$ rpki-client -vvf rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft File: O8azIf17YMVg8V19JMrFozdED7Q.mft (raw, json) Hash identifier: Co0kqKg8bo6jBDL7AuGHP86RchV5asLW8z31jjpZB9E= Subject key identifier: C5:C9:F6:CF:FE:0B:D1:47:A9:A7:AF:AC:27:BB:44:80:7B:7D:1A:A1 Authority key identifier: 3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4 Certificate issuer: /CN=A911980F/serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4 Certificate serial: 0705 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft Manifest number: 06FD Signing time: Fri 30 May 2025 22:09:59 +0000 Manifest this update: Fri 30 May 2025 22:09:58 +0000 Manifest next update: Fri 06 Jun 2025 22:09:58 +0000 Files and hashes: 1: O8azIf17YMVg8V19JMrFozdED7Q.crl (hash: K0lfRTEUdJmM2/z6IBzc8rQVgFyoUm5Lo74wUbMghX4=) 2: 9FAB1ADC65C111EF8769DC14C4F9AE02.roa (hash: WiTy8cm0FJ/aEESc91vlgZl0JT8P/pFPtZ2Ry9TBveA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1797 (0x705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911980F, serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4 Validity Not Before: May 30 22:09:58 2025 GMT Not After : Jun 6 22:09:58 2025 GMT Subject: CN=683a2cb7-0749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f9:3d:0e:23:bd:e6:bf:72:2c:e5:4c:c2:8b: b2:74:b2:16:c1:a2:4a:eb:45:ff:2c:78:8d:0c:d8: 58:8e:68:00:7d:e6:8c:09:b3:87:e1:b6:74:fa:a1: 8f:2e:ad:f3:63:ce:36:85:aa:a7:61:37:5d:ce:1c: a1:69:65:7d:42:10:b6:df:07:e0:64:02:69:85:f4: 4d:1b:f3:e9:b6:76:99:45:45:69:69:84:8a:ab:7d: e2:fc:67:e6:32:b1:30:c2:2e:fc:68:ad:1b:0e:18: b6:7e:d8:0e:bc:01:69:62:b5:7e:25:99:82:4d:4a: 73:8e:13:46:84:4d:7b:46:b8:68:7e:26:71:f3:ea: 82:cf:54:7a:56:41:0c:d2:25:df:68:7e:57:ac:b5: 9f:bf:a4:38:7f:ee:63:bf:88:10:b2:37:b4:d1:ff: d8:20:fc:89:65:90:7b:b1:1a:c3:a4:6e:56:bb:ed: 42:75:83:8a:a0:04:1d:b4:8c:e8:64:9c:79:e3:80: e1:43:26:e6:1f:7d:06:9f:f5:de:a0:f2:b9:b9:1b: 8c:34:6c:b5:b3:c7:a0:dd:0e:45:da:8b:ee:5f:e8: f5:2d:9f:29:e2:ef:df:9c:30:10:71:5d:ce:5b:99: fd:80:a0:1e:4c:64:4a:1e:3a:02:d1:13:03:82:da: 7e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C9:F6:CF:FE:0B:D1:47:A9:A7:AF:AC:27:BB:44:80:7B:7D:1A:A1 X509v3 Authority Key Identifier: keyid:3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ac:75:53:20:88:ff:9a:96:29:19:ff:c8:60:64:a4:eb:f6: 