$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft File: OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json) Hash identifier: oN7PTaB8d6EPFDDe0FwMZ0jAZbGwe1w9/CBXhA/knSc= Subject key identifier: 62:F6:09:D9:3F:2E:E2:6D:7F:FA:DE:E6:C1:38:DF:45:F2:2F:A2:ED Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0D65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft Manifest number: 0BB1 Signing time: Sat 14 Jun 2025 19:52:41 +0000 Manifest this update: Sat 14 Jun 2025 19:52:40 +0000 Manifest next update: Sat 21 Jun 2025 19:52:40 +0000 Files and hashes: 1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: hDxcOZ3CZJpxBd7rCCJWmlvgUsUGJzMb8IWYPxikcMo=) 2: F24431E6240411F0AE5EFB74C4F9AE02.roa (hash: D5TVu62+o2pWXjG2Ad3FZn9P4JRgqvMCkvXJMQGkGsQ=) 3: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: LCTaAks4BqlupqHXTz1VdaXnEXMyWZW8ZhZmp2UYH3Q=) 4: F0D4053EEDCC11EF8C545F54C4F9AE02.roa (hash: 4QfTRpAN+SnkWQoS+a8PlbB83aqDd8EbkaEm2nM3FeI=) 5: BC7FD008F9A511EF885CA76EC4F9AE02.roa (hash: Ex7392prc1zunazGcvbevro7VL69lZXVyb5pMImsMLI=) 6: 96D29A2220E011F086D75E5CC4F9AE02.roa (hash: 0FOWU/128zkabpuP6eI/6fQrKWNdatB4AEVKWZRuiyw=) 7: 95F1EC2A20E011F086D75E5CC4F9AE02.roa (hash: SlVDSUqUztmia+IRuLwVDUN43/JEzgcVEMaQ1zGpGf4=) 8: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: YJQ9SpoqXrkvlRkEN5wsjZZeJRNdP87R6x7oDal+xTw=) 9: 7D0D2FCA28CF11F0B4341346C4F9AE02.roa (hash: g7xVQYCNjaK/RZPD6CLpdC1v04D2i9MLXYqSInLLiJI=) 10: 7C5CEA3E28CF11F0B4341346C4F9AE02.roa (hash: vAcCfJjAn78EuvFILS+tqNoRGxNCcoW5NdFqExkzlhU=) 11: F16CF7BC240411F0AE5EFB74C4F9AE02.roa (hash: NRkATBKCrFf8XehUQ4Kcg07Ah9qbgMhjDJkO80Y8+Ms=) 12: 712D274624BF11F0ADDD3D44C4F9AE02.roa (hash: hI8rPrNoFSuSDtKlIpIXN+5aKoXdXK52nCDyF+LIHUg=) 13: 90A6E260F97711EF931B0A48C4F9AE02.roa (hash: yNt3+76oxiczQlWAKFrrom/dgPrfFKQXLtrONN2mqsc=) 14: D8538FA2204411F0B6649425C4F9AE02.roa (hash: uqPVCmw8xhCuAFmHWCKeDdfNdsicl8lxhmTwM3JVS44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3429 (0xd65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Jun 14 19:52:40 2025 GMT Not After : Jun 21 19:52:40 2025 GMT Subject: CN=684dd309-10ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:23:83:c8:81:87:42:0b:50:37:e3:0c:43: d5:fd:61:ea:dd:64:bd:3e:4c:42:7f:cf:10:af:ed: 03:6c:59:61:ff:a0:db:07:cb:5c:d4:d7:40:ff:24: ed:59:67:6d:c3:f0:2c:27:3d:fc:a9:b1:33:10:60: 83:9e:7a:2b:da:38:bd:d8:9a:90:14:5e:a5:0a:87: 3c:0f:7d:05:18:30:ea:f5:7f:ca:63:33:f2:45:ff: 24:57:a3:39:8f:d4:7b:bc:8b:f9:c6:fd:99:8c:42: 46:42:61:e7:e3:7d:f3:fe:9b:d1:5a:90:2d:fa:79: 67:b3:c2:3b:3a:97:c7:76:a1:91:47:38:0f:52:02: 