$ rpki-client -vvf rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft File: OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft (raw, json) Hash identifier: xAL3e5X373V1vhyvgY4Tpat1AUhJNFfJllLzqvAJ6r0= Subject key identifier: 9D:3C:4E:E6:3C:2F:AB:BB:24:1E:96:77:E3:7D:B4:7F:58:56:DA:D0 Authority key identifier: 38:59:2F:05:6F:83:CC:D4:0A:62:AE:11:60:29:26:94:28:5A:2C:F4 Certificate issuer: /CN=A9151638/serialNumber=38592F056F83CCD40A62AE1160292694285A2CF4 Certificate serial: 046F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OFkvBW-DzNQKYq4RYCkmlChaLPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft Manifest number: 046A Signing time: Sat 10 May 2025 23:42:58 +0000 Manifest this update: Sat 10 May 2025 23:42:57 +0000 Manifest next update: Sat 17 May 2025 23:42:57 +0000 Files and hashes: 1: OFkvBW-DzNQKYq4RYCkmlChaLPQ.crl (hash: uu1uODzRJLCiSYIrUJ8QuJ9ob8IOM5IHIj04otQZmjk=) 2: 2404BA68477011EC8A31B762C4F9AE02.roa (hash: w9FaGj3sY61MFEZzIunRrfWZ3OYXoXaJ/HX3XZ5M44M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.crl rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OFkvBW-DzNQKYq4RYCkmlChaLPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1135 (0x46f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151638, serialNumber=38592F056F83CCD40A62AE1160292694285A2CF4 Validity Not Before: May 10 23:42:57 2025 GMT Not After : May 17 23:42:57 2025 GMT Subject: CN=681fe481-0837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:75:01:c6:51:e9:9f:10:c5:05:89:99:27: d7:e3:b8:eb:fd:b8:bb:0c:4e:06:02:38:94:e1:79: e0:33:83:be:c3:92:ee:29:2a:c7:7a:44:94:dc:3e: 57:d7:4f:19:80:e6:91:e7:38:ac:ec:ff:ab:ce:42: 7a:ef:09:c1:c6:33:52:54:26:c6:27:07:31:a8:56: 71:a5:b2:77:22:5c:cd:a7:08:a8:9d:8a:1c:a9:d2: bc:dc:12:8d:08:7d:0f:ac:41:73:d5:b2:19:7e:a9: 32:30:bf:96:62:7a:cb:b8:12:4b:49:c9:72:4c:08: e5:38:6f:15:dc:c5:21:bb:6d:37:9b:45:73:04:a6: 45:bd:6d:0e:62:76:72:20:3a:b4:48:10:d1:0f:5c: fd:06:b3:c4:e9:1a:33:83:40:92:84:13:89:6a:e4: b2:b5:4a:d6:8b:95:40:ba:f6:3d:f5:d8:55:b0:94: 88:ca:5c:bc:ba:6d:2e:83:c9:b5:3f:d4:15:5b:07: 18:e4:52:66:91:e8:f0:46:3a:9b:5b:9f:d1:c2:82: 54:da:00:53:54:e9:b6:45:9b:5e:81:94:8b:67:1e: 93:70:5e:ca:68:e1:2a:65:a5:1b:53:be:b4:7d:89: 99:85:0d:76:79:90:1a:b5:9f:63:bb:5d:e7:57:60: d1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3C:4E:E6:3C:2F:AB:BB:24:1E:96:77:E3:7D:B4:7F:58:56:DA:D0 X509v3 Authority Key Identifier: