$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft File: OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json) Hash identifier: p2FIguJlpQzQHpMGbO3DCEB6+knEqYVmLNNlynQLH8s= Subject key identifier: 3E:98:78:BE:D9:26:40:7F:EB:26:60:35:C4:60:6A:49:93:16:10:55 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0D50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft Manifest number: 0B9D Signing time: Mon 12 May 2025 19:56:00 +0000 Manifest this update: Mon 12 May 2025 19:56:00 +0000 Manifest next update: Mon 19 May 2025 19:56:00 +0000 Files and hashes: 1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: VXR6LVxFXslpovb43So96FsoUoi7Nkodb9muJ+9DpH0=) 2: F24431E6240411F0AE5EFB74C4F9AE02.roa (hash: pjj7U4+5TLqzVYrhFk5lEqLCQke8zfvUY/UVHk0SN1M=) 3: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: LCTaAks4BqlupqHXTz1VdaXnEXMyWZW8ZhZmp2UYH3Q=) 4: F0D4053EEDCC11EF8C545F54C4F9AE02.roa (hash: 4QfTRpAN+SnkWQoS+a8PlbB83aqDd8EbkaEm2nM3FeI=) 5: 92A205F4191111F095164E59C4F9AE02.roa (hash: 3xwUQICiJWltnsaPPc+uKPTybyb67JmaTUlAe4OstQ4=) 6: CC2CFF76161F11F097D3DF59C4F9AE02.roa (hash: kRO7k4BulRhHisoR6+EUfbpDnd1NcNjfEli/hLZ+UXQ=) 7: BC7FD008F9A511EF885CA76EC4F9AE02.roa (hash: Ex7392prc1zunazGcvbevro7VL69lZXVyb5pMImsMLI=) 8: 96D29A2220E011F086D75E5CC4F9AE02.roa (hash: 0FOWU/128zkabpuP6eI/6fQrKWNdatB4AEVKWZRuiyw=) 9: 95F1EC2A20E011F086D75E5CC4F9AE02.roa (hash: SlVDSUqUztmia+IRuLwVDUN43/JEzgcVEMaQ1zGpGf4=) 10: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: YJQ9SpoqXrkvlRkEN5wsjZZeJRNdP87R6x7oDal+xTw=) 11: 7D0D2FCA28CF11F0B4341346C4F9AE02.roa (hash: g7xVQYCNjaK/RZPD6CLpdC1v04D2i9MLXYqSInLLiJI=) 12: 7C5CEA3E28CF11F0B4341346C4F9AE02.roa (hash: vAcCfJjAn78EuvFILS+tqNoRGxNCcoW5NdFqExkzlhU=) 13: F16CF7BC240411F0AE5EFB74C4F9AE02.roa (hash: NRkATBKCrFf8XehUQ4Kcg07Ah9qbgMhjDJkO80Y8+Ms=) 14: 712D274624BF11F0ADDD3D44C4F9AE02.roa (hash: hI8rPrNoFSuSDtKlIpIXN+5aKoXdXK52nCDyF+LIHUg=) 15: 90A6E260F97711EF931B0A48C4F9AE02.roa (hash: yNt3+76oxiczQlWAKFrrom/dgPrfFKQXLtrONN2mqsc=) 16: D8538FA2204411F0B6649425C4F9AE02.roa (hash: uqPVCmw8xhCuAFmHWCKeDdfNdsicl8lxhmTwM3JVS44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3408 (0xd50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: May 12 19:56:00 2025 GMT Not After : May 19 19:56:00 2025 GMT Subject: CN=68225250-fe5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2f:33:0e:13:28:96:8b:a5:62:38:cd:0d:0c: 59:2e:95:2c:4b:fc:a2:31:85:fd:a2:cb:3d:20:a0: a6:0a:8f:69:e9:8b:60:5c:ab:24:4b:0a:c0:f4:53: 8e:ff:ec:03:55:4e:d8:53:e4:5e:a1:d1:1d:ed:74: df:48:c4:c8:fb:c6:01:ec:10:f9:18:56:c1:9a:b3: 06:4d:4d:97:f9:1f:c8:f7:e8:16:1e:6b:fa:ce:5b: 36:36:7d:48:5e:31:3b:c8:9a:d2:e5:3d:bf:e0:bc: 