$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft File: K08yPFindrTnU4be6Dci4EViMsY.mft (raw, json) Hash identifier: ZJKWuSDrwWe+ygeI+pZuSPUpse9A3Rz7UdK77vySsxE= Subject key identifier: 90:30:E5:95:89:E0:06:1E:32:AE:11:43:65:FF:93:B0:B2:8A:2C:60 Authority key identifier: 2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6 Certificate issuer: /CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6 Certificate serial: 0DDE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft Manifest number: 0DD1 Signing time: Sat 10 May 2025 15:34:28 +0000 Manifest this update: Sat 10 May 2025 15:34:27 +0000 Manifest next update: Sat 17 May 2025 15:34:27 +0000 Files and hashes: 1: K08yPFindrTnU4be6Dci4EViMsY.crl (hash: hocCWSSF6vP3HkvDlX8o3XfVO5spMf0lYqn3QXwYprI=) 2: EE1EA292EA6A11E98F16FE30C4F9AE02.roa (hash: QaiwA0ii3swzDmEn5ZYRLYQTMUg0WLwS1y2KJOPdMzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3550 (0xdde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BC62, serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6 Validity Not Before: May 10 15:34:27 2025 GMT Not After : May 17 15:34:27 2025 GMT Subject: CN=681f7204-ba05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5d:51:bf:1c:69:b2:a5:1b:96:3f:d9:0a:d5: 9b:b4:b0:04:bf:0f:ce:c3:d7:ef:ec:bb:9f:62:01: a4:f9:c5:87:b5:f5:f6:3b:99:69:90:9d:ff:74:9f: fb:96:4d:62:e8:22:6d:fa:9c:9d:e7:96:c3:79:ba: 9b:09:fa:ea:8f:9e:b2:6b:4a:3a:a9:da:03:d7:47: ec:5f:26:9f:6a:15:e8:29:3a:fb:b4:36:a1:04:51: 51:fd:2c:ec:ef:d7:2f:b6:91:6c:79:b4:7b:6c:f8: 37:95:f4:1d:ec:3c:9b:2b:9f:77:c6:14:b8:45:ba: 75:53:60:4c:3e:76:01:17:e3:75:2d:7c:21:85:33: 01:4e:23:a0:25:ae:5e:a4:e4:93:ce:fd:5f:c1:f9: 5a:25:f8:c9:85:69:dd:75:d4:e9:00:f9:09:b1:e5: 85:05:ea:52:29:70:72:a2:ed:62:87:cd:b1:a8:b8: ad:47:26:d5:ba:4d:cd:a0:c8:48:cc:38:0c:90:c6: c7:4e:87:54:6d:c6:60:ef:86:95:62:60:65:b1:03: 6a:2e:d7:61:ed:79:e2:04:78:96:1f:b9:2d:c4:19: f3:d0:88:00:ec:8b:01:7a:98:c9:96:ac:4e:a7:62: bd:e7:38:92:2a:2b:4d:eb:13:d5:00:df:7f:a6:17: 56:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:30:E5:95:89:E0:06:1E:32:AE:11:43:65:FF:93:B0:B2:8A:2C:60 X509v3 Authority Key Identifier: keyid:2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ca:fb:f7:af:cb:55:ee:32:43:0d:3b:e2:38:d0:05:79:65: 1c:e2:ae:d0:c2:ca:0e:ee:04:0d:21:f4:27:ae:7c:9e:5d:7c: 86:24:90:31:f3:c3:4f:80:20:d4:20:ea:58:38:32:f2:9e:fe: f0:c4:29:12:40:48:47:f7:6b:4d:53:54:f1:e0:9c:da:11:c9: be:84:ce:d4:09:27:1d:ab:b9:90:8d:92:40:25:4a:5d:25:b4: e5:3c:9d:a8:5e:89:cd:c1:83:a2:36:09:3a:64:02:4e:f4:0a: 38:4f:11:67:78:b2:0e:dd:e6:d6:ad:fb:42:a7:77:f7:4f:36: 1d:5b:32:22:ca:15:69:3c:cc:2b:45:f1:e1:17:87:89:ad:ff: 4d:34:c7:19:24:da:38:5f:bf:da:6e:be:90:12:19:9f:55:72: 58:fa:84:c6:81:91:7e:c1:cc:57:b4:7f:fd:0e:bc:cb:7c:04: 58:08:2a:bd:4b:ec:ab:78:da:b8:38:a4:6c:45:03:5a:e8:1f: cd:69:82:f1:af:2f:d9:cf:01:a9:ea:99:55:ff:2d:bb:ad:ff: 51:29:65:ee:10:fe:95:73:ff:47:77:50:78:b4:74:8b:d9:dc: 50:48:1a:e1:3e:ae:ea:50:21:bb:1f:b8:ff:ea:d2:35:79:71: ad:0a:26:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDNjIxMTAvBgNVBAUTKDJCNEYzMjNDNThBNzc2QjRFNzUzODZERUU4MzcyMkUw NDU2MjMyQzYwHhcNMjUwNTEwMTUzNDI3WhcNMjUwNTE3MTUzNDI3WjAYMRYwFAYD VQQDEw02ODFmNzIwNC1iYTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4F1RvxxpsqUblj/ZCtWbtLAEvw/Ow9fv7LufYgGk+cWHtfX2O5lpkJ3/dJ/7 lk1i6CJt+pyd55bDebqbCfrqj56ya0o6qdoD10fsXyafahXoKTr7tDahBFFR/Szs 79cvtpFsebR7bPg3lfQd7DybK593xhS4Rbp1U2BMPnYBF+N1LXwhhTMBTiOgJa5e pOSTzv1fwflaJfjJhWndddTpAPkJseWFBepSKXByou1ih82xqLitRybVuk3NoMhI zDgMkMbHTodUbcZg74aVYmBlsQNqLtdh7XniBHiWH7ktxBnz0IgA7IsBepjJlqxO p2K95ziSKitN6xPVAN9/phdWKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAw5ZWJ 4AYeMq4RQ2X/k7CyiixgMB8GA1UdIwQYMBaAFCtPMjxYp3a051OG3ug3IuBFYjLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi9FRTk1RkQ0MkI3 NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRyVG5VNGJlNkRjaTRFVmlN c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0swOHlQRmluZHJUblU0YmU2RGNpNEVWaU1zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkM2Mi9FRTk1RkQ0MkI3NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRy VG5VNGJlNkRjaTRFVmlNc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpyvv3r8tV7jJDDTviONAFeWUc4q7QwsoO7gQNIfQnrnyeXXyGJJAx 88NPgCDUIOpYODLynv7wxCkSQEhH92tNU1Tx4JzaEcm+hM7UCScdq7mQjZJAJUpd JbTlPJ2oXonNwYOiNgk6ZAJO9Ao4TxFneLIO3ebWrftCp3f3TzYdWzIiyhVpPMwr RfHhF4eJrf9NNMcZJNo4X7/abr6QEhmfVXJY+oTGgZF+wcxXtH/9DrzLfARYCCq9 S+yreNq4OKRsRQNa6B/NaYLxry/ZzwGp6plV/y27rf9RKWXuEP6Vc/9Hd1B4tHSL 2dxQSBrhPq7qUCG7H7j/6tI1eXGtCiYx -----END CERTIFICATE-----Generated at Sat May 10 19:15:00 2025 by rpki-client