$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft File: o8s5jsc5UXR2LZMDPnBgnWD03bI.mft (raw, json) Hash identifier: tsZxufqHp8j5PO+DNLZS1wz7uP9WB5EppgIPNnQH0Pg= Subject key identifier: 12:C2:37:8F:51:28:EE:6D:1C:37:7B:51:D6:03:84:75:A6:09:9E:C5 Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 Certificate issuer: /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft Manifest number: 0119 Signing time: Sat 19 Jul 2025 05:04:33 +0000 Manifest this update: Sat 19 Jul 2025 05:04:33 +0000 Manifest next update: Sat 26 Jul 2025 05:04:33 +0000 Files and hashes: 1: o8s5jsc5UXR2LZMDPnBgnWD03bI.crl (hash: OPjgtJtHgzxDgxy0iqI3c3L20fD9xoBQVAYLBt/uDRY=) 2: EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (hash: MV1F0Q4UL7J+dtgMeHTJ35pvzsiuBXHWMmcfd9HjqkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911606A, serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Validity Not Before: Jul 19 05:04:33 2025 GMT Not After : Jul 26 05:04:33 2025 GMT Subject: CN=687b2761-e67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:71:f3:d1:4d:bb:2e:fa:30:6d:1b:9b:03:b4: 29:a1:7a:04:b8:2c:0c:0d:b0:ec:21:f0:48:af:ef: 5f:8c:dd:1d:c0:09:ad:cf:ea:a2:e7:81:d2:f9:bf: 22:b1:6a:59:7a:e8:aa:c4:cd:33:b8:95:2a:72:83: eb:87:86:bb:54:78:0e:cb:1e:d7:b5:96:4b:2f:ed: da:3f:16:4c:75:ce:5c:36:fa:17:da:26:46:09:40: e2:d8:4a:2d:7e:c1:af:d2:e0:b3:6f:2b:e1:a9:2b: 51:a0:b3:d0:31:bf:0b:9a:ff:50:25:d2:05:4c:ac: c0:4f:09:ae:04:d2:9f:06:4d:c8:b8:b2:20:43:fb: 46:6c:17:55:ad:26:3a:41:ee:19:03:9d:7a:5f:d3: a4:1c:42:32:e0:a6:6f:20:ae:a8:01:e9:dd:ed:12: c5:44:e3:da:73:e9:aa:1a:e9:50:23:92:43:e2:e2: a4:04:88:9f:b1:29:26:52:c1:f9:e9:51:01:7b:8f: 93:b7:38:17:a2:a1:d1:a7:e5:23:88:d1:3e:dc:88: 99:58:4b:55:ac:0e:40:f2:85:19:16:cd:a3:9c:5a: 2a:c4:39:9e:7e:d4:64:0d:fe:57:e6:4d:7e:a5:19: 89:49:34:37:22:2e:0e:ec:ed:fd:aa:af:da:58:b7: 51:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C2:37:8F:51:28:EE:6D:1C:37:7B:51:D6:03:84:75:A6:09:9E:C5 X509v3 Authority Key Identifier: keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:30:93:8a:13:cc:60:fb:9a:65:68:cd:56:0e:7d:e0:04:2a: 03:4a:fe:d6:c7:47:3b:a9:49:bb:b5:e3:fb:e9:c3:07:e4:74: 0a:30:9c:5f:1a:ca:c3:e1:ff:a7:ce:57:bd:5a:b6:5d:95:9e: ba:ec:3f:ae:3b:12:56:15:6f:70:fd:76:de:20:02:68:9d:27: 0c:ab:23:0a:82:16:e7:b7:64:2b:4c:60:b0:35:f3:5f:73:7c: 79:34:83:32:96:92:6a:86:f2:e8:90:29:1e:cf:3e:9c:be:de: 0b:b8:69:fd:c6:23:32:19:30:45:7c:80:17:07:19:12:9a:19: 96:ca:a2:01:ec:1d:17:eb:51:76:db:4d:c6:23:fb:8f:e1:ab: 45:97:87:dc:de:98:3b:30:23:26:05:4e:81:50:11:20:7f:54: 05:17:a7:eb:2c:b4:e0:6d:d9:e0:e4:01:e0:c0:69:e2:b8:44: 30:04:84:ca:ee:8e:0b:ec:8e:f3:32:7a:76:c9:9d:b9:5a:0f: da:e7:ac:c1:51:99:c2:53:db:75:99:b9:ab:a9:9b:c7:b9:40: ef:2f:88:f1:d5:88:54:c7:1d:23:02:06:8b:f5:40:47:b0:c8: 59:44:a9:e7:72:04:03:46:e7:13:60:cc:49:8c:22:f9:02:52: 25:59:95:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYwNkExMTAvBgNVBAUTKEEzQ0IzOThFQzczOTUxNzQ3NjJEOTMwMzNFNzA2MDlE NjBGNEREQjIwHhcNMjUwNzE5MDUwNDMzWhcNMjUwNzI2MDUwNDMzWjAYMRYwFAYD VQQDEw02ODdiMjc2MS1lNjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmXHz0U27LvowbRubA7QpoXoEuCwMDbDsIfBIr+9fjN0dwAmtz+qi54HS+b8i sWpZeuiqxM0zuJUqcoPrh4a7VHgOyx7XtZZLL+3aPxZMdc5cNvoX2iZGCUDi2Eot fsGv0uCzbyvhqStRoLPQMb8Lmv9QJdIFTKzATwmuBNKfBk3IuLIgQ/tGbBdVrSY6 Qe4ZA516X9OkHEIy4KZvIK6oAend7RLFROPac+mqGulQI5JD4uKkBIifsSkmUsH5 6VEBe4+TtzgXoqHRp+UjiNE+3IiZWEtVrA5A8oUZFs2jnFoqxDmeftRkDf5X5k1+ pRmJSTQ3Ii4O7O39qq/aWLdR/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLCN49R KO5tHDd7UdYDhHWmCZ7FMB8GA1UdIwQYMBaAFKPLOY7HOVF0di2TAz5wYJ1g9N2y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS80RjI1ODhFNEJC NDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVYUjJMWk1EUG5CZ25XRDAz YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL284czVqc2M1VVhSMkxaTURQbkJnbldEMDNiSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjA2QS80RjI1ODhFNEJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVY UjJMWk1EUG5CZ25XRDAzYkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgMJOKE8xg+5plaM1WDn3gBCoDSv7Wx0c7qUm7teP76cMH5HQKMJxf GsrD4f+nzle9WrZdlZ667D+uOxJWFW9w/XbeIAJonScMqyMKghbnt2QrTGCwNfNf c3x5NIMylpJqhvLokCkezz6cvt4LuGn9xiMyGTBFfIAXBxkSmhmWyqIB7B0X61F2 203GI/uP4atFl4fc3pg7MCMmBU6BUBEgf1QFF6frLLTgbdng5AHgwGniuEQwBITK 7o4L7I7zMnp2yZ25Wg/a56zBUZnCU9t1mbmrqZvHuUDvL4jx1YhUxx0jAgaL9UBH sMhZRKnncgQDRucTYMxJjCL5AlIlWZX8 -----END CERTIFICATE-----Generated at Sun Jul 20 07:32:13 2025 by rpki-client