$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json) Hash identifier: LIQuiozJQ7kNXjQ/E+UUTZlEeKJajRLHbTo+NhvNgFk= Subject key identifier: 5A:7A:FD:4A:D1:66:AD:6A:46:BA:DA:60:50:06:14:9C:86:89:0D:B2 Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Certificate serial: 05DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft Manifest number: 05D9 Signing time: Fri 20 Jun 2025 22:46:50 +0000 Manifest this update: Fri 20 Jun 2025 22:46:49 +0000 Manifest next update: Fri 27 Jun 2025 22:46:49 +0000 Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: qQf+qv/iH9dPcSClUNBwDS3FDhipEZsEWLKuTTyqLqI=) 2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: fabeHirzSfMRjgTkSzBs+NINgYgVd5ARAuZRjwIHiWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 22:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1502 (0x5de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Validity Not Before: Jun 20 22:46:49 2025 GMT Not After : Jun 27 22:46:49 2025 GMT Subject: CN=6855e4d9-2216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:24:5b:6c:3f:9d:11:da:01:c1:16:98:5a: fb:c0:51:11:62:c3:02:88:23:df:c3:60:a2:c4:9e: 25:b3:88:df:f1:e6:e9:05:35:69:2a:ba:d2:0a:3b: 84:6f:27:2e:98:a2:2f:01:42:4a:e9:4e:05:f0:17: 5e:1d:20:33:69:be:2c:34:62:72:e0:1e:cc:6e:9f: a5:e4:f8:38:c2:53:b0:e3:bc:95:e3:ba:ed:a4:6b: 0a:88:33:d5:83:bb:6d:fb:ab:2d:66:5a:37:5d:06: cd:61:64:84:2e:1b:f9:2e:6b:f7:cc:d9:77:0e:8d: ba:88:24:60:25:cb:5b:bb:64:fa:35:2e:b9:3a:fa: 6d:0f:92:b6:82:56:57:3d:e0:04:09:3b:32:db:d7: 6c:52:d7:e7:23:8a:21:64:aa:96:45:e3:ad:91:fa: 49:21:5c:35:5d:f6:4e:b0:3b:2e:ea:40:a0:5c:f7: bd:08:06:a2:5a:0d:a0:6e:be:2a:aa:e2:f9:dc:ba: 83:fa:df:ee:13:5e:c1:7c:c5:9b:3f:b6:15:13:2f: b1:15:a7:d1:c5:de:c2:ff:84:29:35:d7:61:a5:79: c5:1b:fa:2e:f5:81:13:c1:97:40:d8:08:50:64:0b: 60:a9:7b:51:e5:77:2e:d1:d7:e2:a4:1b:a1:10:e3: b6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7A:FD:4A:D1:66:AD:6A:46:BA:DA:60:50:06:14:9C:86:89:0D:B2 X509v3 Authority Key Identifier: keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:0a:d6:bd:76:49:8d:bd:a2:70:f4:cf:3b:96:3f:4e:90:27: 4e:55:29:40:bc:5e:23:c4:19:d2:b1:29:00:a3:f8:e9:4d:db: 7f:06:2d:33:a6:bc:e0:c8:ea:57:d4:7f:89:e7:19:53:93:fd: 3e:77:00:6b:c2:e3:66:b8:33:86:b7:c6:d5:57:bf:7a:6b:90: d6:38:dd:31:31:75:d9:58:38:12:3f:20:69:29:4a:72:6e:f4: f8:37:7e:af:eb:d0:67:d5:6f:87:13:7d:8d:b6:a3:8e:e0:f0: 76:01:de:b9:ef:61:bc:fd:e1:92:7d:1b:14:82:e0:7f:c8:4b: 9b:8e:70:a6:1e:de:2c:c1:47:be:92:14:1e:f2:81:bc:d4:61: 60:49:d8:a3:32:c8:b8:6d:4d:ff:e6:ab:f5:09:f2:2f:d2:8e: 7a:a1:46:aa:ab:6a:74:3f:71:a1:40:1e:6a:17:b2:cf:88:01: 7a:d0:85:c0:6c:3b:79:6b:cc:7e:fc:20:5e:60:55:28:87:b1: 41:2f:19:e5:05:87:ef:c9:0d:27:f2:79:e7:b0:6e:5d:15:d3: 0b:0f:bf:e9:a8:76:00:fd:b9:05:20:98:40:63:b0:43:b6:6c: 4c:39:03:67:55:3b:e4:06:93:52:6d:7d:27:b2:5f:40:f0:d8: d4:8f:25:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC RDNDMzg2NUUwHhcNMjUwNjIwMjI0NjQ5WhcNMjUwNjI3MjI0NjQ5WjAYMRYwFAYD VQQDEw02ODU1ZTRkOS0yMjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKYkW2w/nRHaAcEWmFr7wFERYsMCiCPfw2CixJ4ls4jf8ebpBTVpKrrSCjuE bycumKIvAUJK6U4F8BdeHSAzab4sNGJy4B7Mbp+l5Pg4wlOw47yV47rtpGsKiDPV g7tt+6stZlo3XQbNYWSELhv5Lmv3zNl3Do26iCRgJctbu2T6NS65OvptD5K2glZX PeAECTsy29dsUtfnI4ohZKqWReOtkfpJIVw1XfZOsDsu6kCgXPe9CAaiWg2gbr4q quL53LqD+t/uE17BfMWbP7YVEy+xFafRxd7C/4QpNddhpXnFG/ou9YETwZdA2AhQ ZAtgqXtR5Xcu0dfipBuhEOO2dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFp6/UrR Zq1qRrraYFAGFJyGiQ2yMB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh UnJacVotdVRTcWU5UERobDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQCta9dkmNvaJw9M87lj9OkCdOVSlAvF4jxBnSsSkAo/jpTdt/Bi0z przgyOpX1H+J5xlTk/0+dwBrwuNmuDOGt8bVV796a5DWON0xMXXZWDgSPyBpKUpy bvT4N36v69Bn1W+HE32NtqOO4PB2Ad6572G8/eGSfRsUguB/yEubjnCmHt4swUe+ khQe8oG81GFgSdijMsi4bU3/5qv1CfIv0o56oUaqq2p0P3GhQB5qF7LPiAF60IXA bDt5a8x+/CBeYFUoh7FBLxnlBYfvyQ0n8nnnsG5dFdMLD7/pqHYA/bkFIJhAY7BD tmxMOQNnVTvkBpNSbX0nsl9A8NjUjyUw -----END CERTIFICATE-----Generated at Sun Jun 22 08:52:26 2025 by rpki-client