$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft File: OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json) Hash identifier: oVppw493Omijo9/VoV/QP1GcciiWJzK9t5gRMXQQ0rQ= Subject key identifier: 6C:E9:99:43:DC:56:19:C1:63:C8:59:EE:D6:47:C2:16:09:FF:54:22 Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Certificate serial: 0CC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft Manifest number: 0C94 Signing time: Wed 02 Jul 2025 18:30:55 +0000 Manifest this update: Wed 02 Jul 2025 18:30:55 +0000 Manifest next update: Wed 09 Jul 2025 18:30:55 +0000 Files and hashes: 1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: USj46xsGxeKie+HDMJ0wKcXxQBnd0+CyQouiSBvUGTg=) 2: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: TeIPGyGqDRDL84HA9NnAzVJOOMFf2EjmrKH/elumev8=) 3: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: lRMtWT21HxefR8cIAkbesXguaIjwdfIuBa6XccIOgBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3265 (0xcc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Validity Not Before: Jul 2 18:30:55 2025 GMT Not After : Jul 9 18:30:55 2025 GMT Subject: CN=68657adf-0915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a7:ba:4e:de:fc:af:57:0f:1f:1d:f0:6a:7c: 90:de:5e:c6:63:0a:91:6a:64:32:a4:84:af:17:72: 11:fc:07:c5:9d:ac:3d:59:7d:1c:b5:a8:71:c1:62: bb:82:10:43:a5:b4:c2:76:1c:e0:3a:2d:61:02:10: 45:1c:b5:87:b4:40:8f:dc:1f:d3:b6:9c:d3:83:a2: 9b:46:b7:32:b0:b5:18:19:1c:fa:24:ef:e2:f6:e3: 47:6e:c7:f5:8d:ba:50:cd:cb:a9:b4:60:35:cf:60: 35:be:62:33:74:0d:a1:2a:ea:4b:6e:6d:a6:99:79: 80:8b:da:8a:33:5f:10:49:d5:4c:7c:fa:cc:80:48: 5d:0f:81:47:66:ff:02:46:2f:49:4f:01:07:45:26: 49:c6:08:ff:79:38:21:9b:14:c6:a2:7b:ba:1d:b8: c5:bc:29:85:7a:fc:62:17:a3:51:66:37:16:e6:da: 34:0a:36:87:a1:2c:4c:8e:96:64:b9:1e:19:22:06: db:7d:ad:64:79:88:86:67:98:3c:f8:93:79:40:03: eb:e9:fe:e8:eb:34:8a:75:09:96:a8:1d:dc:5b:26: b1:1d:7b:5d:40:3d:b2:f3:a1:0b:94:b0:38:34:11: 56:d5:e6:14:63:85:24:9f:c2:50:d0:21:9f:bf:14: 61:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E9:99:43:DC:56:19:C1:63:C8:59:EE:D6:47:C2:16:09:FF:54:22 X509v3 Authority Key Identifier: keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0f:b5:d9:3c:4e:c2:19:e0:3f:d3:7b:56:41:27:d9:9a:88: b0:10:88:33:c1:24:99:98:6f:25:f6:99:14:e9:65:4f:b2:4e: d6:32:7b:d7:22:47:24:91:b2:63:94:14:bd:4c:1e:73:ce:0a: 5f:7f:a0:92:5d:75:28:21:03:3c:90:f5:44:8e:28:0b:da:9f: 63:66:c2:99:90:91:87:d9:76:21:7f:f3:0b:71:10:44:8e:8d: 1b:d4:10:45:80:ff:a2:94:7a:64:57:66:9e:ad:a5:fc:94:47: 7b:3e:d2:8b:29:71:ff:7b:f6:6a:73:61:d9:f8:48:8d:99:85: e8:50:9b:c3:61:f7:d2:c6:bb:b5:2f:65:83:5e:59:e5:4f:f0: 45:d9:a5:39:be:f4:fc:fb:bb:ee:ca:49:b1:e7:18:64:3f:5d: d9:b6:0e:de:85:7c:b0:04:70:49:c1:ae:73:89:8e:1a:f8:7f: 76:02:fc:81:8f:78:c4:ab:3d:af:f8:95:8c:11:13:f8:31:96: 34:b3:33:b4:25:5e:ea:79:10:fa:25:9c:c2:4d:fb:c3:50:44: 49:af:ba:62:cb:4b:a9:e9:f2:12:63:49:7f:dd:6e:e0:9e:10: 3c:83:3b:05:78:b6:1a:90:12:35:1b:6a:22:b3:f3:20:a0:43: f6:dc:90:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0NkYxMTAvBgNVBAUTKDM5NzFGN0UyMUQwOEM5MjQzQUJCNDAzRjgwMzA2NEJG NzhCMkQ4ODAwHhcNMjUwNzAyMTgzMDU1WhcNMjUwNzA5MTgzMDU1WjAYMRYwFAYD VQQDEw02ODY1N2FkZi0wOTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6e6Tt78r1cPHx3wanyQ3l7GYwqRamQypISvF3IR/AfFnaw9WX0ctahxwWK7 ghBDpbTCdhzgOi1hAhBFHLWHtECP3B/TtpzTg6KbRrcysLUYGRz6JO/i9uNHbsf1 jbpQzcuptGA1z2A1vmIzdA2hKupLbm2mmXmAi9qKM18QSdVMfPrMgEhdD4FHZv8C Ri9JTwEHRSZJxgj/eTghmxTGonu6HbjFvCmFevxiF6NRZjcW5to0CjaHoSxMjpZk uR4ZIgbbfa1keYiGZ5g8+JN5QAPr6f7o6zSKdQmWqB3cWyaxHXtdQD2y86ELlLA4 NBFW1eYUY4Ukn8JQ0CGfvxRhDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzpmUPc VhnBY8hZ7tZHwhYJ/1QiMB8GA1UdIwQYMBaAFDlx9+IdCMkkOrtAP4AwZL94stiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDQ2Ri83REEyNEM3QTAw NjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlTUTZ1MEFfZ0RCa3YzaXky SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09YSDM0aDBJeVNRNnUwQV9nREJrdjNpeTJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDQ2Ri83REEyNEM3QTAwNjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlT UTZ1MEFfZ0RCa3YzaXkySUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsD7XZPE7CGeA/03tWQSfZmoiwEIgzwSSZmG8l9pkU6WVPsk7WMnvX IkckkbJjlBS9TB5zzgpff6CSXXUoIQM8kPVEjigL2p9jZsKZkJGH2XYhf/MLcRBE jo0b1BBFgP+ilHpkV2aeraX8lEd7PtKLKXH/e/Zqc2HZ+EiNmYXoUJvDYffSxru1 L2WDXlnlT/BF2aU5vvT8+7vuykmx5xhkP13Ztg7ehXywBHBJwa5ziY4a+H92AvyB j3jEqz2v+JWMERP4MZY0szO0JV7qeRD6JZzCTfvDUERJr7piy0up6fISY0l/3W7g nhA8gzsFeLYakBI1G2ois/MgoEP23JDC -----END CERTIFICATE-----Generated at Thu Jul 3 22:53:01 2025 by rpki-client