$ rpki-client -vvf rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft File: odoVuis7tmKheOJtlmgVoiouRpk.mft (raw, json) Hash identifier: 81op4/Kw93bQrkKXxeL2mKAxMJ6h5Bogqm/UbQ9Voxw= Subject key identifier: CA:CE:6D:A4:C1:95:20:8F:E5:81:34:68:6A:19:F5:AA:71:7E:A3:BE Authority key identifier: A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99 Certificate issuer: /CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699 Certificate serial: 02C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft Manifest number: 02BC Signing time: Thu 05 Jun 2025 01:18:50 +0000 Manifest this update: Thu 05 Jun 2025 01:18:49 +0000 Manifest next update: Thu 12 Jun 2025 01:18:49 +0000 Files and hashes: 1: odoVuis7tmKheOJtlmgVoiouRpk.crl (hash: zc+ADty3IhwTDvdpTD8Xh3YIJqyv8amLmpERhxCucZQ=) 2: 692F8290AF1D11EFA7108387C4F9AE02.roa (hash: WDaHtMQWTwJWQkeIMiJU8NUrdki0tCHjoldLxpeTYvo=) 3: 57BB8E50AF1D11EF9CB35387C4F9AE02.roa (hash: bzAyLuYRUMBSf4vl6Z05UJcWg+7dmLiTXnPYXge8oFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 01:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 713 (0x2c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B55C, serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699 Validity Not Before: Jun 5 01:18:49 2025 GMT Not After : Jun 12 01:18:49 2025 GMT Subject: CN=6840f079-62a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:82:a5:f5:48:6e:b0:2e:8d:a6:f2:df:92:a0: d5:e3:c7:51:5c:43:9a:7c:65:34:38:93:ab:0f:a1: 35:44:9f:4b:5c:a6:df:94:ca:04:3d:3e:d5:de:2e: b2:a6:fd:a7:9a:3a:77:47:c7:c3:68:d7:5c:2b:a2: d2:c0:45:b4:8a:f7:8a:46:7d:c3:fe:94:e8:38:88: 97:53:bb:7a:41:7b:61:7f:b5:58:dd:ce:e6:f7:39: 71:ca:a2:51:c5:d6:c0:6a:01:6e:94:16:3b:17:61: be:fd:24:aa:8c:ee:1d:8d:64:72:f7:eb:ac:39:45: ff:1d:6b:78:61:d9:dd:b3:3f:c3:4f:b1:da:e5:6a: 74:b0:55:6d:53:5f:58:ff:c4:88:0a:8e:99:bc:4d: 1f:c4:a0:41:03:bc:90:28:4a:50:0c:f8:fc:13:26: e8:86:26:09:c9:98:54:9c:e6:25:25:8f:52:4d:71: a9:30:75:2c:4b:5d:52:0f:5b:b0:d5:e2:b9:d3:09: 17:ba:f4:93:ed:a2:45:63:9a:2b:c6:72:90:0d:d0: c4:ab:cd:6b:4a:16:ac:2c:45:a9:cb:1f:cb:68:68: b6:27:19:fc:6c:74:ea:49:cc:b6:86:47:e8:e8:fa: 8c:48:55:3e:5f:06:ad:7d:69:a0:3a:7c:6e:1f:2e: c5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CE:6D:A4:C1:95:20:8F:E5:81:34:68:6A:19:F5:AA:71:7E:A3:BE X509v3 Authority Key Identifier: