$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft File: OgLv98yci6oS18hStv_Gn7BgmJs.mft (raw, json) Hash identifier: GDygdTNx6o10qQSN64v1u6V17WJgsPOCClYdXd5zsSM= Subject key identifier: C3:4C:19:E8:ED:50:05:B4:A5:11:A1:8D:0A:84:FA:7A:ED:2B:0A:9E Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B Certificate issuer: /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B Certificate serial: 1038 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft Manifest number: 1016 Signing time: Wed 18 Jun 2025 17:24:22 +0000 Manifest this update: Wed 18 Jun 2025 17:24:21 +0000 Manifest next update: Wed 25 Jun 2025 17:24:21 +0000 Files and hashes: 1: OgLv98yci6oS18hStv_Gn7BgmJs.crl (hash: x/eMaJwDHnn4Rws26oS28n+1+zFg4iGFac6kD4b+ElY=) 2: 9F08E8B2D28E11EB9F83683DC4F9AE02.roa (hash: bytWuNzrLQw9v+QMqc5rrIvyHwJBakcmOmXht2Npskg=) 3: F10E46E6F07C11EBB9AF1B63C4F9AE02.roa (hash: wikUFUY0h7gGqht6lrAAGNzDvHHVKOxeJ+8mIhyaOLg=) 4: 3BD3D78AD17B11EF8626DB84C4F9AE02.roa (hash: rjaSyAzG4Vkfbg5uZuSjD+n9EriKOHglMvv9YunPzH4=) 5: B94D12C0F07F11EBAE5A5934C4F9AE02.roa (hash: ZbaNyd2npVQ7n+Gz6EMJlX5yHpd7tPiQHaPoJPJgyBc=) 6: 66425D7E2B1311EB89CBB164C4F9AE02.roa (hash: ZsKWGtKVq3aoWptNQmv7xVjVnY/4jXxJBvjnB+HtK+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 17:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4152 (0x1038) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B Validity Not Before: Jun 18 17:24:21 2025 GMT Not After : Jun 25 17:24:21 2025 GMT Subject: CN=6852f645-d2af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b5:c0:6c:a2:45:7e:1e:1e:cd:55:f6:92:6e: c3:45:0f:01:06:3d:53:bb:81:7d:09:a8:57:1c:90: b8:29:9b:c7:7d:f5:4a:45:06:2a:4e:f2:43:64:a0: 2d:ee:11:49:d4:1e:8f:6b:7c:c5:ba:94:bb:39:ab: 14:3f:30:1c:c3:50:64:c0:aa:bf:8e:bd:dd:c0:f1: e7:62:0d:1a:3b:52:9d:da:e4:15:3d:6c:0e:13:e2: 43:3f:8a:e2:7a:20:cf:7e:4e:57:30:55:1e:93:8b: 43:9d:63:42:8e:43:9d:98:c7:78:37:ab:7c:b0:1b: a1:60:40:a0:e6:4b:5b:c4:f7:93:e4:f0:33:c6:a9: 8e:f7:dc:a9:38:cd:06:1a:cd:63:5e:03:bf:2e:90: 35:bd:b9:89:6d:9c:c6:e8:b9:2d:40:41:0a:8b:cf: 73:2b:45:1e:e8:99:b5:f5:cb:98:61:9d:6d:4b:c4: 95:b8:51:bc:21:03:29:b3:95:1b:43:c5:02:96:38: 3a:41:b1:20:93:ff:39:e5:6c:eb:e3:b3:16:8e:da: 16:09:2c:f0:7f:c7:aa:fb:96:5e:a5:91:4e:95:bc: 93:f3:16:87:45:dd:49:c5:8e:27:5e:d2:4c:d6:6a: b6:4e:4b:9f:50:0f:d7:8c:35:b6:15:01:85:75:a7: 71:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4C:19:E8:ED:50:05:B4:A5:11:A1:8D:0A:84:FA:7A:ED:2B:0A:9E X509v3 