$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json) Hash identifier: fYRFg0i10w4wKCIbIwFtQO1JUNOikRXv/NjrDGZIqr4= Subject key identifier: 8C:15:0A:0C:84:3F:8A:65:B9:57:85:FB:67:2B:B8:3D:D1:ED:95:72 Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft Manifest number: 6E Signing time: Tue 17 Jun 2025 05:48:19 +0000 Manifest this update: Tue 17 Jun 2025 05:48:18 +0000 Manifest next update: Tue 24 Jun 2025 05:48:18 +0000 Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: +3idFLWWZG78ic4cdfXiv+MU4MDNbeS3ElmUJHt5Jek=) 2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: gEbj+lO4aYDwjrfL1QJi0wu8U7VQFh/BgCCzbNzGNWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Validity Not Before: Jun 17 05:48:18 2025 GMT Not After : Jun 24 05:48:18 2025 GMT Subject: CN=685101a2-df47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:ee:42:b8:21:9e:cf:17:be:0b:10:78:c7: 45:8c:d8:30:24:d9:65:ed:69:98:0b:86:57:69:69: e8:35:97:28:fc:b2:97:6f:95:3d:06:18:7c:32:a0: de:02:64:11:a5:a2:46:79:bb:a0:f0:90:37:45:70: 1a:66:46:7d:1e:7a:8d:25:5e:ec:33:ff:4f:be:2a: 00:dc:31:05:0d:c6:99:c1:e3:0c:80:71:7d:c1:f4: 7f:b9:4c:3e:2d:96:31:e1:5a:7b:45:6e:46:89:e7: ff:cf:9b:5a:1c:ae:4c:78:7e:a5:88:e7:34:e8:b4: b7:c5:db:b0:49:80:9e:dd:c4:4a:1c:6b:fb:4e:e4: f3:ca:a5:c7:5c:6f:f6:20:b7:68:fc:00:42:02:eb: de:1f:e7:84:a8:c1:da:60:77:e2:ba:0d:4a:87:8d: 1d:1f:15:19:13:da:63:ef:2f:92:ea:42:cb:6c:c3: 4e:a8:3b:02:cd:ca:7e:a3:09:de:df:3c:4a:1f:31: 3b:58:aa:15:46:fd:df:a2:6c:cc:92:d9:75:22:32: 8c:44:fd:03:6a:c6:09:0c:8e:79:7e:ab:59:a4:ac: 77:88:a6:55:40:80:5c:61:33:1a:4b:8c:b2:1d:df: 02:c4:2e:da:f7:67:ad:21:75:85:34:3d:1a:aa:f6: 22:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:15:0A:0C:84:3F:8A:65:B9:57:85:FB:67:2B:B8:3D:D1:ED:95:72 X509v3 Authority Key Identifier: keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:41:67:22:68:c8:6a:83:f4:93:42:62:f7:84:33:55:ac:7a: a6:74:c9:95:c0:11:ca:a6:43:0e:7e:7a:18:6c:f7:41:4e:4f: 89:69:e3:53:7a:b9:54:56:2e:96:4c:a3:b9:9c:e9:cd:0a:24: 2b:c7:3b:8f:13:52:61:6a:36:8a:12:59:3c:b6:68:b2:88:a3: 96:b6:80:aa:04:bf:36:fe:2c:ee:fb:07:32:f7:d2:79:27:3a: 8a:c2:5a:61:22:ec:98:6f:3d:23:83:d4:11:6e:a7:fe:c7:e1: 58:88:11:51:99:d7:70:32:21:65:90:55:7c:d9:80:61:ef:2a: de:66:bf:f4:b6:2d:12:c6:8d:be:97:2b:c4:25:b9:70:fe:95: 90:56:e5:6e:16:55:6b:cc:13:bd:65:14:0a:80:89:86:3f:83: 86:3a:cf:ac:03:80:4c:47:56:6e:ea:14:63:2b:a5:84:25:5f: 77:14:21:f9:a3:fc:04:f7:27:a0:9f:a1:88:b1:9e:90:2f:fb: 15:1c:4b:07:f1:bc:5a:f7:4e:e0:ec:d1:63:dd:88:38:a6:cb: 92:88:30:eb:6c:cc:0d:d6:e2:c6:d7:eb:61:65:42:ca:5d:1d: 95:5c:68:80:e1:88:21:76:52:fe:b9:d6:cf:32:26:17:e2:a5: a7:4b:6a:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUJGMDExMC8GA1UEBRMoMjFDRkNFODFEODc1RDVDRjhGNTk2QURCRkNDMzYwMTk2 MUM0NDFFNzAeFw0yNTA2MTcwNTQ4MThaFw0yNTA2MjQwNTQ4MThaMBgxFjAUBgNV BAMTDTY4NTEwMWEyLWRmNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6YO5CuCGezxe+CxB4x0WM2DAk2WXtaZgLhldpaeg1lyj8spdvlT0GGHwyoN4C ZBGlokZ5u6DwkDdFcBpmRn0eeo0lXuwz/0++KgDcMQUNxpnB4wyAcX3B9H+5TD4t ljHhWntFbkaJ5//Pm1ocrkx4fqWI5zTotLfF27BJgJ7dxEoca/tO5PPKpcdcb/Yg t2j8AEIC694f54Sowdpgd+K6DUqHjR0fFRkT2mPvL5LqQstsw06oOwLNyn6jCd7f PEofMTtYqhVG/d+ibMyS2XUiMoxE/QNqxgkMjnl+q1mkrHeIplVAgFxhMxpLjLId 3wLELtr3Z60hdYU0PRqq9iJjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjBUKDIQ/ imW5V4X7Zyu4PdHtlXIwHwYDVR0jBBgwFoAUIc/Ogdh11c+PWWrb/MNgGWHEQecw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQkYwLzlGNTkxRThFQTQx NTExRUZBMTRGQkQzRkM0RjlBRTAyL0ljX09nZGgxMWMtUFdXcmJfTU5nR1dIRVFl Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWNfT2dkaDExYy1QV1dyYl9NTmdHV0hFUWVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx QkYwLzlGNTkxRThFQTQxNTExRUZBMTRGQkQzRkM0RjlBRTAyL0ljX09nZGgxMWMt UFdXcmJfTU5nR1dIRVFlYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFNBZyJoyGqD9JNCYveEM1WseqZ0yZXAEcqmQw5+ehhs90FOT4lp41N6 uVRWLpZMo7mc6c0KJCvHO48TUmFqNooSWTy2aLKIo5a2gKoEvzb+LO77BzL30nkn OorCWmEi7JhvPSOD1BFup/7H4ViIEVGZ13AyIWWQVXzZgGHvKt5mv/S2LRLGjb6X K8QluXD+lZBW5W4WVWvME71lFAqAiYY/g4Y6z6wDgExHVm7qFGMrpYQlX3cUIfmj /AT3J6CfoYixnpAv+xUcSwfxvFr3TuDs0WPdiDimy5KIMOtszA3W4sbX62FlQspd HZVcaIDhiCF2Uv651s8yJhfipadLak4= -----END CERTIFICATE-----Generated at Wed Jun 18 18:37:41 2025 by rpki-client