$ rpki-client -vvf rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft File: odoVuis7tmKheOJtlmgVoiouRpk.mft (raw, json) Hash identifier: Ecci8Zd90Hw4W9jEa+gHztx7M+UkFjuvW6mEfdgU+2k= Subject key identifier: 1A:75:A5:1B:5B:C8:FB:0A:83:9C:94:A9:FF:5D:75:A6:FA:FD:97:01 Authority key identifier: A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99 Certificate issuer: /CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699 Certificate serial: 02D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft Manifest number: 02C8 Signing time: Sun 29 Jun 2025 00:58:10 +0000 Manifest this update: Sun 29 Jun 2025 00:58:10 +0000 Manifest next update: Sun 06 Jul 2025 00:58:10 +0000 Files and hashes: 1: odoVuis7tmKheOJtlmgVoiouRpk.crl (hash: jbFXwc003GBPlB5Ic5BYSy1WEPaNUBrklnIADBwBHrQ=) 2: 692F8290AF1D11EFA7108387C4F9AE02.roa (hash: WDaHtMQWTwJWQkeIMiJU8NUrdki0tCHjoldLxpeTYvo=) 3: 57BB8E50AF1D11EF9CB35387C4F9AE02.roa (hash: bzAyLuYRUMBSf4vl6Z05UJcWg+7dmLiTXnPYXge8oFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 725 (0x2d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B55C, serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699 Validity Not Before: Jun 29 00:58:10 2025 GMT Not After : Jul 6 00:58:10 2025 GMT Subject: CN=68608fa2-1aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:4d:af:ef:f1:11:32:28:88:99:6a:b9:8a: 49:9b:98:21:71:dd:f9:71:b9:92:9d:d6:c5:64:cf: 5d:79:a3:8e:db:11:55:56:77:af:f9:f7:aa:58:9b: 30:39:cc:a8:c3:b7:a2:08:4d:98:5f:11:7d:1e:7b: 8d:87:54:f8:53:43:7a:97:ce:fd:7d:cf:d5:73:75: c0:50:d8:52:d4:00:b0:14:90:50:00:73:5f:2e:d3: 91:28:7d:42:13:38:46:20:a8:1b:3d:c4:60:31:cf: 09:8e:52:9e:2e:5b:88:72:d7:6d:6e:56:7c:4e:84: d4:85:bc:ef:ff:44:37:cc:bf:ae:f0:0b:19:81:6b: bd:8d:f2:be:80:c7:34:ab:93:3a:c0:86:5a:56:bc: 55:52:45:bc:42:22:1c:24:6d:7f:f1:3f:97:94:d1: ad:4e:de:d6:92:b1:9d:74:2b:72:9b:74:91:05:a7: 8b:28:89:ab:5c:a7:82:81:e1:25:0c:c5:96:32:28: 75:b5:fd:08:9d:3c:8f:1b:b6:6d:68:1b:3f:06:69: ab:22:f2:59:81:83:03:a4:00:05:91:9f:3a:54:31: 7b:0f:60:c8:11:87:0a:e1:e3:f6:fe:00:79:30:e2: 3d:0b:23:13:5b:27:ff:80:9a:14:e2:dc:a6:40:db: f2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:75:A5:1B:5B:C8:FB:0A:83:9C:94:A9:FF:5D:75:A6:FA:FD:97:01 X509v3 Authority Key Identifier: keyid:A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:3a:ce:e7:91:9e:01:4a:b0:95:e6:41:ca:66:8d:35:55:97: 