$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft File: olvfdj8LpjxJo3ar-W5VUIeehbo.mft (raw, json) Hash identifier: cQFUepK7G/mqA12I2IwZ4bGPGOIya8DRs5MZ4ZrFCzE= Subject key identifier: B8:92:BA:26:4F:C5:A4:13:57:6F:EB:04:2B:F1:63:3B:D3:7F:6A:93 Authority key identifier: A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA Certificate issuer: /CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA Certificate serial: 05B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft Manifest number: 05B2 Signing time: Wed 18 Jun 2025 22:57:57 +0000 Manifest this update: Wed 18 Jun 2025 22:57:56 +0000 Manifest next update: Wed 25 Jun 2025 22:57:56 +0000 Files and hashes: 1: olvfdj8LpjxJo3ar-W5VUIeehbo.crl (hash: Z5EizY6BJBJFSWgkQjjh9hM8DrOZwIJH5SSMCjtX4wM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 22:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C738, serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA Validity Not Before: Jun 18 22:57:56 2025 GMT Not After : Jun 25 22:57:56 2025 GMT Subject: CN=68534475-142f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:64:b4:7b:e5:b1:25:5b:8d:1e:b2:ad:d7:f2: 77:90:ce:51:68:05:43:62:a8:a8:e0:9e:89:ac:e6: 87:69:e1:21:9c:a5:5a:c1:57:60:ec:e1:b0:f9:b5: 3a:22:7d:c2:67:dd:78:7e:15:e7:ad:bb:e7:7e:0c: 13:d2:50:7e:0d:11:ef:cb:6a:20:35:9f:7d:ed:76: 28:ba:39:1e:89:bd:55:73:26:57:d9:35:05:8f:47: eb:c6:51:5a:78:49:2e:19:63:e0:84:a5:20:ef:36: a7:2d:9b:78:06:43:2c:bc:57:59:ab:b8:2a:a0:28: b8:c0:2d:d3:3e:ef:8e:84:df:06:58:b4:aa:d7:0f: ab:85:c5:f8:7e:2e:21:cd:a5:b1:ec:37:33:56:4c: 0e:8f:e0:ac:8d:64:13:a5:b6:16:02:e3:00:be:48: 32:ae:bb:f5:0a:53:f8:4e:f9:20:fd:39:2e:7c:4d: 2b:af:2b:25:06:80:c1:4e:f4:73:78:c4:a6:02:87: c7:a3:90:a9:20:9e:1f:46:ab:a4:9f:9a:e5:85:e2: bf:c4:1b:02:a7:40:d7:17:12:30:22:db:85:61:4f: 4a:47:16:cd:23:83:b2:ff:2a:20:d0:68:56:df:d4: 70:77:8a:05:e3:77:95:63:78:a9:ec:c8:9d:c6:6e: 9f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:92:BA:26:4F:C5:A4:13:57:6F:EB:04:2B:F1:63:3B:D3:7F:6A:93 X509v3 Authority Key Identifier: keyid:A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:34:f6:56:17:d7:28:dc:48:52:1f:16:69:3f:9c:ee:7d:77: d5:6b:2b:ef:01:6c:8a:bd:47:97:08:56:6d:15:30:1e:94:00: bb:95:42:1b:6b:9b:0e:29:cf:c6:e8:7b:7e:3b:bd:0b:f5:3a: c0:83:5d:53:aa:2f:43:e0:2d:5c:80:be:d0:39:cd:73:46:40: 06:f2:a2:da:72:1c:61:67:56:00:d5:59:be:58:13:79:b6:53: 66:17:44:c5:b3:05:33:7e:08:ee:ea:53:c4:ac:e2:9b:c9:af: 94:49:5d:7c:a1:01:0c:06:f0:9e:41:4e:1a:2d:09:f0:52:04: 00:24:b3:e5:54:52:2b:31:b7:93:c4:76:24:20:8b:fe:2c:9e: ff:52:79:02:8b:e7:07:c5:43:7c:a1:fc:8e:a8:f3:5a:84:36: 53:0e:2b:96:ff:42:d0:9e:be:17:da:6b:59:c5:fa:9d:14:5d: 6a:cd:5e:5a:d6:a4:18:9d:62:4f:63:c5:90:cf:2e:47:73:bc: 51:24:3f:fa:b3:17:53:43:d9:1d:15:f3:69:99:95:6a:b1:b6: 00:c4:95:bd:90:fe:be:46:8a:7a:bd:74:f9:61:e5:86:c3:a4: ec:1f:ca:7b:cc:9d:e2:49:8d:77:65:44:60:64:f7:04:c5:3e: 56:9e:6d:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MzgxMTAvBgNVBAUTKEEyNUJERjc2M0YwQkE2M0M0OUEzNzZBQkY5NkU1NTUw ODc5RTg1QkEwHhcNMjUwNjE4MjI1NzU2WhcNMjUwNjI1MjI1NzU2WjAYMRYwFAYD VQQDEw02ODUzNDQ3NS0xNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmS0e+WxJVuNHrKt1/J3kM5RaAVDYqio4J6JrOaHaeEhnKVawVdg7OGw+bU6 In3CZ914fhXnrbvnfgwT0lB+DRHvy2ogNZ997XYoujkeib1VcyZX2TUFj0frxlFa eEkuGWPghKUg7zanLZt4BkMsvFdZq7gqoCi4wC3TPu+OhN8GWLSq1w+rhcX4fi4h zaWx7DczVkwOj+CsjWQTpbYWAuMAvkgyrrv1ClP4Tvkg/TkufE0rryslBoDBTvRz eMSmAofHo5CpIJ4fRqukn5rlheK/xBsCp0DXFxIwItuFYU9KRxbNI4Oy/yog0GhW 39Rwd4oF43eVY3ip7Midxm6fawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiSuiZP xaQTV2/rBCvxYzvTf2qTMB8GA1UdIwQYMBaAFKJb33Y/C6Y8SaN2q/luVVCHnoW6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zQkYwQUU5Q0M5 RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBqeEpvM2FyLVc1VlVJZWVo Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sdmZkajhMcGp4Sm8zYXItVzVWVUllZWhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzczOC8zQkYwQUU5Q0M5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBq eEpvM2FyLVc1VlVJZWVoYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABNPZWF9co3EhSHxZpP5zufXfVayvvAWyKvUeXCFZtFTAelAC7lUIb a5sOKc/G6Ht+O70L9TrAg11Tqi9D4C1cgL7QOc1zRkAG8qLachxhZ1YA1Vm+WBN5 tlNmF0TFswUzfgju6lPErOKbya+USV18oQEMBvCeQU4aLQnwUgQAJLPlVFIrMbeT xHYkIIv+LJ7/UnkCi+cHxUN8ofyOqPNahDZTDiuW/0LQnr4X2mtZxfqdFF1qzV5a 1qQYnWJPY8WQzy5Hc7xRJD/6sxdTQ9kdFfNpmZVqsbYAxJW9kP6+Rop6vXT5YeWG w6TsH8p7zJ3iSY13ZURgZPcExT5Wnm3o -----END CERTIFICATE-----Generated at Fri Jun 20 02:53:26 2025 by rpki-client