$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft File: ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json) Hash identifier: WOSDOHhERcMj+SbyhVv7kzLCAyYBdiQMbvtiHUpMJGs= Subject key identifier: 98:FF:61:2B:A7:9A:AA:56:F5:F6:FD:DA:36:F4:C9:66:1F:D7:11:7F Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35 Certificate issuer: /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35 Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft Manifest number: 02AE Signing time: Sat 31 May 2025 01:46:37 +0000 Manifest this update: Sat 31 May 2025 01:46:36 +0000 Manifest next update: Sat 07 Jun 2025 01:46:36 +0000 Files and hashes: 1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: gettmIAROkECWpNAtJTFSlzZlS9CMkAd2zlyDPE9LNY=) 2: C7C081641C2411F0AAC7CA1EC4F9AE02.roa (hash: XydeZPWKtG1etOuPzQDEhVL2WYamD3gJgaFCyMqQRnA=) 3: E4C4FBB8200811F0AB28851DC4F9AE02.roa (hash: pVHrgOFKFC07D4oFMxsUE21iWBEjMFIznwU/76ruSbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35 Validity Not Before: May 31 01:46:36 2025 GMT Not After : Jun 7 01:46:36 2025 GMT Subject: CN=683a5f7d-4e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d8:9b:cd:db:b4:23:95:17:c5:15:94:4f:25: 3a:73:8b:24:40:68:29:c3:4c:75:34:b2:62:dd:a6: 51:9b:c6:d8:ec:5c:9c:32:16:92:e7:0a:5e:97:a1: e9:72:7f:ae:05:33:ba:13:eb:23:2b:f2:f3:e6:c3: 30:26:6a:c6:93:e0:2a:b0:b6:35:0e:a0:00:ea:14: 85:fc:d2:52:71:54:a4:d9:21:09:92:71:71:be:f7: 7a:a8:b2:71:5b:2e:61:fd:70:25:a3:cc:93:d8:e8: d3:d6:ef:24:d4:36:2a:83:b9:39:b4:ff:08:8b:2c: 86:93:73:0d:ef:19:5b:ca:04:ec:20:e0:d8:5b:98: 81:5e:58:fe:6a:c2:da:b4:17:46:81:ef:60:60:db: a5:c5:cd:3b:37:e5:b3:3a:a3:b7:c6:63:10:10:05: 07:9d:47:a0:02:3c:dc:12:77:1d:db:51:2d:69:ee: 1f:5d:77:d7:2e:92:aa:27:77:ac:9d:9c:f1:bd:19: 8e:bf:c4:73:01:1a:6d:c0:da:d4:27:ac:7f:92:4c: 2b:a5:6e:ad:7e:ee:09:86:cb:29:44:21:07:61:81: 44:c9:2c:c7:d8:f3:fb:a0:28:b1:47:1a:45:de:e4: 6d:fd:be:f4:f5:04:2c:fa:0a:7b:37:3d:0e:52:46: 07:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FF:61:2B:A7:9A:AA:56:F5:F6:FD:DA:36:F4:C9:66:1F:D7:11:7F X509v3 Authority Key Identifier: keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:48:db:a1:f5:29:d2:e4:20:23:53:6f:c9:48:0c:58:33:95: fa:33:b8:a0:61:d4:17:0e:5f:03:8b:3f:f0:bb:70:c2:b6:06: dd:97:86:82:5c:3b:dd:fe:d5:af:57:2e:14:5f:ec:82:a6:26: 8b:43:4e:f2:b1:d4:20:2b:52:f9:53:00:58:98:12:b0:d2:88: b9:33:86:10:66:48:ef:dc:da:27:b7:55:4d:1e:5d:34:93:d4: c0:e9:18:88:c7:62:f9:8a:68:66:dd:06:10:a4:f1:d9:22:b3: 27:c8:1e:7b:ce:d8:a5:4a:e0:f3:09:b5:7b:ae:63:29:e4:0e: 09:df:d1:f9:f9:ca:e7:5e:c6:f3:07:75:f3:6a:c9:b3:5b:b9: 4c:2f:0d:4b:6d:be:c3:18:02:d7:b3:5d:d4:11:e0:a5:59:0d: a9:59:27:fe:e5:a8:28:c3:cc:cd:9e:07:fe:3d:36:df:b3:d1: 77:2d:7f:13:17:34:aa:a3:6c:43:17:71:53:ce:b9:66:be:2e: 65:48:fc:15:84:d5:7d:dc:89:0a:e0:d3:9b:6c:78:66:5d:e9: 9b:04:80:e9:f1:76:08:50:f0:a7:e8:e8:47:4b:2e:71:b5:cb: 9a:13:11:37:7f:66:72:ed:f6:ac:94:fa:eb:bd:bb:8a:57:22: e8:2e:d7:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBENjkxMTAvBgNVBAUTKDEwM0ZBOEJERkZGQjlGMDU1NzA3MkM0NzMzMkI4MUE5 RTgwRUREMzUwHhcNMjUwNTMxMDE0NjM2WhcNMjUwNjA3MDE0NjM2WjAYMRYwFAYD VQQDEw02ODNhNWY3ZC00ZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9ibzdu0I5UXxRWUTyU6c4skQGgpw0x1NLJi3aZRm8bY7FycMhaS5wpel6Hp cn+uBTO6E+sjK/Lz5sMwJmrGk+AqsLY1DqAA6hSF/NJScVSk2SEJknFxvvd6qLJx Wy5h/XAlo8yT2OjT1u8k1DYqg7k5tP8IiyyGk3MN7xlbygTsIODYW5iBXlj+asLa tBdGge9gYNulxc07N+WzOqO3xmMQEAUHnUegAjzcEncd21Etae4fXXfXLpKqJ3es nZzxvRmOv8RzARptwNrUJ6x/kkwrpW6tfu4JhsspRCEHYYFEySzH2PP7oCixRxpF 3uRt/b709QQs+gp7Nz0OUkYHCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJj/YSun mqpW9fb92jb0yWYf1xF/MB8GA1UdIwQYMBaAFBA/qL3/+58FVwcsRzMrganoDt01 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ2OS8wRTE3N0Q1QTA1 OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253VlhCeXhITXl1QnFlZ08z VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VELW92Zl83bndWWEJ5eEhNeXVCcWVnTzNUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ2OS8wRTE3N0Q1QTA1OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253 VlhCeXhITXl1QnFlZ08zVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxSNuh9SnS5CAjU2/JSAxYM5X6M7igYdQXDl8Diz/wu3DCtgbdl4aC XDvd/tWvVy4UX+yCpiaLQ07ysdQgK1L5UwBYmBKw0oi5M4YQZkjv3Nont1VNHl00 k9TA6RiIx2L5imhm3QYQpPHZIrMnyB57ztilSuDzCbV7rmMp5A4J39H5+crnXsbz B3XzasmzW7lMLw1Lbb7DGALXs13UEeClWQ2pWSf+5agow8zNngf+PTbfs9F3LX8T FzSqo2xDF3FTzrlmvi5lSPwVhNV93IkK4NObbHhmXembBIDp8XYIUPCn6OhHSy5x tcuaExE3f2Zy7faslPrrvbuKVyLoLtf/ -----END CERTIFICATE-----Generated at Sat May 31 17:50:35 2025 by rpki-client