$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json) Hash identifier: HEKuGoLVbEFFdz8UvuPPbYJBQdEYcgJqqgwAlneRD80= Subject key identifier: 48:C6:7D:29:04:9C:D5:AF:09:AB:CB:71:B8:AC:1C:BA:2B:FB:F5:0D Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Certificate serial: 0C77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft Manifest number: 0C4E Signing time: Wed 02 Jul 2025 18:50:01 +0000 Manifest this update: Wed 02 Jul 2025 18:50:00 +0000 Manifest next update: Wed 09 Jul 2025 18:50:00 +0000 Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: NQd/eQTxZPUIfiRXHhkm5mHxrr2HTQw+nrPjUiFW11M=) 2: 50AA91CAD70311EFB9BBC86DC4F9AE02.roa (hash: gdYeSr8OVfEXIHB8AE/R/OGyXt1CPyW6FryfjJbmXTw=) 3: 6309B36EEC3911EFB3A92E86C4F9AE02.roa (hash: mJvqce7dr7148HNrDiByF+54zvxocevFsAIl/C28B9c=) 4: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: UKp0al5lwDctbpMZ4w91PmU9xh+b2uAj1qbyNOwUx6Q=) 5: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: xNrMx2ykeoPHlp4OwjxlD2woswWyefyqLirhxUQ7v60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3191 (0xc77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Validity Not Before: Jul 2 18:50:00 2025 GMT Not After : Jul 9 18:50:00 2025 GMT Subject: CN=68657f59-1f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e1:c5:87:9e:6b:b8:b9:59:db:28:90:59:65: 48:db:cb:cd:eb:4f:34:7d:d0:ad:e1:7c:f0:df:f8: fa:6b:70:7f:b2:9b:8c:a2:d4:19:7b:8d:0b:b1:26: 09:96:59:64:f2:a7:7a:09:7f:f7:ad:32:ff:14:ab: 0f:13:1f:46:e0:a7:3a:56:ff:55:3a:f4:f0:aa:60: bb:61:0d:fc:82:f3:ab:a0:b7:f5:6c:fb:08:52:dd: 56:f1:ca:28:77:f6:b3:f2:ce:09:45:df:f0:b1:84: 21:5d:27:cd:03:e4:4f:4d:22:c8:61:f2:04:1c:ca: c5:b4:37:c4:90:14:08:4e:a8:9f:2c:84:a0:2d:c9: e5:17:21:d7:e9:c8:7f:87:f6:ac:b8:45:b8:e9:49: f0:ad:2e:de:5b:13:1c:dd:84:e4:1d:61:03:fa:0e: 1f:8f:c9:92:6a:14:69:23:57:67:45:41:a1:e7:3d: 3a:93:bb:8f:75:cf:07:01:ee:d0:67:6d:35:6b:7e: a3:0a:4a:b2:8d:29:e6:a4:9f:2c:4b:0e:39:46:b9: e2:a5:4e:4c:28:ff:57:59:34:df:96:59:ab:ca:48: 5c:f5:e7:11:f5:9e:fe:a4:ac:a8:fa:86:65:3f:45: d9:32:95:15:44:f7:22:50:dc:d2:ae:c5:74:e3:c4: d1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C6:7D:29:04:9C:D5:AF:09:AB:CB:71:B8:AC:1C:BA:2B:FB:F5:0D X509v3 Authority Key Identifier: keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:c3:87:bc:f9:df:79:24:3f:6a:c9:88:03:eb:d1:08:a0:fa: f6:2e:14:c4:74:12:14:44:20:5e:39:80:5f:e2:2c:b1:3c:9b: 54:e1:8f:99:d7:ca:f4:2b:d0:37:60:3b:b2:87:7f:d1:b3:38: 57:c6:ce:ef:63:88:f4:30:4e:9f:51:72:71:f9:3e:98:d0:cd: ab:8d:02:2f:f7:e2:ad:36:6f:59:d6:d3:6e:01:34:20:54:bc: 12:46:e0:e1:3c:e9:d5:77:67:3c:62:1d:82:7b:8a:74:d6:09: 88:20:f1:e6:a8:cf:24:70:f3:29:4d:2b:d0:ab:b3:cb:1f:25: 4f:e9:90:55:c9:6b:bc:ac:e9:2a:75:9f:ed:cf:6b:88:3d:23: ad:73:af:3c:99:93:4a:7e:d4:f1:d6:dc:d5:89:c7:38:a3:93: f9:ab:5c:78:e8:63:b5:d9:7a:e2:99:bd:c3:be:3f:ca:ee:d1: bc:ed:5a:f4:c4:31:93:a0:7f:0a:91:fc:af:7a:c7:8b:d5:d6: 0c:ff:38:81:87:15:c3:6a:76:ad:71:6e:d5:7c:91:9e:6f:cd: 23:61:f7:98:73:f7:ac:b0:09:7f:bf:d4:93:c3:e8:b6:58:52: 77:91:6d:3d:32:d1:bf:42:34:85:0a:5f:8c:e9:da:83:fd:10: 6c:5a:f7:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz QjJEOUY4NDAwHhcNMjUwNzAyMTg1MDAwWhcNMjUwNzA5MTg1MDAwWjAYMRYwFAYD VQQDEw02ODY1N2Y1OS0xZjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOHFh55ruLlZ2yiQWWVI28vN6080fdCt4Xzw3/j6a3B/spuMotQZe40LsSYJ lllk8qd6CX/3rTL/FKsPEx9G4Kc6Vv9VOvTwqmC7YQ38gvOroLf1bPsIUt1W8coo d/az8s4JRd/wsYQhXSfNA+RPTSLIYfIEHMrFtDfEkBQITqifLISgLcnlFyHX6ch/ h/asuEW46UnwrS7eWxMc3YTkHWED+g4fj8mSahRpI1dnRUGh5z06k7uPdc8HAe7Q Z201a36jCkqyjSnmpJ8sSw45RrnipU5MKP9XWTTfllmrykhc9ecR9Z7+pKyo+oZl P0XZMpUVRPciUNzSrsV048TR2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjGfSkE nNWvCavLcbisHLor+/UNMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2 Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAow4e8+d95JD9qyYgD69EIoPr2LhTEdBIURCBeOYBf4iyxPJtU4Y+Z 18r0K9A3YDuyh3/RszhXxs7vY4j0ME6fUXJx+T6Y0M2rjQIv9+KtNm9Z1tNuATQg VLwSRuDhPOnVd2c8Yh2Ce4p01gmIIPHmqM8kcPMpTSvQq7PLHyVP6ZBVyWu8rOkq dZ/tz2uIPSOtc688mZNKftTx1tzVicc4o5P5q1x46GO12Xrimb3Dvj/K7tG87Vr0 xDGToH8KkfyveseL1dYM/ziBhxXDanatcW7VfJGeb80jYfeYc/essAl/v9STw+i2 WFJ3kW09MtG/QjSFCl+M6dqD/RBsWve4 -----END CERTIFICATE-----Generated at Fri Jul 4 14:33:14 2025 by rpki-client