$ rpki-client -vvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft File: OtjA2kteE0OjhFRLZEARiFJg_wc.mft (raw, json) Hash identifier: fwIyvH8C2XoBgQzChRSfSyEjpUpfr5r8WKj/UuzSmtU= Subject key identifier: 30:51:EC:02:A4:E0:94:7A:A5:4F:E4:44:73:95:80:68:FF:DD:F4:8C Authority key identifier: 3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07 Certificate issuer: /CN=A916022F/serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07 Certificate serial: 1328 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft Manifest number: 23E7 Signing time: Mon 16 Jun 2025 17:03:40 +0000 Manifest this update: Mon 16 Jun 2025 17:03:39 +0000 Manifest next update: Mon 23 Jun 2025 17:03:39 +0000 Files and hashes: 1: OtjA2kteE0OjhFRLZEARiFJg_wc.crl (hash: 5RjGsmdxkyZ1fEdSA5ehRGJjLc2PVWf2TglIVd1O5QA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4904 (0x1328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916022F, serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07 Validity Not Before: Jun 16 17:03:39 2025 GMT Not After : Jun 23 17:03:39 2025 GMT Subject: CN=68504e6c-58ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c4:2b:ea:82:c7:37:08:a2:e9:cd:d7:60:5c: 03:d3:35:1c:1e:5a:1f:a1:90:2a:5c:10:58:2a:32: 89:a6:f3:a8:26:18:46:45:a7:43:22:5f:a4:af:ac: c6:7b:a9:07:7e:5b:68:78:02:e2:4b:10:39:19:5f: e3:93:a8:cc:ad:e5:30:b6:52:04:59:59:f9:52:c6: 5f:72:13:c6:bc:27:d4:2c:fc:20:b2:ee:5d:1b:d5: 9b:05:e5:58:5b:3e:c4:85:26:0f:ce:e0:ab:5d:a4: 76:e6:89:7b:ef:d0:a1:37:0d:19:c9:bb:1e:73:9b: 41:18:84:8e:34:30:b9:b7:38:96:19:f1:e5:5b:3f: 23:33:91:14:07:b2:ac:30:1e:49:14:59:a3:ec:59: 5c:3e:71:2c:a9:fb:eb:f9:c5:6c:fa:27:84:f3:c7: 7a:69:2f:d8:8b:60:48:85:2f:94:7c:8f:a2:0b:17: 0a:63:4b:a1:c7:e6:ba:ed:71:cd:c6:a6:f2:7c:56: cc:5d:cb:a0:ad:db:b9:58:c6:a0:5b:2e:46:f0:f5: 8e:99:f1:dd:4e:72:c7:5b:0a:e2:3e:aa:7c:cd:ae: 22:58:95:39:ee:87:21:e9:2a:5b:55:6a:c4:ed:de: 39:15:bc:c0:84:ca:4f:11:ae:e9:0c:a4:57:bc:77: d0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:51:EC:02:A4:E0:94:7A:A5:4F:E4:44:73:95:80:68:FF:DD:F4:8C X509v3 Authority Key Identifier: keyid:3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:46:9e:e4:77:bb:24:16:ad:dc:b4:df:1a:df:d5:82:60:ef: e3:7c:79:fa:24:a6:3a:7f:7e:80:53:46:68:aa:45:10:e5:da: 2d:23:2e:9e:ce:2a:94:93:6a:7e:62:ce:a5:c2:3a:9b:ce:b3: 91:17:3b:65:1c:74:81:02:9b:bb:da:85:20:8e:a0:2a:65:1e: b6:50:8a:4a:b9:07:8a:a1:0f:fb:cf:35:7b:c0:22:10:a8:08: 7c:fd:ee:7a:c1:72:de:13:9c:ef:6e:7b:ea:aa:06:e0:25:1d: 84:b1:e9:f6:5f:4b:6a:9b:3c:53:ab:3c:d7:e9:54:1e:40:97: ab:37:ae:5d:52:80:68:7e:e2:ee:f2:d2:9d:17:f7:06:93:04: 1e:46:81:98:d8:47:fd:19:45:b7:5b:5a:56:de:6e:39:3a:ba: 12:a3:65:bd:7c:97:46:70:c2:a8:6c:7f:97:86:2e:f1:45:b5: 14:38:82:23:53:5c:73:7e:c8:67:9c:8c:dd:e8:e6:3e:e5:16: f3:1f:be:63:45:21:d7:49:34:97:b3:76:5d:34:d1:a3:92:be: 3c:59:23:7c:78:ed:15:97:61:b3:a8:1e:cf:31:e9:af:ee:5b: ea:d3:54:76:31:83:ff:7d:e2:e0:51:9b:17:4b:4c:f8:c6:95: ed:10:38:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyMkYxMTAvBgNVBAUTKDNBRDhDMERBNEI1RTEzNDNBMzg0NTQ0QjY0NDAxMTg4 NTI2MEZGMDcwHhcNMjUwNjE2MTcwMzM5WhcNMjUwNjIzMTcwMzM5WjAYMRYwFAYD VQQDEw02ODUwNGU2Yy01OGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnMQr6oLHNwii6c3XYFwD0zUcHlofoZAqXBBYKjKJpvOoJhhGRadDIl+kr6zG e6kHfltoeALiSxA5GV/jk6jMreUwtlIEWVn5UsZfchPGvCfULPwgsu5dG9WbBeVY Wz7EhSYPzuCrXaR25ol779ChNw0Zybsec5tBGISONDC5tziWGfHlWz8jM5EUB7Ks MB5JFFmj7FlcPnEsqfvr+cVs+ieE88d6aS/Yi2BIhS+UfI+iCxcKY0uhx+a67XHN xqbyfFbMXcugrdu5WMagWy5G8PWOmfHdTnLHWwriPqp8za4iWJU57och6SpbVWrE 7d45FbzAhMpPEa7pDKRXvHfQhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBR7AKk 4JR6pU/kRHOVgGj/3fSMMB8GA1UdIwQYMBaAFDrYwNpLXhNDo4RUS2RAEYhSYP8H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDIyRi85RUM3QUZCNEFB N0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUwT2poRlJMWkVBUmlGSmdf d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL090akEya3RlRTBPamhGUkxaRUFSaUZKZ193Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDIyRi85RUM3QUZCNEFBN0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUw T2poRlJMWkVBUmlGSmdfd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXRp7kd7skFq3ctN8a39WCYO/jfHn6JKY6f36AU0ZoqkUQ5dotIy6e ziqUk2p+Ys6lwjqbzrORFztlHHSBApu72oUgjqAqZR62UIpKuQeKoQ/7zzV7wCIQ qAh8/e56wXLeE5zvbnvqqgbgJR2Esen2X0tqmzxTqzzX6VQeQJerN65dUoBofuLu 8tKdF/cGkwQeRoGY2Ef9GUW3W1pW3m45OroSo2W9fJdGcMKobH+Xhi7xRbUUOIIj U1xzfshnnIzd6OY+5RbzH75jRSHXSTSXs3ZdNNGjkr48WSN8eO0Vl2GzqB7PMemv 7lvq01R2MYP/feLgUZsXS0z4xpXtEDin -----END CERTIFICATE-----Generated at Wed Jun 18 06:41:25 2025 by rpki-client