38:26:a1:ac:70:6c:c4:90:22:71:25:65:62:7f:6d:73:87:33: 62:fb:20:7a:67:f6:07:d0:b1:0c:65:84:6c:57:a4:c5:93:21: 54:71:86:38:34:fb:21:18:a9:16:5c:43:62:62:36:f1:cb:31: 8a:4c:f0:22:32:cb:bb:e8:96:79:74:29:3c:c5:b2:11:f6:10: f2:0c:ab:c2:ec:d0:a3:6c:dd:7e:21:39:ef:21:73:0a:b8:cb: a4:6f:6b:08:bb:18:86:ab:cf:14:6c:a3:70:80:16:26:20:6d: 4d:7c:d8:7b:39:92:26:74:43:7f:8f:a4:21:cd:45:4c:4f:48: ce:6a:a9:97:21:d7:fd:e5:97:ee:a4:54:e8:59:e8:cd:90:da: 80:e6:f7:46:7b:5c:07:82:57:8a:67:b0:b7:85:79:9f:c8:f2: 6f:c5:61:80:b1:76:0d:fd:47:67:26:56:3d:a3:e1:55:c1:b5: 46:58:bc:80:c9:90:7e:d0:77:72:a6:09:1b:ca:05:0f:01:4a: c2:a2:b5:ee:e3:fa:ac:87:f4:a5:ef:d7:55:ae:cb:e5:01:62: ae:95:07:fc:28:12:23:b4:2d:63:0f:fb:cc:1b:97:c6:cd:35: 02:f5:63:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk4MEYxMTAvBgNVBAUTKDNCQzZCMzIxRkQ3QjYwQzU2MEYxNUQ3RDI0Q0FDNUEz Mzc0NDBGQjQwHhcNMjUwNTMwMjIwOTU4WhcNMjUwNjA2MjIwOTU4WjAYMRYwFAYD VQQDEw02ODNhMmNiNy0wNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPk9DiO95r9yLOVMwouydLIWwaJK60X/LHiNDNhYjmgAfeaMCbOH4bZ0+qGP Lq3zY842haqnYTddzhyhaWV9QhC23wfgZAJphfRNG/PptnaZRUVpaYSKq33i/Gfm MrEwwi78aK0bDhi2ftgOvAFpYrV+JZmCTUpzjhNGhE17RrhofiZx8+qCz1R6VkEM 0iXfaH5XrLWfv6Q4f+5jv4gQsje00f/YIPyJZZB7sRrDpG5Wu+1CdYOKoAQdtIzo ZJx544DhQybmH30Gn/XeoPK5uRuMNGy1s8eg3Q5F2ovuX+j1LZ8p4u/fnDAQcV3O W5n9gKAeTGRKHjoC0RMDgtp+9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXJ9s/+ C9FHqaevrCe7RIB7fRqhMB8GA1UdIwQYMBaAFDvGsyH9e2DFYPFdfSTKxaM3RA+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTgwRi8xNjYxN0Q2QzQ4 MzIxMUVCODc1NDMxMUFDNEY5QUUwMi9POGF6SWYxN1lNVmc4VjE5Sk1yRm96ZEVE N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL084YXpJZjE3WU1WZzhWMTlKTXJGb3pkRUQ3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTgwRi8xNjYxN0Q2QzQ4MzIxMUVCODc1NDMxMUFDNEY5QUUwMi9POGF6SWYxN1lN Vmc4VjE5Sk1yRm96ZEVEN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFrHVTIIj/mpYpGf/IYGSk6/Y4JqGscGzEkCJxJWVif21zhzNi+yB6 Z/YH0LEMZYRsV6TFkyFUcYY4NPshGKkWXENiYjbxyzGKTPAiMsu76JZ5dCk8xbIR 9hDyDKvC7NCjbN1+ITnvIXMKuMukb2sIuxiGq88UbKNwgBYmIG1NfNh7OZImdEN/ j6QhzUVMT0jOaqmXIdf95ZfupFToWejNkNqA5vdGe1wHgleKZ7C3hXmfyPJvxWGA sXYN/UdnJlY9o+FVwbVGWLyAyZB+0HdypgkbygUPAUrCorXu4/qsh/Sl79dVrsvl AWKulQf8KBIjtC1jD/vMG5fGzTUC9WPf -----END CERTIFICATE-----Generated at Sat May 31 17:45:09 2025 by rpki-client