$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft File: OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft (raw, json) Hash identifier: Jfil5Qo1Cio8R6eYsuGzY6NtZ7pdaEjTgVXGd2ATCSM= Subject key identifier: B9:CC:86:54:8E:99:A5:4A:56:6C:69:6F:47:67:A1:60:1D:06:C1:8A Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C Certificate issuer: /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft Manifest number: 3D Signing time: Tue 01 Jul 2025 08:17:35 +0000 Manifest this update: Tue 01 Jul 2025 08:17:35 +0000 Manifest next update: Tue 08 Jul 2025 08:17:35 +0000 Files and hashes: 1: OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl (hash: KIhnpHatSdMCW6exofDlIf3xoCnLj4Sb1AKSW12ZbXg=) 2: 54DA33D2FB2E11EFB488A95EC4F9AE02.roa (hash: L/7VzM2fbo0IdE808LBeTzf3z0geWQ0SpeUJCZmWPBg=) 3: 53E9C44CFB2E11EFB488A95EC4F9AE02.roa (hash: hzaK0MTBJLVrmr0hWnuGmH3SdcFclIxCzlQUZOQabQ8=) 4: 5460E9C8FB2E11EFB488A95EC4F9AE02.roa (hash: bkhjgOMD/IEHS+ly/VrsRugL9cN6Yu5sgUx5f40TuYM=) 5: 553798E2FB2E11EFB488A95EC4F9AE02.roa (hash: p8161Irka1RhOlKGL72R+iegNNjEoBL5dnyvjeUTVQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C Validity Not Before: Jul 1 08:17:35 2025 GMT Not After : Jul 8 08:17:35 2025 GMT Subject: CN=6863999f-b4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8c:6d:b1:3b:4b:f6:5c:6c:43:ad:45:a5:44: fd:9c:08:69:e2:07:50:ca:ec:65:ed:0f:73:01:4b: 2e:1d:4a:13:fa:cf:b8:d6:82:ca:0b:b4:83:1c:99: fc:ae:92:9e:2e:0b:3b:76:4a:8c:74:1c:2e:ab:b1: d3:f5:55:d7:0b:d9:48:1e:2d:db:00:b2:03:b2:75: 8e:9c:42:b7:45:94:b6:53:01:8f:db:4f:db:32:4c: 3a:75:3f:6c:d3:b1:36:0f:55:5b:aa:56:a0:1f:2a: 19:60:65:bb:17:eb:a7:1b:6f:55:dd:c2:00:61:db: 7e:de:42:56:80:ac:a3:56:50:1d:c3:2f:4e:25:cc: 30:32:12:34:4a:ba:16:ff:a7:09:f2:d8:f3:dd:cf: f3:27:31:1c:8f:10:ae:3b:76:db:aa:1c:d3:73:41: 1c:37:5e:2b:14:23:7d:c9:ae:14:44:90:72:a7:e4: 6b:2f:50:57:15:40:40:f7:77:be:26:b4:90:50:00: 22:a9:c8:43:13:fb:d9:ab:99:f3:51:4b:a0:6c:4c: bd:83:84:16:70:5a:5e:89:b1:42:d9:71:c5:dc:7f: 1d:14:38:b3:0e:1c:ad:63:8f:ac:96:1f:00:48:84: 09:6f:6b:fc:15:2b:f8:a8:62:b2:db:8e:1c:db:58: 29:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CC:86:54:8E:99:A5:4A:56:6C:69:6F:47:67:A1:60:1D:06:C1:8A X509v3 Authority Key Identifier: keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:2e:4c:70:e3:9d:d9:c3:e8:02:37:32:d6:a0:1f:61:32:9f: