$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft File: OYkRMAEE18WLMm5WZLPXmi1GRuA.mft (raw, json) Hash identifier: 9lM5DPc91Mh0BPu9MFYL3jhdhX4z+erqD3d7euJkqIk= Subject key identifier: 26:F5:BB:FA:73:80:F5:91:D7:6E:97:63:36:A7:0A:25:5D:E3:6B:23 Authority key identifier: 39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0 Certificate issuer: /CN=A918F1C9/serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0 Certificate serial: 0A0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft Manifest number: 0A37 Signing time: Mon 16 Jun 2025 19:45:54 +0000 Manifest this update: Mon 16 Jun 2025 19:45:53 +0000 Manifest next update: Mon 23 Jun 2025 19:45:53 +0000 Files and hashes: 1: OYkRMAEE18WLMm5WZLPXmi1GRuA.crl (hash: OfaLwjy6iZA9W5LeQaeVIQPlfZHmp8VFNWXHnSNDAoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 19:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2574 (0xa0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1C9, serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0 Validity Not Before: Jun 16 19:45:53 2025 GMT Not After : Jun 23 19:45:53 2025 GMT Subject: CN=68507472-5391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:36:13:7c:c6:b9:84:46:33:31:b5:4c:ff: 7c:11:c0:36:a1:ed:f2:ae:38:5a:ef:34:5d:55:48: af:6a:e2:da:b2:53:be:29:ce:fb:1a:a6:40:35:bd: 48:78:0a:83:65:5e:b4:00:16:2d:f9:17:00:35:74: 9e:3e:91:5b:1e:2b:d0:b2:8a:56:9d:05:d4:5b:86: 61:9d:12:04:ce:57:75:51:fa:a0:68:3f:25:fa:20: 27:fc:43:00:39:5e:09:04:59:cc:b3:53:26:27:3d: ca:61:21:ee:c1:57:b0:06:80:43:fb:6d:aa:10:da: d9:f2:c6:65:66:78:e2:ae:9e:9c:3b:fa:08:2a:43: 5e:7b:9b:cc:ea:82:ec:22:9a:4d:80:da:d0:07:75: 4f:52:71:b7:8f:c3:a2:8c:a3:8b:2b:39:3a:18:ab: b4:4f:c7:46:48:4d:6d:ab:9d:89:cc:0f:b4:bd:32: 59:d9:a3:1b:34:60:c0:32:bf:14:89:71:26:a7:bb: 9d:d2:5c:b7:6f:f3:f8:77:ae:a5:48:6d:d3:6c:eb: 4e:7e:ea:55:b5:0a:1d:fc:1a:c3:32:22:99:7d:33: 31:c5:5d:ae:11:bc:c0:af:43:94:46:45:8c:0b:96: 96:85:e0:8f:fe:77:5f:f4:19:9e:87:76:fa:1d:fc: 7a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F5:BB:FA:73:80:F5:91:D7:6E:97:63:36:A7:0A:25:5D:E3:6B:23 X509v3 Authority Key Identifier: keyid:39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:5d:a6:c6:7a:38:8c:7d:e5:2b:de:53:b7:9d:5c:3c:b6:fb: a0:42:c3:33:b7:45:41:3d:63:0d:ee:a2:1f:16:ce:f6:fd:c7: 76:9b:e6:da:ed:95:71:2c:a0:29:62:6d:e1:dd:6a:33:c5:66: 51:61:e9:7c:fd:f8:75:a9:00:8d:5f:7a:88:82:cd:25:89:a2: e9:e4:34:0a:5d:8b:31:57:f1:03:73:fa:ce:be:cf:ab:34:80: d5:0a:ea:fa:ec:d4:30:26:4b:ee:78:0f:7c:b1:c5:95:e9:51: a0:dc:51:ea:b9:27:d4:6b:b2:df:87:62:13:44:65:dd:c6:b8: 26:7f:85:a7:c7:79:0b:c3:92:74:df:3b:3d:10:0c:9f:96:90: 49:0a:65:44:a9:40:2a:12:34:e7:97:46:43:66:d2:bc:82:b1: c1:8d:76:3e:dd:60:80:02:d3:24:53:ba:40:c6:5f:31:17:7c: 69:54:93:11:fd:4a:0e:13:90:6a:c4:70:a3:64:98:05:fd:55: fc:41:6d:54:5a:5d:7c:00:1f:07:8a:5c:04:12:9a:e0:81:c4: 24:6a:93:ca:f7:04:06:31:7d:90:f4:3e:99:2e:6d:9c:30:9f: f4:e3:71:af:a1:89:c6:c6:b7:3b:52:76:18:60:7e:fd:a9:af: 68:01:ef:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYxQzkxMTAvBgNVBAUTKDM5ODkxMTMwMDEwNEQ3QzU4QjMyNkU1NjY0QjNENzlB MkQ0NjQ2RTAwHhcNMjUwNjE2MTk0NTUzWhcNMjUwNjIzMTk0NTUzWjAYMRYwFAYD VQQDEw02ODUwNzQ3Mi01MzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywI2E3zGuYRGMzG1TP98EcA2oe3yrjha7zRdVUivauLaslO+Kc77GqZANb1I eAqDZV60ABYt+RcANXSePpFbHivQsopWnQXUW4ZhnRIEzld1UfqgaD8l+iAn/EMA OV4JBFnMs1MmJz3KYSHuwVewBoBD+22qENrZ8sZlZnjirp6cO/oIKkNee5vM6oLs IppNgNrQB3VPUnG3j8OijKOLKzk6GKu0T8dGSE1tq52JzA+0vTJZ2aMbNGDAMr8U iXEmp7ud0ly3b/P4d66lSG3TbOtOfupVtQod/BrDMiKZfTMxxV2uEbzAr0OURkWM C5aWheCP/ndf9Bmeh3b6Hfx6NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCb1u/pz gPWR126XYzanCiVd42sjMB8GA1UdIwQYMBaAFDmJETABBNfFizJuVmSz15otRkbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjFDOS82QTU3QUI4QzdG OTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFFRTE4V0xNbTVXWkxQWG1pMUdS dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Za1JNQUVFMThXTE1tNVdaTFBYbWkxR1J1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjFDOS82QTU3QUI4QzdGOTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFFRTE4 V0xNbTVXWkxQWG1pMUdSdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0XabGejiMfeUr3lO3nVw8tvugQsMzt0VBPWMN7qIfFs72/cd2m+ba 7ZVxLKApYm3h3WozxWZRYel8/fh1qQCNX3qIgs0liaLp5DQKXYsxV/EDc/rOvs+r NIDVCur67NQwJkvueA98scWV6VGg3FHquSfUa7Lfh2ITRGXdxrgmf4Wnx3kLw5J0 3zs9EAyflpBJCmVEqUAqEjTnl0ZDZtK8grHBjXY+3WCAAtMkU7pAxl8xF3xpVJMR /UoOE5BqxHCjZJgF/VX8QW1UWl18AB8HilwEEprggcQkapPK9wQGMX2Q9D6ZLm2c MJ/043GvoYnGxrc7UnYYYH79qa9oAe/K -----END CERTIFICATE-----Generated at Tue Jun 17 10:20:20 2025 by rpki-client