$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft File: o8s5jsc5UXR2LZMDPnBgnWD03bI.mft (raw, json) Hash identifier: v/8cml4oWr6lf5wc9ZB7tgqTTGUTXyupFZZlB0Kp9fY= Subject key identifier: 46:64:CA:3D:8D:C5:22:B3:5B:7B:1F:CD:AB:D0:79:85:11:F8:91:38 Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 Certificate issuer: /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft Manifest number: F7 Signing time: Sun 11 May 2025 04:06:00 +0000 Manifest this update: Sun 11 May 2025 04:06:00 +0000 Manifest next update: Sun 18 May 2025 04:05:59 +0000 Files and hashes: 1: o8s5jsc5UXR2LZMDPnBgnWD03bI.crl (hash: O/6TbjcdRETcQn0a6+vLfbso3Oz0pVQ6QrhIHdWfze4=) 2: EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (hash: MV1F0Q4UL7J+dtgMeHTJ35pvzsiuBXHWMmcfd9HjqkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911606A, serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Validity Not Before: May 11 04:06:00 2025 GMT Not After : May 18 04:05:59 2025 GMT Subject: CN=68202228-78f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:64:ec:1c:ff:b4:14:46:26:c8:56:5a:3d:41: 87:6e:0e:46:0b:8c:21:20:96:3d:50:16:cc:93:61: da:d9:0a:bc:b8:a7:f8:d4:0f:a5:a6:a9:eb:c9:f5: 8d:d1:54:36:21:74:ed:61:07:35:81:01:e2:01:e5: 94:61:58:9c:34:e2:14:2f:11:ac:c7:f2:ab:d7:9e: 82:70:fc:9a:bc:32:39:fb:2f:cf:23:83:52:74:89: eb:57:0a:b5:0e:b4:a6:7c:fc:72:78:4c:e4:e1:f1: 02:7f:b2:48:f6:8a:56:22:16:02:ca:b6:6e:14:4e: 19:89:6c:73:0f:d4:ad:e5:8e:1c:fd:7e:11:4e:05: ae:cb:6f:e5:02:10:81:e1:5c:13:7f:00:e1:7d:91: 6c:59:ee:37:5f:08:a1:56:36:70:bd:61:74:c2:62: 6f:70:1f:e8:c5:cc:95:a8:b3:0b:b9:b5:89:57:b9: 51:89:fc:77:95:4f:a0:11:9a:49:3d:48:37:fc:65: e5:f4:2f:50:66:ce:a7:3b:3e:9a:d3:c2:50:82:23: 06:4b:f1:cc:1c:4e:f2:dc:0d:33:cb:96:2d:c9:67: 36:69:ef:8b:bc:36:f2:ce:00:d8:e3:f1:05:b8:e1: 80:8d:e9:a7:24:ad:a4:65:84:06:7a:5e:fd:43:45: 44:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:64:CA:3D:8D:C5:22:B3:5B:7B:1F:CD:AB:D0:79:85:11:F8:91:38 X509v3 Authority Key Identifier: keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:7c:25:d3:ba:93:df:2b:c8:c7:e9:f0:9f:3d:cb:ed:e1:92: f2:74:7f:4a:c4:54:9c:4b:5e:26:b6:17:95:cb:72:db:d6:19: 6a:3f:57:1c:e5:ea:5c:94:2f:70:84:8e:a0:6d:f2:62:50:93: 34:ec:39:a8:97:4f:58:27:a8:6a:19:6f:a3:2a:d9:ed:3d:ea: eb:74:fa:0d:0c:ad:7f:c4:d0:b0:cd:b7:6f:80:1e:43:61:55: 46:24:1d:b9:41:4b:8a:c7:ce:e7:e1:de:75:32:2e:1f:73:36: 7c:41:e5:af:7f:99:da:0a:10:58:79:83:15:51:5f:e3:ee:3f: 70:6b:51:6d:25:6d:33:39:3e:74:d6:20:e4:a3:10:93:2e:60: 66:6f:25:97:ce:88:d1:30:e8:fd:7b:e8:60:8d:0c:a1:2f:b2: 7d:4a:92:b2:cd:8b:8e:a2:01:bd:73:89:5f:30:c3:c3:9e:8d: e1:d3:98:1f:6f:a7:95:0c:8f:d7:f2:f5:1f:65:27:b5:ab:c4: ef:99:de:a8:19:46:a5:2c:c3:d4:70:33:a3:10:0f:5d:1c:13: e7:0a:4f:f2:97:c2:7a:36:0a:a4:ad:31:6f:ee:08:a9:97:f5: 88:d7:5d:7d:8b:73:ba:4f:78:24:6a:db:b5:b2:70:fe:4d:55: 5b:26:ca:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYwNkExMTAvBgNVBAUTKEEzQ0IzOThFQzczOTUxNzQ3NjJEOTMwMzNFNzA2MDlE NjBGNEREQjIwHhcNMjUwNTExMDQwNjAwWhcNMjUwNTE4MDQwNTU5WjAYMRYwFAYD VQQDEw02ODIwMjIyOC03OGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWTsHP+0FEYmyFZaPUGHbg5GC4whIJY9UBbMk2Ha2Qq8uKf41A+lpqnryfWN 0VQ2IXTtYQc1gQHiAeWUYVicNOIULxGsx/Kr156CcPyavDI5+y/PI4NSdInrVwq1 DrSmfPxyeEzk4fECf7JI9opWIhYCyrZuFE4ZiWxzD9St5Y4c/X4RTgWuy2/lAhCB 4VwTfwDhfZFsWe43XwihVjZwvWF0wmJvcB/oxcyVqLMLubWJV7lRifx3lU+gEZpJ PUg3/GXl9C9QZs6nOz6a08JQgiMGS/HMHE7y3A0zy5YtyWc2ae+LvDbyzgDY4/EF uOGAjemnJK2kZYQGel79Q0VEiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZkyj2N xSKzW3sfzavQeYUR+JE4MB8GA1UdIwQYMBaAFKPLOY7HOVF0di2TAz5wYJ1g9N2y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS80RjI1ODhFNEJC NDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVYUjJMWk1EUG5CZ25XRDAz YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL284czVqc2M1VVhSMkxaTURQbkJnbldEMDNiSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjA2QS80RjI1ODhFNEJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVY UjJMWk1EUG5CZ25XRDAzYkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADfCXTupPfK8jH6fCfPcvt4ZLydH9KxFScS14mtheVy3Lb1hlqP1cc 5epclC9whI6gbfJiUJM07Dmol09YJ6hqGW+jKtntPerrdPoNDK1/xNCwzbdvgB5D YVVGJB25QUuKx87n4d51Mi4fczZ8QeWvf5naChBYeYMVUV/j7j9wa1FtJW0zOT50 1iDkoxCTLmBmbyWXzojRMOj9e+hgjQyhL7J9SpKyzYuOogG9c4lfMMPDno3h05gf b6eVDI/X8vUfZSe1q8Tvmd6oGUalLMPUcDOjEA9dHBPnCk/yl8J6NgqkrTFv7gip l/WI1119i3O6T3gkatu1snD+TVVbJspf -----END CERTIFICATE-----Generated at Sun May 11 14:48:58 2025 by rpki-client