$ rpki-client -vvf rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft File: odoVuis7tmKheOJtlmgVoiouRpk.mft (raw, json) Hash identifier: JGikmLP0fM4eBmvV2te5Gwp5tIacGfVeSi2D3hNhSrs= Subject key identifier: 76:4A:D3:95:A0:65:33:71:80:A4:80:DD:D7:22:1F:02:14:58:F7:D7 Authority key identifier: A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99 Certificate issuer: /CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699 Certificate serial: 02F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft Manifest number: 02E6 Signing time: Sat 23 Aug 2025 01:35:08 +0000 Manifest this update: Sat 23 Aug 2025 01:35:07 +0000 Manifest next update: Sat 30 Aug 2025 01:35:07 +0000 Files and hashes: 1: odoVuis7tmKheOJtlmgVoiouRpk.crl (hash: LjF4/E/YJG6ZDkSa4Zk0eEoSAR9BL8pbgdx2ZwbovNY=) 2: 692F8290AF1D11EFA7108387C4F9AE02.roa (hash: LqtX3nkABZHtY7xRPfUQgDvE7oUhnched3ukpR1jMw0=) 3: 57BB8E50AF1D11EF9CB35387C4F9AE02.roa (hash: aL8UwuV9B6ueDtpsOze0tkW6hu8XTEdtukIKIk0NgRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 757 (0x2f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B55C, serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699 Validity Not Before: Aug 23 01:35:07 2025 GMT Not After : Aug 30 01:35:07 2025 GMT Subject: CN=68a91acb-e0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:86:c7:0b:52:4d:fb:87:25:a5:02:86:38:44: 64:e7:ab:45:92:b2:4d:a0:2b:11:2e:51:4c:97:32: c5:c9:74:e8:68:df:05:52:df:cf:e6:bf:1a:52:a4: 6f:75:56:2a:26:b7:d0:d1:db:81:85:68:df:36:a0: af:8f:df:75:d7:78:c2:1c:23:85:e8:67:13:ef:20: 81:ae:fe:75:af:46:42:6c:61:04:21:cf:d0:aa:a9: a0:b2:02:1e:a5:c9:8b:93:23:23:35:0e:39:d5:e0: 3f:62:0c:d6:9a:ce:b1:ed:c3:9a:30:82:4c:b0:1c: 54:b9:72:18:7c:93:49:b3:fa:4c:a4:40:93:5e:e6: 32:7b:a5:27:48:55:11:bf:db:21:b8:ee:6e:bc:85: 0a:3b:30:b9:2a:8a:61:28:8e:14:e1:47:de:62:a6: d8:09:8b:bc:3b:1c:f9:2f:6f:c2:7f:22:7b:63:6b: e9:c8:9e:c8:dc:e7:f5:5d:8c:b3:cc:dc:f1:7e:a1: a0:aa:cc:e9:fc:f7:8f:d0:6c:b8:d0:57:51:3e:53: e1:f4:f1:65:9c:83:8f:1e:62:23:ba:ef:e8:5a:2a: bb:ae:4e:29:f2:ff:07:2b:1b:27:57:49:7b:8f:e7: 63:9e:a5:c7:03:56:88:f4:fe:4f:ec:b4:64:ed:b0: 91:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4A:D3:95:A0:65:33:71:80:A4:80:DD:D7:22:1F:02:14:58:F7:D7 X509v3 Authority Key Identifier: keyid:A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:48:86:e2:75:b0:c9:20:55:db:f1:6a:0a:21:57:60:e0:a9: 