$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft File: OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json) Hash identifier: DcIq8Ijo3np/GYx56SwV+ph2h9Gb6BT0r3w3jpL//B0= Subject key identifier: 53:EC:80:A2:D4:17:BA:C1:38:86:C3:A5:90:2E:C5:2E:8E:E1:AE:47 Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Certificate serial: 0CB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft Manifest number: 0C8C Signing time: Mon 16 Jun 2025 18:15:27 +0000 Manifest this update: Mon 16 Jun 2025 18:15:27 +0000 Manifest next update: Mon 23 Jun 2025 18:15:26 +0000 Files and hashes: 1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: 6h0Y491w7GYW/Wmf5mkpZTFmPI5KNRP2zJtHTCpDA18=) 2: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: TeIPGyGqDRDL84HA9NnAzVJOOMFf2EjmrKH/elumev8=) 3: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: lRMtWT21HxefR8cIAkbesXguaIjwdfIuBa6XccIOgBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3257 (0xcb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Validity Not Before: Jun 16 18:15:27 2025 GMT Not After : Jun 23 18:15:26 2025 GMT Subject: CN=68505f3f-55ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0d:3a:67:57:8c:88:16:0c:e3:6f:bd:03:1c: fe:d2:fe:c9:57:a8:12:d9:29:e4:58:8e:b1:b3:6c: db:fc:4e:d6:d0:3c:5b:d7:b7:0b:45:06:25:05:4e: 1f:0c:ab:cc:54:6e:e5:90:d4:10:37:95:0f:ac:9b: c8:7e:c5:34:27:b6:12:08:26:38:89:c6:3b:c8:bb: 6a:e6:94:38:0b:f2:e2:c0:fc:2b:00:34:e8:74:c9: 61:84:2f:42:f4:a0:4e:aa:9a:88:05:44:a3:ee:77: 79:7c:0f:bd:45:a3:c8:70:9f:51:06:9c:96:cd:aa: 67:e7:22:33:1b:18:d6:96:5b:a0:04:cc:43:ca:e9: 5b:2f:55:2a:bd:45:c9:8a:c0:59:39:e4:26:75:22: 4b:0a:e4:0d:1e:15:7d:17:fa:0a:91:eb:6d:e5:e6: a7:ea:ec:f2:29:39:67:2e:10:4f:ec:c6:81:ed:1f: 9e:18:c4:46:f1:17:36:90:48:a9:de:41:61:db:8f: b1:10:f6:11:98:ee:16:a8:a0:80:d4:2b:fc:79:e8: f1:de:58:27:6b:aa:ab:92:ac:50:9d:93:ad:f5:03: 32:68:04:0f:f5:fd:f3:be:af:65:41:e0:49:af:9e: e9:63:e6:9c:39:4d:9d:e4:21:f3:1b:4d:55:5e:70: 96:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EC:80:A2:D4:17:BA:C1:38:86:C3:A5:90:2E:C5:2E:8E:E1:AE:47 X509v3 Authority Key Identifier: keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2b:b4:6c:4c:0c:b3:06:94:45:5c:60:00:71:dd:42:e8:a8: 2e:0b:3e:d7:ba:36:c9:05:66:32:c0:f4:e4:10:34:5a:22:67: 72:cc:41:39:55:33:9e:60:d2:4c:d7:6b:fe:b6:93:78:03:03: fb:c9:12:6e:20:c1:9e:70:ff:22:08:c7:7c:2a:da:7d:cb:60: 4c:c4:8b:0c:44:db:50:cb:fc:9f:d4:74:d8:a7:f1:a9:17:48: 2c:ee:6c:2b:5e:58:21:15:15:3f:b4:cb:c2:38:c3:0d:a5:71: c6:af:95:8e:49:c1:3b:5c:a8:4a:a4:06:8c:31:6d:ac:ba:33: cb:f8:f4:32:dd:0a:ae:78:88:e6:00:aa:11:24:00:15:b6:ad: 2a:57:45:e2:2e:58:8a:fa:00:91:a8:d7:24:81:ca:77:d0:92: 6b:86:9d:0c:e5:fe:19:48:6d:6f:b2:18:6f:f0:77:11:bd:7f: 07:c1:5f:54:50:8a:9a:18:8a:fc:a6:67:d1:bc:af:f8:87:cb: f4:5c:28:1d:4d:27:4a:bf:8d:c2:c6:a4:8a:02:01:64:0b:ef: d9:28:d6:2a:ce:dd:3d:a5:8c:46:14:74:88:59:bc:91:5a:93: 5a:f4:d5:7b:3b:f8:b1:51:a0:03:b4:91:a5:4f:fb:43:d9:54: 51:c8:ba:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0NkYxMTAvBgNVBAUTKDM5NzFGN0UyMUQwOEM5MjQzQUJCNDAzRjgwMzA2NEJG NzhCMkQ4ODAwHhcNMjUwNjE2MTgxNTI3WhcNMjUwNjIzMTgxNTI2WjAYMRYwFAYD VQQDEw02ODUwNWYzZi01NWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyw06Z1eMiBYM42+9Axz+0v7JV6gS2SnkWI6xs2zb/E7W0Dxb17cLRQYlBU4f DKvMVG7lkNQQN5UPrJvIfsU0J7YSCCY4icY7yLtq5pQ4C/LiwPwrADTodMlhhC9C 9KBOqpqIBUSj7nd5fA+9RaPIcJ9RBpyWzapn5yIzGxjWllugBMxDyulbL1UqvUXJ isBZOeQmdSJLCuQNHhV9F/oKkett5ean6uzyKTlnLhBP7MaB7R+eGMRG8Rc2kEip 3kFh24+xEPYRmO4WqKCA1Cv8eejx3lgna6qrkqxQnZOt9QMyaAQP9f3zvq9lQeBJ r57pY+acOU2d5CHzG01VXnCWgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPsgKLU F7rBOIbDpZAuxS6O4a5HMB8GA1UdIwQYMBaAFDlx9+IdCMkkOrtAP4AwZL94stiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDQ2Ri83REEyNEM3QTAw NjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlTUTZ1MEFfZ0RCa3YzaXky SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09YSDM0aDBJeVNRNnUwQV9nREJrdjNpeTJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDQ2Ri83REEyNEM3QTAwNjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlT UTZ1MEFfZ0RCa3YzaXkySUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8K7RsTAyzBpRFXGAAcd1C6KguCz7XujbJBWYywPTkEDRaImdyzEE5 VTOeYNJM12v+tpN4AwP7yRJuIMGecP8iCMd8Ktp9y2BMxIsMRNtQy/yf1HTYp/Gp F0gs7mwrXlghFRU/tMvCOMMNpXHGr5WOScE7XKhKpAaMMW2sujPL+PQy3QqueIjm AKoRJAAVtq0qV0XiLliK+gCRqNckgcp30JJrhp0M5f4ZSG1vshhv8HcRvX8HwV9U UIqaGIr8pmfRvK/4h8v0XCgdTSdKv43CxqSKAgFkC+/ZKNYqzt09pYxGFHSIWbyR WpNa9NV7O/ixUaADtJGlT/tD2VRRyLp4 -----END CERTIFICATE-----Generated at Tue Jun 17 00:18:58 2025 by rpki-client