$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json) Hash identifier: 4fBHJ9y0RxRMe2RvWdUAJPud2+HZcTSZDoh04p7bkIk= Subject key identifier: 2C:C0:62:12:11:21:55:7F:33:5F:0D:20:C8:80:DD:0A:D4:6F:43:70 Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Certificate serial: 0C8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft Manifest number: 0C62 Signing time: Sun 10 Aug 2025 18:35:09 +0000 Manifest this update: Sun 10 Aug 2025 18:35:08 +0000 Manifest next update: Sun 17 Aug 2025 18:35:08 +0000 Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: CC12NaGgszq9zNXXnIannuq6dpNqZc8Mzr/ARCFnWSw=) 2: 50AA91CAD70311EFB9BBC86DC4F9AE02.roa (hash: gdYeSr8OVfEXIHB8AE/R/OGyXt1CPyW6FryfjJbmXTw=) 3: 6309B36EEC3911EFB3A92E86C4F9AE02.roa (hash: mJvqce7dr7148HNrDiByF+54zvxocevFsAIl/C28B9c=) 4: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: UKp0al5lwDctbpMZ4w91PmU9xh+b2uAj1qbyNOwUx6Q=) 5: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: xNrMx2ykeoPHlp4OwjxlD2woswWyefyqLirhxUQ7v60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3211 (0xc8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Validity Not Before: Aug 10 18:35:08 2025 GMT Not After : Aug 17 18:35:08 2025 GMT Subject: CN=6898e65c-aacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ea:44:b5:ee:2e:d7:30:ed:08:8f:16:40:78: dd:f8:85:a4:c0:43:13:62:d8:26:b5:42:e3:44:68: 5f:5c:cf:69:50:d3:b2:ad:85:47:84:31:43:48:f9: 2e:49:40:b5:54:1a:59:29:5b:c8:fd:56:cd:8d:61: bb:dc:3f:d6:df:79:53:81:83:f8:5a:07:10:22:68: 40:3c:40:21:8a:9e:06:5e:29:d8:b1:67:4a:0a:12: f9:2e:e4:35:aa:b8:a0:e0:f0:e3:55:c6:41:73:9b: 64:96:14:6d:98:f8:90:b6:6c:19:c7:09:cc:67:63: 45:3c:4b:c1:03:23:ca:19:85:62:33:9d:8d:a3:43: 46:89:6a:23:af:b0:9f:52:14:fe:1f:79:f9:d8:82: b0:bd:04:24:0a:36:82:8c:94:86:ba:9a:86:95:58: bf:8b:19:60:28:39:53:58:e8:f5:b2:67:22:67:ce: 15:15:d9:03:bb:aa:7e:cd:98:17:27:5b:b0:2e:cb: 7a:eb:79:e5:24:1d:20:56:22:61:83:7e:ed:db:d2: d7:fc:b9:2f:70:6d:cc:d9:6f:18:6f:46:6a:76:e7: 62:c3:75:60:4f:75:e3:c5:8e:01:11:12:ed:24:51: 8d:56:9a:33:c4:fc:84:2e:e7:3b:63:67:f0:06:21: f4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C0:62:12:11:21:55:7F:33:5F:0D:20:C8:80:DD:0A:D4:6F:43:70 X509v3 Authority Key Identifier: keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:53:f6:76:c7:aa:e9:2c:2e:3f:04:4f:f7:fd:a8:31:f3:b6: 40:59:c8:72:1b:b2:b3:d4:f4:8a:15:b2:f3:f3:92:65:60:69: 43:24:57:5d:53:9e:c1:c9:81:75:04:dc:c2:55:04:11:40:c7: 6d:84:12:c5:65:fc:a8:89:3b:16:c6:94:5f:82:18:50:a7:26: 91:f4:c5:ba:5a:9d:f6:4e:0c:1b:ab:38:11:24:58:bf:ba:d3: 05:80:3c:e8:8f:6c:c7:9f:d5:f9:fe:2b:bb:81:b9:c1:e2:68: 4a:ce:8e:b3:c2:27:f6:03:da:9d:8d:f5:6b:14:06:df:ef:d3: d8:5d:65:a1:d3:16:01:0a:bd:fd:d3:a3:29:19:d7:20:a1:72: c3:15:3f:74:8d:9a:f6:20:56:a6:5e:d0:4e:26:53:43:e1:43: 54:56:e7:61:17:52:4f:a3:99:38:c7:9e:6a:26:ca:3b:fc:8b: 43:db:d4:fa:f9:7c:5d:bf:ff:df:16:9d:21:c5:5d:54:36:68: b7:d8:fd:0f:1e:a1:e1:16:e7:32:c0:8b:87:6c:6f:38:76:40: 56:69:b7:d2:36:61:75:2f:9e:05:ce:a3:95:8b:9e:a9:5e:d0: 4d:fa:80:6e:fe:9f:18:a1:36:f9:fa:7c:01:82:d3:ed:e2:e7: 6e:73:0e:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz QjJEOUY4NDAwHhcNMjUwODEwMTgzNTA4WhcNMjUwODE3MTgzNTA4WjAYMRYwFAYD VQQDEw02ODk4ZTY1Yy1hYWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmOpEte4u1zDtCI8WQHjd+IWkwEMTYtgmtULjRGhfXM9pUNOyrYVHhDFDSPku SUC1VBpZKVvI/VbNjWG73D/W33lTgYP4WgcQImhAPEAhip4GXinYsWdKChL5LuQ1 qrig4PDjVcZBc5tklhRtmPiQtmwZxwnMZ2NFPEvBAyPKGYViM52No0NGiWojr7Cf UhT+H3n52IKwvQQkCjaCjJSGupqGlVi/ixlgKDlTWOj1smciZ84VFdkDu6p+zZgX J1uwLst663nlJB0gViJhg37t29LX/LkvcG3M2W8Yb0Zqdudiw3VgT3XjxY4BERLt JFGNVpozxPyELuc7Y2fwBiH07wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzAYhIR IVV/M18NIMiA3QrUb0NwMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2 Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwU/Z2x6rpLC4/BE/3/agx87ZAWchyG7Kz1PSKFbLz85JlYGlDJFdd U57ByYF1BNzCVQQRQMdthBLFZfyoiTsWxpRfghhQpyaR9MW6Wp32TgwbqzgRJFi/ utMFgDzoj2zHn9X5/iu7gbnB4mhKzo6zwif2A9qdjfVrFAbf79PYXWWh0xYBCr39 06MpGdcgoXLDFT90jZr2IFamXtBOJlND4UNUVudhF1JPo5k4x55qJso7/ItD29T6 +Xxdv//fFp0hxV1UNmi32P0PHqHhFucywIuHbG84dkBWabfSNmF1L54FzqOVi56p XtBN+oBu/p8YoTb5+nwBgtPt4uducw5W -----END CERTIFICATE-----Generated at Sun Aug 10 21:05:46 2025 by rpki-client