keyid:38:59:2F:05:6F:83:CC:D4:0A:62:AE:11:60:29:26:94:28:5A:2C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OFkvBW-DzNQKYq4RYCkmlChaLPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:63:c5:ab:04:14:2f:21:25:f3:5b:e5:77:61:86:68:c9:59: a7:67:cf:13:bf:ec:29:55:ec:e1:a9:18:b6:99:b5:05:c9:84: 97:76:1b:b2:ea:0f:0a:2f:38:1f:f0:ca:ec:ff:bb:4b:f9:44: 81:a4:f0:64:45:e1:e9:4d:09:ec:1f:75:ee:f7:4d:a0:7c:56: fd:23:84:f5:e3:62:4b:f0:b7:fe:9f:bd:57:dc:ed:e1:d0:dc: 8b:25:16:5a:50:d4:db:88:4c:fa:fe:4f:80:7a:f8:62:89:08: 2b:cd:a6:65:17:62:0f:6a:67:0c:6c:e7:b4:bb:6a:46:7d:1b: b3:57:26:34:89:c8:fd:05:66:21:5a:8f:cd:08:23:45:1b:96: 76:b0:ae:19:fb:55:86:d9:28:fb:01:85:a3:0f:bd:bc:37:e8: ec:d3:62:30:4c:47:f2:af:0d:a9:09:16:91:0a:63:1f:c9:3a: 3e:37:6e:ab:fc:89:f9:8a:8c:e9:66:00:3a:87:17:75:0e:00: ab:aa:da:ff:8e:c1:ea:7b:46:a2:89:7e:77:61:9f:0d:43:bb: 69:ae:d8:ab:e9:ca:1d:1b:9c:c3:72:28:f0:e7:de:86:02:e8: 22:70:db:96:25:42:00:b2:60:bf:2f:50:15:9b:45:76:5b:5f: 37:da:51:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE2MzgxMTAvBgNVBAUTKDM4NTkyRjA1NkY4M0NDRDQwQTYyQUUxMTYwMjkyNjk0 Mjg1QTJDRjQwHhcNMjUwNTEwMjM0MjU3WhcNMjUwNTE3MjM0MjU3WjAYMRYwFAYD VQQDEw02ODFmZTQ4MS0wODM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulZ1AcZR6Z8QxQWJmSfX47jr/bi7DE4GAjiU4XngM4O+w5LuKSrHekSU3D5X 108ZgOaR5zis7P+rzkJ67wnBxjNSVCbGJwcxqFZxpbJ3IlzNpwionYocqdK83BKN CH0PrEFz1bIZfqkyML+WYnrLuBJLSclyTAjlOG8V3MUhu203m0VzBKZFvW0OYnZy IDq0SBDRD1z9BrPE6Rozg0CShBOJauSytUrWi5VAuvY99dhVsJSIyly8um0ug8m1 P9QVWwcY5FJmkejwRjqbW5/RwoJU2gBTVOm2RZtegZSLZx6TcF7KaOEqZaUbU760 fYmZhQ12eZAatZ9ju13nV2DRzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ08TuY8 L6u7JB6Wd+N9tH9YVtrQMB8GA1UdIwQYMBaAFDhZLwVvg8zUCmKuEWApJpQoWiz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTYzOC8xMjcxMTczMjQ3 NkMxMUVDODlFRjYyMzlDNEY5QUUwMi9PRmt2QlctRHpOUUtZcTRSWUNrbWxDaGFM UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Ga3ZCVy1Eek5RS1lxNFJZQ2ttbENoYUxQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTYzOC8xMjcxMTczMjQ3NkMxMUVDODlFRjYyMzlDNEY5QUUwMi9PRmt2QlctRHpO UUtZcTRSWUNrbWxDaGFMUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUY8WrBBQvISXzW+V3YYZoyVmnZ88Tv+wpVezhqRi2mbUFyYSXdhuy 6g8KLzgf8Mrs/7tL+USBpPBkReHpTQnsH3Xu902gfFb9I4T142JL8Lf+n71X3O3h 0NyLJRZaUNTbiEz6/k+AevhiiQgrzaZlF2IPamcMbOe0u2pGfRuzVyY0icj9BWYh Wo/NCCNFG5Z2sK4Z+1WG2Sj7AYWjD728N+js02IwTEfyrw2pCRaRCmMfyTo+N26r /In5iozpZgA6hxd1DgCrqtr/jsHqe0aiiX53YZ8NQ7tprtir6codG5zDcijw596G AugicNuWJUIAsmC/L1AVm0V2W1832lHd -----END CERTIFICATE-----Generated at Sun May 11 09:10:10 2025 by rpki-client