$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft File: OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft (raw, json) Hash identifier: nnWxc15I2fydOwrwdsItGUKxUUk0plP8jK95TdpQnDY= Subject key identifier: 70:9A:17:8F:8D:37:C1:85:60:CB:98:0E:3D:E0:28:83:A3:C3:93:6A Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C Certificate issuer: /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft Manifest number: 34 Signing time: Fri 13 Jun 2025 06:32:22 +0000 Manifest this update: Fri 13 Jun 2025 06:32:22 +0000 Manifest next update: Fri 20 Jun 2025 06:32:22 +0000 Files and hashes: 1: OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl (hash: RmJ2KaUFD1UxdO+W3qVMvVhg8/IdgBL4VOwNtTyyN/o=) 2: 54DA33D2FB2E11EFB488A95EC4F9AE02.roa (hash: L/7VzM2fbo0IdE808LBeTzf3z0geWQ0SpeUJCZmWPBg=) 3: 53E9C44CFB2E11EFB488A95EC4F9AE02.roa (hash: hzaK0MTBJLVrmr0hWnuGmH3SdcFclIxCzlQUZOQabQ8=) 4: 5460E9C8FB2E11EFB488A95EC4F9AE02.roa (hash: bkhjgOMD/IEHS+ly/VrsRugL9cN6Yu5sgUx5f40TuYM=) 5: 553798E2FB2E11EFB488A95EC4F9AE02.roa (hash: p8161Irka1RhOlKGL72R+iegNNjEoBL5dnyvjeUTVQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C Validity Not Before: Jun 13 06:32:22 2025 GMT Not After : Jun 20 06:32:22 2025 GMT Subject: CN=684bc5f6-4e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:73:5d:ef:eb:99:07:9b:54:a6:4e:cf:7b: 18:2f:d0:c7:96:b6:de:31:c0:a2:b9:34:24:81:2a: ff:7b:f7:a3:6f:21:16:4e:7b:ce:d4:d4:c2:b1:7f: 61:87:be:06:4a:46:26:e3:9d:da:2c:57:3e:94:40: e3:fe:4a:b3:61:d4:db:4a:12:e3:7f:86:b5:78:e3: df:aa:71:03:bd:ef:e6:d6:1a:cd:93:f1:1e:f7:63: c1:90:5b:77:69:18:40:c4:5c:61:60:5e:0b:26:5c: 47:39:66:28:6e:e7:97:2a:d4:e3:65:5f:3d:89:4e: 3d:31:dd:fa:dc:9e:c8:65:5b:4f:a7:22:1d:84:1a: 8c:59:7b:65:5b:ad:5f:3a:13:8f:34:a0:19:e2:d8: 4a:10:56:c7:7e:18:5d:e3:86:95:3f:16:9f:84:41: 73:a9:6e:21:0c:cc:4c:a3:83:9c:0e:84:8a:24:e0: ab:e5:e0:45:51:d1:7c:b4:0f:da:44:ec:dc:90:10: 9a:16:ae:5a:9d:5e:f9:6e:58:7a:d4:20:7b:8f:6e: 7f:1c:21:04:33:38:11:c3:b4:5e:1d:5f:b3:71:21: 78:44:fc:0a:a4:53:8f:6c:94:52:0d:5d:97:cf:fc: 31:b7:d5:49:ce:59:10:a0:63:2e:64:24:c6:e6:5c: 1e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9A:17:8F:8D:37:C1:85:60:CB:98:0E:3D:E0:28:83:A3:C3:93:6A X509v3 Authority Key Identifier: keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:6d:fa:ad:54:ea:53:72:9d:4e:09:b6:fd:0f:a0:bf:84:e6: 