6a:ca:e1:0d:d1:b3:be:88:92:ac:99:e1:b5:0d:ab:95:c5:bb: 10:67:00:14:65:c2:bb:8e:f5:2b:6a:22:80:95:e9:fe:da:6a: 74:e5:21:dd:f1:00:ce:62:93:83:b2:bc:b4:c1:d2:d7:c5:10: 83:ce:ab:8a:f6:a4:1c:48:69:f0:6e:b2:99:9f:55:ea:a2:3e: 20:72:6d:ae:17:31:42:b9:09:c1:71:d8:d8:9b:ce:22:34:82: 81:88:2c:aa:10:5d:68:90:e0:01:88:47:8d:ec:55:b2:bd:a8: 8d:ac:81:bc:2b:2b:a2:8f:85:cf:d3:08:62:d4:c2:02:16:76: 24:bf:4b:cb:9f:6f:3c:6b:a9:74:7b:ea:84:12:9d:55:e0:fa: 70:0b:99:00:64:c2:d6:47:f0:b0:c9:4b:47:6e:18:9d:61:7b: 27:1c:ee:45:9a:28:ad:ea:76:47:ab:83:8f:a7:c9:fd:49:01: fa:aa:1f:c8:3d:03:55:01:32:43:57:d7:62:04:c5:a4:b8:9b: 02:7d:36:1a:90:72:d2:5e:1f:e7:6e:55:34:42:ed:40:f3:91: 92:21:03:df:62:1f:58:fb:ec:8a:5e:ce:98:e0:85:2f:11:14: f2:fd:6e:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1NUMxMTAvBgNVBAUTKEExREExNUJBMkIzQkI2NjJBMTc4RTI2RDk2NjgxNUEy MkEyRTQ2OTkwHhcNMjUwODIzMDEzNTA3WhcNMjUwODMwMDEzNTA3WjAYMRYwFAYD VQQDEw02OGE5MWFjYi1lMGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvobHC1JN+4clpQKGOERk56tFkrJNoCsRLlFMlzLFyXToaN8FUt/P5r8aUqRv dVYqJrfQ0duBhWjfNqCvj99113jCHCOF6GcT7yCBrv51r0ZCbGEEIc/QqqmgsgIe pcmLkyMjNQ451eA/YgzWms6x7cOaMIJMsBxUuXIYfJNJs/pMpECTXuYye6UnSFUR v9shuO5uvIUKOzC5KophKI4U4UfeYqbYCYu8Oxz5L2/CfyJ7Y2vpyJ7I3Of1XYyz zNzxfqGgqszp/PeP0Gy40FdRPlPh9PFlnIOPHmIjuu/oWiq7rk4p8v8HKxsnV0l7 j+djnqXHA1aI9P5P7LRk7bCRJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZK05Wg ZTNxgKSA3dciHwIUWPfXMB8GA1UdIwQYMBaAFKHaFborO7ZioXjibZZoFaIqLkaZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjU1Qy9FOTE2RDJFRUY4 NUMxMUVDQUI2RTJFNjVDNEY5QUUwMi9vZG9WdWlzN3RtS2hlT0p0bG1nVm9pb3VS cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29kb1Z1aXM3dG1LaGVPSnRsbWdWb2lvdVJway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjU1Qy9FOTE2RDJFRUY4NUMxMUVDQUI2RTJFNjVDNEY5QUUwMi9vZG9WdWlzN3Rt S2hlT0p0bG1nVm9pb3VScGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8SIbidbDJIFXb8WoKIVdg4KlqyuEN0bO+iJKsmeG1DauVxbsQZwAU ZcK7jvUraiKAlen+2mp05SHd8QDOYpODsry0wdLXxRCDzquK9qQcSGnwbrKZn1Xq oj4gcm2uFzFCuQnBcdjYm84iNIKBiCyqEF1okOABiEeN7FWyvaiNrIG8Kyuij4XP 0whi1MICFnYkv0vLn288a6l0e+qEEp1V4PpwC5kAZMLWR/CwyUtHbhidYXsnHO5F miit6nZHq4OPp8n9SQH6qh/IPQNVATJDV9diBMWkuJsCfTYakHLSXh/nblU0Qu1A 85GSIQPfYh9Y++yKXs6Y4IUvERTy/W4K -----END CERTIFICATE-----Generated at Sat Aug 23 15:38:59 2025 by rpki-client