9d:d1:64:fb:d7:b6:08:b8:7b:c3:d5:64:f6:40:02: 06:88:3b:c1:5a:f5:8a:53:30:5b:e1:d3:1b:76:dd: 31:83:94:86:b7:c7:27:23:5f:6b:a0:b9:78:ed:b8: 5a:1a:58:71:62:42:4d:da:c1:78:5b:fe:c1:8f:0d: b0:dd:2c:ee:37:a8:d0:94:55:ff:61:77:ee:08:d9: 79:a5:8c:f7:ac:a4:22:83:ad:2e:48:5e:a0:65:db: 83:5c:0c:05:2f:f2:ef:e2:cc:4c:23:83:6f:b4:08: 12:6b:9d:b1:09:de:72:0a:e3:0a:da:44:22:0d:17: 03:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F6:09:D9:3F:2E:E2:6D:7F:FA:DE:E6:C1:38:DF:45:F2:2F:A2:ED X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fd:cc:b4:e6:60:57:e6:53:03:58:e5:9a:0d:38:3d:ab:5c: 4e:03:ee:1d:62:92:fa:6e:f7:23:53:63:96:0c:9d:55:cb:36: e8:c7:8c:51:b0:01:c4:6e:be:c7:f1:e0:28:13:6f:2e:de:7f: 7b:71:29:41:9d:39:ef:17:6e:e9:cc:91:1b:1a:42:7c:22:72: b1:a6:1f:96:4e:28:e1:44:93:4f:bb:e2:a2:bd:02:a1:91:3d: 53:d1:6a:b4:e8:b4:7f:32:48:a4:69:c3:fa:87:03:d1:30:fb: b3:56:1b:b1:24:ea:60:05:89:9e:49:d6:e7:65:8a:57:29:fb: b4:85:9c:0a:f4:8c:25:77:29:ad:75:90:b1:ff:1b:4d:cc:e4: b8:91:cd:aa:0b:a4:52:99:09:f8:2f:a9:3f:6c:28:a5:a1:68: ce:12:83:88:ed:e1:e3:33:67:79:e6:cd:d6:a1:0a:46:01:68: bc:c5:ea:6c:97:1a:14:ed:30:01:54:5e:8b:e7:24:5e:38:28: 43:6b:0d:64:30:ef:54:bf:89:cf:c6:a6:49:47:d9:27:40:57: 5a:6c:94:30:7e:ae:72:5d:70:c4:f9:10:52:22:b4:c9:22:28: cc:f5:41:53:3d:c9:b9:7c:42:20:08:d5:c4:22:3a:81:6f:a2: 35:ce:7d:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUwNjE0MTk1MjQwWhcNMjUwNjIxMTk1MjQwWjAYMRYwFAYD VQQDEw02ODRkZDMwOS0xMGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcsjg8iBh0ILUDfjDEPV/WHq3WS9PkxCf88Qr+0DbFlh/6DbB8tc1NdA/yTt WWdtw/AsJz38qbEzEGCDnnor2ji92JqQFF6lCoc8D30FGDDq9X/KYzPyRf8kV6M5 j9R7vIv5xv2ZjEJGQmHn433z/pvRWpAt+nlns8I7OpfHdqGRRzgPUgKd0WT717YI uHvD1WT2QAIGiDvBWvWKUzBb4dMbdt0xg5SGt8cnI19roLl47bhaGlhxYkJN2sF4 W/7Bjw2w3SzuN6jQlFX/YXfuCNl5pYz3rKQig60uSF6gZduDXAwFL/Lv4sxMI4Nv tAgSa52xCd5yCuMK2kQiDRcD+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGL2Cdk/ LuJtf/re5sE430XyL6LtMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBDRC80NjcyM0YxRTg5RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5 YVJqanA1LS1DQ1BHY3k0bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs/cy05mBX5lMDWOWaDTg9q1xOA+4dYpL6bvcjU2OWDJ1Vyzbox4xR sAHEbr7H8eAoE28u3n97cSlBnTnvF27pzJEbGkJ8InKxph+WTijhRJNPu+KivQKh kT1T0Wq06LR/MkikacP6hwPRMPuzVhuxJOpgBYmeSdbnZYpXKfu0hZwK9Iwldymt dZCx/xtNzOS4kc2qC6RSmQn4L6k/bCiloWjOEoOI7eHjM2d55s3WoQpGAWi8xeps lxoU7TABVF6L5yReOChDaw1kMO9Uv4nPxqZJR9knQFdabJQwfq5yXXDE+RBSIrTJ IijM9UFTPcm5fEIgCNXEIjqBb6I1zn25 -----END CERTIFICATE-----Generated at Sun Jun 15 08:43:44 2025 by rpki-client