$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft File: mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json) Hash identifier: GGihn6HCjWK44axg5DiXsn3xQejaOUlL1VttNLXCuus= Subject key identifier: 9A:AF:EC:3A:D5:F9:6D:9B:07:25:71:B0:40:D0:9C:22:AF:E3:B0:89 Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 Certificate issuer: /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426 Certificate serial: 0767 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft Manifest number: 075C Signing time: Wed 18 Jun 2025 21:31:51 +0000 Manifest this update: Wed 18 Jun 2025 21:31:50 +0000 Manifest next update: Wed 25 Jun 2025 21:31:50 +0000 Files and hashes: 1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: yVD6NpinQrFwOCBXQaFb6nv0yn+dab63WQrcTpH8oQc=) 2: BFC45160484411F0A8433B42C4F9AE02.roa (hash: l3P+jzCX7aHklMXmE9uReg8fCRmiQ/j2jziDBZRRn4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 21:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1895 (0x767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426 Validity Not Before: Jun 18 21:31:50 2025 GMT Not After : Jun 25 21:31:50 2025 GMT Subject: CN=68533046-1d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c6:8b:3d:ba:3b:67:0e:e9:a6:cb:a1:a9:f0: 50:55:5d:6f:f6:ea:74:e5:b0:77:05:25:a6:98:47: 1a:2a:45:d5:58:3d:03:77:04:04:0f:d0:e2:15:c9: 80:13:e2:09:e5:20:be:4d:d6:8f:4a:b4:b7:ec:7c: 83:4a:2c:cc:3c:dd:cb:4d:52:bf:b6:08:01:da:57: ac:3e:10:5c:45:9a:70:99:8a:69:af:0b:bb:e2:8e: 0b:02:d3:e6:32:2f:79:35:df:19:22:e1:6a:d3:2a: bd:da:93:00:01:88:4b:63:cf:c3:9e:c2:d4:17:65: 0e:ed:db:b4:f1:3f:0c:66:c4:ae:79:a4:b4:db:4e: f9:e0:b1:9c:c2:b1:67:5a:06:d3:34:4b:16:77:ee: 2d:42:84:50:79:3d:e6:f5:98:4a:e6:62:ce:29:e2: 29:86:88:9b:51:f1:b1:a1:f7:58:78:b9:00:ee:3e: 03:e4:8f:bf:5e:91:a7:ba:48:5f:77:69:06:47:4b: 4c:8e:2a:3c:43:d4:97:33:c6:5f:b4:9a:20:17:fa: fc:72:69:49:08:b9:77:c7:c9:25:77:9a:24:14:b6: 43:45:d1:89:ee:f1:58:06:6e:ea:73:2f:df:4b:9c: a8:87:4d:e1:4f:67:75:d7:fc:e0:41:30:bd:6a:8f: e2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AF:EC:3A:D5:F9:6D:9B:07:25:71:B0:40:D0:9C:22:AF:E3:B0:89 X509v3 Authority Key Identifier: keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:3a:29:e9:e1:b9:a1:8c:72:bd:b8:ad:66:f1:b6:73:32:99: af:93:eb:b5:ba:e9:3a:42:9f:0c:eb:17:77:5c:d5:51:1d:f8: 7b:2c:79:71:0f:56:8e:fb:f1:b1:3d:30:a8:a7:80:1d:ce:c6: 18:59:21:5a:b5:d7:94:c8:81:6d:84:ba:3d:b0:ce:47:bf:bf: 2f:be:57:18:f1:18:a4:aa:25:45:72:ff:8a:c0:94:20:2f:8a: a2:bf:55:57:f3:93:7d:e2:e4:e1:6b:b6:58:94:f6:4b:d8:10: 75:e9:a9:8e:61:5f:15:88:e6:0c:8e:a6:71:df:f2:66:54:b7: 84:8f:95:33:2c:81:8b:f9:ad:af:93:04:c9:a7:fb:b2:a8:b7: 75:bd:e9:5b:5d:1b:d5:61:d2:5f:9c:a6:32:4c:dd:5a:e1:f8: 6a:ea:76:cb:44:53:2b:fc:f1:97:9b:db:56:d0:19:32:e1:c6: ed:e1:d8:02:42:2c:7d:e2:ed:4d:95:fa:17:92:9e:f1:30:82: 01:32:42:e1:15:2b:b0:86:3f:1b:5e:8a:2e:d0:64:b6:bc:c7: 07:74:b9:66:c6:6b:60:5e:be:92:13:99:7d:d8:6c:b8:ab:46: 13:c8:9f:16:ed:fd:79:02:5f:a0:f6:9f:c8:92:3d:15:1a:35: bb:2e:85:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDk4RTg1M0UzODUyODYzNEEyNDdDODY4N0ZBMTI4RTUz NEVDODQ0MjYwHhcNMjUwNjE4MjEzMTUwWhcNMjUwNjI1MjEzMTUwWjAYMRYwFAYD VQQDEw02ODUzMzA0Ni0xZDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7MaLPbo7Zw7ppsuhqfBQVV1v9up05bB3BSWmmEcaKkXVWD0DdwQED9DiFcmA E+IJ5SC+TdaPSrS37HyDSizMPN3LTVK/tggB2lesPhBcRZpwmYpprwu74o4LAtPm Mi95Nd8ZIuFq0yq92pMAAYhLY8/DnsLUF2UO7du08T8MZsSueaS020754LGcwrFn WgbTNEsWd+4tQoRQeT3m9ZhK5mLOKeIphoibUfGxofdYeLkA7j4D5I+/XpGnukhf d2kGR0tMjio8Q9SXM8ZftJogF/r8cmlJCLl3x8kld5okFLZDRdGJ7vFYBm7qcy/f S5yoh03hT2d11/zgQTC9ao/iUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqv7DrV +W2bByVxsEDQnCKv47CJMB8GA1UdIwQYMBaAFJjoU+OFKGNKJHyGh/oSjlNOyEQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC83QTEyNjk3RTJB RTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kwb2tmSWFILWhLT1UwN0lS Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaFQ0NFVvWTBva2ZJYUgtaEtPVTA3SVJDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTE4RC83QTEyNjk3RTJBRTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kw b2tmSWFILWhLT1UwN0lSQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLOinp4bmhjHK9uK1m8bZzMpmvk+u1uuk6Qp8M6xd3XNVRHfh7LHlx D1aO+/GxPTCop4AdzsYYWSFatdeUyIFthLo9sM5Hv78vvlcY8RikqiVFcv+KwJQg L4qiv1VX85N94uTha7ZYlPZL2BB16amOYV8ViOYMjqZx3/JmVLeEj5UzLIGL+a2v kwTJp/uyqLd1velbXRvVYdJfnKYyTN1a4fhq6nbLRFMr/PGXm9tW0Bky4cbt4dgC Qix94u1NlfoXkp7xMIIBMkLhFSuwhj8bXoou0GS2vMcHdLlmxmtgXr6SE5l92Gy4 q0YTyJ8W7f15Al+g9p/Ikj0VGjW7LoVK -----END CERTIFICATE-----Generated at Thu Jun 19 20:25:11 2025 by rpki-client