keyid:A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:96:43:00:b4:99:60:7a:9b:33:10:b9:09:8f:8c:32:99:8b: bf:a3:cb:41:64:91:e0:1b:07:f1:45:6d:9a:79:62:70:a6:01: d1:45:c1:6c:92:b4:d4:2d:58:4c:73:2b:93:c4:46:97:f8:08: fd:8b:d9:4d:a8:38:75:1a:77:da:09:64:e4:87:99:9c:2e:2c: 31:39:d0:95:2b:5e:cb:c0:a4:3d:80:eb:2c:25:2c:0b:ca:f9: d7:03:37:20:e7:53:35:73:e2:b1:35:16:e7:ca:54:b7:70:c9: 2e:e4:32:4d:67:38:99:a5:d1:1c:aa:d5:a6:64:c0:07:3d:86: 7e:34:c5:8c:ee:f3:f4:72:2c:2b:08:6e:03:7a:d2:39:80:c3: 83:12:d2:9d:12:35:a6:d2:99:ad:09:5d:63:32:d2:aa:84:f4: 6c:79:8f:88:68:48:ef:71:17:28:c3:65:60:22:9a:7c:96:aa: 22:e3:29:99:2c:72:33:e9:8b:40:cd:7c:e3:ab:9c:4e:57:82: 7c:3b:68:40:45:3b:33:55:fc:f1:7d:57:05:ae:c3:31:b4:fd: 95:f7:b3:db:f4:8d:8e:3e:c0:11:9f:08:50:b8:54:41:9a:74: 82:e0:09:00:db:81:5d:9c:4f:60:e0:cb:da:4e:44:c2:aa:73: 4e:52:f2:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1NUMxMTAvBgNVBAUTKEExREExNUJBMkIzQkI2NjJBMTc4RTI2RDk2NjgxNUEy MkEyRTQ2OTkwHhcNMjUwNjA1MDExODQ5WhcNMjUwNjEyMDExODQ5WjAYMRYwFAYD VQQDEw02ODQwZjA3OS02MmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04Kl9UhusC6NpvLfkqDV48dRXEOafGU0OJOrD6E1RJ9LXKbflMoEPT7V3i6y pv2nmjp3R8fDaNdcK6LSwEW0iveKRn3D/pToOIiXU7t6QXthf7VY3c7m9zlxyqJR xdbAagFulBY7F2G+/SSqjO4djWRy9+usOUX/HWt4Ydndsz/DT7Ha5Wp0sFVtU19Y /8SICo6ZvE0fxKBBA7yQKEpQDPj8EybohiYJyZhUnOYlJY9STXGpMHUsS11SD1uw 1eK50wkXuvST7aJFY5orxnKQDdDEq81rShasLEWpyx/LaGi2Jxn8bHTqScy2hkfo 6PqMSFU+XwatfWmgOnxuHy7FKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrObaTB lSCP5YE0aGoZ9apxfqO+MB8GA1UdIwQYMBaAFKHaFborO7ZioXjibZZoFaIqLkaZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjU1Qy9FOTE2RDJFRUY4 NUMxMUVDQUI2RTJFNjVDNEY5QUUwMi9vZG9WdWlzN3RtS2hlT0p0bG1nVm9pb3VS cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29kb1Z1aXM3dG1LaGVPSnRsbWdWb2lvdVJway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjU1Qy9FOTE2RDJFRUY4NUMxMUVDQUI2RTJFNjVDNEY5QUUwMi9vZG9WdWlzN3Rt S2hlT0p0bG1nVm9pb3VScGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxlkMAtJlgepszELkJj4wymYu/o8tBZJHgGwfxRW2aeWJwpgHRRcFs krTULVhMcyuTxEaX+Aj9i9lNqDh1GnfaCWTkh5mcLiwxOdCVK17LwKQ9gOssJSwL yvnXAzcg51M1c+KxNRbnylS3cMku5DJNZziZpdEcqtWmZMAHPYZ+NMWM7vP0ciwr CG4DetI5gMODEtKdEjWm0pmtCV1jMtKqhPRseY+IaEjvcRcow2VgIpp8lqoi4ymZ LHIz6YtAzXzjq5xOV4J8O2hARTszVfzxfVcFrsMxtP2V97Pb9I2OPsARnwhQuFRB mnSC4AkA24FdnE9g4MvaTkTCqnNOUvLR -----END CERTIFICATE-----Generated at Thu Jun 5 18:26:46 2025 by rpki-client