$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json) Hash identifier: 9GOeMtfBc2D30XWEhs2Wbui9OCDFGMIOS5eo3ds9TvI= Subject key identifier: 2B:81:49:65:0D:97:52:D2:15:BD:E3:C6:C5:49:BC:71:5C:90:49:10 Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Certificate serial: 05E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft Manifest number: 05E1 Signing time: Wed 02 Jul 2025 23:17:41 +0000 Manifest this update: Wed 02 Jul 2025 23:17:41 +0000 Manifest next update: Wed 09 Jul 2025 23:17:41 +0000 Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: lgiqWQap52H9ZF13jsAxMtfsSdYNL6z9AMExYWfdb5k=) 2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: B/l1/qnG+ox/f3khU2Qu7i7cTmOVlXxBXIJAWV1sQEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1511 (0x5e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Validity Not Before: Jul 2 23:17:41 2025 GMT Not After : Jul 9 23:17:41 2025 GMT Subject: CN=6865be15-40c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:eb:90:b7:6a:84:8b:8c:b0:8f:e7:87:2d: a3:b4:e8:37:30:f6:23:d0:60:d3:d0:94:93:75:36: 54:3a:eb:92:59:73:1f:13:a6:7c:e0:36:c7:8a:65: 2c:74:ce:4b:ac:d3:cf:55:12:20:c8:e1:fd:3a:c0: 9f:80:c2:df:44:7b:17:d9:96:29:ff:0c:d5:72:4b: bd:4f:63:e4:dd:94:3d:3c:e4:af:36:c6:bc:a1:00: 7d:ff:b9:ec:56:36:3a:3e:61:21:73:fe:c9:51:9c: d4:48:61:ee:8f:8f:9b:31:90:54:f4:c7:9c:5e:47: ec:45:25:d4:ec:f0:c6:80:87:44:26:a1:33:c6:24: e7:e8:20:f4:04:09:3d:92:47:bf:21:16:55:f5:70: b3:9d:22:b0:69:fb:fa:00:90:49:3e:f5:40:69:b4: 10:b1:00:52:b2:24:83:cf:ba:58:c7:69:d2:13:82: 69:31:a5:0e:93:35:1d:01:3b:0f:f0:e7:b8:99:62: 5b:a8:9c:aa:90:de:c3:be:76:6e:08:a4:1c:d6:e4: ff:a3:bc:29:47:b4:18:50:db:d8:d0:61:d6:dc:a5: a9:7a:9d:f5:f1:5c:9e:22:5d:76:79:43:c2:c5:d8: 28:4c:bc:94:ea:17:01:bd:c6:dd:be:fb:f0:48:9d: 30:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:81:49:65:0D:97:52:D2:15:BD:E3:C6:C5:49:BC:71:5C:90:49:10 X509v3 Authority Key Identifier: keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:19:0d:25:30:5a:0c:51:57:03:bb:58:c7:8a:a5:00:bd:fb: bf:c4:17:30:17:03:06:f9:c9:e9:30:a3:36:63:bf:df:df:62: 19:ee:4d:3e:b9:11:6a:f7:9c:98:e3:08:8b:36:8c:de:a0:f7: 4b:ff:f5:3f:ee:bf:e4:63:31:d6:69:e0:f8:3f:17:d3:82:77: fa:b2:f8:2d:36:97:4c:40:82:cb:5e:79:c1:70:62:97:f0:bc: 7e:ac:43:67:2b:12:a1:df:c2:e0:49:88:eb:4b:8a:b7:5f:6d: d9:af:a2:50:02:34:79:88:48:94:73:9c:29:8a:82:1d:7d:e4: bb:55:44:d5:b6:57:44:9b:a1:88:b8:02:a8:bb:06:46:2a:bf: 5d:2c:05:6d:2a:13:93:1c:10:f7:31:b1:51:6e:3f:ba:f1:37: a9:ce:a7:32:0c:30:11:cb:9b:80:17:94:b3:8a:af:f8:a4:ed: ba:44:ca:d2:76:35:27:b9:90:93:30:9c:aa:6e:bf:ae:47:f4: d0:21:ae:5d:5f:91:9d:91:b4:47:9b:40:00:83:fd:2a:05:0a: 68:af:02:e7:a7:0d:7b:03:ce:44:9b:3c:e1:93:77:67:58:32: 56:8e:1c:c8:f7:81:14:42:94:ab:6d:3e:4b:31:a3:92:bc:43: d3:78:d8:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC RDNDMzg2NUUwHhcNMjUwNzAyMjMxNzQxWhcNMjUwNzA5MjMxNzQxWjAYMRYwFAYD VQQDEw02ODY1YmUxNS00MGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoXrkLdqhIuMsI/nhy2jtOg3MPYj0GDT0JSTdTZUOuuSWXMfE6Z84DbHimUs dM5LrNPPVRIgyOH9OsCfgMLfRHsX2ZYp/wzVcku9T2Pk3ZQ9POSvNsa8oQB9/7ns VjY6PmEhc/7JUZzUSGHuj4+bMZBU9MecXkfsRSXU7PDGgIdEJqEzxiTn6CD0BAk9 kke/IRZV9XCznSKwafv6AJBJPvVAabQQsQBSsiSDz7pYx2nSE4JpMaUOkzUdATsP 8Oe4mWJbqJyqkN7DvnZuCKQc1uT/o7wpR7QYUNvY0GHW3KWpep318VyeIl12eUPC xdgoTLyU6hcBvcbdvvvwSJ0w8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuBSWUN l1LSFb3jxsVJvHFckEkQMB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh UnJacVotdVRTcWU5UERobDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/GQ0lMFoMUVcDu1jHiqUAvfu/xBcwFwMG+cnpMKM2Y7/f32IZ7k0+ uRFq95yY4wiLNozeoPdL//U/7r/kYzHWaeD4PxfTgnf6svgtNpdMQILLXnnBcGKX 8Lx+rENnKxKh38LgSYjrS4q3X23Zr6JQAjR5iEiUc5wpioIdfeS7VUTVtldEm6GI uAKouwZGKr9dLAVtKhOTHBD3MbFRbj+68TepzqcyDDARy5uAF5Sziq/4pO26RMrS djUnuZCTMJyqbr+uR/TQIa5dX5GdkbRHm0AAg/0qBQporwLnpw17A85Emzzhk3dn WDJWjhzI94EUQpSrbT5LMaOSvEPTeNgR -----END CERTIFICATE-----Generated at Thu Jul 3 02:52:13 2025 by rpki-client