$ rpki-client -vvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft File: OEBSLgVtM3Uf55akOVuNTf3lj4w.mft (raw, json) Hash identifier: a6Rw8uBPWSyQPZPxo40sOHAIH57+VBKrVXXm198Adas= Subject key identifier: B5:07:B1:C2:8B:20:45:28:36:B7:40:44:3F:A6:ED:8D:39:6D:FF:80 Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C Certificate issuer: /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Certificate serial: 0640 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft Manifest number: 0638 Signing time: Mon 16 Jun 2025 22:22:52 +0000 Manifest this update: Mon 16 Jun 2025 22:22:52 +0000 Manifest next update: Mon 23 Jun 2025 22:22:52 +0000 Files and hashes: 1: OEBSLgVtM3Uf55akOVuNTf3lj4w.crl (hash: TEiDF06+SFEteOviGVClCqzB8GWv1sD4Ob+/lOCaSfo=) 2: B21979EE9CAF11ECBFF4AF64C4F9AE02.roa (hash: sdbnkMVypf4sBW84IBpLOAa+Rd3ZV2UqRLClbIWsTfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FEF3, serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Validity Not Before: Jun 16 22:22:52 2025 GMT Not After : Jun 23 22:22:52 2025 GMT Subject: CN=6850993c-5cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b2:92:fd:cd:37:8c:3e:08:de:fa:39:6e:ac: a0:c1:ac:0a:80:c3:56:85:1c:0e:49:a3:2b:b1:79: 59:44:a8:76:18:51:de:c4:19:e5:02:b3:a3:8b:3c: ed:ad:c6:69:21:23:e0:35:97:4a:4b:c2:19:11:98: f0:f2:ef:8c:65:56:47:cb:22:67:f7:06:43:fe:eb: bb:51:34:92:08:4f:a6:9b:3c:02:d6:e6:92:c5:eb: 37:c2:18:6e:96:cf:52:88:45:cf:06:ed:02:38:cd: d5:42:c9:63:d7:2d:fa:f8:e3:6a:fd:be:16:5a:27: 7e:16:b7:dc:64:53:f6:20:b4:25:36:db:c3:6b:1d: 06:f4:95:66:4f:37:bc:5f:67:ad:73:64:a3:5e:2e: 69:d1:c2:68:28:df:0f:84:1f:8f:35:42:5a:40:7d: 31:07:dd:10:5d:81:5e:15:70:37:9d:8f:89:78:2c: e0:5f:6c:b3:09:27:a6:d0:ff:8c:60:a8:fe:5e:c9: 44:37:9f:43:a9:f5:a4:38:5d:9f:3b:5d:a9:e7:92: d7:3e:60:df:df:d7:8f:8e:b7:fc:b0:fb:a5:ec:15: 3a:e1:59:87:18:17:90:d2:ba:bc:c8:b4:77:3a:fd: 6b:06:5a:4e:0d:fc:f5:2e:9a:8e:81:69:a8:70:33: a9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:07:B1:C2:8B:20:45:28:36:B7:40:44:3F:A6:ED:8D:39:6D:FF:80 X509v3 Authority Key Identifier: keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:29:a4:e9:66:39:41:64:df:a3:07:cb:60:ba:9f:18:33:01: 78:1d:be:f8:5e:1f:37:72:9f:c4:68:ee:7a:54:85:5c:fc:8f: da:ef:2b:d3:88:84:f2:9a:de:21:a1:9a:a6:88:15:53:33:20: 03:da:05:85:42:9e:d9:46:a1:1d:28:ed:69:38:b8:f1:e8:39: 05:3e:8e:5b:0d:a1:16:5c:7d:2e:94:2a:e9:78:24:e6:ed:19: e3:f1:19:3c:11:a3:aa:d9:e7:be:ec:ef:a3:97:d8:3c:e4:64: 6f:b4:4e:71:88:92:58:ea:a2:87:35:ac:42:10:71:5d:29:cf: 7d:be:22:13:6d:89:f1:9d:37:de:ee:69:bb:12:9f:52:0f:f0: a9:2f:f0:22:3f:d1:3a:c0:c7:1b:74:ff:fb:e6:72:8e:6b:a9: 17:9c:6f:00:7d:12:e7:de:03:81:21:b8:5b:66:ab:e8:34:27: c4:71:f7:e9:e9:c2:74:37:3d:72:3a:24:4a:60:e3:d7:f4:09: 0a:40:8b:93:76:b7:1c:47:75:ae:d7:d8:17:48:39:25:e7:d2: 8e:3c:51:a4:4a:3c:e3:46:f1:5a:16:c6:ea:5a:0b:73:45:e7: 01:aa:b8:0b:cf:5e:1f:3f:b2:70:a6:8e:87:90:02:7c:b9:da: 22:70:ab:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZFRjMxMTAvBgNVBAUTKDM4NDA1MjJFMDU2RDMzNzUxRkU3OTZBNDM5NUI4RDRE RkRFNThGOEMwHhcNMjUwNjE2MjIyMjUyWhcNMjUwNjIzMjIyMjUyWjAYMRYwFAYD VQQDEw02ODUwOTkzYy01Y2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7KS/c03jD4I3vo5bqygwawKgMNWhRwOSaMrsXlZRKh2GFHexBnlArOjizzt rcZpISPgNZdKS8IZEZjw8u+MZVZHyyJn9wZD/uu7UTSSCE+mmzwC1uaSxes3whhu ls9SiEXPBu0COM3VQslj1y36+ONq/b4WWid+FrfcZFP2ILQlNtvDax0G9JVmTze8 X2etc2SjXi5p0cJoKN8PhB+PNUJaQH0xB90QXYFeFXA3nY+JeCzgX2yzCSem0P+M YKj+XslEN59DqfWkOF2fO12p55LXPmDf39ePjrf8sPul7BU64VmHGBeQ0rq8yLR3 Ov1rBlpODfz1LpqOgWmocDOpawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUHscKL IEUoNrdARD+m7Y05bf+AMB8GA1UdIwQYMBaAFDhAUi4FbTN1H+eWpDlbjU395Y+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVGMy9ERERDMDFFQzk4 NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0zVWY1NWFrT1Z1TlRmM2xq NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FQlNMZ1Z0TTNVZjU1YWtPVnVOVGYzbGo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkVGMy9ERERDMDFFQzk4NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0z VWY1NWFrT1Z1TlRmM2xqNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACKaTpZjlBZN+jB8tgup8YMwF4Hb74Xh83cp/EaO56VIVc/I/a7yvT iITymt4hoZqmiBVTMyAD2gWFQp7ZRqEdKO1pOLjx6DkFPo5bDaEWXH0ulCrpeCTm 7Rnj8Rk8EaOq2ee+7O+jl9g85GRvtE5xiJJY6qKHNaxCEHFdKc99viITbYnxnTfe 7mm7Ep9SD/CpL/AiP9E6wMcbdP/75nKOa6kXnG8AfRLn3gOBIbhbZqvoNCfEcffp 6cJ0Nz1yOiRKYOPX9AkKQIuTdrccR3Wu19gXSDkl59KOPFGkSjzjRvFaFsbqWgtz RecBqrgLz14fP7Jwpo6HkAJ8udoicKt2 -----END CERTIFICATE-----Generated at Tue Jun 17 10:45:33 2025 by rpki-client