$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json) Hash identifier: kDMXP6a0ku6nkcw9EUGaWtQtuqAcQaQqaYi2UCge43Y= Subject key identifier: 8E:D6:40:14:16:E8:C5:8F:9F:76:8E:01:AB:51:41:25:80:AA:38:EA Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Certificate serial: 0C6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft Manifest number: 0C45 Signing time: Sat 14 Jun 2025 18:29:20 +0000 Manifest this update: Sat 14 Jun 2025 18:29:19 +0000 Manifest next update: Sat 21 Jun 2025 18:29:19 +0000 Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: 3mFRxGOGEEyS18qd18IlVEo9lbBt0K9XgBu6gmDrEeY=) 2: 50AA91CAD70311EFB9BBC86DC4F9AE02.roa (hash: gdYeSr8OVfEXIHB8AE/R/OGyXt1CPyW6FryfjJbmXTw=) 3: 6309B36EEC3911EFB3A92E86C4F9AE02.roa (hash: mJvqce7dr7148HNrDiByF+54zvxocevFsAIl/C28B9c=) 4: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: UKp0al5lwDctbpMZ4w91PmU9xh+b2uAj1qbyNOwUx6Q=) 5: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: xNrMx2ykeoPHlp4OwjxlD2woswWyefyqLirhxUQ7v60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3182 (0xc6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Validity Not Before: Jun 14 18:29:19 2025 GMT Not After : Jun 21 18:29:19 2025 GMT Subject: CN=684dbf7f-beb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d7:85:c0:6b:8b:d3:cd:29:81:d3:51:27:08: 0b:48:90:d3:54:0f:42:ad:9a:54:23:a6:11:75:64: 7b:ba:ae:e4:17:61:72:ae:fd:b9:73:9d:d1:1c:e6: 84:b3:11:ec:70:0a:40:a0:80:7b:46:9d:74:3c:ae: 8d:9f:d9:54:ac:e0:b6:97:6c:47:ca:96:1c:49:27: dc:65:63:4f:0a:df:1e:0d:32:da:fc:69:91:94:dc: 2a:ac:ff:00:37:b6:0f:a9:a4:6b:f3:9e:34:7b:5c: 22:88:bf:60:22:af:e6:c1:0f:bd:2d:0f:0a:bc:e7: 33:97:48:f0:af:08:6a:77:11:1a:d9:07:48:ef:37: a3:50:9e:f8:81:d7:b0:78:c8:9a:30:c4:c6:e3:cb: 81:1a:8c:28:ba:25:8d:5e:25:29:98:a0:45:c0:db: c6:21:79:ec:d4:bf:c5:e2:d0:42:10:a7:ef:2e:b4: 20:3b:58:60:4e:8e:70:ea:e1:13:71:fa:2f:ef:95: 9a:d0:5d:a9:4b:c4:01:1c:7b:38:51:da:ad:ad:b1: 08:8f:64:f7:cd:d8:73:28:bd:6e:1e:9a:6c:59:31: 2f:5b:d3:16:f7:b6:68:d1:24:12:f2:df:75:72:23: 65:f2:68:67:82:83:10:06:ff:86:a9:eb:50:eb:57: 78:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D6:40:14:16:E8:C5:8F:9F:76:8E:01:AB:51:41:25:80:AA:38:EA X509v3 Authority Key Identifier: keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:03:21:94:fc:ee:99:0e:ec:ac:00:49:7b:3e:7e:c6:62:5e: cf:eb:e7:b2:fd:10:5b:d0:ef:d4:9c:10:10:ae:4a:44:5b:ec: eb:91:7b:7b:7c:b5:fa:12:c1:a6:f2:19:58:1f:19:87:fc:6e: b5:9a:06:a7:12:7b:40:80:6e:d6:20:17:f3:92:66:06:45:e2: 43:a3:f4:1a:85:ab:40:61:78:5c:8d:f2:0d:95:c7:48:d6:60: e0:67:79:4d:03:d5:9e:81:1a:81:a1:80:76:19:ae:6d:fd:06: ba:1d:8b:73:2a:de:91:9e:49:f2:4c:79:7d:74:e0:09:3e:b5: 31:aa:4f:3b:97:fb:14:48:13:ad:96:87:8c:dd:18:ee:51:fe: 24:67:2d:12:1c:59:01:82:58:4e:18:72:0d:84:4d:09:e6:f2: 86:89:e9:e8:2a:a3:89:30:58:fb:44:68:dc:9f:27:1e:da:30: 74:c7:6b:f1:27:80:77:bc:de:ba:34:bf:7a:23:1f:b9:21:42: b6:c1:43:7d:24:31:d1:0e:6d:c1:4f:ca:c0:23:04:fb:cb:b6: 3e:a8:13:a0:ff:e1:22:cb:67:fc:8f:4a:e1:34:88:1a:b6:cb: 45:c9:73:69:45:a8:2d:b1:39:0f:6a:75:ee:06:96:e7:d3:80: 31:8e:fc:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz QjJEOUY4NDAwHhcNMjUwNjE0MTgyOTE5WhcNMjUwNjIxMTgyOTE5WjAYMRYwFAYD VQQDEw02ODRkYmY3Zi1iZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7deFwGuL080pgdNRJwgLSJDTVA9CrZpUI6YRdWR7uq7kF2Fyrv25c53RHOaE sxHscApAoIB7Rp10PK6Nn9lUrOC2l2xHypYcSSfcZWNPCt8eDTLa/GmRlNwqrP8A N7YPqaRr8540e1wiiL9gIq/mwQ+9LQ8KvOczl0jwrwhqdxEa2QdI7zejUJ74gdew eMiaMMTG48uBGowouiWNXiUpmKBFwNvGIXns1L/F4tBCEKfvLrQgO1hgTo5w6uET cfov75Wa0F2pS8QBHHs4UdqtrbEIj2T3zdhzKL1uHppsWTEvW9MW97Zo0SQS8t91 ciNl8mhngoMQBv+GqetQ61d4iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7WQBQW 6MWPn3aOAatRQSWAqjjqMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2 Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMAyGU/O6ZDuysAEl7Pn7GYl7P6+ey/RBb0O/UnBAQrkpEW+zrkXt7 fLX6EsGm8hlYHxmH/G61mganEntAgG7WIBfzkmYGReJDo/QahatAYXhcjfINlcdI 1mDgZ3lNA9WegRqBoYB2Ga5t/Qa6HYtzKt6RnknyTHl9dOAJPrUxqk87l/sUSBOt loeM3RjuUf4kZy0SHFkBglhOGHINhE0J5vKGienoKqOJMFj7RGjcnyce2jB0x2vx J4B3vN66NL96Ix+5IUK2wUN9JDHRDm3BT8rAIwT7y7Y+qBOg/+Eiy2f8j0rhNIga tstFyXNpRagtsTkPanXuBpbn04Axjvz+ -----END CERTIFICATE-----Generated at Sun Jun 15 09:49:46 2025 by rpki-client