$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft File: K08yPFindrTnU4be6Dci4EViMsY.mft (raw, json) Hash identifier: i3NI5h/8wT3ouWaMv4n6vLjoXbSL59rP7lAJsYZl10c= Subject key identifier: 95:0E:38:22:E8:57:F6:1D:EF:21:49:AF:72:92:EB:36:96:C3:19:BA Authority key identifier: 2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6 Certificate issuer: /CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6 Certificate serial: 0DFA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft Manifest number: 0DED Signing time: Fri 04 Jul 2025 15:49:48 +0000 Manifest this update: Fri 04 Jul 2025 15:49:48 +0000 Manifest next update: Fri 11 Jul 2025 15:49:48 +0000 Files and hashes: 1: K08yPFindrTnU4be6Dci4EViMsY.crl (hash: kqYuNQ9YP4Of6QuTdVFvzmpC2YUBG5d8CqZ/+m5SD+c=) 2: EE1EA292EA6A11E98F16FE30C4F9AE02.roa (hash: QaiwA0ii3swzDmEn5ZYRLYQTMUg0WLwS1y2KJOPdMzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3578 (0xdfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BC62, serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6 Validity Not Before: Jul 4 15:49:48 2025 GMT Not After : Jul 11 15:49:48 2025 GMT Subject: CN=6867f81c-ba43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:2d:4f:f5:bf:73:00:b3:53:f3:a8:12:40: 40:10:5d:06:03:58:67:c9:f0:7c:c7:8d:22:92:22: bd:88:ed:51:12:96:35:ee:a2:9a:a0:7b:db:0d:30: fa:bc:a3:99:fe:71:33:c3:42:12:51:9d:77:58:f6: ec:d8:0d:d1:f1:9a:b0:6f:c9:94:f9:d1:a5:dd:33: 78:f7:6d:b6:33:19:ca:7f:60:dc:8c:09:32:f0:c8: 7f:7d:64:45:8b:e2:77:2c:2a:19:c2:8c:92:5f:a8: 42:f9:af:61:31:1a:72:c3:23:92:2a:70:d2:21:8b: df:a8:cd:7b:e6:ca:86:9c:d7:de:ed:8d:ed:82:43: ba:18:15:e4:b4:81:02:b2:df:e8:af:fb:a6:cf:7f: 3a:26:3b:a3:c1:f1:2a:12:64:03:ea:af:b1:e6:3a: 46:4a:1c:ec:77:5c:47:30:6d:33:1a:6c:ba:7e:df: a2:87:1b:d1:f1:8d:49:f4:33:8f:8a:8d:76:04:b6: 73:52:87:d0:37:04:b5:b3:9d:ff:6a:55:65:30:7d: 87:7e:c7:ff:61:b0:e2:60:23:e2:d1:ce:80:54:d5: 1f:37:61:14:f0:31:da:7e:ed:8b:ab:0a:92:c5:11: b5:a5:b8:5b:10:97:0c:30:89:12:f6:65:ff:73:75: ac:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0E:38:22:E8:57:F6:1D:EF:21:49:AF:72:92:EB:36:96:C3:19:BA X509v3 Authority Key Identifier: keyid:2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a3:fa:83:39:16:ad:c5:98:7c:ab:c0:b3:4e:48:0b:09:45: d5:2f:3c:91:39:70:ba:c9:f4:f4:b7:28:0d:1f:0a:78:08:c6: b4:7c:c1:25:ab:d4:10:3b:ed:35:ac:db:f8:72:1e:73:1d:fe: 0f:67:c3:1f:b1:a5:a4:09:ac:3e:7e:a3:f1:51:d5:d6:e3:72: 9d:8f:94:3a:b6:bd:fe:10:e8:e9:70:ef:18:96:2e:3a:1e:48: 86:fc:b9:de:0d:cb:cc:bf:4f:05:ea:08:10:42:12:ce:cd:20: d7:04:3f:09:fc:db:90:91:80:f5:65:81:02:8a:d1:35:ec:6b: ce:8d:2e:7b:e7:b3:c5:e3:38:17:c6:f5:65:56:10:6d:8a:1e: 2c:0a:66:dc:1d:85:81:85:bf:38:5a:b5:31:7e:9f:34:14:23: 0b:33:b2:8b:cc:4f:9c:55:dd:ef:33:3b:c6:40:3f:63:e7:27: 09:5d:50:59:7d:b8:37:b4:20:de:48:7b:b9:c9:24:fa:26:72: cb:45:f4:c4:10:0f:7d:42:d9:d2:7b:7b:6a:9b:f0:5e:a8:01: 1d:c2:98:55:22:91:ef:eb:be:2c:36:aa:7e:4d:85:3d:67:2c: 44:e5:ac:99:f9:d5:9a:54:d2:d9:fc:73:28:7d:cc:40:59:62: dd:12:47:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDNjIxMTAvBgNVBAUTKDJCNEYzMjNDNThBNzc2QjRFNzUzODZERUU4MzcyMkUw NDU2MjMyQzYwHhcNMjUwNzA0MTU0OTQ4WhcNMjUwNzExMTU0OTQ4WjAYMRYwFAYD VQQDEw02ODY3ZjgxYy1iYTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB4tT/W/cwCzU/OoEkBAEF0GA1hnyfB8x40ikiK9iO1REpY17qKaoHvbDTD6 vKOZ/nEzw0ISUZ13WPbs2A3R8Zqwb8mU+dGl3TN49222MxnKf2DcjAky8Mh/fWRF i+J3LCoZwoySX6hC+a9hMRpywyOSKnDSIYvfqM175sqGnNfe7Y3tgkO6GBXktIEC st/or/umz386JjujwfEqEmQD6q+x5jpGShzsd1xHMG0zGmy6ft+ihxvR8Y1J9DOP io12BLZzUofQNwS1s53/alVlMH2Hfsf/YbDiYCPi0c6AVNUfN2EU8DHafu2LqwqS xRG1pbhbEJcMMIkS9mX/c3WshQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUOOCLo V/Yd7yFJr3KS6zaWwxm6MB8GA1UdIwQYMBaAFCtPMjxYp3a051OG3ug3IuBFYjLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi9FRTk1RkQ0MkI3 NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRyVG5VNGJlNkRjaTRFVmlN c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0swOHlQRmluZHJUblU0YmU2RGNpNEVWaU1zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkM2Mi9FRTk1RkQ0MkI3NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRy VG5VNGJlNkRjaTRFVmlNc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCco/qDORatxZh8q8CzTkgLCUXVLzyROXC6yfT0tygNHwp4CMa0fMEl q9QQO+01rNv4ch5zHf4PZ8MfsaWkCaw+fqPxUdXW43Kdj5Q6tr3+EOjpcO8Yli46 HkiG/LneDcvMv08F6ggQQhLOzSDXBD8J/NuQkYD1ZYECitE17GvOjS5757PF4zgX xvVlVhBtih4sCmbcHYWBhb84WrUxfp80FCMLM7KLzE+cVd3vMzvGQD9j5ycJXVBZ fbg3tCDeSHu5yST6JnLLRfTEEA99QtnSe3tqm/BeqAEdwphVIpHv674sNqp+TYU9 ZyxE5ayZ+dWaVNLZ/HMofcxAWWLdEkdv -----END CERTIFICATE-----Generated at Sat Jul 5 07:53:26 2025 by rpki-client