$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft File: OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json) Hash identifier: OgQ7bXOCZmQUOshAdyrDjW1/o2wRvXDLGNBdKlPIqqM= Subject key identifier: 35:74:87:7F:C8:95:23:46:D4:B2:30:2C:F4:20:6A:E0:B7:F9:36:97 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0D59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft Manifest number: 0BA6 Signing time: Fri 30 May 2025 20:16:31 +0000 Manifest this update: Fri 30 May 2025 20:16:31 +0000 Manifest next update: Fri 06 Jun 2025 20:16:31 +0000 Files and hashes: 1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: fW/KiSVoOliNuf+fYJordQ7AYYf/B9VJXfZXUHuxvnk=) 2: F24431E6240411F0AE5EFB74C4F9AE02.roa (hash: pjj7U4+5TLqzVYrhFk5lEqLCQke8zfvUY/UVHk0SN1M=) 3: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: LCTaAks4BqlupqHXTz1VdaXnEXMyWZW8ZhZmp2UYH3Q=) 4: F0D4053EEDCC11EF8C545F54C4F9AE02.roa (hash: 4QfTRpAN+SnkWQoS+a8PlbB83aqDd8EbkaEm2nM3FeI=) 5: 92A205F4191111F095164E59C4F9AE02.roa (hash: 3xwUQICiJWltnsaPPc+uKPTybyb67JmaTUlAe4OstQ4=) 6: CC2CFF76161F11F097D3DF59C4F9AE02.roa (hash: kRO7k4BulRhHisoR6+EUfbpDnd1NcNjfEli/hLZ+UXQ=) 7: BC7FD008F9A511EF885CA76EC4F9AE02.roa (hash: Ex7392prc1zunazGcvbevro7VL69lZXVyb5pMImsMLI=) 8: 96D29A2220E011F086D75E5CC4F9AE02.roa (hash: 0FOWU/128zkabpuP6eI/6fQrKWNdatB4AEVKWZRuiyw=) 9: 95F1EC2A20E011F086D75E5CC4F9AE02.roa (hash: SlVDSUqUztmia+IRuLwVDUN43/JEzgcVEMaQ1zGpGf4=) 10: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: YJQ9SpoqXrkvlRkEN5wsjZZeJRNdP87R6x7oDal+xTw=) 11: 7D0D2FCA28CF11F0B4341346C4F9AE02.roa (hash: g7xVQYCNjaK/RZPD6CLpdC1v04D2i9MLXYqSInLLiJI=) 12: 7C5CEA3E28CF11F0B4341346C4F9AE02.roa (hash: vAcCfJjAn78EuvFILS+tqNoRGxNCcoW5NdFqExkzlhU=) 13: F16CF7BC240411F0AE5EFB74C4F9AE02.roa (hash: NRkATBKCrFf8XehUQ4Kcg07Ah9qbgMhjDJkO80Y8+Ms=) 14: 712D274624BF11F0ADDD3D44C4F9AE02.roa (hash: hI8rPrNoFSuSDtKlIpIXN+5aKoXdXK52nCDyF+LIHUg=) 15: 90A6E260F97711EF931B0A48C4F9AE02.roa (hash: yNt3+76oxiczQlWAKFrrom/dgPrfFKQXLtrONN2mqsc=) 16: D8538FA2204411F0B6649425C4F9AE02.roa (hash: uqPVCmw8xhCuAFmHWCKeDdfNdsicl8lxhmTwM3JVS44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3417 (0xd59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: May 30 20:16:31 2025 GMT Not After : Jun 6 20:16:31 2025 GMT Subject: CN=683a121f-4afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3c:93:92:b5:9e:f0:45:31:0a:2d:52:c0:c5: 2c:0d:4d:e3:4e:64:7e:98:e7:45:09:7a:74:7c:37: 22:91:30:dc:47:f6:7c:80:80:d5:29:0f:d8:47:83: 