$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json) Hash identifier: 9PoZnKLbKgs8yJhXUuaD+Y2sgQZ/usokW7HTzI2qBQc= Subject key identifier: E1:A3:7D:B9:E7:41:F6:47:CD:D7:06:39:F1:F6:71:23:54:91:00:18 Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Certificate serial: 0C66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft Manifest number: 0C3D Signing time: Fri 30 May 2025 18:49:00 +0000 Manifest this update: Fri 30 May 2025 18:49:00 +0000 Manifest next update: Fri 06 Jun 2025 18:49:00 +0000 Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: 2qr09wTmduQSAmmU0/5QlMxHX0h6aAm5LzPXiGzPUMQ=) 2: 50AA91CAD70311EFB9BBC86DC4F9AE02.roa (hash: gdYeSr8OVfEXIHB8AE/R/OGyXt1CPyW6FryfjJbmXTw=) 3: 6309B36EEC3911EFB3A92E86C4F9AE02.roa (hash: mJvqce7dr7148HNrDiByF+54zvxocevFsAIl/C28B9c=) 4: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: UKp0al5lwDctbpMZ4w91PmU9xh+b2uAj1qbyNOwUx6Q=) 5: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: xNrMx2ykeoPHlp4OwjxlD2woswWyefyqLirhxUQ7v60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3174 (0xc66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Validity Not Before: May 30 18:49:00 2025 GMT Not After : Jun 6 18:49:00 2025 GMT Subject: CN=6839fd9c-9cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8a:db:43:da:bb:26:62:75:7b:55:a7:4b:74: 32:73:4e:36:12:00:09:c0:bf:52:aa:77:4d:b5:e5: dc:18:39:19:70:29:9f:e9:46:b4:cb:6a:4f:fc:3d: 2e:bb:e6:af:8c:73:06:a1:04:d0:35:39:43:63:25: e2:fc:a3:93:d8:20:82:07:f6:ca:cd:1a:8b:23:fa: 28:92:5b:fe:66:42:6f:96:8d:0d:02:7a:06:b5:59: a1:e4:ba:5e:83:6e:12:46:bb:66:03:bf:3e:ee:9a: 2c:cd:27:f8:93:53:b7:79:82:cc:19:dd:79:34:b7: ef:9a:f9:4c:f0:20:bc:b1:97:c7:50:6d:8e:9a:55: 7b:17:7c:28:b4:d7:fc:33:7b:d3:bf:f1:b3:c7:f4: 5d:7a:92:3e:2f:a2:33:45:14:d5:bc:30:09:3e:5c: 98:19:60:1d:7b:6b:0a:94:ad:b9:65:e5:99:7c:97: 2f:01:6e:e2:ce:fe:d9:2f:29:57:c0:e3:c5:91:e3: 44:bb:41:86:0c:54:08:40:de:fa:d4:03:1c:f9:5a: b4:1c:70:4c:d6:a8:f6:7b:8b:9d:c0:80:7b:42:49: 5f:62:70:48:c8:07:2e:43:89:ef:56:cf:8e:54:4d: 34:66:69:54:22:e3:8e:a6:14:7b:2b:c7:42:3d:7d: 97:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A3:7D:B9:E7:41:F6:47:CD:D7:06:39:F1:F6:71:23:54:91:00:18 X509v3 Authority Key Identifier: keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:10:e3:82:2c:77:92:a4:b9:89:af:2a:46:6b:c8:13:90:37: 0a:b3:1e:a6:60:a4:e6:ad:23:b1:f7:df:19:2c:e0:95:1d:de: 19:d0:4c:3a:05:25:26:7e:d7:8c:7b:23:31:fd:ab:78:64:39: eb:51:6e:d8:fd:a0:58:1a:b4:29:2d:2d:d8:74:9c:dc:17:35: 3b:e9:42:8e:5e:4e:fc:27:40:6a:d8:bc:ca:df:e0:21:ff:17: f6:49:32:eb:a8:7d:c0:77:9e:52:78:bf:98:a4:10:2d:4c:0a: d4:a7:4f:2f:37:d0:6a:58:5e:b2:10:0c:01:02:b4:d2:f2:0e: 85:84:7d:27:0d:06:ef:17:4c:16:15:54:29:e1:3f:aa:a6:51: 37:f6:38:79:94:e8:4e:a8:bd:32:ce:07:7d:6b:63:a9:69:d6: de:fc:d5:43:cd:5f:fc:c1:1e:71:f4:a5:7f:8e:1d:4c:65:d5: 2d:37:b0:48:f2:61:fb:79:f5:cd:fb:e5:83:50:14:b7:fb:35: 72:9b:d1:c9:04:ef:ff:64:b3:7e:a1:e0:e1:48:54:50:e7:4e: a3:b2:d4:0f:86:7f:04:b4:b1:31:a4:93:54:2b:23:6b:4a:fb: c1:d7:db:12:62:08:7c:df:09:ce:71:e6:4b:d3:7d:fe:d7:b7: b6:38:cc:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz QjJEOUY4NDAwHhcNMjUwNTMwMTg0OTAwWhcNMjUwNjA2MTg0OTAwWjAYMRYwFAYD VQQDEw02ODM5ZmQ5Yy05Y2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0orbQ9q7JmJ1e1WnS3Qyc042EgAJwL9SqndNteXcGDkZcCmf6Ua0y2pP/D0u u+avjHMGoQTQNTlDYyXi/KOT2CCCB/bKzRqLI/ooklv+ZkJvlo0NAnoGtVmh5Lpe g24SRrtmA78+7poszSf4k1O3eYLMGd15NLfvmvlM8CC8sZfHUG2OmlV7F3wotNf8 M3vTv/Gzx/RdepI+L6IzRRTVvDAJPlyYGWAde2sKlK25ZeWZfJcvAW7izv7ZLylX wOPFkeNEu0GGDFQIQN761AMc+Vq0HHBM1qj2e4udwIB7QklfYnBIyAcuQ4nvVs+O VE00ZmlUIuOOphR7K8dCPX2XzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGjfbnn QfZHzdcGOfH2cSNUkQAYMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2 Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHEOOCLHeSpLmJrypGa8gTkDcKsx6mYKTmrSOx998ZLOCVHd4Z0Ew6 BSUmfteMeyMx/at4ZDnrUW7Y/aBYGrQpLS3YdJzcFzU76UKOXk78J0Bq2LzK3+Ah /xf2STLrqH3Ad55SeL+YpBAtTArUp08vN9BqWF6yEAwBArTS8g6FhH0nDQbvF0wW FVQp4T+qplE39jh5lOhOqL0yzgd9a2Opadbe/NVDzV/8wR5x9KV/jh1MZdUtN7BI 8mH7efXN++WDUBS3+zVym9HJBO//ZLN+oeDhSFRQ506jstQPhn8EtLExpJNUKyNr SvvB19sSYgh83wnOceZL033+17e2OMxp -----END CERTIFICATE-----Generated at Sat May 31 17:24:46 2025 by rpki-client