da:3f:1c:6a:e9:2f:37:6a:00:8e:f2:c3:a1:b1:6b:d5:3c:89: df:09:de:45:23:49:50:bd:5e:88:e4:73:30:ce:95:85:8a:79: 1d:ca:b0:da:57:d6:81:39:2f:31:59:37:31:df:6b:23:22:9d: f8:21:62:a1:ec:01:29:36:07:79:82:04:9a:21:72:c9:05:e0: d1:07:0f:2f:4a:34:40:ca:d4:83:c5:c0:1d:a7:ce:8a:0c:a3: b0:8b:59:e9:a0:37:33:f6:bf:15:ba:21:56:ee:21:25:ff:e9: da:89:f2:df:22:4a:2c:2f:ce:ad:ae:18:81:19:b5:17:e2:9d: 3c:ec:28:58:93:25:f8:74:1c:e7:c7:4c:13:17:84:6d:e0:02: c8:13:d0:22:f5:ae:88:73:db:9b:75:81:c9:93:6e:77:a4:ca: 9f:27:6b:13:35:24:12:88:8b:08:38:df:cf:b1:c9:16:a8:97: d9:97:e9:e8:09:c6:5a:9f:cd:63:04:9b:c7:65:31:92:55:20: f4:a1:d5:c3:60:a8:ec:05:ab:69:54:62:b2:c2:06:68:20:26: d5:28:29:7e:36:38:fc:60:95:3a:ad:02:99:b2:62:03:61:98: 9f:5e:05:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTUwMjExMC8GA1UEBRMoMzg2QzMwMEVENzJGMTJCOTA1NDc4QTMzQ0VGMjc3OTky NTRBNjkxQzAeFw0yNTA3MDEwODE3MzVaFw0yNTA3MDgwODE3MzVaMBgxFjAUBgNV BAMTDTY4NjM5OTlmLWI0ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDijG2xO0v2XGxDrUWlRP2cCGniB1DK7GXtD3MBSy4dShP6z7jWgsoLtIMcmfyu kp4uCzt2Sox0HC6rsdP1VdcL2UgeLdsAsgOydY6cQrdFlLZTAY/bT9syTDp1P2zT sTYPVVuqVqAfKhlgZbsX66cbb1XdwgBh237eQlaArKNWUB3DL04lzDAyEjRKuhb/ pwny2PPdz/MnMRyPEK47dtuqHNNzQRw3XisUI33JrhREkHKn5GsvUFcVQED3d74m tJBQACKpyEMT+9mrmfNRS6BsTL2DhBZwWl6JsULZccXcfx0UOLMOHK1jj6yWHwBI hAlva/wVK/ioYrLbjhzbWCnLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUucyGVI6Z pUpWbGlvR2ehYB0GwYowHwYDVR0jBBgwFoAUOGwwDtcvErkFR4ozzvJ3mSVKaRww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFNTAyLzg3QzNGRDBBRkIy OTExRUZCNzY2REM3NkM0RjlBRTAyL09Hd3dEdGN2RXJrRlI0b3p6dkozbVNWS2FS dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT0d3d0R0Y3ZFcmtGUjRvenp2SjNtU1ZLYVJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF NTAyLzg3QzNGRDBBRkIyOTExRUZCNzY2REM3NkM0RjlBRTAyL09Hd3dEdGN2RXJr RlI0b3p6dkozbVNWS2FSdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHcuTHDjndnD6AI3MtagH2Eyn9o/HGrpLzdqAI7yw6Gxa9U8id8J3kUj SVC9XojkczDOlYWKeR3KsNpX1oE5LzFZNzHfayMinfghYqHsASk2B3mCBJohcskF 4NEHDy9KNEDK1IPFwB2nzooMo7CLWemgNzP2vxW6IVbuISX/6dqJ8t8iSiwvzq2u GIEZtRfinTzsKFiTJfh0HOfHTBMXhG3gAsgT0CL1rohz25t1gcmTbnekyp8naxM1 JBKIiwg438+xyRaol9mX6egJxlqfzWMEm8dlMZJVIPSh1cNgqOwFq2lUYrLCBmgg JtUoKX42OPxglTqtApmyYgNhmJ9eBco= -----END CERTIFICATE-----Generated at Tue Jul 1 16:05:05 2025 by rpki-client