$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: dt67B1+s7HFLGCeJHgfoWgGVIImdbBhNJEpKLFFmsQs= Subject key identifier: 9D:7E:1E:19:4F:47:C3:9F:35:F2:59:B3:FB:D1:91:CC:DB:F7:AE:F5 Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1D42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1D35 Signing time: Wed 04 Jun 2025 16:10:49 +0000 Manifest this update: Wed 04 Jun 2025 16:10:49 +0000 Manifest next update: Wed 11 Jun 2025 16:10:49 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: W7LuIpk5v9m/LEnnILHFUvqagsaKOxk0Pg/z2jl6KLM=) 2: DE5B018C8D8B11EBB959991DC4F9AE02.roa (hash: jfTk7qLtFGzciF3MjfSmzCLIXIS5E+uoDhIbl0HSies=) 3: DD9C07828D8B11EBB959991DC4F9AE02.roa (hash: gqOrlTvQP7NE8QcpWskAg9stXohxZ5iMQQauxzl2p0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 16:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7490 (0x1d42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: Jun 4 16:10:49 2025 GMT Not After : Jun 11 16:10:49 2025 GMT Subject: CN=68407009-5fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:be:01:62:1d:bd:b1:bb:21:c8:4c:70:8e: 4d:6e:1b:60:0d:73:1f:72:bf:6d:3a:5d:46:0c:e0: 26:c7:54:a2:cd:1f:a7:f4:aa:a8:d8:a4:87:34:19: af:44:21:9d:65:42:e1:01:9b:e5:58:e0:d9:b6:4c: fc:69:9a:5d:4a:ca:8a:a8:ab:32:06:62:a4:d2:13: 2c:e2:d3:8c:e8:75:5b:d5:df:3e:a7:b0:2e:dc:92: 88:b6:61:9c:0a:d5:50:ff:94:79:f1:f8:02:9d:b7: 54:c5:ac:bb:0f:89:5a:e9:5b:29:42:99:8d:da:59: 00:44:06:64:50:bf:90:00:36:61:bc:35:b4:b9:4c: ae:ae:47:1d:c4:78:71:81:88:a0:b2:b2:7f:1b:5d: 02:f6:6b:e5:7d:b6:c5:a2:1e:a4:ac:23:92:e1:c8: 13:26:7a:80:24:01:85:f2:04:e4:93:27:55:2d:7d: d5:3c:51:25:8a:cd:01:12:bb:92:4d:7a:64:cd:07: 5a:bb:23:0a:3f:9e:a6:0e:12:00:ee:e3:0c:d8:cf: bd:81:ab:5c:36:7e:24:8c:f0:94:5f:6d:eb:be:ec: 48:f2:42:bc:bb:f5:38:fa:e4:86:aa:a8:10:b8:8d: 37:fc:e7:55:8a:73:c4:27:68:dd:4e:0a:f4:4f:44: 5f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7E:1E:19:4F:47:C3:9F:35:F2:59:B3:FB:D1:91:CC:DB:F7:AE:F5 X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:db:85:99:4e:6f:a4:4b:26:d1:67:00:6e:2e:d7:ae:83:3a: b0:12:80:2a:9c:7c:55:d4:0d:2f:6b:ff:e9:6e:45:fa:c5:1f: 9c:4f:42:7e:c4:25:3e:13:55:9d:5b:b3:ab:b4:57:33:43:ee: 24:58:43:b2:f1:89:91:83:8a:07:f7:8a:28:11:47:d9:d0:14: 7c:98:55:b4:11:1a:f4:9e:4c:81:31:d6:0c:89:78:14:24:26: 02:f2:8d:f7:8b:66:73:88:dc:c8:6f:01:9a:8e:f8:f1:b3:b2: a1:de:61:93:61:fb:bc:54:01:a7:ad:90:6e:aa:2e:87:c3:86: 30:05:34:cd:d9:7b:88:f1:5e:5a:50:77:df:13:89:c1:10:3b: 10:94:81:c1:e2:53:5a:7f:9b:19:c4:5a:72:bb:b0:0f:07:82: dc:0a:e0:24:a8:42:cb:1b:9c:01:79:fc:68:66:08:09:62:7c: 80:5a:2a:1d:ed:19:25:c7:27:0a:8a:42:0c:6b:3e:89:f2:65: 0b:26:37:ae:1b:aa:9b:36:6b:81:e8:8f:4c:28:89:82:42:79: 22:37:3b:76:95:34:ee:e3:a5:29:77:0c:bd:76:54:8b:9d:20: c6:f3:88:20:c2:5e:25:65:bd:24:80:e3:d4:6e:49:b5:8f:3f: 45:c4:64:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjUwNjA0MTYxMDQ5WhcNMjUwNjExMTYxMDQ5WjAYMRYwFAYD VQQDEw02ODQwNzAwOS01ZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFS+AWIdvbG7IchMcI5NbhtgDXMfcr9tOl1GDOAmx1SizR+n9Kqo2KSHNBmv RCGdZULhAZvlWODZtkz8aZpdSsqKqKsyBmKk0hMs4tOM6HVb1d8+p7Au3JKItmGc CtVQ/5R58fgCnbdUxay7D4la6VspQpmN2lkARAZkUL+QADZhvDW0uUyurkcdxHhx gYigsrJ/G10C9mvlfbbFoh6krCOS4cgTJnqAJAGF8gTkkydVLX3VPFElis0BEruS TXpkzQdauyMKP56mDhIA7uMM2M+9gatcNn4kjPCUX23rvuxI8kK8u/U4+uSGqqgQ uI03/OdVinPEJ2jdTgr0T0RftQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1+HhlP R8OfNfJZs/vRkczb9671MB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY24WZTm+kSybRZwBuLteugzqwEoAqnHxV1A0va//pbkX6xR+cT0J+ xCU+E1WdW7OrtFczQ+4kWEOy8YmRg4oH94ooEUfZ0BR8mFW0ERr0nkyBMdYMiXgU JCYC8o33i2ZziNzIbwGajvjxs7Kh3mGTYfu8VAGnrZBuqi6Hw4YwBTTN2XuI8V5a UHffE4nBEDsQlIHB4lNaf5sZxFpyu7APB4LcCuAkqELLG5wBefxoZggJYnyAWiod 7RklxycKikIMaz6J8mULJjeuG6qbNmuB6I9MKImCQnkiNzt2lTTu46Updwy9dlSL nSDG84ggwl4lZb0kgOPUbkm1jz9FxGT2 -----END CERTIFICATE-----Generated at Thu Jun 5 19:54:07 2025 by rpki-client