:fa:66:70:f6:d3:cf:43:fc:9a:41:18: c3:0c:f6:b1:61:a1:64:31:c8:8c:a2:13:e7:2c:8a:05:4a:c0: 28:a4:d9:73:71:82:91:42:b0:b7:44:dd:49:99:e3:a3:e6:b4: 81:d3:94:fa:1b:b2:40:18:64:ba:c2:a2:ba:75:30:d8:b2:c7: 26:30:9a:ea:6f:5c:15:18:15:38:86:41:d4:8d:a2:39:46:29: d3:de:30:80:d5:8f:80:5f:79:9d:58:c6:65:7c:40:51:83:a5: 8d:72:45:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKDNDREVGMTY5MkE0OEJCMTU5NjU2NzRCQzAwMkEzMTMz NThGNTJGRUYwHhcNMjUwNzE4MTkyOTExWhcNMjUwNzI1MTkyOTExWjAYMRYwFAYD VQQDEw02ODdhYTA4Ny02NzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhvfsjYaaKCcGvCgWufIzuPNTNPlWuBzTx6+1pDEXxY3R0g0JEsw94MsVppT inDb3YvLpX84/3xRTp9oOh0gQWkqgQWVJWLxVa/UAX0/gypswaEehEyGhRSjxZlK vX0alWmmxVI1TTbDdmCYOxNKVrqjc/4Ae0s70SP96Jp6QmcW+Xeqm23pWbBEEHmj yjjjrEUeK4pKcdxJFea3MfVOrKQ1cXe2mDLAfNw5AoLg6+ViIF59IePovYpeRmST eovLMNE7rQI2r77RC2uIIkwK2wC95utkDcVAxny6AqzaOPBbEgexecvmjgaGRrIk 8Q2XSg0bGONBgdKCyYqUtkshCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCLT/5S U9BeEXWLSHCOJuLqPvqxMB8GA1UdIwQYMBaAFDze8WkqSLsVllZ0vAAqMTNY9S/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi9GOTk1MkE1QzQz MDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4V1dWblM4QUNveE0xajFM LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BON3hhU3BJdXhXV1ZuUzhBQ294TTFqMUwtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi9GOTk1MkE1QzQzMDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4 V1dWblM4QUNveE0xajFMLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALL0Rr8L9DINeYzEhcjcg74Z27bomIDHiDpolxRm74GCP8GCBxO/h0 DE2wTysCfvp6NicCd9WgZQ/tqEL+S9hVIu7M7oMmpIigFUvuPrSCzJMhU5MiWm97 JRe4h9zeJpsiagqfQV6bHLSmbL0jtEb+7kl/YOmtyzgBvEKzSDAfjxE4XfNzjzfQ 36UB2AwpcSIiJw8x+2rF+mZw9tPPQ/yaQRjDDPaxYaFkMciMohPnLIoFSsAopNlz cYKRQrC3RN1JmeOj5rSB05T6G7JAGGS6wqK6dTDYsscmMJrqb1wVGBU4hkHUjaI5 RinT3jCA1Y+AX3mdWMZlfEBRg6WNckUA -----END CERTIFICATE-----Generated at Sun Jul 20 15:05:27 2025 by rpki-client