$ rpki-client -vvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft File: OTVm9EF4bZWNinkRjo71b8hy5cU.mft (raw, json) Hash identifier: MKWEeYV69DvaXuxg1TvdwPSkw/2ypj3+2XXrimCebIQ= Subject key identifier: E5:90:B4:17:54:09:22:8C:7E:10:3E:19:C8:84:64:CA:D7:10:DB:D8 Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 Certificate issuer: /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Certificate serial: 0687 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft Manifest number: 0679 Signing time: Sat 14 Jun 2025 22:04:34 +0000 Manifest this update: Sat 14 Jun 2025 22:04:33 +0000 Manifest next update: Sat 21 Jun 2025 22:04:33 +0000 Files and hashes: 1: OTVm9EF4bZWNinkRjo71b8hy5cU.crl (hash: uEwn35gg+8PX/Qbagx2UOfU8KkNFcH4C2qrE9kvNRKY=) 2: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (hash: Tn4IiKC/ehOcHKqem3Io6ZVpsXPRVKGONn1yIt6QObo=) 3: BDBFFB867D5411EB8CBE5B57C4F9AE02.roa (hash: rBuNfeeoduUd1I0NoD4IRcILjNn1S7GUQ8XAggSqgBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1671 (0x687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91673ED, serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Validity Not Before: Jun 14 22:04:33 2025 GMT Not After : Jun 21 22:04:33 2025 GMT Subject: CN=684df1f1-bbc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7f:b4:d9:6a:8a:0a:6e:b6:3f:d9:c9:e5:89: 1a:19:e1:f5:81:40:e8:56:34:3c:52:58:a8:d9:2e: 1e:0f:56:c6:b0:d5:e8:57:eb:50:05:c3:6b:e5:5f: 51:24:4e:09:57:2d:9e:fe:4f:cc:a2:68:20:cd:b3: 23:7e:67:48:2c:10:a3:3b:99:2d:b2:2b:08:de:0d: 7b:38:19:f1:e8:7f:31:83:12:5e:4b:96:3b:3b:33: f3:6e:8b:1a:ff:6b:d6:16:ec:b8:b6:79:db:d7:84: 11:e6:e9:fd:a7:6c:7b:a1:31:23:5d:96:bc:d7:3c: ff:5e:bc:6d:01:41:b1:b6:9c:2a:96:36:66:b1:04: 3e:80:b8:17:68:5c:1c:88:9f:f9:15:ed:d8:09:c5: c8:10:0e:3d:c0:e3:4a:d0:50:11:62:5d:15:a8:8b: 5b:ce:39:92:d7:7a:9f:ae:e1:e3:2b:47:80:7e:bc: c2:41:3f:3e:bb:27:13:3e:9b:73:79:e8:65:f2:16: ff:96:b3:4c:21:42:10:07:6c:a0:ae:70:79:7a:5e: ed:18:88:ce:8c:35:43:a7:26:87:76:7a:09:e8:7e: 6c:29:47:3e:d1:f1:e9:26:f4:97:65:7d:0f:c8:bf: 77:ef:98:3a:28:2f:96:0d:c7:05:8e:1d:d0:98:7b: 62:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:90:B4:17:54:09:22:8C:7E:10:3E:19:C8:84:64:CA:D7:10:DB:D8 X509v3 Authority Key Identifier: keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:30:0b:88:ea:19:24:54:c6:3b:99:b4:64:06:10:c0:21:bc: 50:03:73:3d:84:60:d2:d2:ae:68:9e:0d:db:2a:23:ed:30:a9: 09:86:cd:77:7e:31:45:d4:54:e6:0f:0a:20:47:17:02:aa:9e: ad:bb:29:36:bb:01:eb:08:2e:0d:3f:76:7a:6c:a8:9c:23:ad: 11:47:2b:d0:43:84:67:c0:38:f7:60:aa:b7:98:13:61:bf:0a: 4f:6f:94:c5:64:31:b6:04:11:2f:e5:67:51:24:0c:7d:b5:5d: ae:df:9f:74:77:7a:3b:5d:53:19:79:ec:6b:e8:57:7d:09:f3: 5f:a1:09:a9:eb:06:19:c9:52:f2:cd:1e:3d:73:51:54:8a:74: c5:90:07:da:e7:98:55:de:7a:65:2f:e9:5f:35:ff:05:3f:20: 1d:30:2f:db:d5:07:02:22:fe:21:df:f1:f4:08:60:ce:aa:bc: 6c:c5:f0:8c:e5:54:4f:a7:cc:4c:5c:f0:cb:95:65:f3:bd:9f: 57:68:d9:af:c5:19:d9:53:bc:e7:24:ac:ff:39:f9:24:b1:04: f6:7d:5e:aa:3e:7d:82:86:b0:9f:f9:9a:d7:60:74:04:a5:d5: 6b:22:f5:e4:ef:f3:00:e8:38:e6:e9:c9:b2:e7:87:30:59:2a: 1c:9a:5d:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczRUQxMTAvBgNVBAUTKDM5MzU2NkY0NDE3ODZEOTU4RDhBNzkxMThFOEVGNTZG Qzg3MkU1QzUwHhcNMjUwNjE0MjIwNDMzWhcNMjUwNjIxMjIwNDMzWjAYMRYwFAYD VQQDEw02ODRkZjFmMS1iYmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqX+02WqKCm62P9nJ5YkaGeH1gUDoVjQ8Ulio2S4eD1bGsNXoV+tQBcNr5V9R JE4JVy2e/k/MomggzbMjfmdILBCjO5ktsisI3g17OBnx6H8xgxJeS5Y7OzPzbosa /2vWFuy4tnnb14QR5un9p2x7oTEjXZa81zz/XrxtAUGxtpwqljZmsQQ+gLgXaFwc iJ/5Fe3YCcXIEA49wONK0FARYl0VqItbzjmS13qfruHjK0eAfrzCQT8+uycTPptz eehl8hb/lrNMIUIQB2ygrnB5el7tGIjOjDVDpyaHdnoJ6H5sKUc+0fHpJvSXZX0P yL9375g6KC+WDccFjh3QmHtixwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWQtBdU CSKMfhA+GciEZMrXENvYMB8GA1UdIwQYMBaAFDk1ZvRBeG2VjYp5EY6O9W/IcuXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzNFRC80RDhGQTIwRTdE NDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJaV05pbmtSam83MWI4aHk1 Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09UVm05RUY0YlpXTmlua1JqbzcxYjhoeTVjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzNFRC80RDhGQTIwRTdENDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJa V05pbmtSam83MWI4aHk1Y1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+MAuI6hkkVMY7mbRkBhDAIbxQA3M9hGDS0q5ong3bKiPtMKkJhs13 fjFF1FTmDwogRxcCqp6tuyk2uwHrCC4NP3Z6bKicI60RRyvQQ4RnwDj3YKq3mBNh vwpPb5TFZDG2BBEv5WdRJAx9tV2u3590d3o7XVMZeexr6Fd9CfNfoQmp6wYZyVLy zR49c1FUinTFkAfa55hV3nplL+lfNf8FPyAdMC/b1QcCIv4h3/H0CGDOqrxsxfCM 5VRPp8xMXPDLlWXzvZ9XaNmvxRnZU7znJKz/OfkksQT2fV6qPn2ChrCf+ZrXYHQE pdVrIvXk7/MA6Djm6cmy54cwWSocml2A -----END CERTIFICATE-----Generated at Sun Jun 15 07:05:24 2025 by rpki-client