$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft File: oxVOxxr_DOw2jHltJXw6nAWJo_8.mft (raw, json) Hash identifier: /hOXH00EtLPbGvtAEEMVvk2XyMju7Vff2dF85+Aru1c= Subject key identifier: E0:E2:FF:6C:D9:DF:78:FB:E8:A7:57:B1:FE:76:14:72:3C:3C:26:E0 Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF Certificate issuer: /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft Manifest number: F8 Signing time: Sat 31 May 2025 04:49:46 +0000 Manifest this update: Sat 31 May 2025 04:49:46 +0000 Manifest next update: Sat 07 Jun 2025 04:49:46 +0000 Files and hashes: 1: oxVOxxr_DOw2jHltJXw6nAWJo_8.crl (hash: oLmQaZQi/UkDppxOnFllvInR2AX6cgg0CLwfgPLfubs=) 2: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (hash: IQwoPmbNS6EWj4SfGYbMHUkyg+0iQUeFh2X1891ay/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2C1, serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Validity Not Before: May 31 04:49:46 2025 GMT Not After : Jun 7 04:49:46 2025 GMT Subject: CN=683a8a6a-2dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a9:6e:85:32:4f:f5:c0:e6:23:2b:3c:dd:af: 96:bc:4c:d1:bb:1c:31:fd:ce:30:61:59:e6:a5:e1: 31:ba:fc:c3:f1:2f:20:ac:f6:29:2b:2e:69:5c:ed: 29:63:8c:af:f7:5b:56:d4:d2:03:9b:20:17:78:d1: df:1e:bb:3b:a4:3b:42:f2:fb:db:50:ba:87:df:97: 1f:b6:08:9a:0c:77:ab:ef:db:2e:e9:d5:3e:17:b4: 4a:0b:8e:f1:e3:de:c8:2e:8a:ef:ae:70:21:ae:9d: bf:ef:2f:d7:80:e6:c1:fb:4f:1c:f2:9d:fa:b0:d1: 05:6e:a5:a9:71:a0:9a:84:7d:4b:f0:47:b6:a9:33: ac:85:6b:fb:7c:ff:68:6d:9e:a2:10:35:8b:ab:8f: 24:61:2c:90:90:b3:9f:09:36:dc:b2:16:ce:53:d8: 23:06:c2:08:ca:b2:a0:3e:76:0c:d0:e6:db:c0:2c: b4:35:13:22:10:4f:e7:7f:04:9c:d5:5a:35:b7:a3: 6b:51:72:1b:be:c7:5d:14:8b:37:35:35:a2:90:ef: 62:61:c2:50:82:c7:d0:26:bd:6c:9c:8c:95:69:08: 2d:93:ca:5e:aa:d0:9e:61:fb:58:29:36:2b:67:ca: 0a:cb:44:cc:83:e6:87:f0:10:06:60:b4:3a:26:99: b1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E2:FF:6C:D9:DF:78:FB:E8:A7:57:B1:FE:76:14:72:3C:3C:26:E0 X509v3 Authority Key Identifier: keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:06:3f:c2:e6:38:b8:94:a8:c6:cb:94:15:aa:ee:81:c1:8b: 37:c2:1b:8e:84:a9:54:44:95:4e:cd:e6:c6:ed:bf:72:f8:7b: ae:39:3d:6b:4b:e2:a4:35:3f:9a:3e:45:72:d3:b3:51:f8:14: 21:67:17:f7:be:f8:a9:24:73:9d:ca:ba:39:e3:4e:50:ba:a2: 56:25:38:4b:a1:ae:e2:e8:d4:cd:ed:6e:c9:48:2d:98:f0:ab: a1:d6:6e:26:49:49:75:c6:11:68:4c:fb:49:df:e4:00:04:07: 5d:0c:fb:59:1a:06:9c:ff:d1:d6:66:0e:c9:b6:d0:0f:11:3c: 3a:ad:de:7d:d6:8f:50:b8:8f:54:ce:c0:1d:45:cd:39:36:ee: 4b:e5:92:80:d7:88:6b:d8:f0:62:5c:6a:83:41:f1:2a:4d:62: 52:73:d3:64:b6:05:24:3f:22:80:1b:43:36:d3:89:90:be:32: ae:de:68:fe:7e:62:8e:0c:55:d6:e7:e9:7f:9c:77:04:15:b1: bf:2b:0f:e0:e8:24:d8:5e:8a:45:36:91:51:3e:89:19:1d:c6: 0c:b2:9f:f4:bd:0c:b0:50:a0:3c:d0:33:db:8a:72:0b:3a:80: b2:b1:10:e3:14:00:76:4a:c6:80:7b:4f:23:99:e2:40:20:bc: 5d:6e:cf:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQzExMTAvBgNVBAUTKEEzMTU0RUM3MUFGRjBDRUMzNjhDNzk2RDI1N0MzQTlD MDU4OUEzRkYwHhcNMjUwNTMxMDQ0OTQ2WhcNMjUwNjA3MDQ0OTQ2WjAYMRYwFAYD VQQDEw02ODNhOGE2YS0yZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7aluhTJP9cDmIys83a+WvEzRuxwx/c4wYVnmpeExuvzD8S8grPYpKy5pXO0p Y4yv91tW1NIDmyAXeNHfHrs7pDtC8vvbULqH35cftgiaDHer79su6dU+F7RKC47x 497ILorvrnAhrp2/7y/XgObB+08c8p36sNEFbqWpcaCahH1L8Ee2qTOshWv7fP9o bZ6iEDWLq48kYSyQkLOfCTbcshbOU9gjBsIIyrKgPnYM0ObbwCy0NRMiEE/nfwSc 1Vo1t6NrUXIbvsddFIs3NTWikO9iYcJQgsfQJr1snIyVaQgtk8peqtCeYftYKTYr Z8oKy0TMg+aH8BAGYLQ6JpmxkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODi/2zZ 33j76KdXsf52FHI8PCbgMB8GA1UdIwQYMBaAFKMVTsca/wzsNox5bSV8OpwFiaP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDMS83RkZERkI2NEMw OUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RPdzJqSGx0Slh3Nm5BV0pv XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294Vk94eHJfRE93MmpIbHRKWHc2bkFXSm9fOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDMS83RkZERkI2NEMwOUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RP dzJqSGx0Slh3Nm5BV0pvXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkBj/C5ji4lKjGy5QVqu6BwYs3whuOhKlURJVOzebG7b9y+HuuOT1r S+KkNT+aPkVy07NR+BQhZxf3vvipJHOdyro5405QuqJWJThLoa7i6NTN7W7JSC2Y 8Kuh1m4mSUl1xhFoTPtJ3+QABAddDPtZGgac/9HWZg7JttAPETw6rd591o9QuI9U zsAdRc05Nu5L5ZKA14hr2PBiXGqDQfEqTWJSc9NktgUkPyKAG0M204mQvjKu3mj+ fmKODFXW5+l/nHcEFbG/Kw/g6CTYXopFNpFRPokZHcYMsp/0vQywUKA80DPbinIL OoCysRDjFAB2SsaAe08jmeJAILxdbs/g -----END CERTIFICATE-----Generated at Sat May 31 16:52:20 2025 by rpki-client