$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft File: ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json) Hash identifier: IF7Sb7e9ZrC58JBqKgsbvMlzmOUQmRax0L2U8jkH7oI= Subject key identifier: 59:26:AB:58:23:90:60:B2:07:9F:37:56:30:3F:23:E7:AB:6B:E8:F9 Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35 Certificate issuer: /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35 Certificate serial: 02FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft Manifest number: 02D3 Signing time: Mon 11 Aug 2025 01:41:57 +0000 Manifest this update: Mon 11 Aug 2025 01:41:56 +0000 Manifest next update: Mon 18 Aug 2025 01:41:56 +0000 Files and hashes: 1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: sy+t/9bnGn4cMJmC73SfEc1XQ8ENXmklzLd1MoAV0mo=) 2: C7C081641C2411F0AAC7CA1EC4F9AE02.roa (hash: XydeZPWKtG1etOuPzQDEhVL2WYamD3gJgaFCyMqQRnA=) 3: E4C4FBB8200811F0AB28851DC4F9AE02.roa (hash: pVHrgOFKFC07D4oFMxsUE21iWBEjMFIznwU/76ruSbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 01:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 765 (0x2fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35 Validity Not Before: Aug 11 01:41:56 2025 GMT Not After : Aug 18 01:41:56 2025 GMT Subject: CN=68994a64-033b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:39:f9:a1:2e:85:71:fd:13:17:a9:6a:9f:b1: da:bd:dd:3f:03:53:a7:4f:fa:40:51:7c:11:72:2b: d3:6a:2d:37:fb:4d:a0:9c:b7:9a:fe:0c:17:b1:86: 48:72:b3:bc:d3:0f:60:43:86:fa:60:d4:3b:b4:1e: 23:3a:50:4f:32:39:c3:47:37:08:f4:39:c8:1f:cb: 01:9a:3f:7e:1d:10:4d:88:f8:c2:ac:bc:3b:8a:f5: f7:fb:b1:e6:94:8c:0e:ff:52:04:65:3a:4c:99:63: 4f:2b:54:05:6f:06:73:d9:26:ca:ba:38:87:fc:51: cb:4f:4a:3d:1a:e6:5b:14:d7:2f:41:e0:76:b9:a1: 5e:fa:88:a4:2d:75:f7:75:b2:ac:dd:6d:61:69:35: 1f:6d:bb:2d:14:70:32:8b:3c:6b:fb:99:fd:d1:45: dd:55:c8:61:b3:4d:4d:66:38:2f:1f:fa:56:61:af: 00:bb:c2:85:dd:ae:1d:e8:f1:06:2d:3a:c0:45:c0: 10:30:19:5a:d6:18:1c:68:85:20:42:80:9b:ce:21: ca:09:93:13:8d:97:a8:20:67:0a:59:fb:be:5f:17: 95:1a:76:ad:61:8a:01:a6:79:01:16:09:e3:6b:d7: c7:21:ee:0f:58:ff:4c:96:82:4c:6b:ff:0d:01:17: 5a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:26:AB:58:23:90:60:B2:07:9F:37:56:30:3F:23:E7:AB:6B:E8:F9 X509v3 Authority Key Identifier: keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ed:4c:20:b1:eb:61:f7:8f:be:ef:e5:a8:44:3e:f6:b4:c2: e8:16:d3:6a:ef:a2:97:52:38:84:81:a6:c5:a7:a5:e4:bf:4a: af:23:1f:17:07:91:68:cb:ea:68:61:97:d1:2e:14:4b:fe:f0: d5:a6:66:77:0b:4e:c0:a7:10:ea:4c:44:71:a6:59:db:c5:54: d5:cd:f1:db:5c:96:4a:94:17:c8:15:c1:b9:8c:67:8a:49:b5: 8e:a8:bf:8a:66:c4:21:a6:6f:9b:97:d3:8e:cd:b6:7d:fb:5d: c6:54:50:a7:3e:16:ba:cb:f1:a3:a1:e9:19:05:77:19:0b:f0: 2c:f3:55:a9:e6:38:b3:2a:8e:6b:9d:a2:bc:3a:fb:19:87:dc: bc:9f:28:c6:1a:9e:d6:1f:6e:c6:97:f7:31:58:c9:1f:59:a7: de:dc:f4:ca:e2:a2:56:ac:20:bd:46:4c:85:10:e4:85:10:f0: 98:95:69:6c:a5:b4:7e:2a:2e:e6:00:46:7e:f6:87:01:ba:51: 72:90:48:cf:20:75:31:e1:81:7a:ba:11:b2:9d:ea:8f:b7:4f: 68:a6:7e:4c:9c:82:0f:d6:df:09:52:33:3b:d2:f6:ff:ec:df: 41:b9:6d:45:d4:17:3b:5e:d2:92:c0:4d:25:72:85:9f:24:79: 6d:6b:d1:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBENjkxMTAvBgNVBAUTKDEwM0ZBOEJERkZGQjlGMDU1NzA3MkM0NzMzMkI4MUE5 RTgwRUREMzUwHhcNMjUwODExMDE0MTU2WhcNMjUwODE4MDE0MTU2WjAYMRYwFAYD VQQDEw02ODk5NGE2NC0wMzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjn5oS6Fcf0TF6lqn7Havd0/A1OnT/pAUXwRcivTai03+02gnLea/gwXsYZI crO80w9gQ4b6YNQ7tB4jOlBPMjnDRzcI9DnIH8sBmj9+HRBNiPjCrLw7ivX3+7Hm lIwO/1IEZTpMmWNPK1QFbwZz2SbKujiH/FHLT0o9GuZbFNcvQeB2uaFe+oikLXX3 dbKs3W1haTUfbbstFHAyizxr+5n90UXdVchhs01NZjgvH/pWYa8Au8KF3a4d6PEG LTrARcAQMBla1hgcaIUgQoCbziHKCZMTjZeoIGcKWfu+XxeVGnatYYoBpnkBFgnj a9fHIe4PWP9MloJMa/8NARdaIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkmq1gj kGCyB583VjA/I+era+j5MB8GA1UdIwQYMBaAFBA/qL3/+58FVwcsRzMrganoDt01 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ2OS8wRTE3N0Q1QTA1 OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253VlhCeXhITXl1QnFlZ08z VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VELW92Zl83bndWWEJ5eEhNeXVCcWVnTzNUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ2OS8wRTE3N0Q1QTA1OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253 VlhCeXhITXl1QnFlZ08zVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq7Uwgseth94++7+WoRD72tMLoFtNq76KXUjiEgabFp6Xkv0qvIx8X B5Foy+poYZfRLhRL/vDVpmZ3C07ApxDqTERxplnbxVTVzfHbXJZKlBfIFcG5jGeK SbWOqL+KZsQhpm+bl9OOzbZ9+13GVFCnPha6y/GjoekZBXcZC/As81Wp5jizKo5r naK8OvsZh9y8nyjGGp7WH27Gl/cxWMkfWafe3PTK4qJWrCC9RkyFEOSFEPCYlWls pbR+Ki7mAEZ+9ocBulFykEjPIHUx4YF6uhGyneqPt09opn5MnIIP1t8JUjM70vb/ 7N9BuW1F1Bc7XtKSwE0lcoWfJHlta9GL -----END CERTIFICATE-----Generated at Wed Aug 13 02:51:45 2025 by rpki-client