$ rpki-client -vvf rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft File: OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft (raw, json) Hash identifier: touUpLNhRPQYKdHe27knGUrtZA5UzHpxEGY48u0Eu+U= Subject key identifier: AB:64:F4:91:39:72:27:3D:36:2E:41:E6:1E:C7:5F:53:1D:C4:27:4F Authority key identifier: 38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 Certificate issuer: /CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft Manifest number: 01CB Signing time: Tue 01 Jul 2025 03:17:00 +0000 Manifest this update: Tue 01 Jul 2025 03:17:00 +0000 Manifest next update: Tue 08 Jul 2025 03:17:00 +0000 Files and hashes: 1: OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl (hash: /d8Ulq3KxqRlmBZ5AtfWHHg4Z4IOV+n4G/xV3ycQu6s=) 2: DD8D4802932211EDBF466F52C4F9AE02.roa (hash: pmbN5fPCbO/oalKNS7ivInU9ETfH9WfdJG7H7rtfmr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192D09, serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Validity Not Before: Jul 1 03:17:00 2025 GMT Not After : Jul 8 03:17:00 2025 GMT Subject: CN=6863532c-6b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:40:16:55:91:4e:b3:73:60:e7:b1:c9:dd:c1: a0:5c:ae:a5:48:22:a2:e3:9a:10:25:1f:8c:aa:42: b2:90:d0:d9:3c:5b:67:50:36:1e:ca:a4:fd:7f:6b: 37:73:7e:e8:27:aa:7b:13:d0:4f:6d:d7:72:26:ff: 52:9e:bd:bd:e9:3c:93:8c:12:d4:9a:dc:04:40:06: 45:83:16:7d:0c:76:12:a4:68:2e:5f:9f:61:fb:18: 4b:75:da:85:a9:f3:15:8f:13:4f:e1:ba:26:09:00: 76:35:f1:ef:d7:fc:31:b2:c9:79:03:57:db:8a:6b: 9d:58:42:a8:bb:c3:44:7b:ad:96:6e:ed:9b:64:63: 4e:ac:9c:7a:de:dc:fd:23:da:4e:37:8d:8a:cf:63: f7:ca:9c:b8:02:20:95:c8:e2:e8:30:60:91:d8:56: 87:48:09:48:f7:67:5e:5a:7d:bf:bc:e7:d2:ab:bb: ae:2b:ca:c3:75:8b:9f:de:39:9a:54:06:c9:72:2a: 45:ab:0c:8e:e4:bc:a8:56:dc:85:60:93:b3:e5:0f: 79:4a:e3:e2:1c:73:60:fa:36:35:00:b8:4a:06:9e: 68:b1:37:6b:89:15:2e:ce:2a:8e:d8:0b:a0:e7:d6: 1c:2d:88:e7:e6:b5:43:bc:76:26:ab:7d:b2:d8:92: a7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:64:F4:91:39:72:27:3D:36:2E:41:E6:1E:C7:5F:53:1D:C4:27:4F X509v3 Authority Key Identifier: keyid:38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:cc:58:e7:36:8b:06:d2:fa:73:11:04:df:22:15:4e:8f:81: 3c:d2:9b:29:e6:d3:88:79:6a:67:80:74:66:9a:61:4f:f9:4c: a4:2e:a1:3c:1c:e2:0a:f4:b6:8a:e2:60:26:84:63:ae:63:d2: 06:0f:3d:66:fc:24:c1:4f:40:0d:90:d5:1a:a4:df:8a:b3:57: 3c:2c:ec:91:2e:3f:d6:2f:d5:e9:e5:20:64:24:c0:a8:b9:e9: ab:ac:70:57:aa:cf:39:98:09:73:6c:6b:39:59:53:1c:73:0f: 33:1b:35:de:33:b5:af:5c:5e:cf:a9:59:04:61:cb:d8:8e:4d: 99:46:d0:e7:72:24:b2:70:6c:c9:b2:ac:d1:7c:33:cd:14:90: 31:4d:4b:a7:ff:d0:62:76:1e:70:6b:ac:b2:3e:c8:4c:a4:39: 27:88:f4:d0:97:ca:55:99:fb:aa:0f:b4:15:0f:da:13:42:92: 45:e7:ac:a5:73:89:25:a9:f0:30:6c:25:86:e5:1c:75:87:8f: 66:bf:74:5d:48:cf:a5:a4:0c:a3:93:34:f7:a2:27:9a:2d:eb: 9c:0f:71:28:23:27:0f:a8:47:e1:43:5b:83:0b:5a:00:1e:17: 66:f7:b9:eb:0d:1c:4f:d1:3e:73:d5:a0:13:50:6e:58:69:e6: 17:3c:c4:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJEMDkxMTAvBgNVBAUTKDM4NDU0NUQ2RjU1RjMyQjMxRkU4NjQ2RjI0NEE3QzA3 QkE2OTU0MDgwHhcNMjUwNzAxMDMxNzAwWhcNMjUwNzA4MDMxNzAwWjAYMRYwFAYD VQQDEw02ODYzNTMyYy02YjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEAWVZFOs3Ng57HJ3cGgXK6lSCKi45oQJR+MqkKykNDZPFtnUDYeyqT9f2s3 c37oJ6p7E9BPbddyJv9Snr296TyTjBLUmtwEQAZFgxZ9DHYSpGguX59h+xhLddqF qfMVjxNP4bomCQB2NfHv1/wxssl5A1fbimudWEKou8NEe62Wbu2bZGNOrJx63tz9 I9pON42Kz2P3ypy4AiCVyOLoMGCR2FaHSAlI92deWn2/vOfSq7uuK8rDdYuf3jma VAbJcipFqwyO5LyoVtyFYJOz5Q95SuPiHHNg+jY1ALhKBp5osTdriRUuziqO2Aug 59YcLYjn5rVDvHYmq32y2JKnVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtk9JE5 cic9Ni5B5h7HX1MdxCdPMB8GA1UdIwQYMBaAFDhFRdb1XzKzH+hkbyRKfAe6aVQI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkQwOS9GMEYyRURCMjkz MUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1yTWY2R1J2SkVwOEI3cHBW QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FVkYxdlZmTXJNZjZHUnZKRXA4QjdwcFZBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkQwOS9GMEYyRURCMjkzMUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1y TWY2R1J2SkVwOEI3cHBWQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAszFjnNosG0vpzEQTfIhVOj4E80psp5tOIeWpngHRmmmFP+UykLqE8 HOIK9LaK4mAmhGOuY9IGDz1m/CTBT0ANkNUapN+Ks1c8LOyRLj/WL9Xp5SBkJMCo uemrrHBXqs85mAlzbGs5WVMccw8zGzXeM7WvXF7PqVkEYcvYjk2ZRtDnciSycGzJ sqzRfDPNFJAxTUun/9Bidh5wa6yyPshMpDkniPTQl8pVmfuqD7QVD9oTQpJF56yl c4klqfAwbCWG5Rx1h49mv3RdSM+lpAyjkzT3oieaLeucD3EoIycPqEfhQ1uDC1oA Hhdm97nrDRxP0T5z1aATUG5YaeYXPMQZ -----END CERTIFICATE-----Generated at Tue Jul 1 14:07:01 2025 by rpki-client