$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json) Hash identifier: cBe8MsL/jRJNHjhfgMdEzLAK8B5X1igA+JkJ78nixsQ= Subject key identifier: 45:78:01:A4:D1:9E:1E:F3:8A:EA:D8:27:4F:F1:20:9A:87:CF:57:92 Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft Manifest number: 76 Signing time: Thu 03 Jul 2025 07:01:44 +0000 Manifest this update: Thu 03 Jul 2025 07:01:44 +0000 Manifest next update: Thu 10 Jul 2025 07:01:44 +0000 Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: uw0GPjOA1+QorWBHVJm7PdHNNFmefg7+aFv0Tn2jEZ8=) 2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: gEbj+lO4aYDwjrfL1QJi0wu8U7VQFh/BgCCzbNzGNWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Validity Not Before: Jul 3 07:01:44 2025 GMT Not After : Jul 10 07:01:44 2025 GMT Subject: CN=68662ad8-f660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:6e:9d:d1:f8:9d:dc:b0:df:44:05:0d:d5: 7a:2b:ff:7b:e5:0b:c9:8b:35:48:af:94:ea:7f:d2: 05:a0:25:56:cc:cb:23:91:1e:60:82:ba:4b:e6:41: ad:a9:89:da:c8:56:d9:8a:a0:88:cd:3f:fd:56:fd: e8:93:a8:70:05:42:bc:b2:ce:66:ec:72:51:72:e7: 14:61:2c:d9:37:cb:a0:da:65:d3:ef:2e:e1:4d:ce: 8b:5a:12:47:1e:da:41:80:57:84:7c:8c:a5:12:67: 35:15:0a:46:a1:fc:45:3e:db:c4:41:d6:3f:32:d6: b2:cf:0a:b3:39:6b:17:a7:8c:72:e5:a3:7d:ee:2c: 8d:c6:b2:0e:e9:89:c3:e3:dc:80:f3:61:cd:5d:1e: 1c:bb:c7:05:eb:40:58:b5:79:17:0c:c3:a9:2e:09: 25:51:e9:fb:c5:df:ef:e1:a1:f7:63:33:ac:36:61: 90:79:43:f7:72:64:8a:41:13:d9:32:19:f7:a2:f6: ed:a7:e2:12:87:2f:b6:6e:2f:47:8a:ab:e3:78:ac: ad:69:52:57:be:d4:e1:57:a1:6a:61:d1:c5:89:9d: 39:ad:77:9e:c7:c5:98:7f:5b:5a:7a:98:d0:29:49: 16:8d:57:c9:ec:1e:a9:4f:e7:50:95:fc:3a:1c:55: dd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:78:01:A4:D1:9E:1E:F3:8A:EA:D8:27:4F:F1:20:9A:87:CF:57:92 X509v3 Authority Key Identifier: keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f2:ff:4b:ad:24:7b:4b:9d:f0:6c:d9:71:bc:78:05:d5:b3: 11:9c:7c:23:f1:2b:29:cd:41:a9:d2:71:60:dd:47:4e:fa:07: dd:3d:ad:e8:eb:8a:fa:e9:d9:91:79:45:14:47:57:7c:db:0f: 04:fd:be:8b:b4:a5:bb:ff:f5:31:3d:d3:8b:c9:32:37:67:7e: 8f:10:2d:cb:6b:37:85:04:47:68:df:17:00:ff:5e:c4:b8:03: 41:7a:5e:1b:f9:eb:fa:15:2c:58:fb:34:36:f1:e2:f0:84:2b: cd:87:91:ec:5d:b7:d7:9c:ae:0a:57:16:fe:98:b9:60:2d:89: 28:fe:e0:e7:ef:be:b7:7b:c2:3c:29:4f:56:6b:c4:28:1b:d6: ed:19:7d:45:55:3f:52:c2:e3:f8:9e:de:68:6e:4d:38:b9:15: 66:12:cf:68:b8:07:b6:f4:51:ae:25:31:b9:f2:76:ae:14:c3: eb:74:87:92:33:18:bc:d6:24:0a:0a:d1:e2:6b:94:d7:e7:1f: 88:9f:56:ae:50:36:1a:18:c2:19:48:05:ac:cc:a6:ff:f2:c9: 04:1e:fe:b6:1c:9a:43:d8:43:dc:43:6e:cd:b7:ee:75:37:a7: ab:7f:ae:f5:fe:82:47:cb:db:a6:51:ec:3d:e4:30:62:f4:37: 0a:ad:2e:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUJGMDExMC8GA1UEBRMoMjFDRkNFODFEODc1RDVDRjhGNTk2QURCRkNDMzYwMTk2 MUM0NDFFNzAeFw0yNTA3MDMwNzAxNDRaFw0yNTA3MTAwNzAxNDRaMBgxFjAUBgNV BAMTDTY4NjYyYWQ4LWY2NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+fG6d0fid3LDfRAUN1Xor/3vlC8mLNUivlOp/0gWgJVbMyyORHmCCukvmQa2p idrIVtmKoIjNP/1W/eiTqHAFQryyzmbsclFy5xRhLNk3y6DaZdPvLuFNzotaEkce 2kGAV4R8jKUSZzUVCkah/EU+28RB1j8y1rLPCrM5axenjHLlo33uLI3Gsg7picPj 3IDzYc1dHhy7xwXrQFi1eRcMw6kuCSVR6fvF3+/hofdjM6w2YZB5Q/dyZIpBE9ky Gfei9u2n4hKHL7ZuL0eKq+N4rK1pUle+1OFXoWph0cWJnTmtd57HxZh/W1p6mNAp SRaNV8nsHqlP51CV/DocVd3pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURXgBpNGe HvOK6tgnT/EgmofPV5IwHwYDVR0jBBgwFoAUIc/Ogdh11c+PWWrb/MNgGWHEQecw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQkYwLzlGNTkxRThFQTQx NTExRUZBMTRGQkQzRkM0RjlBRTAyL0ljX09nZGgxMWMtUFdXcmJfTU5nR1dIRVFl Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWNfT2dkaDExYy1QV1dyYl9NTmdHV0hFUWVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx QkYwLzlGNTkxRThFQTQxNTExRUZBMTRGQkQzRkM0RjlBRTAyL0ljX09nZGgxMWMt UFdXcmJfTU5nR1dIRVFlYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHPy/0utJHtLnfBs2XG8eAXVsxGcfCPxKynNQanScWDdR076B909rejr ivrp2ZF5RRRHV3zbDwT9vou0pbv/9TE904vJMjdnfo8QLctrN4UER2jfFwD/XsS4 A0F6Xhv56/oVLFj7NDbx4vCEK82Hkexdt9ecrgpXFv6YuWAtiSj+4Ofvvrd7wjwp T1ZrxCgb1u0ZfUVVP1LC4/ie3mhuTTi5FWYSz2i4B7b0Ua4lMbnydq4Uw+t0h5Iz GLzWJAoK0eJrlNfnH4ifVq5QNhoYwhlIBazMpv/yyQQe/rYcmkPYQ9xDbs237nU3 p6t/rvX+gkfL26ZR7D3kMGL0NwqtLss= -----END CERTIFICATE-----Generated at Fri Jul 4 21:42:37 2025 by rpki-client