$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft File: o8s5jsc5UXR2LZMDPnBgnWD03bI.mft (raw, json) Hash identifier: 3IoRmJ4SzLoIGTUPECp4x4/qivS6oSaw3HE83aGIlxM= Subject key identifier: 75:3F:EA:D7:17:20:15:B1:B2:69:27:4E:C6:31:8B:E5:12:9A:BB:87 Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 Certificate issuer: /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft Manifest number: 0111 Signing time: Thu 03 Jul 2025 05:08:24 +0000 Manifest this update: Thu 03 Jul 2025 05:08:23 +0000 Manifest next update: Thu 10 Jul 2025 05:08:23 +0000 Files and hashes: 1: o8s5jsc5UXR2LZMDPnBgnWD03bI.crl (hash: kQKfhssSOQJrfckRPSspJkOa4A9frc9pTMbbWj8ZgMM=) 2: EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (hash: MV1F0Q4UL7J+dtgMeHTJ35pvzsiuBXHWMmcfd9HjqkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911606A, serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Validity Not Before: Jul 3 05:08:23 2025 GMT Not After : Jul 10 05:08:23 2025 GMT Subject: CN=68661048-de76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6e:fd:fd:c3:a5:70:76:94:41:98:a5:dc:b9: 19:a8:7f:b7:61:cc:1a:f8:df:9a:53:a0:ea:47:c8: 15:47:2e:8f:21:7a:53:81:da:7b:ec:2e:05:09:45: 28:78:74:55:13:6c:cf:50:14:ce:fa:f8:14:36:51: b9:51:63:97:a6:e9:f1:df:de:d9:40:24:d6:04:b0: f3:e2:0b:36:3e:8e:17:76:4e:2c:03:49:29:34:a0: 4d:aa:9b:23:19:a2:a2:e4:7b:fb:66:8e:86:65:2c: e2:d6:37:aa:11:cd:3b:3c:f1:b5:ef:ea:77:7f:31: c0:47:85:8f:88:50:be:54:28:92:9e:a2:1d:db:30: d3:51:61:87:c0:38:63:04:0f:d0:16:f2:65:ed:b3: e9:54:ea:f0:31:5e:1f:b5:3f:0f:05:12:b2:29:db: 00:5f:11:ac:be:cd:ef:fe:a3:b1:88:a9:6a:de:28: 8d:9e:44:93:39:18:58:c4:70:af:0a:54:3e:56:32: 2b:47:f9:82:aa:03:3f:0a:a5:fd:13:43:fb:ce:95: 80:63:2f:8c:5f:73:29:b6:d7:f5:59:79:7f:9a:b0: 90:6a:b3:80:55:6f:ca:50:54:d4:cd:c6:65:3e:be: a5:72:41:3a:e3:59:7c:7a:99:6b:45:6b:b9:d3:eb: 05:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3F:EA:D7:17:20:15:B1:B2:69:27:4E:C6:31:8B:E5:12:9A:BB:87 X509v3 Authority Key Identifier: keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:1e:13:10:41:9b:6d:62:e9:c1:24:78:11:76:d9:77:54:ee: 65:a5:3e:5c:d3:80:81:f6:0b:2e:f1:dc:77:35:1b:45:ce:48: a5:40:49:de:72:af:11:d4:95:24:37:30:b9:79:99:b6:7d:19: 08:61:38:f1:76:b7:54:e7:a2:cd:9a:21:b4:7a:a5:26:4c:5c: ff:62:be:35:88:fb:33:88:3e:3f:ff:31:e1:cd:2f:2b:d3:d3: 21:64:02:30:5b:be:1f:99:47:0b:af:ec:9e:da:53:45:2d:88: 54:80:31:ee:56:ef:c6:26:51:11:c7:88:d8:d6:4b:e0:e7:94: af:fa:fd:eb:89:21:17:b1:0e:94:8e:a7:65:40:c4:0c:95:e6: 9c:72:da:3f:7b:53:58:1d:40:82:07:01:2b:25:0f:99:69:85: 8c:59:b6:2d:3a:9e:79:7e:df:44:c7:2c:31:9a:75:03:86:8a: 8e:fc:f3:a6:5a:7e:91:b5:86:0a:5b:ba:01:36:1d:25:2f:40: 06:97:56:32:5a:ce:58:62:48:f8:a2:16:25:30:04:30:68:6a: a2:09:ab:fc:bd:dd:42:a2:b7:24:52:bc:be:03:d1:99:69:39: 35:af:83:b2:8e:fd:9f:02:a5:5e:33:75:5d:1c:c5:4e:6b:41: d4:e1:4a:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYwNkExMTAvBgNVBAUTKEEzQ0IzOThFQzczOTUxNzQ3NjJEOTMwMzNFNzA2MDlE NjBGNEREQjIwHhcNMjUwNzAzMDUwODIzWhcNMjUwNzEwMDUwODIzWjAYMRYwFAYD VQQDEw02ODY2MTA0OC1kZTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo279/cOlcHaUQZil3LkZqH+3Ycwa+N+aU6DqR8gVRy6PIXpTgdp77C4FCUUo eHRVE2zPUBTO+vgUNlG5UWOXpunx397ZQCTWBLDz4gs2Po4Xdk4sA0kpNKBNqpsj GaKi5Hv7Zo6GZSzi1jeqEc07PPG17+p3fzHAR4WPiFC+VCiSnqId2zDTUWGHwDhj BA/QFvJl7bPpVOrwMV4ftT8PBRKyKdsAXxGsvs3v/qOxiKlq3iiNnkSTORhYxHCv ClQ+VjIrR/mCqgM/CqX9E0P7zpWAYy+MX3Mpttf1WXl/mrCQarOAVW/KUFTUzcZl Pr6lckE641l8eplrRWu50+sFXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHU/6tcX IBWxsmknTsYxi+USmruHMB8GA1UdIwQYMBaAFKPLOY7HOVF0di2TAz5wYJ1g9N2y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS80RjI1ODhFNEJC NDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVYUjJMWk1EUG5CZ25XRDAz YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL284czVqc2M1VVhSMkxaTURQbkJnbldEMDNiSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjA2QS80RjI1ODhFNEJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVY UjJMWk1EUG5CZ25XRDAzYkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASHhMQQZttYunBJHgRdtl3VO5lpT5c04CB9gsu8dx3NRtFzkilQEne cq8R1JUkNzC5eZm2fRkIYTjxdrdU56LNmiG0eqUmTFz/Yr41iPsziD4//zHhzS8r 09MhZAIwW74fmUcLr+ye2lNFLYhUgDHuVu/GJlERx4jY1kvg55Sv+v3riSEXsQ6U jqdlQMQMleaccto/e1NYHUCCBwErJQ+ZaYWMWbYtOp55ft9ExywxmnUDhoqO/POm Wn6RtYYKW7oBNh0lL0AGl1YyWs5YYkj4ohYlMAQwaGqiCav8vd1CorckUry+A9GZ aTk1r4Oyjv2fAqVeM3VdHMVOa0HU4Upo -----END CERTIFICATE-----Generated at Thu Jul 3 23:08:05 2025 by rpki-client