$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json) Hash identifier: TqxRGvHxSNJtVccJUc23LGMTsT4Sq7V3ofSG0B0zGvE= Subject key identifier: 0F:6D:1E:64:A3:4A:8C:13:CA:9F:93:5A:2E:DD:20:17:20:BC:B8:54 Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Certificate serial: 0C91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft Manifest number: 0C68 Signing time: Fri 22 Aug 2025 18:41:20 +0000 Manifest this update: Fri 22 Aug 2025 18:41:19 +0000 Manifest next update: Fri 29 Aug 2025 18:41:19 +0000 Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: mpYP4oHH3rfc9yFvl8U8eWu0GzkFwBNOhhd48LHSYzs=) 2: 50AA91CAD70311EFB9BBC86DC4F9AE02.roa (hash: gdYeSr8OVfEXIHB8AE/R/OGyXt1CPyW6FryfjJbmXTw=) 3: 6309B36EEC3911EFB3A92E86C4F9AE02.roa (hash: mJvqce7dr7148HNrDiByF+54zvxocevFsAIl/C28B9c=) 4: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: UKp0al5lwDctbpMZ4w91PmU9xh+b2uAj1qbyNOwUx6Q=) 5: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: xNrMx2ykeoPHlp4OwjxlD2woswWyefyqLirhxUQ7v60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3217 (0xc91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Validity Not Before: Aug 22 18:41:19 2025 GMT Not After : Aug 29 18:41:19 2025 GMT Subject: CN=68a8b9cf-45ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7d:6e:7a:4c:e3:c0:9e:3a:bf:05:64:f8:77: 77:91:2b:72:e5:d1:8f:14:5f:10:8a:fb:61:20:cc: 5f:b1:dd:0d:49:21:0f:ff:f4:63:cc:1c:e6:72:f6: 80:da:a6:9a:c1:28:2d:7d:96:a2:20:8a:c1:91:52: ab:f0:4b:09:83:58:2e:ec:7d:07:39:6e:95:63:48: 76:1e:d3:e5:88:10:d6:11:bf:e3:40:d3:ca:04:d3: 58:c2:9f:46:04:7f:17:07:9d:6b:26:b3:02:6d:ad: 10:26:b1:f3:c3:f8:ef:d2:fe:e5:34:62:ef:df:59: 1d:30:88:46:71:0b:2c:1b:17:48:73:1d:e7:1c:1d: 85:37:31:e1:14:d0:0c:56:3e:14:f6:51:5e:60:3d: 56:a5:93:7a:0c:40:56:e9:5a:c7:15:85:34:37:79: d3:e3:18:1d:b1:f3:49:1b:5c:92:ef:f5:74:8a:eb: 39:9c:b1:12:0e:62:ce:4b:83:81:67:f0:25:20:d3: 22:27:ae:db:a0:62:46:61:e3:11:56:26:d2:e0:7d: cd:e7:fa:ca:cf:46:76:49:d4:fb:27:6e:d2:a7:d5: fd:f0:a4:59:ac:1b:40:0d:6f:d1:90:a7:8a:ac:b0: b2:c4:29:57:6f:2e:14:1e:2f:51:6f:16:8d:68:e0: 09:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6D:1E:64:A3:4A:8C:13:CA:9F:93:5A:2E:DD:20:17:20:BC:B8:54 X509v3 Authority Key Identifier: keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:98:f6:1a:d9:00:ae:fc:ff:74:6c:3c:f1:b9:6a:1d:86:89: 9f:92:36:68:80:52:e6:13:88:5b:63:08:cf:9c:e0:2c:45:2c: c2:41:aa:24:bc:46:b5:73:25:39:1b:13:4c:78:51:8b:bc:08: 9b:3a:ab:55:f6:4b:22:c4:52:23:b9:7e:aa:77:eb:2b:2c:f3: 08:dc:78:e1:9d:34:0f:79:52:a8:80:06:96:2e:93:2f:d1:c4: c7:16:aa:9a:5b:1f:b1:65:49:6c:40:b1:ce:66:b5:51:e5:43: 96:f0:35:65:ea:67:c4:12:3e:a0:e1:ca:d0:8c:42:70:18:2a: 35:53:dc:53:37:58:91:cb:35:1f:33:f6:7e:ec:d4:47:c5:f8: 75:29:db:d9:20:96:ec:ca:4e:44:a7:4a:cf:48:34:ed:f4:54: 4a:aa:54:85:17:bc:57:c8:b5:41:08:df:20:ac:30:7c:ce:02: 9c:75:6b:fc:87:a0:51:b2:15:7d:91:0c:16:64:5c:76:fe:16: a2:fd:8e:e9:38:65:bc:e2:ff:77:2a:26:f9:cb:c4:c2:98:82: 25:c7:96:04:b4:ba:3f:de:d8:5b:1f:61:37:03:a9:27:8a:60: b6:8d:d3:72:e4:b8:df:32:76:1c:8f:f2:02:2b:a9:e0:9b:d7: 58:99:e4:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz QjJEOUY4NDAwHhcNMjUwODIyMTg0MTE5WhcNMjUwODI5MTg0MTE5WjAYMRYwFAYD VQQDEw02OGE4YjljZi00NWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzH1uekzjwJ46vwVk+Hd3kSty5dGPFF8QivthIMxfsd0NSSEP//RjzBzmcvaA 2qaawSgtfZaiIIrBkVKr8EsJg1gu7H0HOW6VY0h2HtPliBDWEb/jQNPKBNNYwp9G BH8XB51rJrMCba0QJrHzw/jv0v7lNGLv31kdMIhGcQssGxdIcx3nHB2FNzHhFNAM Vj4U9lFeYD1WpZN6DEBW6VrHFYU0N3nT4xgdsfNJG1yS7/V0ius5nLESDmLOS4OB Z/AlINMiJ67boGJGYeMRVibS4H3N5/rKz0Z2SdT7J27Sp9X98KRZrBtADW/RkKeK rLCyxClXby4UHi9RbxaNaOAJvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9tHmSj SowTyp+TWi7dIBcgvLhUMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2 Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMmPYa2QCu/P90bDzxuWodhomfkjZogFLmE4hbYwjPnOAsRSzCQaok vEa1cyU5GxNMeFGLvAibOqtV9ksixFIjuX6qd+srLPMI3HjhnTQPeVKogAaWLpMv 0cTHFqqaWx+xZUlsQLHOZrVR5UOW8DVl6mfEEj6g4crQjEJwGCo1U9xTN1iRyzUf M/Z+7NRHxfh1KdvZIJbsyk5Ep0rPSDTt9FRKqlSFF7xXyLVBCN8grDB8zgKcdWv8 h6BRshV9kQwWZFx2/hai/Y7pOGW84v93Kib5y8TCmIIlx5YEtLo/3thbH2E3A6kn imC2jdNy5LjfMnYcj/ICK6ngm9dYmeT+ -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:18 2025 by rpki-client