$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json) Hash identifier: mehbzjbQ62cTaVFWwU3Y74BCt3WL3i8Kr7W1DnT3r6c= Subject key identifier: A7:4E:3C:0B:AE:D9:0A:7C:02:9E:AC:8B:C0:8E:14:3C:7D:87:FA:60 Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Certificate serial: 0B10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft Manifest number: 0B08 Signing time: Fri 30 May 2025 19:30:52 +0000 Manifest this update: Fri 30 May 2025 19:30:52 +0000 Manifest next update: Fri 06 Jun 2025 19:30:52 +0000 Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: ldqEjTFFOk9S/uiuo43TXZWLXA55OeEzB2CsZuXu4Ac=) 2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: Q+t5vtr4zi9qbMz+XlbKgiQudk9xrXCU2lb+B14yXgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2832 (0xb10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Validity Not Before: May 30 19:30:52 2025 GMT Not After : Jun 6 19:30:52 2025 GMT Subject: CN=683a076c-20a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a7:32:ea:0f:91:47:41:00:b2:ae:ca:4e:b2: b4:d8:cf:ec:fd:e5:96:c7:17:a6:42:84:87:92:da: 96:8e:4b:68:8b:df:7d:fc:73:ad:a8:e1:cf:1d:b6: e7:71:8d:63:46:7a:bd:d8:21:5a:ca:6e:d5:22:7b: 0f:db:50:9f:d2:91:b4:6d:df:8d:25:7c:d8:21:19: 3c:9e:f5:bd:05:62:a2:65:11:22:b1:86:e1:00:d8: 79:ce:f2:6a:c9:85:a9:46:3d:69:21:04:27:57:4a: 1e:88:a1:56:e0:a7:6f:b3:96:7b:7c:e3:b3:97:6a: 58:a4:98:eb:31:f9:b4:0d:a8:d1:ea:0b:a2:6b:ec: fc:d3:d1:39:7f:39:b2:d9:fa:85:8e:1e:53:0a:15: 4b:59:84:5e:b2:75:35:48:22:20:47:69:ce:b8:3f: 5d:5c:98:e4:8b:e7:f5:a3:0d:48:8a:95:8d:de:8a: e6:fa:3f:9e:5b:61:3a:29:c9:99:f5:c5:38:1b:23: 3a:86:e8:bb:c1:d0:9c:f3:d6:fc:a8:59:3f:52:70: 61:93:7b:50:7e:d2:73:fa:e8:94:70:df:62:38:09: 45:85:d7:14:44:a5:9d:c2:aa:9f:8d:0f:ef:2d:ce: 1b:0e:93:da:56:b2:d3:bf:77:4d:fa:e5:17:ac:d2: 09:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4E:3C:0B:AE:D9:0A:7C:02:9E:AC:8B:C0:8E:14:3C:7D:87:FA:60 X509v3 Authority Key Identifier: keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:c1:d8:2a:62:78:85:45:9c:50:9d:d2:68:bd:c1:e9:8c:13: 7e:d2:ba:99:ae:48:9e:fb:13:8e:eb:4d:ef:d2:1b:cb:b9:fa: 30:0d:5a:47:ae:7c:c8:93:ba:b4:d8:1f:18:4f:32:66:e9:43: f8:1d:03:6d:f5:8b:1e:3b:ee:c0:07:15:18:c3:81:4a:3e:2d: f7:2f:fd:66:48:35:43:ae:e7:42:c2:d8:76:dd:10:75:07:a3: 62:cb:77:66:78:b2:be:19:16:b3:98:00:89:78:86:e1:74:a3: 86:8a:10:40:2a:f6:29:91:3c:b8:21:ec:8b:a3:4a:36:bb:44: 7c:ac:dc:8c:51:bc:2e:db:15:1a:35:84:d0:a8:78:8b:83:38: 95:ad:84:29:df:b3:ad:ef:46:52:22:99:f5:23:ff:37:71:26: 5b:f9:97:f4:35:3c:95:de:68:1f:48:05:1f:8c:db:6c:86:31: 8e:f4:98:35:b6:ef:7c:64:14:27:7c:c1:0a:93:71:82:e2:ab: 92:c3:92:41:6e:ce:0b:1b:37:88:96:b4:da:6e:6f:08:60:db: 6f:1c:3e:71:be:0d:2c:41:a1:e5:75:dc:1b:a8:a8:bc:db:f7: ae:ff:ff:95:96:04:83:1e:5e:ef:b1:2b:e7:2c:17:a9:66:ad: ee:4d:98:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKDNDREVGMTY5MkE0OEJCMTU5NjU2NzRCQzAwMkEzMTMz NThGNTJGRUYwHhcNMjUwNTMwMTkzMDUyWhcNMjUwNjA2MTkzMDUyWjAYMRYwFAYD VQQDEw02ODNhMDc2Yy0yMGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6cy6g+RR0EAsq7KTrK02M/s/eWWxxemQoSHktqWjktoi999/HOtqOHPHbbn cY1jRnq92CFaym7VInsP21Cf0pG0bd+NJXzYIRk8nvW9BWKiZREisYbhANh5zvJq yYWpRj1pIQQnV0oeiKFW4Kdvs5Z7fOOzl2pYpJjrMfm0DajR6guia+z809E5fzmy 2fqFjh5TChVLWYResnU1SCIgR2nOuD9dXJjki+f1ow1IipWN3orm+j+eW2E6KcmZ 9cU4GyM6hui7wdCc89b8qFk/UnBhk3tQftJz+uiUcN9iOAlFhdcURKWdwqqfjQ/v Lc4bDpPaVrLTv3dN+uUXrNIJjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdOPAuu 2Qp8Ap6si8COFDx9h/pgMB8GA1UdIwQYMBaAFDze8WkqSLsVllZ0vAAqMTNY9S/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi9GOTk1MkE1QzQz MDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4V1dWblM4QUNveE0xajFM LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BON3hhU3BJdXhXV1ZuUzhBQ294TTFqMUwtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi9GOTk1MkE1QzQzMDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4 V1dWblM4QUNveE0xajFMLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmwdgqYniFRZxQndJovcHpjBN+0rqZrkie+xOO603v0hvLufowDVpH rnzIk7q02B8YTzJm6UP4HQNt9YseO+7ABxUYw4FKPi33L/1mSDVDrudCwth23RB1 B6Niy3dmeLK+GRazmACJeIbhdKOGihBAKvYpkTy4IeyLo0o2u0R8rNyMUbwu2xUa NYTQqHiLgziVrYQp37Ot70ZSIpn1I/83cSZb+Zf0NTyV3mgfSAUfjNtshjGO9Jg1 tu98ZBQnfMEKk3GC4quSw5JBbs4LGzeIlrTabm8IYNtvHD5xvg0sQaHlddwbqKi8 2/eu//+VlgSDHl7vsSvnLBepZq3uTZh5 -----END CERTIFICATE-----Generated at Sat May 31 17:11:27 2025 by rpki-client