Authority Key Identifier: keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:e7:ab:b4:52:31:7f:71:3c:e0:21:8c:f9:f0:c2:68:04:b6: bb:da:93:cb:34:c8:02:0e:6a:90:ed:29:17:df:d0:37:69:b9: 28:8b:87:d4:e1:ab:a8:77:c7:d4:10:80:8d:e2:93:07:c0:b7: 39:83:49:20:0a:8a:c2:b6:b8:46:f0:99:71:3e:6b:90:5d:a5: a7:11:a2:2e:a5:19:f7:92:5d:ba:a0:b9:96:cb:f6:e5:19:be: ac:3b:e0:87:6c:04:88:ab:91:20:34:6c:54:1c:40:c4:c7:39: b8:0d:83:fd:dd:f3:e5:c0:92:d6:c4:36:f2:ae:04:63:00:f1: b2:87:3d:00:00:57:36:15:2e:9f:73:5d:0c:3f:26:35:16:aa: 32:39:e4:2b:bb:0a:88:fc:d8:ec:b7:a4:05:47:60:3b:dc:35: 54:01:0d:13:13:2d:5f:00:5e:c6:5d:02:f6:e4:ce:8b:de:d6: 21:77:6d:ab:06:d1:ee:66:1b:28:33:fa:ca:05:29:92:42:89: dc:08:76:d6:a1:eb:dc:81:bc:39:aa:12:4e:d5:ba:e5:e1:89: e4:1a:3d:7a:18:15:58:32:f9:6e:44:95:9e:c0:88:c0:1b:f7: 36:99:72:f5:56:d1:d9:91:da:81:84:07:93:38:c6:19:5e:3f: 49:28:4e:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM3OTgxMTAvBgNVBAUTKDNBMDJFRkY3Q0M5QzhCQUExMkQ3Qzg1MkI2RkZDNjlG QjA2MDk4OUIwHhcNMjUwNjE4MTcyNDIxWhcNMjUwNjI1MTcyNDIxWjAYMRYwFAYD VQQDEw02ODUyZjY0NS1kMmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLXAbKJFfh4ezVX2km7DRQ8BBj1Tu4F9CahXHJC4KZvHffVKRQYqTvJDZKAt 7hFJ1B6Pa3zFupS7OasUPzAcw1BkwKq/jr3dwPHnYg0aO1Kd2uQVPWwOE+JDP4ri eiDPfk5XMFUek4tDnWNCjkOdmMd4N6t8sBuhYECg5ktbxPeT5PAzxqmO99ypOM0G Gs1jXgO/LpA1vbmJbZzG6LktQEEKi89zK0Ue6Jm19cuYYZ1tS8SVuFG8IQMps5Ub Q8UCljg6QbEgk/855Wzr47MWjtoWCSzwf8eq+5ZepZFOlbyT8xaHRd1JxY4nXtJM 1mq2TkufUA/XjDW2FQGFdadxdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNMGejt UAW0pRGhjQqE+nrtKwqeMB8GA1UdIwQYMBaAFDoC7/fMnIuqEtfIUrb/xp+wYJib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc5OC85MDE3QjUwQTRB MjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2b1MxOGhTdHZfR243Qmdt SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09nTHY5OHljaTZvUzE4aFN0dl9HbjdCZ21Kcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzc5OC85MDE3QjUwQTRBMjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2 b1MxOGhTdHZfR243QmdtSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU56u0UjF/cTzgIYz58MJoBLa72pPLNMgCDmqQ7SkX39A3abkoi4fU 4auod8fUEICN4pMHwLc5g0kgCorCtrhG8JlxPmuQXaWnEaIupRn3kl26oLmWy/bl Gb6sO+CHbASIq5EgNGxUHEDExzm4DYP93fPlwJLWxDbyrgRjAPGyhz0AAFc2FS6f c10MPyY1FqoyOeQruwqI/Njst6QFR2A73DVUAQ0TEy1fAF7GXQL25M6L3tYhd22r BtHuZhsoM/rKBSmSQoncCHbWoevcgbw5qhJO1brl4YnkGj16GBVYMvluRJWewIjA G/c2mXL1VtHZkdqBhAeTOMYZXj9JKE7G -----END CERTIFICATE-----Generated at Fri Jun 20 14:24:22 2025 by rpki-client