$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft File: K08yPFindrTnU4be6Dci4EViMsY.mft (raw, json) Hash identifier: I+S5OibVDZiP9Ceb8VO7v9VFo6Fvz7U/Hk+FU0cbSTk= Subject key identifier: 30:62:28:15:4B:17:80:D9:A7:1A:D3:90:57:0D:FA:A3:F2:1D:0C:C9 Authority key identifier: 2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6 Certificate issuer: /CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6 Certificate serial: 0DD3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft Manifest number: 0DC6 Signing time: Fri 18 Apr 2025 15:44:34 +0000 Manifest this update: Fri 18 Apr 2025 15:44:33 +0000 Manifest next update: Fri 25 Apr 2025 15:44:33 +0000 Files and hashes: 1: K08yPFindrTnU4be6Dci4EViMsY.crl (hash: XwfE/3WZQILaILig4tsoFr7OMXj9Xj02BOP40d8Vgco=) 2: EE1EA292EA6A11E98F16FE30C4F9AE02.roa (hash: QaiwA0ii3swzDmEn5ZYRLYQTMUg0WLwS1y2KJOPdMzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 15:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3539 (0xdd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BC62, serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6 Validity Not Before: Apr 18 15:44:33 2025 GMT Not After : Apr 25 15:44:33 2025 GMT Subject: CN=68027361-7c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:63:a1:1f:56:1c:d7:49:23:2c:ea:fd:28:b6: d7:12:0d:52:5f:88:12:03:91:d3:ad:d4:ef:c9:39: f1:40:60:f5:81:aa:65:92:d9:00:ed:2e:22:68:07: 0d:8c:6f:05:c2:97:46:b4:fc:e6:f6:ef:e1:09:83: 94:06:37:71:6d:0b:9e:7c:31:00:c2:66:a4:d4:27: 12:32:92:b1:a2:25:b5:0a:26:44:28:85:07:c3:e9: c9:cc:55:e8:87:3e:df:f1:5f:60:4f:9a:5f:5a:df: 77:7d:fc:1c:6f:d9:83:67:29:89:58:62:c7:55:2e: 1a:70:e3:fd:88:4f:e7:50:40:43:62:4e:ac:1c:a4: 70:c0:5f:f7:dc:19:8d:35:7b:76:e6:9c:78:8f:9e: a5:8a:e4:40:3d:a8:68:c5:b3:e2:99:a8:c2:6e:61: 53:8a:14:a4:6f:17:b9:99:ba:9f:bf:6b:0c:ff:c5: 56:43:6f:e9:cb:46:3d:53:de:3a:c1:7d:6d:36:2a: 19:0d:ff:5b:28:ee:9c:a6:89:4b:5f:2b:53:82:34: 96:75:ec:c9:bb:48:b3:f9:de:cd:68:39:d1:d3:4e: b0:1e:19:08:91:2a:f2:2e:c2:b1:07:76:03:8d:9f: f2:d9:5f:d4:9d:d8:9d:d2:0d:d5:7d:3b:37:1e:c5: 52:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:62:28:15:4B:17:80:D9:A7:1A:D3:90:57:0D:FA:A3:F2:1D:0C:C9 X509v3 Authority Key Identifier: keyid:2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:b5:e7:88:2c:9d:5d:e2:87:7d:93:1f:08:f1:27:e2:3d:73: b9:ca:e0:08:b4:3e:0a:72:33:44:0a:e9:29:a3:a4:66:0e:92: bc:68:95:8a:71:81:8b:9b:fb:e7:24:0d:05:db:2b:2d:af:9a: 87:69:d7:e5:12:3d:ad:e3:d3:04:13:aa:b4:70:aa:11:50:22: bf:e5:f0:dc:2d:8c:16:48:fb:ee:44:b4:42:a0:54:88:e9:b5: b9:c9:1a:2c:0f:4d:e9:f7:24:68:0a:4d:f6:62:5e:f0:a7:ea: 5a:8f:b8:b9:3f:6b:e5:b2:44:7d:cd:ee:02:e1:40:59:51:dc: 9a:78:78:cf:54:27:23:7e:37:be:51:ab:61:5f:95:38:35:af: 93:ec:17:45:c8:33:66:6e:11:08:db:be:db:90:d8:57:7d:5f: 59:b1:d4:a1:3f:82:30:49:3d:f7:9b:44:b5:be:de:da:e8:fb: 55:4c:98:a4:d7:91:bf:ec:1f:21:b8:b7:22:91:17:2c:be:c9: 6b:51:a2:28:82:b0:d9:be:6b:e0:a7:82:f6:46:c4:ed:54:92: 24:7d:11:77:b2:dc:4c:12:21:9f:f5:31:37:b9:38:5b:bb:a2: 69:1a:63:f0:27:8b:ff:8e:44:46:5b:20:7d:0e:54:32:e2:f1: 81:bc:04:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDNjIxMTAvBgNVBAUTKDJCNEYzMjNDNThBNzc2QjRFNzUzODZERUU4MzcyMkUw NDU2MjMyQzYwHhcNMjUwNDE4MTU0NDMzWhcNMjUwNDI1MTU0NDMzWjAYMRYwFAYD VQQDEw02ODAyNzM2MS03Yzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2OhH1Yc10kjLOr9KLbXEg1SX4gSA5HTrdTvyTnxQGD1gaplktkA7S4iaAcN jG8FwpdGtPzm9u/hCYOUBjdxbQuefDEAwmak1CcSMpKxoiW1CiZEKIUHw+nJzFXo hz7f8V9gT5pfWt93ffwcb9mDZymJWGLHVS4acOP9iE/nUEBDYk6sHKRwwF/33BmN NXt25px4j56liuRAPahoxbPimajCbmFTihSkbxe5mbqfv2sM/8VWQ2/py0Y9U946 wX1tNioZDf9bKO6cpolLXytTgjSWdezJu0iz+d7NaDnR006wHhkIkSryLsKxB3YD jZ/y2V/Undid0g3VfTs3HsVSJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBiKBVL F4DZpxrTkFcN+qPyHQzJMB8GA1UdIwQYMBaAFCtPMjxYp3a051OG3ug3IuBFYjLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi9FRTk1RkQ0MkI3 NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRyVG5VNGJlNkRjaTRFVmlN c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0swOHlQRmluZHJUblU0YmU2RGNpNEVWaU1zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkM2Mi9FRTk1RkQ0MkI3NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRy VG5VNGJlNkRjaTRFVmlNc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUteeILJ1d4od9kx8I8SfiPXO5yuAItD4KcjNECukpo6RmDpK8aJWK cYGLm/vnJA0F2ystr5qHadflEj2t49MEE6q0cKoRUCK/5fDcLYwWSPvuRLRCoFSI 6bW5yRosD03p9yRoCk32Yl7wp+paj7i5P2vlskR9ze4C4UBZUdyaeHjPVCcjfje+ UathX5U4Na+T7BdFyDNmbhEI277bkNhXfV9ZsdShP4IwST33m0S1vt7a6PtVTJik 15G/7B8huLcikRcsvslrUaIogrDZvmvgp4L2RsTtVJIkfRF3stxMEiGf9TE3uThb u6JpGmPwJ4v/jkRGWyB9DlQy4vGBvASj -----END CERTIFICATE-----Generated at Sat Apr 19 00:52:49 2025 by rpki-client