$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft File: o8s5jsc5UXR2LZMDPnBgnWD03bI.mft (raw, json) Hash identifier: W16BzoLnJME4eS3nQDiNIe45IMFH+XW5pFMH3/vHtbU= Subject key identifier: 6A:AF:70:F9:E2:42:DA:2D:EF:E6:62:FB:EF:B5:5E:DD:17:EC:54:3D Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 Certificate issuer: /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft Manifest number: 012B Signing time: Sat 23 Aug 2025 04:48:30 +0000 Manifest this update: Sat 23 Aug 2025 04:48:29 +0000 Manifest next update: Sat 30 Aug 2025 04:48:29 +0000 Files and hashes: 1: o8s5jsc5UXR2LZMDPnBgnWD03bI.crl (hash: k2tUxjpmjE+4NxMkPdckzbAvf+opYYcAm3vcdv/SrNk=) 2: EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (hash: MV1F0Q4UL7J+dtgMeHTJ35pvzsiuBXHWMmcfd9HjqkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911606A, serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Validity Not Before: Aug 23 04:48:29 2025 GMT Not After : Aug 30 04:48:29 2025 GMT Subject: CN=68a9481e-5e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:85:4e:c0:6b:e6:cd:61:c7:d2:c7:0a:0d:a0: b7:98:35:db:33:cc:aa:97:0e:31:6c:ee:62:5c:3d: 89:45:67:55:e2:39:ae:f9:8d:e3:dc:df:ea:5b:4e: 77:a4:4c:a2:bb:df:7d:9d:98:f9:5c:64:d2:44:b6: e9:da:ae:30:22:0b:8c:96:65:ba:6c:6b:32:f2:00: 5c:27:09:d9:66:8e:d4:52:55:1b:e8:18:e7:31:a3: 50:cf:eb:1f:ad:e4:33:2a:db:39:d2:b7:14:bb:f5: 9a:a7:76:c6:70:3a:1c:f5:76:47:ba:d7:db:fc:4c: 3f:68:94:b9:44:0d:ac:55:fc:b5:82:1a:9c:0f:16: 8f:70:b6:33:05:6e:3f:6b:ef:2e:df:66:19:45:01: 87:d5:f2:ce:36:42:62:4f:66:ab:e9:13:51:6a:15: 01:86:69:fa:50:b9:f0:31:22:32:2e:83:d0:c5:00: 7f:62:89:22:bf:3d:f5:9b:f2:b7:7c:49:9a:06:bf: bc:58:96:15:0d:8d:43:ed:68:81:e4:1e:52:3e:c8: 35:be:19:8f:6a:87:c6:6c:a7:64:a5:7d:0d:1e:78: f9:0b:e8:c2:0e:9e:c8:4a:6f:37:59:47:59:b8:85: fe:df:0a:1d:14:05:7a:78:4a:19:e9:b3:e3:c6:16: 33:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AF:70:F9:E2:42:DA:2D:EF:E6:62:FB:EF:B5:5E:DD:17:EC:54:3D X509v3 Authority Key Identifier: keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:af:2b:47:32:66:d2:d0:cc:e2:63:60:0f:70:f4:08:8a:bb: ba:a8:c7:cc:e2:ef:cc:0b:4c:7a:a2:1e:97:e6:a0:92:4a:46: 5c:1d:c1:57:f0:2e:8c:1e:3e:1e:f2:87:76:89:38:c2:4d:e9: d6:a9:3e:13:ed:7c:00:d4:92:20:6e:05:d9:e3:93:29:4e:72: e0:2d:3a:6e:64:e0:9c:6e:61:76:5b:22:31:8c:a3:83:3a:53: 57:2f:cc:a0:4b:94:eb:11:8c:96:22:42:f8:dd:da:14:68:48: a8:5f:79:a8:8f:38:0b:92:59:c3:1b:3c:bc:82:f1:d4:12:32: d4:98:76:36:1c:c7:f4:d5:47:fe:4c:a1:4f:57:0e:7b:52:fa: a0:22:db:38:27:79:56:73:7e:b7:ba:27:1c:ff:22:c7:59:44: 79:68:5e:9a:05:c9:28:f9:2a:b5:30:12:07:d9:45:32:13:97: ad:ac:d9:c4:2a:6b:46:0a:87:2a:eb:8e:62:63:36:06:da:1b: ef:4e:14:d7:e8:06:ee:46:ae:27:c2:0c:5a:74:52:d0:b6:f9: 45:52:57:eb:ee:64:b6:97:34:9f:8e:f2:57:dd:17:df:ec:ed: c5:c6:0d:c8:32:6d:7b:df:59:98:2c:7e:58:b7:80:5a:28:eb: 53:8f:7c:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYwNkExMTAvBgNVBAUTKEEzQ0IzOThFQzczOTUxNzQ3NjJEOTMwMzNFNzA2MDlE NjBGNEREQjIwHhcNMjUwODIzMDQ0ODI5WhcNMjUwODMwMDQ0ODI5WjAYMRYwFAYD VQQDEw02OGE5NDgxZS01ZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YVOwGvmzWHH0scKDaC3mDXbM8yqlw4xbO5iXD2JRWdV4jmu+Y3j3N/qW053 pEyiu999nZj5XGTSRLbp2q4wIguMlmW6bGsy8gBcJwnZZo7UUlUb6BjnMaNQz+sf reQzKts50rcUu/Wap3bGcDoc9XZHutfb/Ew/aJS5RA2sVfy1ghqcDxaPcLYzBW4/ a+8u32YZRQGH1fLONkJiT2ar6RNRahUBhmn6ULnwMSIyLoPQxQB/Yokivz31m/K3 fEmaBr+8WJYVDY1D7WiB5B5SPsg1vhmPaofGbKdkpX0NHnj5C+jCDp7ISm83WUdZ uIX+3wodFAV6eEoZ6bPjxhYzoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqvcPni Qtot7+Zi+++1Xt0X7FQ9MB8GA1UdIwQYMBaAFKPLOY7HOVF0di2TAz5wYJ1g9N2y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS80RjI1ODhFNEJC NDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVYUjJMWk1EUG5CZ25XRDAz YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL284czVqc2M1VVhSMkxaTURQbkJnbldEMDNiSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjA2QS80RjI1ODhFNEJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVY UjJMWk1EUG5CZ25XRDAzYkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtrytHMmbS0MziY2APcPQIiru6qMfM4u/MC0x6oh6X5qCSSkZcHcFX 8C6MHj4e8od2iTjCTenWqT4T7XwA1JIgbgXZ45MpTnLgLTpuZOCcbmF2WyIxjKOD OlNXL8ygS5TrEYyWIkL43doUaEioX3mojzgLklnDGzy8gvHUEjLUmHY2HMf01Uf+ TKFPVw57UvqgIts4J3lWc363uicc/yLHWUR5aF6aBcko+Sq1MBIH2UUyE5etrNnE KmtGCocq645iYzYG2hvvThTX6AbuRq4nwgxadFLQtvlFUlfr7mS2lzSfjvJX3Rff 7O3Fxg3IMm1731mYLH5Yt4BaKOtTj3wB -----END CERTIFICATE-----Generated at Sat Aug 23 10:26:51 2025 by rpki-client