$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft File: OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json) Hash identifier: dQfZjEkWMIe1WomCm1uB4aBnL77FQdUFgv5aKF9Jcnk= Subject key identifier: 87:AE:28:20:74:F4:83:4F:F9:D3:88:93:7D:15:8C:75:A9:E3:5F:6D Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Certificate serial: 0812 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft Manifest number: 080B Signing time: Wed 04 Jun 2025 20:48:44 +0000 Manifest this update: Wed 04 Jun 2025 20:48:43 +0000 Manifest next update: Wed 11 Jun 2025 20:48:43 +0000 Files and hashes: 1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: WVU3XQu+VVyKc2R5hYwFInUApbq6/uXF5+yDvEzfonY=) 2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: OwVRnVKX5TIRRxRa7tYPZCkquxRI/+jnc5rYmXmYkKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 20:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2066 (0x812) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Validity Not Before: Jun 4 20:48:43 2025 GMT Not After : Jun 11 20:48:43 2025 GMT Subject: CN=6840b12b-3db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:25:28:4e:1d:5c:94:65:2f:2f:d7:6a:5d: f7:44:64:ae:97:f3:e3:cf:8b:85:fa:73:55:36:50: 87:74:df:45:4a:56:ad:1e:16:77:6b:f3:7e:ec:67: be:e0:ba:07:51:91:f4:28:1c:6c:1c:1a:38:7a:f7: 60:48:1d:00:7c:86:a8:af:62:2e:80:b8:37:a8:39: 80:d7:2b:fc:54:50:ac:53:c0:c0:d4:65:b5:55:c5: df:04:0e:2b:1e:67:ba:71:b8:ce:16:30:18:23:9f: 5f:f7:83:14:84:b3:81:6c:72:75:1d:d1:da:1d:81: d2:b7:10:9f:7e:bc:00:39:5c:36:c2:e9:e8:32:44: 92:38:9e:34:32:92:40:ef:74:d7:5b:cb:2c:5a:44: 73:26:bb:85:9a:74:d9:74:3a:02:f4:5c:43:28:55: fc:6f:7a:2c:33:d1:3c:bc:0a:db:9d:f8:9e:35:f0: 9a:7e:bf:13:13:8d:fa:7f:6e:10:0d:2d:a8:80:99: b8:4a:91:c6:dc:93:c8:a4:c1:4b:4e:f7:90:a8:67: 07:fa:13:32:91:05:03:65:b8:97:c5:96:6c:38:5a: 1c:d7:98:44:d3:51:9a:0a:39:86:09:5a:8c:ed:e6: 7a:e4:1f:3f:cc:8e:e0:50:fd:b0:d8:5f:14:18:95: 1b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AE:28:20:74:F4:83:4F:F9:D3:88:93:7D:15:8C:75:A9:E3:5F:6D X509v3 Authority Key Identifier: keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:cd:cd:bb:23:f2:9d:66:89:b3:b3:a1:f9:e8:c4:c9:f7:4a: 33:de:66:3f:64:ef:7f:94:da:61:48:0f:1a:6c:d7:cb:a8:28: 05:61:2b:f4:e0:8d:a3:3e:98:c4:14:eb:9c:d8:7f:96:18:f4: 2c:fb:f6:00:25:27:cf:ce:25:de:31:57:a5:09:b0:43:98:94: f2:b9:c1:ac:3e:30:0b:dc:f8:53:1b:cf:25:8a:5e:e7:68:a0: 64:b5:fc:a3:d9:82:df:5b:1e:bc:30:1d:2e:09:dc:f6:95:22: 9b:75:cb:aa:d0:f5:1e:27:1b:c1:a0:b1:2d:8f:50:92:21:79: 8f:a7:50:29:c3:a3:cd:45:09:ab:f3:6f:43:d6:63:80:02:25: 22:dd:17:b7:4f:e0:7a:0b:06:fd:ed:11:e2:20:3b:5b:88:27: 28:ae:ef:c3:88:80:22:57:7e:14:e2:79:ec:5f:d4:97:89:28: 7b:b9:c2:5f:49:47:ce:fe:25:a4:b2:48:c0:ae:3e:e3:0d:eb: 00:6f:b4:d4:13:96:29:1d:2a:8e:bb:f0:f2:fe:3a:53:72:09: 11:61:16:db:b8:2a:ad:6a:0f:43:53:4d:93:4b:a7:9c:48:57: 44:07:e6:fa:39:38:88:80:7a:d6:49:e1:e1:c4:8c:74:fc:6a: af:3f:51:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDM4MDFFMzYxNEY3RDQwNDcwMkFFNDIyQ0IyNzlFNTFE QzlEMTRDQTIwHhcNMjUwNjA0MjA0ODQzWhcNMjUwNjExMjA0ODQzWjAYMRYwFAYD VQQDEw02ODQwYjEyYi0zZGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7klKE4dXJRlLy/Xal33RGSul/Pjz4uF+nNVNlCHdN9FSlatHhZ3a/N+7Ge+ 4LoHUZH0KBxsHBo4evdgSB0AfIaor2IugLg3qDmA1yv8VFCsU8DA1GW1VcXfBA4r Hme6cbjOFjAYI59f94MUhLOBbHJ1HdHaHYHStxCffrwAOVw2wunoMkSSOJ40MpJA 73TXW8ssWkRzJruFmnTZdDoC9FxDKFX8b3osM9E8vArbnfieNfCafr8TE436f24Q DS2ogJm4SpHG3JPIpMFLTveQqGcH+hMykQUDZbiXxZZsOFoc15hE01GaCjmGCVqM 7eZ65B8/zI7gUP2w2F8UGJUbHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeuKCB0 9INP+dOIk30VjHWp419tMB8GA1UdIwQYMBaAFDgB42FPfUBHAq5CLLJ55R3J0Uyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GQkJBOUU5Q0Uw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFFY0Nya0lzc25ubEhjblJU S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09BSGpZVTk5UUVjQ3JrSXNzbm5sSGNuUlRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GQkJBOUU5Q0UwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFF Y0Nya0lzc25ubEhjblJUS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFzc27I/KdZomzs6H56MTJ90oz3mY/ZO9/lNphSA8abNfLqCgFYSv0 4I2jPpjEFOuc2H+WGPQs+/YAJSfPziXeMVelCbBDmJTyucGsPjAL3PhTG88lil7n aKBktfyj2YLfWx68MB0uCdz2lSKbdcuq0PUeJxvBoLEtj1CSIXmPp1Apw6PNRQmr 829D1mOAAiUi3Re3T+B6Cwb97RHiIDtbiCcoru/DiIAiV34U4nnsX9SXiSh7ucJf SUfO/iWkskjArj7jDesAb7TUE5YpHSqOu/Dy/jpTcgkRYRbbuCqtag9DU02TS6ec SFdEB+b6OTiIgHrWSeHhxIx0/GqvP1F3 -----END CERTIFICATE-----Generated at Thu Jun 5 20:01:36 2025 by rpki-client