$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json) Hash identifier: b9TiAa+Q4cN/6djXXTVqJ9InUkUdI7wLLErcOkIUfp8= Subject key identifier: 4F:38:0F:86:B6:24:D7:6B:15:95:D5:BB:21:0E:BA:46:51:B7:61:44 Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Certificate serial: 1F23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft Manifest number: 1F19 Signing time: Thu 18 Sep 2025 16:07:22 +0000 Manifest this update: Thu 18 Sep 2025 16:07:21 +0000 Manifest next update: Thu 25 Sep 2025 16:07:21 +0000 Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: +fjBzq+vGgPoGGS8jzB5mRh1VqWLRQMTDw84Ph/kcOs=) 2: A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa (hash: C7LM+OrofkS8APK8eFVOJJHm9mqxZuAPAA0InGQkpPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7971 (0x1f23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Validity Not Before: Sep 18 16:07:21 2025 GMT Not After : Sep 25 16:07:21 2025 GMT Subject: CN=68cc2e39-274b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:3a:05:97:5f:30:9f:d2:ec:4a:b0:9f:75: 4a:71:d9:19:af:96:48:e4:dc:f5:e9:7e:07:75:6a: cb:64:32:03:e8:b8:e7:84:12:ce:a8:b7:4d:ee:48: 77:d4:b2:b9:e5:ba:75:05:7a:69:1a:aa:b7:0e:6e: 88:72:a4:ea:4f:0b:1a:3f:00:9e:b6:46:5b:3c:8f: 24:88:09:3b:25:a6:96:b6:fb:7f:40:5b:c5:b5:a7: d7:29:7a:6c:22:d7:9e:bd:a0:30:bd:37:a3:52:e4: 45:de:73:8e:be:97:08:8d:51:dd:cf:55:be:eb:71: b7:4b:f3:24:5a:a5:61:09:a6:1b:a9:d5:f5:99:7a: 4c:bb:99:83:7f:0e:87:de:dd:48:5d:d1:ec:2d:22: a0:60:81:70:d6:32:bf:09:20:ce:34:67:87:64:86: b0:3d:29:45:ed:45:96:4d:b4:5c:22:44:5f:73:fc: 95:1f:2d:0c:64:01:1d:ef:28:ee:6b:7b:84:ad:3d: 42:bb:35:2b:1b:69:b9:a7:5e:9b:30:c7:5b:a9:d9: 63:64:01:dc:ba:34:12:c1:77:60:e1:0e:de:70:4c: d6:d5:c2:ce:91:ed:4d:9b:8d:c8:31:ee:2a:1e:0a: f4:38:43:c5:63:4c:86:5e:e9:a6:b9:04:5a:da:47: b0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:38:0F:86:B6:24:D7:6B:15:95:D5:BB:21:0E:BA:46:51:B7:61:44 X509v3 Authority Key Identifier: keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:de:51:9a:47:6f:cc:5a:a9:17:e0:70:d6:ba:d8:94:2e:6e: 8a:28:8f:09:60:30:16:f5:b8:30:08:24:26:87:a0:98:63:33: 1f:77:50:6e:b6:b5:63:69:f1:9d:b0:74:5e:7d:b2:80:f5:e4: f4:e1:bf:5d:aa:38:8f:c6:d4:a3:41:14:9f:8e:78:d3:f6:8f: 68:04:26:36:3d:50:54:36:ec:29:c5:b0:e1:37:16:00:ee:29: 2d:48:dc:50:e9:aa:5f:66:2c:77:00:b0:e8:2e:9b:e8:ab:63: 02:43:72:0b:92:26:a7:39:78:78:7f:6b:f5:3c:07:79:4a:9a: ce:cb:13:69:cf:29:0a:df:62:c1:95:0c:a5:cf:d0:ce:64:2d: 79:5b:b3:65:41:66:35:5f:5f:c1:35:9b:2a:b0:12:3f:41:b2: 2d:3b:80:b7:d3:67:97:6f:7f:42:a9:d6:7f:9b:56:a8:8b:f7: f3:be:5e:61:f2:c7:68:d8:fb:87:46:d1:8a:1a:4a:10:64:0c: 60:2b:96:40:53:27:8e:1f:e4:a0:db:de:09:a7:6c:4e:da:17: 02:8a:d1:ba:67:27:9a:ef:c9:66:ca:69:51:c7:62:06:3c:05: 2d:ae:42:e7:a5:19:a1:f9:d1:5b:80:aa:89:5d:9a:cc:65:de: 77:57:bf:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxOEYxMTAvBgNVBAUTKDNGMTQ5Q0IyNDgxMDcxRjE0M0Y4RDE1NjA4Mjc5QUFG QzcxRDExNUMwHhcNMjUwOTE4MTYwNzIxWhcNMjUwOTI1MTYwNzIxWjAYMRYwFAYD VQQDEw02OGNjMmUzOS0yNzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHw6BZdfMJ/S7Eqwn3VKcdkZr5ZI5Nz16X4HdWrLZDID6LjnhBLOqLdN7kh3 1LK55bp1BXppGqq3Dm6IcqTqTwsaPwCetkZbPI8kiAk7JaaWtvt/QFvFtafXKXps IteevaAwvTejUuRF3nOOvpcIjVHdz1W+63G3S/MkWqVhCaYbqdX1mXpMu5mDfw6H 3t1IXdHsLSKgYIFw1jK/CSDONGeHZIawPSlF7UWWTbRcIkRfc/yVHy0MZAEd7yju a3uErT1CuzUrG2m5p16bMMdbqdljZAHcujQSwXdg4Q7ecEzW1cLOke1Nm43IMe4q Hgr0OEPFY0yGXummuQRa2kewjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE84D4a2 JNdrFZXVuyEOukZRt2FEMB8GA1UdIwQYMBaAFD8UnLJIEHHxQ/jRVggnmq/HHRFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE4Ri84RTdBOUJBQzVF MTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNmRkQtTkZXQ0NlYXI4Y2RF VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4U2Nza2dRY2ZGRC1ORldDQ2VhcjhjZEVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE4Ri84RTdBOUJBQzVFMTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNm RkQtTkZXQ0NlYXI4Y2RFVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl3lGaR2/MWqkX4HDWutiULm6KKI8JYDAW9bgwCCQmh6CYYzMfd1Bu trVjafGdsHRefbKA9eT04b9dqjiPxtSjQRSfjnjT9o9oBCY2PVBUNuwpxbDhNxYA 7iktSNxQ6apfZix3ALDoLpvoq2MCQ3ILkianOXh4f2v1PAd5SprOyxNpzykK32LB lQylz9DOZC15W7NlQWY1X1/BNZsqsBI/QbItO4C302eXb39CqdZ/m1aoi/fzvl5h 8sdo2PuHRtGKGkoQZAxgK5ZAUyeOH+Sg294Jp2xO2hcCitG6Zyea78lmymlRx2IG PAUtrkLnpRmh+dFbgKqJXZrMZd53V7/9 -----END CERTIFICATE-----Generated at Fri Sep 19 03:55:37 2025 by rpki-client