5b:d3:28:cc:e1:2b:54:31:9a:69:3e:57:27:89:cb:72:0b:e1: af:de:f5:d6:90:af:26:98:40:2d:f5:18:3d:e3:d0:b8:08:9d: 96:e7:ab:c2:fd:91:f1:99:83:6d:c1:70:ff:52:0d:69:c3:d2: 68:97:aa:cd:84:32:8d:c7:1c:e6:e6:20:8d:d6:44:dc:df:e9: ab:d6:65:2a:99:26:f4:1a:c5:f8:a9:90:71:f9:ed:7d:4c:f6: 74:84:59:d7:ce:b9:35:75:b2:61:17:52:16:fd:60:34:58:c2: 8d:22:6b:92:e9:c5:8a:6d:9e:d8:96:37:3d:3b:99:60:52:b2: bf:14:96:69:d3:b9:8c:25:fc:2a:24:24:69:06:5f:37:74:9d: a3:53:ba:12:b6:85:4b:50:ea:8f:7b:74:98:a4:82:e2:1f:7b: 7f:a9:c0:38:8e:3d:b6:37:30:fd:83:58:7a:73:6f:06:17:34: 9e:64:ec:e3:89:1c:3c:8f:bd:4e:e6:bd:48:b1:da:95:3f:ec: 77:06:39:b1:38:bd:ae:82:f3:34:4a:06:8b:61:e0:73:b3:e6: 1f:b3:d7:cf:93:f3:2f:fb:3b:f9:0d:7b:98:15:99:d6:cf:d3: 15:3b:46:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTUwMjExMC8GA1UEBRMoMzg2QzMwMEVENzJGMTJCOTA1NDc4QTMzQ0VGMjc3OTky NTRBNjkxQzAeFw0yNTA2MTMwNjMyMjJaFw0yNTA2MjAwNjMyMjJaMBgxFjAUBgNV BAMTDTY4NGJjNWY2LTRlNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvGnNd7+uZB5tUpk7Pexgv0MeWtt4xwKK5NCSBKv9796NvIRZOe87U1MKxf2GH vgZKRibjndosVz6UQOP+SrNh1NtKEuN/hrV449+qcQO97+bWGs2T8R73Y8GQW3dp GEDEXGFgXgsmXEc5Zihu55cq1ONlXz2JTj0x3frcnshlW0+nIh2EGoxZe2VbrV86 E480oBni2EoQVsd+GF3jhpU/Fp+EQXOpbiEMzEyjg5wOhIok4Kvl4EVR0Xy0D9pE 7NyQEJoWrlqdXvluWHrUIHuPbn8cIQQzOBHDtF4dX7NxIXhE/AqkU49slFINXZfP /DG31UnOWRCgYy5kJMbmXB4fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcJoXj403 wYVgy5gOPeAog6PDk2owHwYDVR0jBBgwFoAUOGwwDtcvErkFR4ozzvJ3mSVKaRww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFNTAyLzg3QzNGRDBBRkIy OTExRUZCNzY2REM3NkM0RjlBRTAyL09Hd3dEdGN2RXJrRlI0b3p6dkozbVNWS2FS dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT0d3d0R0Y3ZFcmtGUjRvenp2SjNtU1ZLYVJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF NTAyLzg3QzNGRDBBRkIyOTExRUZCNzY2REM3NkM0RjlBRTAyL09Hd3dEdGN2RXJr RlI0b3p6dkozbVNWS2FSdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADNt+q1U6lNynU4Jtv0PoL+E5lvTKMzhK1Qxmmk+VyeJy3IL4a/e9daQ ryaYQC31GD3j0LgInZbnq8L9kfGZg23BcP9SDWnD0miXqs2EMo3HHObmII3WRNzf 6avWZSqZJvQaxfipkHH57X1M9nSEWdfOuTV1smEXUhb9YDRYwo0ia5LpxYptntiW Nz07mWBSsr8UlmnTuYwl/CokJGkGXzd0naNTuhK2hUtQ6o97dJikguIfe3+pwDiO PbY3MP2DWHpzbwYXNJ5k7OOJHDyPvU7mvUix2pU/7HcGObE4va6C8zRKBoth4HOz 5h+z18+T8y/7O/kNe5gVmdbP0xU7RvA= -----END CERTIFICATE-----Generated at Sat Jun 14 17:41:17 2025 by rpki-client