$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json) Hash identifier: PlrKDIi3xpEquA5E1ull6zCRde13DR8GPVRiCBGSE/c= Subject key identifier: 46:19:9F:8F:EA:EF:34:73:17:E7:89:19:30:BF:DB:91:2A:F7:03:EC Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Certificate serial: 05D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft Manifest number: 05CE Signing time: Fri 30 May 2025 23:14:58 +0000 Manifest this update: Fri 30 May 2025 23:14:57 +0000 Manifest next update: Fri 06 Jun 2025 23:14:57 +0000 Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: IAGi0DRQkq4/V0yddqLZPBLf7M7TM3S89nGg8qc4MLc=) 2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: fabeHirzSfMRjgTkSzBs+NINgYgVd5ARAuZRjwIHiWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1491 (0x5d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Validity Not Before: May 30 23:14:57 2025 GMT Not After : Jun 6 23:14:57 2025 GMT Subject: CN=683a3bf2-de3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:41:a8:67:90:ae:58:b7:6b:4e:d6:75:d4:18: 00:08:4f:ee:90:94:97:86:65:0c:75:1f:62:55:5c: 1b:c2:21:4c:82:79:ad:3e:39:f7:88:28:d4:7b:b0: c0:42:df:04:26:67:43:5d:55:c5:81:93:7d:88:f9: 19:57:47:31:e2:ea:e5:ea:68:66:79:78:4c:d3:8c: cd:9a:b2:9b:da:11:ec:5c:1d:55:0b:db:94:c3:11: 24:01:6b:78:9e:ad:71:bc:fc:23:0f:fa:17:6b:cd: df:f1:82:ba:36:5d:ae:08:b9:a0:97:7f:d3:da:68: c4:ed:d6:13:d6:ce:72:77:ba:84:3f:a7:09:50:95: 2e:d9:f1:96:83:bd:3f:aa:4c:80:00:74:a2:6e:65: 72:93:22:d6:43:2c:d5:57:4d:f9:d2:88:fd:5f:11: 77:eb:2f:6e:46:f0:fc:1a:88:7f:20:82:24:1c:13: 60:39:f3:48:f0:2c:db:bc:56:7e:2e:e0:97:09:bf: 33:6a:2d:5a:27:ed:f7:61:9a:63:e3:2b:56:94:d5: 1d:fa:d4:fb:39:4a:d6:3d:52:d8:f4:f0:81:22:14: de:17:02:e4:6c:11:e8:19:c9:a9:5d:bd:9c:a7:4f: ac:3b:23:c8:40:37:01:e7:c1:ac:b0:61:45:26:6d: 60:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:19:9F:8F:EA:EF:34:73:17:E7:89:19:30:BF:DB:91:2A:F7:03:EC X509v3 Authority Key Identifier: keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d1:d7:0a:ec:9e:7e:ed:ed:b4:ba:82:08:f7:de:8d:d3:fa: d5:a6:b3:3e:e2:ef:09:93:4c:8d:db:06:76:37:01:7d:92:5c: f9:b1:40:be:87:4a:3e:e2:5e:0d:21:ac:f7:51:17:ef:60:76: b3:7b:f5:e0:28:fd:98:6f:6a:b1:e9:72:50:b9:f1:17:96:5a: 7f:db:64:1c:95:3b:16:f2:e3:b3:d6:2f:e3:ec:85:c4:d1:59: 6a:79:6a:f7:54:b0:01:2c:6b:2c:63:18:05:72:45:00:92:26: 2d:26:c3:02:49:d2:62:2b:d4:8e:0d:fc:04:a2:df:2d:86:0f: 53:f3:0e:2e:6a:82:f0:59:cc:f4:e9:b5:61:fa:e8:dc:95:25: 5e:e2:e7:31:39:6c:6a:e9:e3:9a:b5:40:ac:f2:b4:ed:11:f7: 76:db:f1:d8:70:1d:31:9d:01:81:e9:99:2a:bf:14:7b:8b:87: 10:7a:fb:bb:4c:5b:57:6c:ab:b1:3d:b9:83:16:55:45:9f:d6: 80:74:49:28:d1:87:ab:89:a1:92:6a:38:4d:f1:82:5f:d8:95: 58:e1:fe:43:e6:ed:5c:2f:11:2a:a3:13:6b:e2:66:12:ca:74: 50:2d:d2:f7:85:be:0c:6a:86:cc:91:96:57:16:81:2e:b9:df: f4:95:d9:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC RDNDMzg2NUUwHhcNMjUwNTMwMjMxNDU3WhcNMjUwNjA2MjMxNDU3WjAYMRYwFAYD VQQDEw02ODNhM2JmMi1kZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkGoZ5CuWLdrTtZ11BgACE/ukJSXhmUMdR9iVVwbwiFMgnmtPjn3iCjUe7DA Qt8EJmdDXVXFgZN9iPkZV0cx4url6mhmeXhM04zNmrKb2hHsXB1VC9uUwxEkAWt4 nq1xvPwjD/oXa83f8YK6Nl2uCLmgl3/T2mjE7dYT1s5yd7qEP6cJUJUu2fGWg70/ qkyAAHSibmVykyLWQyzVV0350oj9XxF36y9uRvD8Goh/IIIkHBNgOfNI8CzbvFZ+ LuCXCb8zai1aJ+33YZpj4ytWlNUd+tT7OUrWPVLY9PCBIhTeFwLkbBHoGcmpXb2c p0+sOyPIQDcB58GssGFFJm1g7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYZn4/q 7zRzF+eJGTC/25Eq9wPsMB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh UnJacVotdVRTcWU5UERobDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ0dcK7J5+7e20uoII996N0/rVprM+4u8Jk0yN2wZ2NwF9klz5sUC+ h0o+4l4NIaz3URfvYHaze/XgKP2Yb2qx6XJQufEXllp/22QclTsW8uOz1i/j7IXE 0VlqeWr3VLABLGssYxgFckUAkiYtJsMCSdJiK9SODfwEot8thg9T8w4uaoLwWcz0 6bVh+ujclSVe4ucxOWxq6eOatUCs8rTtEfd22/HYcB0xnQGB6ZkqvxR7i4cQevu7 TFtXbKuxPbmDFlVFn9aAdEko0YeriaGSajhN8YJf2JVY4f5D5u1cLxEqoxNr4mYS ynRQLdL3hb4MaobMkZZXFoEuud/0ldl1 -----END CERTIFICATE-----Generated at Sat May 31 17:36:07 2025 by rpki-client