$ rpki-client -vvf rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft File: 8Os9EfDsrmhzaV1az7e0rcVfNFg.mft (raw, json) Hash identifier: ug6yJRmqSC/adqKGpfFghQJCl76lhvdCVtqH9V0zg3Q= Subject key identifier: 0A:84:17:64:86:69:63:DB:0A:0C:FC:1E:81:89:47:E1:50:05:36:7E Authority key identifier: F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 Certificate issuer: /CN=A91499BB/serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Certificate serial: 14BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft Manifest number: 14B2 Signing time: Wed 02 Jul 2025 17:01:48 +0000 Manifest this update: Wed 02 Jul 2025 17:01:48 +0000 Manifest next update: Wed 09 Jul 2025 17:01:48 +0000 Files and hashes: 1: 8Os9EfDsrmhzaV1az7e0rcVfNFg.crl (hash: wnHBA0IfC80ybQbPQ/VIWpiYXSpUkO9y0JfidZ6XTdc=) 2: 5F150B08D48611E9A4473984C4F9AE02.roa (hash: oH35QJywcYwQK9w172Dp8G4g95WEClMxQ6f9cBdl364=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5308 (0x14bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91499BB, serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Validity Not Before: Jul 2 17:01:48 2025 GMT Not After : Jul 9 17:01:48 2025 GMT Subject: CN=686565fc-7468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:85:a3:55:36:a5:10:02:21:c3:ed:2e:d6:c1: b3:b6:23:e5:e3:9b:6e:b4:0b:78:23:b8:d6:c8:39: a4:23:b0:1c:c4:97:41:12:36:c3:60:f1:a7:26:6e: 8a:b8:7b:3c:6e:66:bf:dd:81:6b:50:4a:c5:6f:7a: ca:43:b6:ee:2d:05:33:8a:b0:b3:09:0c:3b:3b:c4: a4:83:11:3c:f6:9c:1b:26:92:d2:7e:69:4d:8a:87: 3b:a7:32:db:eb:2d:b9:a9:b3:99:67:5f:8d:44:12: bf:f3:82:13:07:23:b1:78:d4:48:ed:3b:b5:29:9e: 43:35:27:5c:b5:8f:bb:da:57:dd:d2:a1:1b:83:07: 7f:2b:29:fe:62:87:4f:6f:6b:b4:b8:d4:ef:b3:d1: 15:38:23:23:5c:53:38:a5:00:cc:f4:2e:4e:ff:d1: 18:8e:ee:61:79:5b:0e:4a:c4:62:80:23:0a:4a:cc: 99:79:ce:76:81:b9:3b:1b:31:7d:e2:fa:8d:ee:f5: 68:3d:52:52:4e:a8:14:b1:19:d4:b9:2a:61:e2:75: d2:c2:df:13:f7:0f:2a:96:ff:af:72:9c:ea:e6:d0: b8:48:1d:65:01:e6:fc:85:01:43:bd:47:d7:a0:0b: 6e:d3:14:3a:66:08:f6:df:9f:3e:2d:b8:ed:c4:73: f4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:84:17:64:86:69:63:DB:0A:0C:FC:1E:81:89:47:E1:50:05:36:7E X509v3 Authority Key Identifier: keyid:F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:4f:5f:c5:8a:4a:96:1b:f5:9b:8c:85:05:71:30:76:4b:25: cb:65:cf:35:a8:60:23:d9:49:21:27:64:94:d0:f5:12:3d:3d: f9:37:51:3b:28:62:70:11:26:07:fc:e1:6a:88:4a:80:fc:32: 3c:7e:da:97:84:10:02:5c:dc:e2:f0:33:21:db:ab:52:3c:14: 71:0f:3f:8a:e7:13:a2:9a:37:53:b1:01:3d:63:8a:98:b6:67: 56:c4:ee:de:a7:18:91:97:c0:8d:c1:e3:39:3f:5e:1d:a2:2d: 7d:50:24:69:49:69:f8:99:7a:98:77:ab:e5:cd:fb:90:2c:1d: 13:56:64:29:44:66:60:0e:d2:f6:6a:33:87:65:36:f5:ec:69: 17:12:02:2b:f5:10:f4:9b:7f:32:9a:41:46:56:6e:cd:0c:e0: 0f:7b:80:0a:c8:46:d2:69:d6:33:7d:bc:70:c1:b0:60:fe:49: ce:bb:26:70:68:31:09:12:1d:06:07:b6:b7:82:f8:44:8b:62: 16:62:93:17:1e:43:2a:3a:be:8b:ad:71:00:f0:a6:88:73:50: 14:98:64:35:43:90:d8:6e:b9:ed:cf:c1:f7:30:a4:68:85:4d: c9:42:e2:d6:6a:bd:85:a1:f7:45:b0:0a:d9:fa:d1:67:5a:a3: 04:c6:45:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5QkIxMTAvBgNVBAUTKEYwRUIzRDExRjBFQ0FFNjg3MzY5NUQ1QUNGQjdCNEFE QzU1RjM0NTgwHhcNMjUwNzAyMTcwMTQ4WhcNMjUwNzA5MTcwMTQ4WjAYMRYwFAYD VQQDEw02ODY1NjVmYy03NDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIWjVTalEAIhw+0u1sGztiPl45tutAt4I7jWyDmkI7AcxJdBEjbDYPGnJm6K uHs8bma/3YFrUErFb3rKQ7buLQUzirCzCQw7O8SkgxE89pwbJpLSfmlNioc7pzLb 6y25qbOZZ1+NRBK/84ITByOxeNRI7Tu1KZ5DNSdctY+72lfd0qEbgwd/Kyn+YodP b2u0uNTvs9EVOCMjXFM4pQDM9C5O/9EYju5heVsOSsRigCMKSsyZec52gbk7GzF9 4vqN7vVoPVJSTqgUsRnUuSph4nXSwt8T9w8qlv+vcpzq5tC4SB1lAeb8hQFDvUfX oAtu0xQ6Zgj2358+LbjtxHP0KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqEF2SG aWPbCgz8HoGJR+FQBTZ+MB8GA1UdIwQYMBaAFPDrPRHw7K5oc2ldWs+3tK3FXzRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTlCQi9BQjFDQUM4NjYw OTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3JtaHphVjFhejdlMHJjVmZO RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhPczlFZkRzcm1oemFWMWF6N2UwcmNWZk5GZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTlCQi9BQjFDQUM4NjYwOTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3Jt aHphVjFhejdlMHJjVmZORmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJT1/FikqWG/WbjIUFcTB2SyXLZc81qGAj2UkhJ2SU0PUSPT35N1E7 KGJwESYH/OFqiEqA/DI8ftqXhBACXNzi8DMh26tSPBRxDz+K5xOimjdTsQE9Y4qY tmdWxO7epxiRl8CNweM5P14doi19UCRpSWn4mXqYd6vlzfuQLB0TVmQpRGZgDtL2 ajOHZTb17GkXEgIr9RD0m38ymkFGVm7NDOAPe4AKyEbSadYzfbxwwbBg/knOuyZw aDEJEh0GB7a3gvhEi2IWYpMXHkMqOr6LrXEA8KaIc1AUmGQ1Q5DYbrntz8H3MKRo hU3JQuLWar2FofdFsArZ+tFnWqMExkV0 -----END CERTIFICATE-----Generated at Thu Jul 3 11:26:39 2025 by rpki-client