$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft File: o8s5jsc5UXR2LZMDPnBgnWD03bI.mft (raw, json) Hash identifier: ThfxKn9MViuFLSkrs+hIIfwz450Yeg7m9Erh6krCzTM= Subject key identifier: AA:71:04:F9:34:28:09:95:DA:44:AF:C3:27:A9:FE:26:06:8C:04:A6 Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 Certificate issuer: /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft Manifest number: EB Signing time: Thu 17 Apr 2025 04:16:52 +0000 Manifest this update: Thu 17 Apr 2025 04:16:52 +0000 Manifest next update: Thu 24 Apr 2025 04:16:52 +0000 Files and hashes: 1: o8s5jsc5UXR2LZMDPnBgnWD03bI.crl (hash: qXzesvO3Qz+6Ywm5YvHexNQJkE7tc3C9DWVyqJNQRJ8=) 2: EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (hash: MV1F0Q4UL7J+dtgMeHTJ35pvzsiuBXHWMmcfd9HjqkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 04:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911606A, serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Validity Not Before: Apr 17 04:16:52 2025 GMT Not After : Apr 24 04:16:52 2025 GMT Subject: CN=680080b4-d885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:4a:ea:7b:ba:ae:c9:70:c2:66:3e:51:ce: e8:e8:6c:ba:54:1c:5c:f1:7d:b4:43:87:cd:ea:93: 7b:8d:3a:4a:1c:8e:86:cf:44:51:56:78:52:67:cf: d0:ec:ac:2f:6c:e5:7b:e6:66:77:d5:79:a9:2f:be: 55:21:5a:51:48:8f:20:ce:a6:9b:f7:05:5a:59:9c: 9c:0d:b4:90:6a:18:87:08:c0:02:ec:90:08:34:7d: 77:00:52:4d:6f:87:2a:58:f9:f3:02:86:0b:98:c9: ef:8d:d7:b3:30:02:a2:91:7e:5f:82:de:99:be:04: 8f:20:83:1d:ee:99:20:da:d6:51:47:0e:cc:88:de: cd:8f:78:91:af:ce:a8:a8:3f:86:91:41:c7:38:8a: 66:b5:25:71:b5:56:ed:d4:f4:3f:12:78:b3:dd:26: ec:08:27:5b:f1:27:0b:f5:69:e6:31:e2:27:ef:8d: b5:6c:4a:64:c4:ad:48:ad:dc:15:9b:e4:2a:41:6d: 6f:32:7a:39:a2:76:04:21:8a:f9:22:0c:3e:9d:98: 31:21:a2:44:e1:52:de:6d:af:c9:56:dd:cc:f3:f5: 3f:7b:3b:6c:b8:70:ff:f1:25:df:02:72:49:c0:46: 8a:cd:bc:c2:59:33:9d:80:1c:74:59:d5:64:92:86: 54:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:71:04:F9:34:28:09:95:DA:44:AF:C3:27:A9:FE:26:06:8C:04:A6 X509v3 Authority Key Identifier: keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ef:9d:46:49:86:ba:80:83:c2:38:79:f5:69:2c:3e:57:fb:63: 5b:50:c2:4a:98:4a:d2:32:93:60:ae:df:ae:8b:99:a5:00:46: 51:32:19:6f:35:2f:df:3b:e3:a1:d6:75:46:55:ca:ad:8b:dd: 58:3d:39:4a:d2:50:9b:35:4c:66:10:26:d4:0b:c5:9c:64:ca: 43:3c:02:d0:1d:f4:8d:1b:35:4d:f1:ab:8b:73:76:22:58:fc: d9:9a:94:74:01:d4:00:b8:d5:d4:4d:51:ee:e7:64:e8:c4:28: e0:5a:8a:44:99:34:aa:cd:96:5b:d0:1e:5c:74:90:cf:dd:61: 3f:80:96:58:88:3e:b9:a5:64:d7:e6:99:96:e7:56:57:c2:b1: a0:95:8a:ed:6e:b2:d2:c8:ab:fa:d1:7f:c5:4c:4d:f3:85:32: c5:26:ed:3d:85:8b:97:a0:71:bc:4f:54:d1:42:f3:05:15:23: 9d:61:e6:12:7e:b0:ad:83:81:ac:fb:bd:a9:9c:8d:ea:17:a1: fe:3c:51:38:40:b2:ad:28:4a:f1:44:43:70:0a:46:50:ec:a2: 23:93:2f:2e:98:8c:43:1a:57:d6:32:23:ee:5c:fe:21:4f:8f: dc:53:c2:e0:2b:68:e4:53:96:d2:4c:01:81:ec:cc:a0:73:80: 24:be:0c:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYwNkExMTAvBgNVBAUTKEEzQ0IzOThFQzczOTUxNzQ3NjJEOTMwMzNFNzA2MDlE NjBGNEREQjIwHhcNMjUwNDE3MDQxNjUyWhcNMjUwNDI0MDQxNjUyWjAYMRYwFAYD VQQDEw02ODAwODBiNC1kODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIdK6nu6rslwwmY+Uc7o6Gy6VBxc8X20Q4fN6pN7jTpKHI6Gz0RRVnhSZ8/Q 7KwvbOV75mZ31XmpL75VIVpRSI8gzqab9wVaWZycDbSQahiHCMAC7JAINH13AFJN b4cqWPnzAoYLmMnvjdezMAKikX5fgt6ZvgSPIIMd7pkg2tZRRw7MiN7Nj3iRr86o qD+GkUHHOIpmtSVxtVbt1PQ/Eniz3SbsCCdb8ScL9WnmMeIn7421bEpkxK1IrdwV m+QqQW1vMno5onYEIYr5Igw+nZgxIaJE4VLeba/JVt3M8/U/eztsuHD/8SXfAnJJ wEaKzbzCWTOdgBx0WdVkkoZUwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpxBPk0 KAmV2kSvwyep/iYGjASmMB8GA1UdIwQYMBaAFKPLOY7HOVF0di2TAz5wYJ1g9N2y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS80RjI1ODhFNEJC NDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVYUjJMWk1EUG5CZ25XRDAz YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL284czVqc2M1VVhSMkxaTURQbkJnbldEMDNiSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjA2QS80RjI1ODhFNEJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVY UjJMWk1EUG5CZ25XRDAzYkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDvnUZJhrqAg8I4efVpLD5X+2NbUMJKmErSMpNgrt+ui5mlAEZRMhlv NS/fO+Oh1nVGVcqti91YPTlK0lCbNUxmECbUC8WcZMpDPALQHfSNGzVN8auLc3Yi WPzZmpR0AdQAuNXUTVHu52ToxCjgWopEmTSqzZZb0B5cdJDP3WE/gJZYiD65pWTX 5pmW51ZXwrGglYrtbrLSyKv60X/FTE3zhTLFJu09hYuXoHG8T1TRQvMFFSOdYeYS frCtg4Gs+72pnI3qF6H+PFE4QLKtKErxRENwCkZQ7KIjky8umIxDGlfWMiPuXP4h T4/cU8LgK2jkU5bSTAGB7Mygc4Akvgwx -----END CERTIFICATE-----Generated at Fri Apr 18 10:38:08 2025 by rpki-client