$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft File: ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json) Hash identifier: BYg02ei0n3FeGu4WjXl2TKPuMGU0kt87SyeID0MS6Bk= Subject key identifier: D6:7B:C8:58:27:9E:4A:E2:7D:B4:68:B0:52:A7:88:98:9D:30:BC:37 Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35 Certificate issuer: /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35 Certificate serial: 02E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft Manifest number: 02B8 Signing time: Thu 19 Jun 2025 01:23:49 +0000 Manifest this update: Thu 19 Jun 2025 01:23:48 +0000 Manifest next update: Thu 26 Jun 2025 01:23:48 +0000 Files and hashes: 1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: jXJikhB6POXa6OH+kfsl9bpk7ggLq72uuE1wY1pH0Zg=) 2: C7C081641C2411F0AAC7CA1EC4F9AE02.roa (hash: XydeZPWKtG1etOuPzQDEhVL2WYamD3gJgaFCyMqQRnA=) 3: E4C4FBB8200811F0AB28851DC4F9AE02.roa (hash: pVHrgOFKFC07D4oFMxsUE21iWBEjMFIznwU/76ruSbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 738 (0x2e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35 Validity Not Before: Jun 19 01:23:48 2025 GMT Not After : Jun 26 01:23:48 2025 GMT Subject: CN=685366a5-a4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:57:cf:ab:98:7b:d0:e6:6f:43:d9:98:3c:1a: ab:1c:12:6d:0f:0c:0d:9f:96:6e:bc:2d:39:83:82: 08:68:ee:9a:32:ae:8e:78:d1:f5:a0:6d:94:3e:fd: 52:93:56:da:1e:2a:8c:fa:21:fd:79:6e:0f:b2:33: 72:8e:38:15:c2:89:07:1e:e3:14:4d:ed:32:df:79: 5d:1e:29:75:f1:8d:cd:ac:ff:f5:d2:34:9a:af:9d: 0a:c1:fc:20:b4:45:a6:9a:b9:ba:9a:f6:0d:89:f1: ac:bb:eb:ea:ea:1e:d3:bc:82:a9:51:76:f9:f7:c7: 0f:33:23:b0:96:be:48:37:5b:53:c2:64:19:52:85: a4:ff:b7:2f:e4:7e:c3:cb:08:ec:c0:8c:6f:71:05: f4:47:52:0d:af:06:e0:7a:bc:f7:a2:ab:bb:1a:28: 9c:7d:69:3a:01:62:0e:1e:f7:8f:07:a5:bc:e5:af: 92:01:53:06:5e:80:5c:89:4d:0f:92:f9:64:ee:cd: cf:c5:08:33:2d:82:34:9a:f7:8f:ae:bb:95:51:80: cc:7c:54:04:8e:fe:dd:11:70:5a:8d:9e:c8:a6:a0: 21:e7:83:f2:1d:e6:5e:b2:9b:d4:c5:8b:ee:4d:2e: 4c:64:7c:45:c7:ce:05:68:87:3f:7d:94:ab:58:4b: f5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7B:C8:58:27:9E:4A:E2:7D:B4:68:B0:52:A7:88:98:9D:30:BC:37 X509v3 Authority Key Identifier: keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:bf:f7:65:70:02:3a:3e:4d:60:3d:17:60:81:02:60:0a:97: ad:e4:f3:17:70:f3:bd:27:27:c9:aa:3a:6e:2c:10:b2:f4:91: d5:8b:30:7d:7f:95:b0:04:16:8c:4e:de:92:65:be:3c:c1:4f: 6f:af:f8:c7:17:a5:e7:4d:f9:8e:8a:b4:18:25:a0:e1:c7:5f: f8:01:50:ed:e4:d9:14:56:88:e9:7f:94:f1:cf:e4:f3:73:5c: 8c:03:43:d5:82:54:a8:0f:f7:2d:45:f4:70:22:32:01:57:e3: b6:7d:fc:15:b2:fb:ab:da:fa:fb:d1:02:ed:8f:4d:73:54:cb: 97:9e:90:2f:26:ae:a2:60:c2:02:ab:ce:9f:fc:c9:05:e6:6f: 1b:12:ce:3b:83:32:f1:ab:ab:84:97:55:02:5b:c4:7e:70:e3: 34:17:a4:79:1c:94:06:91:8c:86:49:f8:dc:45:30:ec:c9:c2: a3:4e:09:4b:7b:76:34:63:d4:ee:2f:00:59:f0:66:b8:80:dd: e9:e2:9f:61:3b:1c:69:5d:29:1d:7b:5d:81:2d:07:26:8b:1a: 97:92:a5:b8:d2:c4:b1:79:e0:2a:65:a9:d3:3f:b9:33:c2:85: 0b:87:1a:86:5e:a6:ab:35:88:f2:2a:ce:a8:63:4a:eb:a1:dd: 51:42:01:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBENjkxMTAvBgNVBAUTKDEwM0ZBOEJERkZGQjlGMDU1NzA3MkM0NzMzMkI4MUE5 RTgwRUREMzUwHhcNMjUwNjE5MDEyMzQ4WhcNMjUwNjI2MDEyMzQ4WjAYMRYwFAYD VQQDEw02ODUzNjZhNS1hNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21fPq5h70OZvQ9mYPBqrHBJtDwwNn5ZuvC05g4IIaO6aMq6OeNH1oG2UPv1S k1baHiqM+iH9eW4PsjNyjjgVwokHHuMUTe0y33ldHil18Y3NrP/10jSar50Kwfwg tEWmmrm6mvYNifGsu+vq6h7TvIKpUXb598cPMyOwlr5IN1tTwmQZUoWk/7cv5H7D ywjswIxvcQX0R1INrwbgerz3oqu7GiicfWk6AWIOHvePB6W85a+SAVMGXoBciU0P kvlk7s3PxQgzLYI0mvePrruVUYDMfFQEjv7dEXBajZ7IpqAh54PyHeZespvUxYvu TS5MZHxFx84FaIc/fZSrWEv17wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZ7yFgn nkrifbRosFKniJidMLw3MB8GA1UdIwQYMBaAFBA/qL3/+58FVwcsRzMrganoDt01 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ2OS8wRTE3N0Q1QTA1 OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253VlhCeXhITXl1QnFlZ08z VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VELW92Zl83bndWWEJ5eEhNeXVCcWVnTzNUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ2OS8wRTE3N0Q1QTA1OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253 VlhCeXhITXl1QnFlZ08zVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkv/dlcAI6Pk1gPRdggQJgCpet5PMXcPO9JyfJqjpuLBCy9JHVizB9 f5WwBBaMTt6SZb48wU9vr/jHF6XnTfmOirQYJaDhx1/4AVDt5NkUVojpf5Txz+Tz c1yMA0PVglSoD/ctRfRwIjIBV+O2ffwVsvur2vr70QLtj01zVMuXnpAvJq6iYMIC q86f/MkF5m8bEs47gzLxq6uEl1UCW8R+cOM0F6R5HJQGkYyGSfjcRTDsycKjTglL e3Y0Y9TuLwBZ8Ga4gN3p4p9hOxxpXSkde12BLQcmixqXkqW40sSxeeAqZanTP7kz woULhxqGXqarNYjyKs6oY0rrod1RQgEg -----END CERTIFICATE-----Generated at Fri Jun 20 19:34:47 2025 by rpki-client