$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft File: o8s5jsc5UXR2LZMDPnBgnWD03bI.mft (raw, json) Hash identifier: gQqEiOeyvzkiBio02sQ+dK3Tg4iGPkbjFwbeFajYBk0= Subject key identifier: A8:F7:4C:33:99:10:47:F3:9A:5E:F4:B8:4C:61:04:29:49:15:D1:C8 Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 Certificate issuer: /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft Manifest number: 0108 Signing time: Sun 15 Jun 2025 04:13:33 +0000 Manifest this update: Sun 15 Jun 2025 04:13:32 +0000 Manifest next update: Sun 22 Jun 2025 04:13:32 +0000 Files and hashes: 1: o8s5jsc5UXR2LZMDPnBgnWD03bI.crl (hash: zDbT+nXIdgiIj46jDEVO8Pza/GrsqadE6GpO+AUi8uM=) 2: EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (hash: MV1F0Q4UL7J+dtgMeHTJ35pvzsiuBXHWMmcfd9HjqkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911606A, serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Validity Not Before: Jun 15 04:13:32 2025 GMT Not After : Jun 22 04:13:32 2025 GMT Subject: CN=684e486c-2bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6e:3a:51:6a:ac:56:f7:17:41:08:14:4c:c7: 8a:9b:57:b6:40:b9:4b:52:0f:91:9f:1e:52:01:6e: d7:04:51:34:3d:6c:e6:e0:c2:e4:21:bd:79:1c:52: 4f:db:f8:7d:b9:4c:d6:1f:fd:cb:65:23:1f:7c:12: 50:93:4a:80:84:43:a1:ab:a8:4e:7c:fa:7b:a5:4c: b2:84:58:92:72:58:72:a7:08:c1:38:ad:1a:a3:1e: f5:4f:94:1a:96:47:13:9d:c0:74:50:90:49:6b:b3: 14:ca:ac:22:48:96:5e:81:12:3f:eb:5d:82:24:7c: 03:14:b9:5a:03:31:0f:a1:e7:9e:be:91:c4:a2:7d: 78:99:f8:46:b9:0c:11:96:82:0d:33:06:72:e2:25: 5c:76:07:65:68:8d:a0:5b:41:a8:95:32:1e:4e:5b: 49:d8:54:b8:3a:1c:f1:7e:f4:97:f4:a9:3a:11:39: 42:68:39:13:2b:9a:76:c2:f9:43:b8:a0:a7:fc:20: b7:99:15:7f:b2:d5:e9:1e:b0:3a:98:d6:2d:c5:5b: 87:4e:0d:6b:46:27:85:be:f9:19:40:35:f4:2c:d3: d8:9b:f0:39:4a:ae:5b:51:22:2e:9b:d1:2e:40:56: 65:d1:07:c9:a1:43:81:61:ca:30:7f:3b:72:52:86: 7f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F7:4C:33:99:10:47:F3:9A:5E:F4:B8:4C:61:04:29:49:15:D1:C8 X509v3 Authority Key Identifier: keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:d2:b4:5d:fe:58:83:34:11:48:c0:3f:48:e5:f0:06:c5:5d: 5d:05:c3:26:8c:dd:60:3d:4d:e0:a6:f8:65:37:68:4f:20:40: 0b:27:d5:56:c0:8b:9d:0e:2e:ce:38:8f:c3:16:01:e6:2a:38: 70:07:f1:0d:38:ca:c0:71:d5:c2:f6:a9:c2:a9:72:6c:fb:a4: ee:d2:9f:43:fc:77:3f:47:8f:b1:cf:0f:1e:03:61:1f:d0:97: f9:b1:9e:53:3e:9f:1f:67:43:c6:5e:d2:78:d8:ab:51:6c:17: 5a:8c:be:89:15:0e:70:59:12:6d:bc:27:3a:d1:67:4c:bc:41: fd:1c:57:99:4f:9f:6a:d9:91:92:b1:72:3f:55:f2:5d:a0:7c: 32:83:61:0f:57:05:6b:61:04:47:ac:1a:a7:d3:75:5f:75:15: 96:8b:3e:e8:f0:e0:c3:38:31:c9:dc:77:97:d9:fa:e0:c8:3d: 79:f8:6e:2b:6f:8f:df:90:8c:8e:d1:6f:05:32:1d:d2:68:d0: 9b:1d:2d:7e:9f:6e:2b:16:91:22:13:2a:96:3f:de:70:3c:da: 95:9f:92:de:cc:35:f9:7e:e4:f8:da:58:a8:87:81:5e:3b:dd: b6:97:8e:1d:3e:36:dd:79:5e:b4:ff:90:66:34:d2:48:e6:98: 12:00:68:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYwNkExMTAvBgNVBAUTKEEzQ0IzOThFQzczOTUxNzQ3NjJEOTMwMzNFNzA2MDlE NjBGNEREQjIwHhcNMjUwNjE1MDQxMzMyWhcNMjUwNjIyMDQxMzMyWjAYMRYwFAYD VQQDEw02ODRlNDg2Yy0yYmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArW46UWqsVvcXQQgUTMeKm1e2QLlLUg+Rnx5SAW7XBFE0PWzm4MLkIb15HFJP 2/h9uUzWH/3LZSMffBJQk0qAhEOhq6hOfPp7pUyyhFiSclhypwjBOK0aox71T5Qa lkcTncB0UJBJa7MUyqwiSJZegRI/612CJHwDFLlaAzEPoeeevpHEon14mfhGuQwR loINMwZy4iVcdgdlaI2gW0GolTIeTltJ2FS4OhzxfvSX9Kk6ETlCaDkTK5p2wvlD uKCn/CC3mRV/stXpHrA6mNYtxVuHTg1rRieFvvkZQDX0LNPYm/A5Sq5bUSIum9Eu QFZl0QfJoUOBYcowfztyUoZ/swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKj3TDOZ EEfzml70uExhBClJFdHIMB8GA1UdIwQYMBaAFKPLOY7HOVF0di2TAz5wYJ1g9N2y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS80RjI1ODhFNEJC NDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVYUjJMWk1EUG5CZ25XRDAz YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL284czVqc2M1VVhSMkxaTURQbkJnbldEMDNiSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjA2QS80RjI1ODhFNEJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVY UjJMWk1EUG5CZ25XRDAzYkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE0rRd/liDNBFIwD9I5fAGxV1dBcMmjN1gPU3gpvhlN2hPIEALJ9VW wIudDi7OOI/DFgHmKjhwB/ENOMrAcdXC9qnCqXJs+6Tu0p9D/Hc/R4+xzw8eA2Ef 0Jf5sZ5TPp8fZ0PGXtJ42KtRbBdajL6JFQ5wWRJtvCc60WdMvEH9HFeZT59q2ZGS sXI/VfJdoHwyg2EPVwVrYQRHrBqn03VfdRWWiz7o8ODDODHJ3HeX2frgyD15+G4r b4/fkIyO0W8FMh3SaNCbHS1+n24rFpEiEyqWP95wPNqVn5LezDX5fuT42lioh4Fe O922l44dPjbdeV60/5BmNNJI5pgSAGjQ -----END CERTIFICATE-----Generated at Tue Jun 17 04:39:49 2025 by rpki-client