$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft File: oBoPBuMQs4EwEx14gpcL8WLdDWY.mft (raw, json) Hash identifier: xTehNuyB0eqcWRxbIak7IqbpwJxA3UeFpNGeJA+duTE= Subject key identifier: 08:C7:27:47:BE:00:8D:05:53:94:F5:8B:42:97:56:80:F0:67:2B:C7 Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 Certificate issuer: /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Certificate serial: 033E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft Manifest number: 0338 Signing time: Tue 17 Jun 2025 00:39:46 +0000 Manifest this update: Tue 17 Jun 2025 00:39:45 +0000 Manifest next update: Tue 24 Jun 2025 00:39:45 +0000 Files and hashes: 1: oBoPBuMQs4EwEx14gpcL8WLdDWY.crl (hash: 0IpCOGSaG3I52eAE5NC4ZBb/o1LsKUzU+CAQMZQfRaI=) 2: 2DC3DC54D54E11EF8C5B1651C4F9AE02.roa (hash: jj/VEZFojNzwFut6xQ2ddbaM/ffKwcFrBgOFEnS8TYI=) 3: 39952E50C6CB11ECB185E43EC4F9AE02.roa (hash: UriRXIOaFvm5u1qncQTi3IERwvU0QHA/1gyCNIPeCng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 830 (0x33e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E55, serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Validity Not Before: Jun 17 00:39:45 2025 GMT Not After : Jun 24 00:39:45 2025 GMT Subject: CN=6850b951-996c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f9:97:e7:11:43:67:10:a2:83:c8:1b:1e:19: e5:af:38:af:3c:5c:88:dd:21:b9:ae:0a:00:01:1d: d5:fe:06:02:69:1e:00:57:70:5e:e9:bb:ca:bb:f3: 0b:e9:3c:35:08:e8:6a:f0:aa:41:25:37:40:10:77: 4a:50:57:ea:b0:ef:f9:78:c8:ec:3c:94:ae:5e:52: b7:e2:3e:85:e9:6f:c1:ab:f6:28:e3:a8:2b:4c:6b: ca:21:ca:a0:bf:25:55:c6:d5:14:6f:25:3e:07:8e: 1c:c2:bd:30:f1:b3:35:2e:6a:7f:27:f6:5e:64:74: fa:42:a9:11:4d:07:25:8f:3b:39:cf:9b:ad:3a:15: 8d:dd:5f:3b:41:bb:34:2b:de:e8:b9:d5:9e:4d:14: ab:76:98:e3:70:1f:ce:14:96:1b:90:f6:fc:61:65: 79:69:0e:6c:6f:63:78:a9:a6:be:42:3a:be:76:27: ed:f8:56:90:23:b8:93:6b:2e:88:fe:c4:87:91:54: bb:de:c5:6a:a1:dd:db:68:b0:b2:27:6e:70:a9:94: 20:a6:82:13:b0:4d:96:d8:a6:11:9e:6f:5d:47:43: 93:22:91:12:64:4c:97:08:a9:59:3c:3e:a7:98:59: 29:f8:1c:ff:17:d9:36:2d:57:02:c9:8f:6e:53:61: 20:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C7:27:47:BE:00:8D:05:53:94:F5:8B:42:97:56:80:F0:67:2B:C7 X509v3 Authority Key Identifier: keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:78:5f:0d:36:45:fa:b4:2e:58:87:fc:2f:0e:fb:5d:cc:fc: 29:19:3a:59:8e:bb:95:64:54:03:d8:d7:85:ac:01:85:55:8b: c8:2f:b0:d2:f6:03:59:8c:19:a1:4d:9c:80:5a:41:73:1c:63: c9:1e:7c:9d:9a:46:00:17:1e:e5:f0:03:f4:72:e2:0f:d3:a2: 48:36:03:ae:26:a2:71:6c:70:52:d9:cc:38:a6:fe:dd:a0:28: 30:53:9a:ef:0d:76:d3:08:ef:ca:35:92:96:65:ab:bb:25:1c: 24:e7:e2:08:d3:7f:b5:78:0f:07:e9:5f:2f:ca:62:73:fd:e7: d9:6e:d0:7f:99:4e:fd:d1:03:e8:8a:ad:9d:bc:6e:97:ef:e7: ac:6e:c4:93:8a:1a:36:10:b2:a7:f0:e6:b9:a9:e6:40:8b:bf: e5:06:bb:37:0a:bd:a8:25:6e:9e:1a:47:48:47:7e:4f:eb:a9: 75:20:41:8c:e0:ad:8b:5f:a2:03:ea:db:8b:c2:e3:00:c2:4c: 11:ca:5e:7c:8a:7c:07:85:2e:10:bc:12:ef:bd:6f:de:5c:ba: de:c0:e3:51:b9:14:4b:57:3d:01:9c:e2:96:c9:87:27:3b:22: 12:a5:8c:d3:09:f5:7b:e7:98:66:de:43:f4:0e:e2:1f:c7:fc: 3b:9d:9c:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFNTUxMTAvBgNVBAUTKEEwMUEwRjA2RTMxMEIzODEzMDEzMUQ3ODgyOTcwQkYx NjJERDBENjYwHhcNMjUwNjE3MDAzOTQ1WhcNMjUwNjI0MDAzOTQ1WjAYMRYwFAYD VQQDEw02ODUwYjk1MS05OTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/mX5xFDZxCig8gbHhnlrzivPFyI3SG5rgoAAR3V/gYCaR4AV3Be6bvKu/ML 6Tw1COhq8KpBJTdAEHdKUFfqsO/5eMjsPJSuXlK34j6F6W/Bq/Yo46grTGvKIcqg vyVVxtUUbyU+B44cwr0w8bM1Lmp/J/ZeZHT6QqkRTQcljzs5z5utOhWN3V87Qbs0 K97oudWeTRSrdpjjcB/OFJYbkPb8YWV5aQ5sb2N4qaa+Qjq+dift+FaQI7iTay6I /sSHkVS73sVqod3baLCyJ25wqZQgpoITsE2W2KYRnm9dR0OTIpESZEyXCKlZPD6n mFkp+Bz/F9k2LVcCyY9uU2EggQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjHJ0e+ AI0FU5T1i0KXVoDwZyvHMB8GA1UdIwQYMBaAFKAaDwbjELOBMBMdeIKXC/Fi3Q1m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEU1NS83RDMyQTc0RUM2 MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0RXdFeDE0Z3BjTDhXTGRE V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Cb1BCdU1RczRFd0V4MTRncGNMOFdMZERXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEU1NS83RDMyQTc0RUM2MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0 RXdFeDE0Z3BjTDhXTGREV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAeF8NNkX6tC5Yh/wvDvtdzPwpGTpZjruVZFQD2NeFrAGFVYvIL7DS 9gNZjBmhTZyAWkFzHGPJHnydmkYAFx7l8AP0cuIP06JINgOuJqJxbHBS2cw4pv7d oCgwU5rvDXbTCO/KNZKWZau7JRwk5+II03+1eA8H6V8vymJz/efZbtB/mU790QPo iq2dvG6X7+esbsSTiho2ELKn8Oa5qeZAi7/lBrs3Cr2oJW6eGkdIR35P66l1IEGM 4K2LX6ID6tuLwuMAwkwRyl58inwHhS4QvBLvvW/eXLrewONRuRRLVz0BnOKWyYcn OyISpYzTCfV755hm3kP0DuIfx/w7nZz4 -----END CERTIFICATE-----Generated at Wed Jun 18 18:09:08 2025 by rpki-client