$ rpki-client -vvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft File: OEBSLgVtM3Uf55akOVuNTf3lj4w.mft (raw, json) Hash identifier: vsVoyKhTvVV9Bh8v8ofJFWam9PICvqez+1ni/ZEbYnA= Subject key identifier: 6B:01:07:24:D0:9C:01:31:DD:44:BE:2A:D8:20:7F:1B:12:E6:BF:AC Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C Certificate issuer: /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Certificate serial: 062E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft Manifest number: 0626 Signing time: Sat 10 May 2025 22:22:21 +0000 Manifest this update: Sat 10 May 2025 22:22:20 +0000 Manifest next update: Sat 17 May 2025 22:22:20 +0000 Files and hashes: 1: OEBSLgVtM3Uf55akOVuNTf3lj4w.crl (hash: Rp2bqHGniEyay8R3+2sEfPPvunzEeL+x1adkR5gvIg8=) 2: B21979EE9CAF11ECBFF4AF64C4F9AE02.roa (hash: sdbnkMVypf4sBW84IBpLOAa+Rd3ZV2UqRLClbIWsTfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1582 (0x62e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FEF3, serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Validity Not Before: May 10 22:22:20 2025 GMT Not After : May 17 22:22:20 2025 GMT Subject: CN=681fd19d-259d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4f:f3:8b:88:a1:38:e3:75:a6:7d:01:e8:eb: 9c:f7:78:39:75:d6:0e:49:f6:41:16:77:09:0d:c1: 62:ec:4d:09:df:77:de:bf:be:03:ea:de:fb:36:a7: e2:0b:87:87:93:1f:08:77:9d:42:b1:1f:61:a5:9b: 52:02:22:85:0d:e1:75:63:91:f7:f1:41:ad:98:36: 59:27:1b:26:14:b7:3a:6f:7c:95:ef:da:c1:71:1d: 8e:bc:91:3a:5e:97:18:55:ba:cc:c8:57:f8:d0:18: cb:5a:10:7b:4c:06:c4:c1:f4:24:a0:6a:1b:a7:bc: 36:fc:3c:77:7e:30:90:f4:ad:fd:4e:a1:ab:b5:d9: e8:d5:b9:64:6b:aa:bc:57:9f:7e:be:48:b7:9f:89: 9f:e1:ea:ad:d2:bc:d1:7b:3b:42:d9:7f:ca:a9:c3: b4:34:93:cb:c9:a3:69:4b:a4:e8:13:ae:d5:20:d1: 07:03:0e:26:63:9a:0f:65:9e:6c:a0:06:54:00:45: 27:e6:d2:74:ef:4a:6b:07:fa:cb:ea:e9:2e:91:96: b1:3c:30:18:19:20:84:11:d1:06:12:b1:5a:a9:9e: c0:0e:a7:f7:df:ee:6c:ec:32:3d:73:00:72:e5:08: f3:4f:15:24:0f:bb:7d:59:68:7d:ac:bb:7a:76:cb: b6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:01:07:24:D0:9C:01:31:DD:44:BE:2A:D8:20:7F:1B:12:E6:BF:AC X509v3 Authority Key Identifier: keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:92:29:e6:20:8d:ff:da:46:1e:75:67:6a:53:05:10:71:bd: d3:4c:ca:b4:13:67:9c:7d:79:7c:8d:98:59:78:2f:f9:27:da: 01:78:c0:ae:68:05:a8:67:0e:63:ca:56:9f:07:b1:c0:12:c5: 81:2b:72:ba:6f:57:f3:13:df:04:14:9f:d8:f3:85:64:29:01: fc:dc:42:40:c7:e6:29:06:81:f5:f5:d2:fa:99:21:dd:f8:05: 73:75:6d:7d:0d:f0:c6:e9:2b:0c:c9:7e:a6:10:ad:7b:e5:8a: 8e:40:10:91:ae:46:ff:72:43:9d:8c:f8:c4:c7:41:2b:d4:d8: ab:e8:81:25:90:03:42:37:70:bc:dd:57:d7:8b:c6:bf:9e:d5: 0d:c0:92:d1:97:4e:31:4c:9f:57:f4:22:85:5e:93:03:d2:0f: 5f:c1:34:4d:9b:68:b7:d6:6d:26:e3:ba:4c:61:cb:4f:37:76: 77:f6:4d:d9:04:60:07:72:5c:d4:f2:6f:2c:27:ee:99:b1:12: 68:d1:43:eb:bb:e0:86:b5:da:cb:ef:2d:b3:da:e8:c1:82:04: 2f:e7:38:c7:69:72:de:7e:79:19:4c:6f:a8:fd:bb:e5:84:3c: 02:35:45:52:68:61:f0:dc:12:1c:b4:55:d9:f6:c5:0c:44:81: d0:6b:c0:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZFRjMxMTAvBgNVBAUTKDM4NDA1MjJFMDU2RDMzNzUxRkU3OTZBNDM5NUI4RDRE RkRFNThGOEMwHhcNMjUwNTEwMjIyMjIwWhcNMjUwNTE3MjIyMjIwWjAYMRYwFAYD VQQDEw02ODFmZDE5ZC0yNTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnU/zi4ihOON1pn0B6Ouc93g5ddYOSfZBFncJDcFi7E0J33fev74D6t77Nqfi C4eHkx8Id51CsR9hpZtSAiKFDeF1Y5H38UGtmDZZJxsmFLc6b3yV79rBcR2OvJE6 XpcYVbrMyFf40BjLWhB7TAbEwfQkoGobp7w2/Dx3fjCQ9K39TqGrtdno1blka6q8 V59+vki3n4mf4eqt0rzReztC2X/KqcO0NJPLyaNpS6ToE67VINEHAw4mY5oPZZ5s oAZUAEUn5tJ070prB/rL6ukukZaxPDAYGSCEEdEGErFaqZ7ADqf33+5s7DI9cwBy 5QjzTxUkD7t9WWh9rLt6dsu2CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsBByTQ nAEx3US+KtggfxsS5r+sMB8GA1UdIwQYMBaAFDhAUi4FbTN1H+eWpDlbjU395Y+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVGMy9ERERDMDFFQzk4 NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0zVWY1NWFrT1Z1TlRmM2xq NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FQlNMZ1Z0TTNVZjU1YWtPVnVOVGYzbGo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkVGMy9ERERDMDFFQzk4NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0z VWY1NWFrT1Z1TlRmM2xqNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkkinmII3/2kYedWdqUwUQcb3TTMq0E2ecfXl8jZhZeC/5J9oBeMCu aAWoZw5jylafB7HAEsWBK3K6b1fzE98EFJ/Y84VkKQH83EJAx+YpBoH19dL6mSHd +AVzdW19DfDG6SsMyX6mEK175YqOQBCRrkb/ckOdjPjEx0Er1Nir6IElkANCN3C8 3VfXi8a/ntUNwJLRl04xTJ9X9CKFXpMD0g9fwTRNm2i31m0m47pMYctPN3Z39k3Z BGAHclzU8m8sJ+6ZsRJo0UPru+CGtdrL7y2z2ujBggQv5zjHaXLefnkZTG+o/bvl hDwCNUVSaGHw3BIctFXZ9sUMRIHQa8BR -----END CERTIFICATE-----Generated at Mon May 12 04:10:55 2025 by rpki-client