$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json) Hash identifier: AlpTZKfUWW2YCMijTWJ7Ol6BOsVtPnvsBC9WkMx8tHM= Subject key identifier: DC:C7:02:82:12:31:CC:EC:0B:76:34:44:94:1B:91:C3:82:AE:78:30 Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Certificate serial: 05CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft Manifest number: 05C7 Signing time: Wed 14 May 2025 23:06:48 +0000 Manifest this update: Wed 14 May 2025 23:06:47 +0000 Manifest next update: Wed 21 May 2025 23:06:47 +0000 Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: do3yNvF6h1QAA/aTFumPTeEvu3IhhSou+igqNT3Han4=) 2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: fabeHirzSfMRjgTkSzBs+NINgYgVd5ARAuZRjwIHiWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1484 (0x5cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Validity Not Before: May 14 23:06:47 2025 GMT Not After : May 21 23:06:47 2025 GMT Subject: CN=68252207-38c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:68:5c:f5:ee:0c:fa:c2:e2:6e:25:2f:52: 50:9c:fa:f2:90:81:c0:ad:f2:78:cb:98:fe:31:61: ce:ef:23:ca:37:3b:7a:db:ed:e8:48:62:00:ff:d3: 5a:3b:f2:13:1c:1a:12:7d:26:a1:9d:32:85:e8:9f: c9:79:08:c2:1a:6f:f0:64:c5:62:da:b2:a9:a1:c9: 3c:78:19:8b:fa:7e:c0:f7:d9:f7:1a:c0:8c:df:d8: 71:3e:32:04:d9:c9:55:e2:9c:dc:e4:d0:97:2d:c9: 34:27:34:37:14:d5:84:fd:cf:5c:67:81:a2:90:58: 23:1f:9f:a4:0f:4b:46:3a:ce:d8:03:a4:19:74:eb: 1b:3b:58:50:d6:a8:85:a8:c0:bd:9a:46:7e:08:0a: f5:3e:a4:4b:00:25:e3:5a:48:82:2c:03:89:9c:0f: ba:73:52:f4:e7:f6:28:a8:71:b6:29:5e:df:ff:4b: 00:37:27:a9:d7:12:43:b3:05:96:37:67:d0:1d:9a: 9f:50:8e:a7:12:31:f6:85:b4:42:bd:77:c7:72:37: 5b:c5:cc:f2:93:90:8a:b1:1d:fd:bc:73:02:eb:ea: 99:07:f6:4f:cc:31:70:12:66:a9:80:f1:e2:38:5b: c6:b9:80:44:94:a7:55:4a:24:9b:63:3f:26:73:f6: 14:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C7:02:82:12:31:CC:EC:0B:76:34:44:94:1B:91:C3:82:AE:78:30 X509v3 Authority Key Identifier: keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:49:dd:c8:78:d0:7c:de:32:29:a9:c0:fe:c4:eb:8a:44:5d: d6:3a:fe:25:f3:fc:22:ba:68:ad:fe:31:02:14:1f:14:f7:c9: 1d:da:1f:d5:67:da:6f:1b:5a:99:36:e6:75:c6:fd:a8:82:ce: ca:ae:eb:42:a8:2f:42:85:54:d5:2a:b7:48:b3:e2:f6:ff:1f: 68:15:4f:1f:b0:37:b8:e2:0e:d7:a2:67:d6:cb:94:aa:75:11: d6:93:e9:38:41:38:66:2f:22:22:d8:c9:74:e3:3e:bc:8e:9a: 62:27:b9:9b:2c:4d:96:ca:75:0a:8d:85:dd:04:8d:86:3c:4d: c2:6b:2f:e7:c7:f3:ab:9c:a8:e6:46:ed:ce:3e:fe:ee:e2:f8: d6:f2:5f:52:ef:ec:d7:39:63:e6:9c:d9:99:a2:e1:c2:4c:42: e0:0f:9f:d2:f8:7e:8f:48:fb:49:81:ed:12:7a:5b:db:89:2a: 81:18:66:3c:8e:1a:9a:84:4f:1e:a8:6c:1e:72:8c:d0:3e:3e: 03:0e:6e:31:fb:11:87:f7:21:84:b8:49:5f:b6:7c:96:e3:b6: 0b:70:b5:07:c8:a6:93:9d:8e:97:4a:92:4c:57:09:63:5b:48: fa:6f:26:58:33:ca:01:75:2e:66:39:b7:36:d5:de:5a:81:61: aa:27:c1:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC RDNDMzg2NUUwHhcNMjUwNTE0MjMwNjQ3WhcNMjUwNTIxMjMwNjQ3WjAYMRYwFAYD VQQDEw02ODI1MjIwNy0zOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslhoXPXuDPrC4m4lL1JQnPrykIHArfJ4y5j+MWHO7yPKNzt62+3oSGIA/9Na O/ITHBoSfSahnTKF6J/JeQjCGm/wZMVi2rKpock8eBmL+n7A99n3GsCM39hxPjIE 2clV4pzc5NCXLck0JzQ3FNWE/c9cZ4GikFgjH5+kD0tGOs7YA6QZdOsbO1hQ1qiF qMC9mkZ+CAr1PqRLACXjWkiCLAOJnA+6c1L05/YoqHG2KV7f/0sANyep1xJDswWW N2fQHZqfUI6nEjH2hbRCvXfHcjdbxczyk5CKsR39vHMC6+qZB/ZPzDFwEmapgPHi OFvGuYBElKdVSiSbYz8mc/YUPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzHAoIS MczsC3Y0RJQbkcOCrngwMB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh UnJacVotdVRTcWU5UERobDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeSd3IeNB83jIpqcD+xOuKRF3WOv4l8/wiumit/jECFB8U98kd2h/V Z9pvG1qZNuZ1xv2ogs7KrutCqC9ChVTVKrdIs+L2/x9oFU8fsDe44g7XomfWy5Sq dRHWk+k4QThmLyIi2Ml04z68jppiJ7mbLE2WynUKjYXdBI2GPE3Cay/nx/OrnKjm Ru3OPv7u4vjW8l9S7+zXOWPmnNmZouHCTELgD5/S+H6PSPtJge0SelvbiSqBGGY8 jhqahE8eqGwecozQPj4DDm4x+xGH9yGEuElftnyW47YLcLUHyKaTnY6XSpJMVwlj W0j6byZYM8oBdS5mObc21d5agWGqJ8Gl -----END CERTIFICATE-----Generated at Thu May 15 21:44:35 2025 by rpki-client