$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json) Hash identifier: SOSHPFX/WtHR8U6u6cVWZoAGxNuPlkSKyAEOnmkshds= Subject key identifier: D3:1A:8C:5C:C9:49:73:5F:16:B5:92:88:10:B8:2A:FF:4B:AF:37:46 Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Certificate serial: 0B44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft Manifest number: 0B3C Signing time: Mon 08 Sep 2025 19:14:46 +0000 Manifest this update: Mon 08 Sep 2025 19:14:46 +0000 Manifest next update: Mon 15 Sep 2025 19:14:46 +0000 Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: YcxIf+uygzDokRs+tzfqHQKrfEnoz1AToQlwFV3Nszo=) 2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: Q+t5vtr4zi9qbMz+XlbKgiQudk9xrXCU2lb+B14yXgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2884 (0xb44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Validity Not Before: Sep 8 19:14:46 2025 GMT Not After : Sep 15 19:14:46 2025 GMT Subject: CN=68bf2b26-9604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e0:61:60:47:8b:bd:79:b7:f3:4c:5c:56:e8: 68:0d:83:84:ef:fd:ec:4b:7c:7e:7c:fe:11:95:b5: b5:a9:3a:a3:35:59:f9:82:1b:76:4c:ad:01:e0:e1: 3c:98:77:6f:10:bf:50:80:12:e3:fb:07:4e:f2:fc: a9:35:80:8a:d7:a2:97:5c:ce:24:94:85:9f:cd:05: 7c:3d:3b:b1:a2:45:5e:d9:4b:af:e7:6d:03:0b:73: 12:3c:3b:4d:16:3a:64:d8:55:d5:5a:73:95:f2:34: 4d:ab:b4:a2:3d:72:e3:9a:4b:6d:59:4f:48:7d:e1: bd:b8:3f:2a:e4:a9:15:21:d6:f4:93:28:31:20:3e: 52:af:de:06:99:07:16:3f:2c:e8:4a:67:5f:3b:98: a3:41:0c:90:32:8e:30:8b:bd:de:48:8b:c7:6b:0e: 95:c4:ae:d9:47:66:23:81:fa:3c:64:92:06:f9:c6: da:b7:78:ae:3f:96:43:4b:13:bf:f6:da:b7:80:ab: dd:fd:8f:81:28:d2:0c:5f:5f:ce:0b:60:c8:0a:0b: f1:5e:62:ad:c2:ef:0c:d1:02:07:3e:9a:33:ae:73: 5c:9e:d7:56:7c:b8:40:dc:21:32:7d:73:56:96:4b: 80:05:d9:d3:3c:07:a1:a0:ab:41:5a:94:85:f1:3e: 10:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1A:8C:5C:C9:49:73:5F:16:B5:92:88:10:B8:2A:FF:4B:AF:37:46 X509v3 Authority Key Identifier: keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:cb:cc:aa:4e:18:57:c5:24:79:4b:6c:f6:23:67:06:a8:a6: 40:8b:ff:81:a0:fb:ae:5f:83:f5:6c:74:9b:dc:cf:fa:88:79: 4c:bf:41:15:6e:d8:44:db:ab:52:7f:d1:a5:f8:ed:c8:22:7e: 97:ad:55:8c:88:d4:11:cd:72:fa:22:aa:99:99:78:db:71:a6: 88:55:42:41:4c:d5:a0:f3:e6:13:25:bc:6c:49:b8:51:84:50: ce:bf:d8:39:9e:1e:bd:c8:d9:37:f4:b9:b0:f7:3e:bb:2d:58: 0e:94:2a:6c:69:c2:06:bd:0d:51:d9:7c:04:14:5e:92:a0:88: 0c:e1:e9:0e:06:1e:a3:e5:c3:eb:0a:08:25:37:49:3a:ed:f4: 6b:e3:4e:fe:5b:09:f9:bd:44:ff:91:60:29:12:10:c9:d0:05: b1:c1:f3:34:8e:eb:65:e2:17:dc:86:f0:17:c0:8e:71:e6:79: 4d:d3:e4:31:f3:21:01:9a:9f:f4:01:d6:21:53:05:33:3d:92: 3b:ba:a9:9c:6e:59:2a:ad:0e:94:31:d8:95:df:d4:12:53:d9: 0b:da:da:05:eb:8a:73:e9:b2:0d:1c:a8:a3:cf:a7:bb:3e:23: a3:43:63:eb:27:13:58:26:13:16:12:9c:4a:23:30:36:ac:56: 62:1f:ff:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKDNDREVGMTY5MkE0OEJCMTU5NjU2NzRCQzAwMkEzMTMz NThGNTJGRUYwHhcNMjUwOTA4MTkxNDQ2WhcNMjUwOTE1MTkxNDQ2WjAYMRYwFAYD VQQDEw02OGJmMmIyNi05NjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAneBhYEeLvXm380xcVuhoDYOE7/3sS3x+fP4RlbW1qTqjNVn5ght2TK0B4OE8 mHdvEL9QgBLj+wdO8vypNYCK16KXXM4klIWfzQV8PTuxokVe2Uuv520DC3MSPDtN Fjpk2FXVWnOV8jRNq7SiPXLjmkttWU9IfeG9uD8q5KkVIdb0kygxID5Sr94GmQcW PyzoSmdfO5ijQQyQMo4wi73eSIvHaw6VxK7ZR2Yjgfo8ZJIG+cbat3iuP5ZDSxO/ 9tq3gKvd/Y+BKNIMX1/OC2DICgvxXmKtwu8M0QIHPpozrnNcntdWfLhA3CEyfXNW lkuABdnTPAehoKtBWpSF8T4QIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMajFzJ SXNfFrWSiBC4Kv9LrzdGMB8GA1UdIwQYMBaAFDze8WkqSLsVllZ0vAAqMTNY9S/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi9GOTk1MkE1QzQz MDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4V1dWblM4QUNveE0xajFM LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BON3hhU3BJdXhXV1ZuUzhBQ294TTFqMUwtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi9GOTk1MkE1QzQzMDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4 V1dWblM4QUNveE0xajFMLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASy8yqThhXxSR5S2z2I2cGqKZAi/+BoPuuX4P1bHSb3M/6iHlMv0EV bthE26tSf9Gl+O3IIn6XrVWMiNQRzXL6IqqZmXjbcaaIVUJBTNWg8+YTJbxsSbhR hFDOv9g5nh69yNk39Lmw9z67LVgOlCpsacIGvQ1R2XwEFF6SoIgM4ekOBh6j5cPr CgglN0k67fRr407+Wwn5vUT/kWApEhDJ0AWxwfM0jutl4hfchvAXwI5x5nlN0+Qx 8yEBmp/0AdYhUwUzPZI7uqmcblkqrQ6UMdiV39QSU9kL2toF64pz6bINHKijz6e7 PiOjQ2PrJxNYJhMWEpxKIzA2rFZiH/85 -----END CERTIFICATE-----Generated at Mon Sep 8 22:01:50 2025 by rpki-client