7d:33:aa:58:2f:c5:68:ad:71:0e:9e:87:fc:14:e8: ed:8e:9f:21:52:81:76:46:b5:4e:5a:04:ff:2c:90: da:91:74:f8:df:97:bb:b7:10:00:9f:c0:c8:cf:ff: f9:b4:bb:db:d6:8f:71:4e:0c:8d:00:69:4f:e7:2c: a5:3d:f9:aa:0d:ce:bd:b5:ab:0e:ef:5c:a0:8f:aa: be:44:1d:53:e3:79:7f:74:31:73:22:04:e2:11:f8: c9:14:35:f5:87:a0:7a:3b:b7:91:9b:cf:66:5e:5e: 0b:13:17:64:82:bc:9c:ae:a4:a5:e9:47:78:13:69: fa:31:81:87:d6:5a:cd:35:3b:22:15:1c:b2:ef:04: 06:6d:30:08:f7:5b:b2:07:23:6a:a0:f7:c4:24:2a: 62:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:98:78:BE:D9:26:40:7F:EB:26:60:35:C4:60:6A:49:93:16:10:55 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:df:a6:78:cd:4e:a0:8d:86:1d:d3:d7:be:44:34:e2:7a:df: 1f:11:58:64:eb:1a:e3:56:f7:f1:0a:34:6f:00:7e:c9:06:ed: 6e:f7:46:70:67:e9:9c:06:e2:73:23:05:4e:38:06:bb:8b:a3: c2:af:b2:73:3e:b9:42:ff:34:26:13:c4:c8:c0:d2:9c:68:ef: 58:66:36:2b:be:87:fb:6a:db:76:29:ce:54:df:3e:af:25:73: 63:4a:6b:ac:3b:8f:c9:df:61:1b:fb:c9:57:26:01:86:3a:c8: 76:a3:e6:01:65:be:80:ea:cd:05:04:f1:c2:8b:01:e7:c1:6c: e6:9e:07:c9:c7:c8:6e:30:ab:0e:03:45:3e:38:eb:d5:12:54: 21:13:0d:b2:36:07:fb:ba:63:6d:07:bb:b2:a6:cb:13:66:14: 61:5e:c9:97:2a:ce:c9:69:6f:b0:f2:a7:be:b8:5f:76:d5:4b: 42:52:bd:11:e8:cf:bc:4e:fe:6d:de:76:67:cd:a1:f7:36:a9: 64:5c:f8:34:46:ae:3b:d9:68:69:85:5f:80:03:b4:25:f4:f5: 2f:c2:dd:76:1d:f2:c7:21:1c:65:8d:48:80:48:46:3c:6b:8e: 9d:53:ae:b5:28:6c:62:81:f7:e9:e3:1c:5e:ad:de:f1:7d:73: 6e:15:c8:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUwNTEyMTk1NjAwWhcNMjUwNTE5MTk1NjAwWjAYMRYwFAYD VQQDEw02ODIyNTI1MC1mZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8S8zDhMoloulYjjNDQxZLpUsS/yiMYX9oss9IKCmCo9p6YtgXKskSwrA9FOO /+wDVU7YU+ReodEd7XTfSMTI+8YB7BD5GFbBmrMGTU2X+R/I9+gWHmv6zls2Nn1I XjE7yJrS5T2/4Lx9M6pYL8VorXEOnof8FOjtjp8hUoF2RrVOWgT/LJDakXT435e7 txAAn8DIz//5tLvb1o9xTgyNAGlP5yylPfmqDc69tasO71ygj6q+RB1T43l/dDFz IgTiEfjJFDX1h6B6O7eRm89mXl4LExdkgrycrqSl6Ud4E2n6MYGH1lrNNTsiFRyy 7wQGbTAI91uyByNqoPfEJCpi2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6YeL7Z JkB/6yZgNcRgakmTFhBVMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBDRC80NjcyM0YxRTg5RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5 YVJqanA1LS1DQ1BHY3k0bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh36Z4zU6gjYYd09e+RDTiet8fEVhk6xrjVvfxCjRvAH7JBu1u90Zw Z+mcBuJzIwVOOAa7i6PCr7JzPrlC/zQmE8TIwNKcaO9YZjYrvof7att2Kc5U3z6v JXNjSmusO4/J32Eb+8lXJgGGOsh2o+YBZb6A6s0FBPHCiwHnwWzmngfJx8huMKsO A0U+OOvVElQhEw2yNgf7umNtB7uypssTZhRhXsmXKs7JaW+w8qe+uF921UtCUr0R 6M+8Tv5t3nZnzaH3NqlkXPg0Rq472WhphV+AA7Ql9PUvwt12HfLHIRxljUiASEY8 a46dU661KGxigffp4xxerd7xfXNuFchS -----END CERTIFICATE-----Generated at Tue May 13 19:52:20 2025 by rpki-client