$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft File: K08yPFindrTnU4be6Dci4EViMsY.mft (raw, json) Hash identifier: qq4wNgB6fKnncZIBFhjoC9HyiBrHK055n1YTxVGlmPw= Subject key identifier: B5:52:49:EE:BD:83:8B:E8:B4:FD:75:C9:1A:DE:C0:42:B0:3B:13:88 Authority key identifier: 2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6 Certificate issuer: /CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6 Certificate serial: 0E0D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft Manifest number: 0E00 Signing time: Sun 10 Aug 2025 15:34:36 +0000 Manifest this update: Sun 10 Aug 2025 15:34:35 +0000 Manifest next update: Sun 17 Aug 2025 15:34:35 +0000 Files and hashes: 1: K08yPFindrTnU4be6Dci4EViMsY.crl (hash: M7HYfiLCzonIenzfi1bAY4RBNH4a8EvcZtPxdil2edQ=) 2: EE1EA292EA6A11E98F16FE30C4F9AE02.roa (hash: QaiwA0ii3swzDmEn5ZYRLYQTMUg0WLwS1y2KJOPdMzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3597 (0xe0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BC62, serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6 Validity Not Before: Aug 10 15:34:35 2025 GMT Not After : Aug 17 15:34:35 2025 GMT Subject: CN=6898bc0b-6f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:45:4e:e9:bb:2d:74:31:8c:35:ee:48:a5:d0: 0f:10:6d:5b:6d:df:c7:ee:52:e0:ed:b7:3d:c7:08: a9:57:27:c0:b2:0c:f3:2d:ce:c6:fb:a8:22:ae:9f: 84:a4:d0:b2:5f:ff:cc:42:9b:e1:92:3a:d9:41:89: ec:17:3a:8d:8c:4d:34:43:a7:4d:9f:45:a2:3b:b7: 5f:c8:ed:32:67:09:d4:97:62:ea:fc:4c:67:59:09: 1a:48:96:51:1c:8e:f7:2f:bf:08:b9:b6:11:90:91: 87:18:4a:a0:79:ea:b9:11:66:3b:ef:4d:03:21:89: 6d:8a:bb:7b:b0:5a:cc:86:6f:f4:e3:96:7b:36:df: b8:9b:0a:48:0d:47:ee:79:62:bb:c6:3d:c2:7f:b8: 89:5a:eb:17:8d:4d:34:a5:71:a3:59:27:2a:16:6e: 19:0f:e5:88:c5:7d:28:13:4c:98:d6:e7:ed:fd:a4: de:da:d2:1c:00:3f:78:ec:4d:dd:28:69:05:5f:57: 81:d0:d3:a8:57:4f:cb:80:7c:f3:3d:b1:76:07:7a: b9:1e:bd:f3:45:90:26:e4:df:63:d7:49:77:f3:13: 6a:c1:40:2a:cc:2a:85:af:75:f7:c2:92:83:32:fc: 4d:eb:31:40:2f:00:89:6a:da:80:78:a9:fd:d1:9c: d6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:52:49:EE:BD:83:8B:E8:B4:FD:75:C9:1A:DE:C0:42:B0:3B:13:88 X509v3 Authority Key Identifier: keyid:2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9c:91:6c:21:4a:59:a7:18:d9:15:1b:0f:79:c3:27:1d:e0: 38:71:c0:6f:f4:02:2d:28:a3:77:c9:2e:27:6f:93:67:e8:85: d5:7b:50:07:15:77:56:5b:d5:17:b4:63:f5:06:aa:90:39:3b: ac:99:a3:92:4b:3f:c4:b0:90:b3:f3:9e:de:48:74:04:67:73: 09:a2:17:ec:41:31:83:db:3f:ec:79:47:06:70:fa:ec:3c:58: d1:e3:6c:c4:96:01:da:b6:7a:fa:a6:e3:27:2c:cf:44:06:a9: 10:8d:ce:b1:d6:2f:0a:c8:86:98:f4:a2:e3:e9:43:b5:b3:ad: 22:d9:69:47:34:f0:53:8c:25:2f:2c:5e:dd:81:e2:db:de:a6: b6:0c:31:6f:b3:3d:ae:3e:6a:aa:8c:2f:d6:cf:22:d9:0f:5d: ce:00:9c:19:04:dc:e3:1b:fb:e9:18:7a:de:1e:49:a8:56:2e: a7:f8:e6:b1:e7:c4:f1:10:ef:f9:09:3e:ef:32:3c:85:53:1b: 2d:14:44:4d:b7:be:8b:eb:fb:a9:ad:6b:2f:b0:84:b8:90:7f: e1:c3:52:c8:d1:23:54:75:5b:9c:9a:f3:01:a1:95:de:68:1c: 17:c0:8d:e7:fe:61:fb:dd:e7:ca:d1:07:c8:06:b6:49:1f:b5: 99:03:cb:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDNjIxMTAvBgNVBAUTKDJCNEYzMjNDNThBNzc2QjRFNzUzODZERUU4MzcyMkUw NDU2MjMyQzYwHhcNMjUwODEwMTUzNDM1WhcNMjUwODE3MTUzNDM1WjAYMRYwFAYD VQQDEw02ODk4YmMwYi02ZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUVO6bstdDGMNe5IpdAPEG1bbd/H7lLg7bc9xwipVyfAsgzzLc7G+6girp+E pNCyX//MQpvhkjrZQYnsFzqNjE00Q6dNn0WiO7dfyO0yZwnUl2Lq/ExnWQkaSJZR HI73L78IubYRkJGHGEqgeeq5EWY7700DIYltirt7sFrMhm/045Z7Nt+4mwpIDUfu eWK7xj3Cf7iJWusXjU00pXGjWScqFm4ZD+WIxX0oE0yY1uft/aTe2tIcAD947E3d KGkFX1eB0NOoV0/LgHzzPbF2B3q5Hr3zRZAm5N9j10l38xNqwUAqzCqFr3X3wpKD MvxN6zFALwCJatqAeKn90ZzWnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVSSe69 g4votP11yRrewEKwOxOIMB8GA1UdIwQYMBaAFCtPMjxYp3a051OG3ug3IuBFYjLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi9FRTk1RkQ0MkI3 NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRyVG5VNGJlNkRjaTRFVmlN c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0swOHlQRmluZHJUblU0YmU2RGNpNEVWaU1zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkM2Mi9FRTk1RkQ0MkI3NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRy VG5VNGJlNkRjaTRFVmlNc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbnJFsIUpZpxjZFRsPecMnHeA4ccBv9AItKKN3yS4nb5Nn6IXVe1AH FXdWW9UXtGP1BqqQOTusmaOSSz/EsJCz857eSHQEZ3MJohfsQTGD2z/seUcGcPrs PFjR42zElgHatnr6puMnLM9EBqkQjc6x1i8KyIaY9KLj6UO1s60i2WlHNPBTjCUv LF7dgeLb3qa2DDFvsz2uPmqqjC/WzyLZD13OAJwZBNzjG/vpGHreHkmoVi6n+Oax 58TxEO/5CT7vMjyFUxstFERNt76L6/uprWsvsIS4kH/hw1LI0SNUdVucmvMBoZXe aBwXwI3n/mH73efK0QfIBrZJH7WZA8sh -----END CERTIFICATE-----Generated at Mon Aug 11 07:23:38 2025 by rpki-client