$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft File: OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft (raw, json) Hash identifier: 990u3NH8eRz+Qm5IFW17/4R6WIwPwK6Jp4uPjSi68Y8= Subject key identifier: 03:08:4A:9B:2D:53:DF:F5:02:97:81:1F:EA:50:55:28:67:AD:35:AA Authority key identifier: 39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1 Certificate issuer: /CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1 Certificate serial: 1EA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft Manifest number: 1E9C Signing time: Sat 14 Jun 2025 16:01:15 +0000 Manifest this update: Sat 14 Jun 2025 16:01:14 +0000 Manifest next update: Sat 21 Jun 2025 16:01:14 +0000 Files and hashes: 1: OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl (hash: Iq8CKE8PFb17qdWRGe5Ix0uskGGVibbiqQBwL+cG8gs=) 2: BFF7726E6EF711E69FBC340BC4F9AE02.roa (hash: W0ZWmGkhW06fRZVPw8jscLCIBobXeY3y+SwBDvJ1Z0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7848 (0x1ea8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C7C, serialNumber=39D1D595541891353094583618D6CC079C830CE1 Validity Not Before: Jun 14 16:01:14 2025 GMT Not After : Jun 21 16:01:14 2025 GMT Subject: CN=684d9cca-662d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:1d:76:7b:de:9c:c6:e4:d4:f0:6d:ce:f2: 31:27:4c:99:f8:f5:c7:32:3c:a2:63:10:ef:22:de: 27:f5:66:0f:70:d3:b7:18:db:87:f2:7f:46:85:cc: 10:07:5d:42:4f:8f:dd:7e:12:6a:e5:04:57:f1:cf: 6f:0a:01:5b:4e:6a:ba:77:e0:a0:21:3f:a8:14:51: c7:ff:07:b2:c7:8c:64:e8:e7:2a:67:00:73:b2:35: 90:5c:7c:e2:da:de:b3:70:f1:07:2f:ca:2f:a2:60: cb:5b:be:36:4b:70:de:86:fb:3b:2e:c0:89:c1:23: df:4f:ae:f4:f5:7d:20:f8:f0:95:59:24:c6:33:cc: 98:f2:3e:23:46:7d:4b:b4:32:54:24:d8:ce:f0:e1: 30:ba:de:cf:69:8d:bd:bb:d6:c1:44:86:ee:b9:aa: 73:86:4e:a5:de:95:58:6a:75:c9:70:1e:7b:48:29: cf:5e:4e:f5:6d:c6:16:4d:43:a3:f5:51:02:7a:4c: 72:24:32:aa:fc:c0:7b:7a:cb:5f:91:02:94:0e:73: 57:2a:c2:40:12:39:4a:03:72:b2:54:55:6f:93:be: f5:a6:39:2d:90:49:f8:4c:78:1c:8e:d5:79:89:56: b1:0c:18:78:73:85:57:ac:8c:b7:7b:a8:77:ff:41: 37:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:08:4A:9B:2D:53:DF:F5:02:97:81:1F:EA:50:55:28:67:AD:35:AA X509v3 Authority Key Identifier: keyid:39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:6f:9e:b7:7c:37:33:76:a9:90:fc:ef:3a:d5:b4:ec:5f:a6: f1:a8:fe:eb:87:66:de:7e:a6:ca:98:96:d1:ce:e0:87:0b:51: 5a:ea:52:d2:11:9a:8d:5d:89:3f:fe:36:81:c0:3e:ed:0d:97: 0c:29:ed:cb:c9:09:59:81:5c:59:c4:2e:ce:ae:c1:03:7f:26: 99:98:d8:0e:68:a0:cc:c1:64:1a:83:c0:4a:d3:fc:15:e9:67: 0a:0c:71:3c:62:3a:40:fb:5e:ca:a4:9b:ab:bc:92:84:34:c2: 86:e3:02:b0:5a:48:71:23:cc:0c:f9:02:75:dc:8e:81:f9:bc: d0:4c:1a:b8:06:7b:de:b3:d3:c9:b5:c3:0d:ab:60:3b:70:11: 2f:c5:ac:e9:93:b4:12:5d:c3:08:b4:2e:e6:8c:ea:68:64:02: 56:bd:23:f9:92:9b:79:ba:1b:cc:af:75:2d:22:00:bd:11:04: 1c:22:1c:ab:2f:de:a0:65:34:fc:7e:db:24:3c:a9:03:91:4f: d2:0d:56:c2:4f:0a:69:b5:85:2f:e3:84:60:3a:b1:74:8f:7a: 7b:ec:8d:38:f0:75:23:57:dd:af:59:37:8b:18:97:b0:16:b1: 9b:bf:c6:ed:f4:3c:c6:a2:3b:56:7b:d5:65:fb:e0:a1:36:f9: 48:3f:23:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDN0MxMTAvBgNVBAUTKDM5RDFENTk1NTQxODkxMzUzMDk0NTgzNjE4RDZDQzA3 OUM4MzBDRTEwHhcNMjUwNjE0MTYwMTE0WhcNMjUwNjIxMTYwMTE0WjAYMRYwFAYD VQQDEw02ODRkOWNjYS02NjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0QddnvenMbk1PBtzvIxJ0yZ+PXHMjyiYxDvIt4n9WYPcNO3GNuH8n9GhcwQ B11CT4/dfhJq5QRX8c9vCgFbTmq6d+CgIT+oFFHH/weyx4xk6OcqZwBzsjWQXHzi 2t6zcPEHL8ovomDLW742S3Dehvs7LsCJwSPfT6709X0g+PCVWSTGM8yY8j4jRn1L tDJUJNjO8OEwut7PaY29u9bBRIbuuapzhk6l3pVYanXJcB57SCnPXk71bcYWTUOj 9VECekxyJDKq/MB7estfkQKUDnNXKsJAEjlKA3KyVFVvk771pjktkEn4THgcjtV5 iVaxDBh4c4VXrIy3e6h3/0E3swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMISpst U9/1ApeBH+pQVShnrTWqMB8GA1UdIwQYMBaAFDnR1ZVUGJE1MJRYNhjWzAecgwzh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM3Qy8yOUY3QTA0MDZF RjcxMUU2OUUzMjY3MEFDNEY5QUUwMi9PZEhWbFZRWWtUVXdsRmcyR05iTUI1eURE T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kSFZsVlFZa1RVd2xGZzJHTmJNQjV5RERPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEM3Qy8yOUY3QTA0MDZFRjcxMUU2OUUzMjY3MEFDNEY5QUUwMi9PZEhWbFZRWWtU VXdsRmcyR05iTUI1eURET0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSb563fDczdqmQ/O861bTsX6bxqP7rh2befqbKmJbRzuCHC1Fa6lLS EZqNXYk//jaBwD7tDZcMKe3LyQlZgVxZxC7OrsEDfyaZmNgOaKDMwWQag8BK0/wV 6WcKDHE8YjpA+17KpJurvJKENMKG4wKwWkhxI8wM+QJ13I6B+bzQTBq4Bnves9PJ tcMNq2A7cBEvxazpk7QSXcMItC7mjOpoZAJWvSP5kpt5uhvMr3UtIgC9EQQcIhyr L96gZTT8ftskPKkDkU/SDVbCTwpptYUv44RgOrF0j3p77I048HUjV92vWTeLGJew FrGbv8bt9DzGojtWe9Vl++ChNvlIPyMA -----END CERTIFICATE-----Generated at Sat Jun 14 19:08:15 2025 by rpki-client