$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft File: olvfdj8LpjxJo3ar-W5VUIeehbo.mft (raw, json) Hash identifier: QCcbWZbzLNMFEXhTyiP9Y/tviXnDPqwXQ8lgbQT9N5o= Subject key identifier: 54:94:4C:44:7F:F6:3C:C8:00:50:47:87:F1:A8:EB:F7:E2:8E:16:5F Authority key identifier: A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA Certificate issuer: /CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA Certificate serial: 05A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft Manifest number: 05A8 Signing time: Fri 30 May 2025 23:21:38 +0000 Manifest this update: Fri 30 May 2025 23:21:38 +0000 Manifest next update: Fri 06 Jun 2025 23:21:38 +0000 Files and hashes: 1: olvfdj8LpjxJo3ar-W5VUIeehbo.crl (hash: xU9g50tLsR7nMPWZl3QvN++wRBFBe9bTAMLf+rP236c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1448 (0x5a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C738, serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA Validity Not Before: May 30 23:21:38 2025 GMT Not After : Jun 6 23:21:38 2025 GMT Subject: CN=683a3d82-b112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:55:83:78:2e:61:28:0f:0f:34:85:c1:c5:02: 7e:8f:0a:68:b3:b0:cf:c2:0a:8f:05:f9:6e:e0:56: e6:81:21:aa:8a:c0:28:a0:37:96:77:25:80:83:ab: 46:d0:27:d5:62:b9:18:7f:05:ff:35:1e:52:3b:fa: 45:f4:de:34:28:47:c2:e7:f0:12:49:1e:c3:0f:42: 71:d0:08:74:1f:d4:8e:6f:41:92:79:8f:6d:9f:8e: 25:df:71:d4:a7:7a:01:d6:b3:79:df:85:d7:1f:91: 63:e8:2a:62:c7:4a:87:dd:3f:54:92:89:89:08:34: 2e:7b:2e:74:5a:ea:02:1b:8e:cf:cd:74:4d:db:42: 5c:48:14:f2:2c:52:00:f1:ff:a7:83:b0:a6:74:de: 85:e0:17:89:7b:ce:0c:fb:a8:ad:31:a8:2f:b8:6f: 66:f2:59:4a:ee:4d:59:d5:0c:0f:18:ec:85:d2:21: 90:9a:6c:80:b0:82:d3:e9:4c:11:6f:07:41:6b:16: ea:01:47:26:57:ff:90:c5:d2:c8:88:98:33:6e:69: 49:fe:6a:07:c3:54:33:0e:8a:dd:b9:4b:80:55:a7: 0c:a4:88:92:ef:c1:c8:38:59:c0:da:3f:b9:5b:c0: d7:14:51:a2:ce:fc:b1:61:b3:a1:8f:2c:c7:cf:94: ad:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:94:4C:44:7F:F6:3C:C8:00:50:47:87:F1:A8:EB:F7:E2:8E:16:5F X509v3 Authority Key Identifier: keyid:A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:fb:f5:27:c6:f6:07:f3:bb:09:28:d9:f7:45:ea:36:8d:b6: e4:71:8f:94:e0:c4:e4:a4:66:c1:d4:3a:06:d4:be:6f:ef:c6: a7:d4:5e:e4:06:fc:a3:4f:ac:6c:a8:e1:3c:31:9d:d2:cb:fe: a2:72:3a:e1:9b:03:09:66:d5:10:48:15:88:65:dd:3b:b4:df: 0e:ac:f6:94:3d:b6:45:a2:2a:27:72:ce:d9:51:9c:39:cd:b7: 35:c3:72:56:e4:29:5e:eb:93:77:8e:57:c8:9e:24:c0:fe:d8: c8:8f:46:ed:e7:6c:9e:86:17:c1:87:a7:a4:fe:46:f0:e3:fb: 16:c1:5c:28:de:09:38:43:06:7a:04:26:68:51:5b:ed:9b:32: 93:e0:6d:54:55:1d:af:4c:c8:0b:d3:eb:3e:14:da:be:4c:8e: 53:ce:95:c5:28:cf:ee:5f:21:99:cf:41:4c:01:de:30:04:05: d7:43:72:42:45:37:b1:af:a3:c7:f8:44:37:e1:39:42:b9:51: c1:98:ef:2b:b4:44:d0:bf:b9:ee:c7:35:e4:9f:28:f5:67:a0: f8:bf:2a:01:e4:69:70:c1:45:c1:dc:af:af:e3:35:ac:52:37: 8d:61:b1:e1:7c:6f:ff:35:99:46:7d:f7:8f:18:02:52:0c:02: cc:f1:36:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MzgxMTAvBgNVBAUTKEEyNUJERjc2M0YwQkE2M0M0OUEzNzZBQkY5NkU1NTUw ODc5RTg1QkEwHhcNMjUwNTMwMjMyMTM4WhcNMjUwNjA2MjMyMTM4WjAYMRYwFAYD VQQDEw02ODNhM2Q4Mi1iMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFWDeC5hKA8PNIXBxQJ+jwpos7DPwgqPBflu4FbmgSGqisAooDeWdyWAg6tG 0CfVYrkYfwX/NR5SO/pF9N40KEfC5/ASSR7DD0Jx0Ah0H9SOb0GSeY9tn44l33HU p3oB1rN534XXH5Fj6Cpix0qH3T9UkomJCDQuey50WuoCG47PzXRN20JcSBTyLFIA 8f+ng7CmdN6F4BeJe84M+6itMagvuG9m8llK7k1Z1QwPGOyF0iGQmmyAsILT6UwR bwdBaxbqAUcmV/+QxdLIiJgzbmlJ/moHw1QzDorduUuAVacMpIiS78HIOFnA2j+5 W8DXFFGizvyxYbOhjyzHz5StAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSUTER/ 9jzIAFBHh/Go6/fijhZfMB8GA1UdIwQYMBaAFKJb33Y/C6Y8SaN2q/luVVCHnoW6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zQkYwQUU5Q0M5 RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBqeEpvM2FyLVc1VlVJZWVo Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sdmZkajhMcGp4Sm8zYXItVzVWVUllZWhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzczOC8zQkYwQUU5Q0M5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBq eEpvM2FyLVc1VlVJZWVoYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO+/UnxvYH87sJKNn3Reo2jbbkcY+U4MTkpGbB1DoG1L5v78an1F7k BvyjT6xsqOE8MZ3Sy/6icjrhmwMJZtUQSBWIZd07tN8OrPaUPbZFoioncs7ZUZw5 zbc1w3JW5Cle65N3jlfIniTA/tjIj0bt52yehhfBh6ek/kbw4/sWwVwo3gk4QwZ6 BCZoUVvtmzKT4G1UVR2vTMgL0+s+FNq+TI5TzpXFKM/uXyGZz0FMAd4wBAXXQ3JC RTexr6PH+EQ34TlCuVHBmO8rtETQv7nuxzXknyj1Z6D4vyoB5GlwwUXB3K+v4zWs UjeNYbHhfG//NZlGffePGAJSDALM8TZx -----END CERTIFICATE-----Generated at Sat May 31 17:20:40 2025 by rpki-client