$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft File: o8s5jsc5UXR2LZMDPnBgnWD03bI.mft (raw, json) Hash identifier: FBc+pM74dUszbXjEy3sKpGGCTZxbPaKVD70C9I68a3Q= Subject key identifier: 37:32:2E:BE:32:D7:18:82:69:32:A8:E2:86:78:72:82:4C:50:7B:BB Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 Certificate issuer: /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft Manifest number: 0122 Signing time: Tue 05 Aug 2025 05:12:45 +0000 Manifest this update: Tue 05 Aug 2025 05:12:45 +0000 Manifest next update: Tue 12 Aug 2025 05:12:45 +0000 Files and hashes: 1: o8s5jsc5UXR2LZMDPnBgnWD03bI.crl (hash: cxTxxc4FLF1gj42wAN6Llfbz/itb7fRW1lLsewjmvQg=) 2: EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (hash: MV1F0Q4UL7J+dtgMeHTJ35pvzsiuBXHWMmcfd9HjqkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911606A, serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Validity Not Before: Aug 5 05:12:45 2025 GMT Not After : Aug 12 05:12:45 2025 GMT Subject: CN=689192cd-5db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1b:bf:e7:b0:37:fa:03:27:22:10:1f:00:b2: 5f:e9:f6:1b:ce:74:f0:0b:df:a3:4c:00:37:a1:bb: 75:4d:35:cb:f1:98:73:0d:89:41:8c:0d:a5:45:29: aa:9d:9b:1e:f4:0a:28:f5:43:ee:ae:1d:15:96:f6: 1a:41:9c:70:94:82:68:53:d4:04:bb:c2:ee:64:b4: 33:4b:db:79:84:b3:41:c9:bd:18:9d:1e:c6:40:b0: b4:61:fd:4a:aa:f1:46:de:eb:66:c0:ba:d7:1d:7b: 36:d7:4d:3d:10:3a:ab:1d:9b:dc:05:20:5a:a2:5d: 74:ea:35:79:89:16:f2:9b:ce:10:47:a0:48:1f:f4: 9a:12:c2:98:05:54:2c:00:65:62:be:2d:13:d9:fa: bf:d7:73:23:2b:ae:5c:d9:7a:70:87:53:cd:f2:bb: dd:69:4b:6c:8d:ab:67:f4:b7:5b:6e:90:cd:91:82: 23:ae:fc:62:0f:1c:98:95:4f:c9:52:70:c4:f9:13: 59:94:fd:89:60:e5:ee:67:3f:f9:87:d7:00:f1:0e: d6:81:5b:3d:15:b5:7b:d1:10:88:02:bd:02:17:f8: b7:8f:76:59:fe:f0:00:a8:6f:6c:82:35:d2:de:5f: 43:a9:28:44:f9:8b:c7:4f:33:eb:9e:1f:03:01:e9: c0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:32:2E:BE:32:D7:18:82:69:32:A8:E2:86:78:72:82:4C:50:7B:BB X509v3 Authority Key Identifier: keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:e8:3a:5a:28:6b:8d:da:9a:4e:87:c3:1a:c5:1a:3a:f6:dc: 40:4b:83:e6:ec:d9:57:09:1a:59:1a:3d:7c:b2:9c:1b:23:3f: 94:f1:30:34:73:b4:47:e8:84:5f:d0:7b:27:51:1c:f9:5d:4b: 9d:af:5d:d0:87:aa:4c:19:98:dc:0b:44:54:7b:3a:d7:52:d4: 7d:29:99:e1:c7:08:a3:94:2c:5b:57:bf:51:d0:3f:e5:66:47: d8:78:5f:35:c1:3e:be:e6:95:b8:51:df:3c:c2:0a:87:71:1d: 52:7b:fd:07:f0:f8:db:00:da:65:d5:74:4b:60:07:13:19:cc: 13:80:69:12:8d:97:5e:4b:dd:f1:72:be:e2:a1:e8:c3:1f:f4: c9:d6:85:26:23:4c:e2:21:07:4a:3b:d1:29:61:82:6c:b0:a2: 01:61:cc:33:93:9a:e9:54:dc:cb:4e:8b:ac:e0:73:3a:2c:c7: 87:a9:f6:be:ec:85:c3:20:be:66:e4:5f:c5:4f:e5:9a:51:65: 69:1e:30:6f:dc:7b:29:bc:1a:49:6a:c2:0e:19:b4:09:4d:a1: 03:56:98:7d:b4:36:ed:64:61:40:d8:72:b2:bd:b8:49:34:4e: 96:86:93:c3:80:a6:d5:0d:b6:d7:4b:3e:f0:e8:07:7d:a1:a6: 16:45:df:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYwNkExMTAvBgNVBAUTKEEzQ0IzOThFQzczOTUxNzQ3NjJEOTMwMzNFNzA2MDlE NjBGNEREQjIwHhcNMjUwODA1MDUxMjQ1WhcNMjUwODEyMDUxMjQ1WjAYMRYwFAYD VQQDEw02ODkxOTJjZC01ZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xu/57A3+gMnIhAfALJf6fYbznTwC9+jTAA3obt1TTXL8ZhzDYlBjA2lRSmq nZse9Aoo9UPurh0VlvYaQZxwlIJoU9QEu8LuZLQzS9t5hLNByb0YnR7GQLC0Yf1K qvFG3utmwLrXHXs21009EDqrHZvcBSBaol106jV5iRbym84QR6BIH/SaEsKYBVQs AGVivi0T2fq/13MjK65c2Xpwh1PN8rvdaUtsjatn9LdbbpDNkYIjrvxiDxyYlU/J UnDE+RNZlP2JYOXuZz/5h9cA8Q7WgVs9FbV70RCIAr0CF/i3j3ZZ/vAAqG9sgjXS 3l9DqShE+YvHTzPrnh8DAenAEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcyLr4y 1xiCaTKo4oZ4coJMUHu7MB8GA1UdIwQYMBaAFKPLOY7HOVF0di2TAz5wYJ1g9N2y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS80RjI1ODhFNEJC NDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVYUjJMWk1EUG5CZ25XRDAz YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL284czVqc2M1VVhSMkxaTURQbkJnbldEMDNiSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjA2QS80RjI1ODhFNEJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVY UjJMWk1EUG5CZ25XRDAzYkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg6DpaKGuN2ppOh8MaxRo69txAS4Pm7NlXCRpZGj18spwbIz+U8TA0 c7RH6IRf0HsnURz5XUudr13Qh6pMGZjcC0RUezrXUtR9KZnhxwijlCxbV79R0D/l ZkfYeF81wT6+5pW4Ud88wgqHcR1Se/0H8PjbANpl1XRLYAcTGcwTgGkSjZdeS93x cr7ioejDH/TJ1oUmI0ziIQdKO9EpYYJssKIBYcwzk5rpVNzLTous4HM6LMeHqfa+ 7IXDIL5m5F/FT+WaUWVpHjBv3HspvBpJasIOGbQJTaEDVph9tDbtZGFA2HKyvbhJ NE6WhpPDgKbVDbbXSz7w6Ad9oaYWRd/l -----END CERTIFICATE-----Generated at Thu Aug 7 04:42:53 2025 by rpki-client