98:eb:a6:aa:69:c1:53:68:96:80:d0:6d:6a:b3:26:12:fe:b2: 41:e5:42:59:5b:81:1d:35:a0:85:9f:87:bf:dd:de:9f:74:a4: 31:4f:3c:f7:a8:ee:a9:bc:05:0e:ca:ee:9d:a8:57:46:6b:8c: 41:9c:69:a7:05:26:2b:02:7a:eb:c5:4c:94:45:49:45:91:53: 5e:3c:56:b6:8d:53:0a:be:b6:a3:7c:72:d4:70:d5:b2:ce:97: 47:1a:a5:d6:66:fc:28:8d:cc:06:54:a7:d2:4d:62:01:51:d8: d5:99:82:bd:7a:17:94:15:c7:8b:1e:1a:20:51:39:83:ee:68: a5:b8:a8:68:1f:cf:3e:3d:76:ed:76:2f:ba:b6:3c:f1:0c:13: 17:b8:ed:cd:19:1d:23:cc:b2:50:06:80:e5:ba:3d:35:18:23: 8e:f5:37:95:0b:fa:1d:e5:de:dc:85:bf:7c:cb:98:28:3b:24: 79:35:75:cb:d8:b5:95:82:8e:0c:08:f6:bd:2d:43:95:fb:30: e6:47:d8:13:c0:32:d3:26:95:7f:95:40:7a:0e:88:36:f7:d6: a7:6f:ed:0e:70:6a:41:e9:c6:f4:31:dc:7d:9c:d8:64:e5:c1: f9:9c:1b:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1NUMxMTAvBgNVBAUTKEExREExNUJBMkIzQkI2NjJBMTc4RTI2RDk2NjgxNUEy MkEyRTQ2OTkwHhcNMjUwNjI5MDA1ODEwWhcNMjUwNzA2MDA1ODEwWjAYMRYwFAYD VQQDEw02ODYwOGZhMi0xYWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgtNr+/xETIoiJlquYpJm5ghcd35cbmSndbFZM9deaOO2xFVVnev+feqWJsw Ocyow7eiCE2YXxF9HnuNh1T4U0N6l879fc/Vc3XAUNhS1ACwFJBQAHNfLtORKH1C EzhGIKgbPcRgMc8JjlKeLluIctdtblZ8ToTUhbzv/0Q3zL+u8AsZgWu9jfK+gMc0 q5M6wIZaVrxVUkW8QiIcJG1/8T+XlNGtTt7WkrGddCtym3SRBaeLKImrXKeCgeEl DMWWMih1tf0InTyPG7ZtaBs/BmmrIvJZgYMDpAAFkZ86VDF7D2DIEYcK4eP2/gB5 MOI9CyMTWyf/gJoU4tymQNvykQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBp1pRtb yPsKg5yUqf9ddab6/ZcBMB8GA1UdIwQYMBaAFKHaFborO7ZioXjibZZoFaIqLkaZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjU1Qy9FOTE2RDJFRUY4 NUMxMUVDQUI2RTJFNjVDNEY5QUUwMi9vZG9WdWlzN3RtS2hlT0p0bG1nVm9pb3VS cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29kb1Z1aXM3dG1LaGVPSnRsbWdWb2lvdVJway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjU1Qy9FOTE2RDJFRUY4NUMxMUVDQUI2RTJFNjVDNEY5QUUwMi9vZG9WdWlzN3Rt S2hlT0p0bG1nVm9pb3VScGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiOs7nkZ4BSrCV5kHKZo01VZeY66aqacFTaJaA0G1qsyYS/rJB5UJZ W4EdNaCFn4e/3d6fdKQxTzz3qO6pvAUOyu6dqFdGa4xBnGmnBSYrAnrrxUyURUlF kVNePFa2jVMKvrajfHLUcNWyzpdHGqXWZvwojcwGVKfSTWIBUdjVmYK9eheUFceL HhogUTmD7miluKhoH88+PXbtdi+6tjzxDBMXuO3NGR0jzLJQBoDluj01GCOO9TeV C/od5d7chb98y5goOyR5NXXL2LWVgo4MCPa9LUOV+zDmR9gTwDLTJpV/lUB6Dog2 99anb+0OcGpB6cb0Mdx9nNhk5cH5nBu3 -----END CERTIFICATE-----Generated at Sun Jun 29 19:31:16 2025 by rpki-client