$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json) Hash identifier: k71O2773WzimQaWRTdEbUYEQd9yV2CBDR1mLnyjgAVs= Subject key identifier: 52:D7:84:47:9B:B0:55:63:49:0B:3B:32:24:4A:FB:0F:89:1B:95:DC Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Certificate serial: 1EEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft Manifest number: 1EE0 Signing time: Fri 30 May 2025 16:13:05 +0000 Manifest this update: Fri 30 May 2025 16:13:04 +0000 Manifest next update: Fri 06 Jun 2025 16:13:04 +0000 Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: XsPyt3jLQW67GMIL9Tjh0uWzWF+LprMZNTB+NPjmSY0=) 2: A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa (hash: C7LM+OrofkS8APK8eFVOJJHm9mqxZuAPAA0InGQkpPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7914 (0x1eea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Validity Not Before: May 30 16:13:04 2025 GMT Not After : Jun 6 16:13:04 2025 GMT Subject: CN=6839d911-d329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fb:de:1a:cf:41:55:2b:a4:58:28:b5:22:fa: a0:a8:5c:f6:52:7c:3a:fb:2d:6b:11:71:24:54:9e: 8f:0b:b5:bd:0c:b8:18:ad:02:5c:4e:1d:77:56:96: f8:e0:fa:7d:b6:26:e4:42:ce:84:76:57:bc:d2:77: 29:07:05:60:a5:6c:7c:8b:c6:20:00:88:cf:d3:a8: 62:4c:4a:be:07:86:2b:37:9c:92:56:ad:f3:f6:e3: 19:b1:ed:cf:7a:d8:06:d5:af:14:d4:b6:17:17:49: 52:12:3a:d0:b2:f8:9b:82:56:bb:9c:9e:44:bc:64: b1:9d:aa:63:6e:3e:d5:f9:4c:28:52:8b:0a:f7:ed: 37:9d:50:50:6f:6d:36:46:f2:db:4b:70:39:0d:28: 2d:fc:8b:8f:7c:e6:4d:df:d8:7d:61:cb:53:a8:50: bd:a3:45:5e:30:6a:67:aa:70:45:30:75:38:65:28: b6:35:39:56:a0:91:07:e3:2c:32:9f:c3:c6:a3:f6: d3:36:e1:e6:de:7a:9a:d0:eb:78:86:03:b9:6c:78: e5:7f:cd:8e:6d:27:1b:3f:38:b2:bb:59:eb:c6:d0: 05:2d:8f:42:9b:03:b8:87:92:58:61:2e:e4:95:70: a0:48:a6:da:2c:6e:12:10:e5:03:ce:89:a2:62:4b: 90:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D7:84:47:9B:B0:55:63:49:0B:3B:32:24:4A:FB:0F:89:1B:95:DC X509v3 Authority Key Identifier: keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:a2:36:e7:9e:59:1d:3d:10:c8:55:e0:42:87:6a:f4:3e:39: 18:82:ed:05:77:64:bb:f3:0e:eb:39:aa:7b:4f:b4:18:64:1c: f9:4e:03:c5:ce:cb:0f:4a:f5:eb:28:df:a7:0c:8f:92:14:04: 35:ca:93:57:b6:84:23:7b:bf:b6:c3:2b:25:23:00:90:96:2d: 55:f7:27:59:60:35:44:8b:2d:fa:00:9f:ef:40:8a:e5:66:a7: a2:cb:d8:4a:6b:7f:88:79:cb:6c:0b:a7:5e:67:f1:71:3e:b4: 38:1e:08:01:d4:cd:90:b7:d9:32:b1:0d:f4:76:b2:a0:ac:1f: e1:c6:d8:44:48:51:06:cd:be:e6:93:75:37:b8:24:fb:8e:5f: d7:d6:60:cb:95:e5:e7:92:28:1e:cc:f5:cc:a2:7f:da:cf:40: c4:70:a1:24:a9:dc:a5:d1:b5:24:87:fa:a4:b6:2e:24:9f:55: 99:c4:9c:b9:c7:7f:1e:8e:3f:a6:e5:fb:e0:3b:76:2e:86:2d: fb:c1:a9:bf:7c:b2:82:d5:ad:af:e9:1c:da:e7:4d:25:bf:79: 2e:c4:ac:63:c5:20:34:82:a6:76:99:c7:b9:5a:78:a5:66:d9: 09:dd:9d:3f:4f:6d:b2:a6:6f:fb:16:98:fa:94:97:ad:6d:bc: de:f8:ef:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxOEYxMTAvBgNVBAUTKDNGMTQ5Q0IyNDgxMDcxRjE0M0Y4RDE1NjA4Mjc5QUFG QzcxRDExNUMwHhcNMjUwNTMwMTYxMzA0WhcNMjUwNjA2MTYxMzA0WjAYMRYwFAYD VQQDEw02ODM5ZDkxMS1kMzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/veGs9BVSukWCi1IvqgqFz2Unw6+y1rEXEkVJ6PC7W9DLgYrQJcTh13Vpb4 4Pp9tibkQs6Edle80ncpBwVgpWx8i8YgAIjP06hiTEq+B4YrN5ySVq3z9uMZse3P etgG1a8U1LYXF0lSEjrQsvibgla7nJ5EvGSxnapjbj7V+UwoUosK9+03nVBQb202 RvLbS3A5DSgt/IuPfOZN39h9YctTqFC9o0VeMGpnqnBFMHU4ZSi2NTlWoJEH4ywy n8PGo/bTNuHm3nqa0Ot4hgO5bHjlf82ObScbPziyu1nrxtAFLY9CmwO4h5JYYS7k lXCgSKbaLG4SEOUDzomiYkuQKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLXhEeb sFVjSQs7MiRK+w+JG5XcMB8GA1UdIwQYMBaAFD8UnLJIEHHxQ/jRVggnmq/HHRFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE4Ri84RTdBOUJBQzVF MTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNmRkQtTkZXQ0NlYXI4Y2RF VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4U2Nza2dRY2ZGRC1ORldDQ2VhcjhjZEVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE4Ri84RTdBOUJBQzVFMTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNm RkQtTkZXQ0NlYXI4Y2RFVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDojbnnlkdPRDIVeBCh2r0PjkYgu0Fd2S78w7rOap7T7QYZBz5TgPF zssPSvXrKN+nDI+SFAQ1ypNXtoQje7+2wyslIwCQli1V9ydZYDVEiy36AJ/vQIrl Zqeiy9hKa3+IectsC6deZ/FxPrQ4HggB1M2Qt9kysQ30drKgrB/hxthESFEGzb7m k3U3uCT7jl/X1mDLleXnkigezPXMon/az0DEcKEkqdyl0bUkh/qkti4kn1WZxJy5 x38ejj+m5fvgO3Yuhi37wam/fLKC1a2v6Rza500lv3kuxKxjxSA0gqZ2mce5Wnil ZtkJ3Z0/T22ypm/7Fpj6lJetbbze+O9J -----END CERTIFICATE-----Generated at Sat May 31 15:07:55 2025 by rpki-client