$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft File: ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json) Hash identifier: 1ZfcxiN0VjWi6m7in7lcpDJPE6FikhflxvTuvwqraZE= Subject key identifier: C9:65:64:03:42:6F:76:9D:4E:78:D5:7D:70:59:18:E2:6D:5A:EB:49 Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35 Certificate issuer: /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35 Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft Manifest number: 02A7 Signing time: Thu 15 May 2025 01:37:02 +0000 Manifest this update: Thu 15 May 2025 01:37:02 +0000 Manifest next update: Thu 22 May 2025 01:37:02 +0000 Files and hashes: 1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: A5vbbsFez3M3icdjuYIESu7CP+by5tsCiwMNtcqtppI=) 2: C7C081641C2411F0AAC7CA1EC4F9AE02.roa (hash: XydeZPWKtG1etOuPzQDEhVL2WYamD3gJgaFCyMqQRnA=) 3: E4C4FBB8200811F0AB28851DC4F9AE02.roa (hash: pVHrgOFKFC07D4oFMxsUE21iWBEjMFIznwU/76ruSbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35 Validity Not Before: May 15 01:37:02 2025 GMT Not After : May 22 01:37:02 2025 GMT Subject: CN=6825453e-8120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b5:55:5e:42:ef:1a:aa:83:a4:c7:5f:b9:c3: 67:56:f1:f7:38:0c:eb:1d:e0:3c:77:49:b6:8f:fe: c7:dc:28:a3:88:92:16:c5:1d:27:d0:ce:fb:6f:32: 3b:24:76:e9:ee:67:fe:2f:81:e3:12:4d:27:06:70: 9c:c0:6c:b4:c4:46:f7:53:b8:1f:bd:f8:05:c8:ac: 07:e8:c3:45:fa:65:cb:26:ac:f5:6f:9b:a1:1b:b3: 09:a3:5b:fb:44:67:65:e2:8a:22:84:81:4e:64:c3: ba:64:27:32:d6:a5:25:33:68:48:a4:1a:9f:61:1c: 02:d4:82:33:2d:21:c0:aa:84:62:bb:d8:0b:06:74: ee:79:d0:58:a2:c4:f9:9d:a0:0f:43:ea:07:c3:8d: 77:69:2a:bc:1f:9b:3a:86:20:e5:f6:dd:31:94:d9: a9:50:06:32:df:e5:a4:e9:ca:03:02:14:37:dc:4e: 4b:49:cd:5d:03:91:57:5d:5e:3b:f2:ca:e3:3c:b2: 87:1a:ca:f0:06:b0:b2:c7:6e:0c:11:d8:ee:eb:8d: 7c:0d:0a:57:11:33:d8:68:ed:9c:11:4b:d0:e3:63: 7d:69:d2:63:d1:aa:db:83:84:f9:9e:11:c0:25:6a: 42:be:82:19:5c:51:ad:71:8e:1e:d5:e8:71:7a:df: 02:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:65:64:03:42:6F:76:9D:4E:78:D5:7D:70:59:18:E2:6D:5A:EB:49 X509v3 Authority Key Identifier: keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:27:c7:f7:38:22:97:76:fa:4c:0d:04:f1:dc:2f:e4:94:cb: 65:dd:74:07:fb:f8:22:53:66:5e:48:b6:e2:f4:af:19:08:2e: 4b:bd:17:36:7e:15:6f:ef:64:db:d2:c6:4a:6b:00:63:bc:10: a5:b1:a5:ad:56:9e:06:92:7e:0c:ec:5e:37:b7:d8:f5:b4:76: 22:71:d9:00:16:fd:2d:98:12:4d:10:ac:59:6e:d3:e3:87:00: 02:08:ac:f4:c3:7d:9b:1b:25:e9:5c:11:7f:d1:53:f2:d3:2f: 2e:20:9c:a9:33:11:d7:29:4e:c2:ea:11:87:75:68:8f:1f:2e: 9b:10:e7:df:16:c9:8f:e4:bd:1a:2e:6b:a0:31:50:da:db:84: 93:50:3b:c6:87:7d:88:2d:b6:c7:53:44:b9:dc:fb:57:66:91: d5:9d:a2:61:3c:2a:c9:a9:d7:46:cc:cb:49:82:dd:22:b3:ca: 90:51:5a:a4:a5:6c:fc:26:f8:c5:a0:f7:e6:6c:b1:1a:6a:a2: 9e:ce:59:97:c9:1a:c8:5b:f0:3d:86:82:b6:48:6a:ba:61:15: 56:d8:c6:09:4d:53:0f:eb:3e:e6:52:08:ec:1b:4a:26:db:4a: 61:a0:f8:4e:34:57:9c:e7:e8:66:dc:76:08:c1:c7:cb:8e:7e: 7c:75:f2:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBENjkxMTAvBgNVBAUTKDEwM0ZBOEJERkZGQjlGMDU1NzA3MkM0NzMzMkI4MUE5 RTgwRUREMzUwHhcNMjUwNTE1MDEzNzAyWhcNMjUwNTIyMDEzNzAyWjAYMRYwFAYD VQQDEw02ODI1NDUzZS04MTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbVVXkLvGqqDpMdfucNnVvH3OAzrHeA8d0m2j/7H3CijiJIWxR0n0M77bzI7 JHbp7mf+L4HjEk0nBnCcwGy0xEb3U7gfvfgFyKwH6MNF+mXLJqz1b5uhG7MJo1v7 RGdl4ooihIFOZMO6ZCcy1qUlM2hIpBqfYRwC1IIzLSHAqoRiu9gLBnTuedBYosT5 naAPQ+oHw413aSq8H5s6hiDl9t0xlNmpUAYy3+Wk6coDAhQ33E5LSc1dA5FXXV47 8srjPLKHGsrwBrCyx24MEdju6418DQpXETPYaO2cEUvQ42N9adJj0arbg4T5nhHA JWpCvoIZXFGtcY4e1ehxet8C/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMllZANC b3adTnjVfXBZGOJtWutJMB8GA1UdIwQYMBaAFBA/qL3/+58FVwcsRzMrganoDt01 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ2OS8wRTE3N0Q1QTA1 OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253VlhCeXhITXl1QnFlZ08z VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VELW92Zl83bndWWEJ5eEhNeXVCcWVnTzNUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ2OS8wRTE3N0Q1QTA1OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253 VlhCeXhITXl1QnFlZ08zVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEJ8f3OCKXdvpMDQTx3C/klMtl3XQH+/giU2ZeSLbi9K8ZCC5LvRc2 fhVv72Tb0sZKawBjvBClsaWtVp4Gkn4M7F43t9j1tHYicdkAFv0tmBJNEKxZbtPj hwACCKz0w32bGyXpXBF/0VPy0y8uIJypMxHXKU7C6hGHdWiPHy6bEOffFsmP5L0a LmugMVDa24STUDvGh32ILbbHU0S53PtXZpHVnaJhPCrJqddGzMtJgt0is8qQUVqk pWz8JvjFoPfmbLEaaqKezlmXyRrIW/A9hoK2SGq6YRVW2MYJTVMP6z7mUgjsG0om 20phoPhONFec5+hm3HYIwcfLjn58dfIy -----END CERTIFICATE-----Generated at Sat May 17 02:11:38 2025 by rpki-client