92:7c:6d:24:c9:d8:ed:69:26:50:29:11:4f:35:a0: 89:73:3d:64:40:5d:0b:9d:6e:0f:f2:22:9f:7d:00: bd:9e:53:01:f3:83:1b:80:0e:88:02:09:79:c2:1b: 34:bd:d6:0e:01:2b:87:10:3e:d9:e0:77:06:08:61: 74:3e:46:6d:62:b4:be:09:e1:93:e9:98:13:a7:e6: 4e:c0:4f:45:53:ab:16:62:a1:76:be:0f:b5:11:aa: 8b:68:cf:0c:f9:a8:8e:c3:56:a6:db:65:08:b9:21: 55:23:f9:8b:e2:a4:66:a5:0d:6f:a2:52:5c:ff:54: 64:47:6d:a0:15:cc:4e:89:48:e5:4a:5c:77:10:fa: fe:63:21:cb:af:e4:39:dd:fd:3f:73:08:e7:e4:4a: a7:03:e4:84:63:a9:18:ab:6c:b4:0b:c8:56:cd:a2: 4f:31:5c:c0:a6:51:db:7e:13:9a:aa:78:d7:53:70: 74:2a:04:3f:27:e0:7b:34:a4:f2:c7:7f:0b:da:14: 89:fd:0c:2b:f1:50:99:21:b4:80:5d:c0:0e:c2:ba: ac:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:74:87:7F:C8:95:23:46:D4:B2:30:2C:F4:20:6A:E0:B7:F9:36:97 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:99:5a:6b:61:81:03:29:55:e3:12:87:81:a0:36:0f:40:e8: 3d:06:81:1c:aa:c0:6b:5d:5e:84:9c:14:df:72:96:64:b0:7c: 46:25:21:b1:76:ea:30:01:b6:87:10:29:44:7c:da:d2:1a:16: bf:82:61:bf:53:ae:ca:8c:80:9a:66:47:c8:53:b5:9a:6e:44: 4c:40:5c:28:e8:b7:7d:db:70:ed:06:a0:9d:8c:5d:74:4c:1e: a7:85:9e:74:be:73:06:71:de:09:3a:8a:92:71:0f:6c:01:f7: 92:ce:e4:e7:34:a6:5c:4b:3e:f1:11:46:c1:0e:91:b6:2b:ca: 75:20:fb:e1:65:78:6b:28:0e:bc:f9:64:f9:f6:8c:ea:e2:3c: 1e:05:e4:a7:42:98:80:05:4b:32:35:3e:97:13:0b:33:f4:95: fc:9f:33:c6:2d:d4:7b:82:52:59:4e:b1:ee:ac:01:b9:86:fc: a0:93:fb:3d:cd:6d:e9:64:7f:7a:ad:08:b2:be:27:63:c9:20: 52:cc:e9:f8:81:52:cd:8f:a3:a2:44:df:fc:86:46:b9:89:b2: 72:bc:3a:15:b9:6f:f7:4b:c3:eb:ba:d6:7d:14:5c:a0:fb:81: fe:55:97:0d:35:e9:f1:11:d8:ba:1b:f8:9b:39:31:39:c1:a2: 4a:20:c2:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUwNTMwMjAxNjMxWhcNMjUwNjA2MjAxNjMxWjAYMRYwFAYD VQQDEw02ODNhMTIxZi00YWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzyTkrWe8EUxCi1SwMUsDU3jTmR+mOdFCXp0fDcikTDcR/Z8gIDVKQ/YR4OS fG0kydjtaSZQKRFPNaCJcz1kQF0LnW4P8iKffQC9nlMB84MbgA6IAgl5whs0vdYO ASuHED7Z4HcGCGF0PkZtYrS+CeGT6ZgTp+ZOwE9FU6sWYqF2vg+1EaqLaM8M+aiO w1am22UIuSFVI/mL4qRmpQ1volJc/1RkR22gFcxOiUjlSlx3EPr+YyHLr+Q53f0/ cwjn5EqnA+SEY6kYq2y0C8hWzaJPMVzAplHbfhOaqnjXU3B0KgQ/J+B7NKTyx38L 2hSJ/Qwr8VCZIbSAXcAOwrqs2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDV0h3/I lSNG1LIwLPQgauC3+TaXMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBDRC80NjcyM0YxRTg5RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5 YVJqanA1LS1DQ1BHY3k0bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmmVprYYEDKVXjEoeBoDYPQOg9BoEcqsBrXV6EnBTfcpZksHxGJSGx duowAbaHEClEfNrSGha/gmG/U67KjICaZkfIU7WabkRMQFwo6Ld923DtBqCdjF10 TB6nhZ50vnMGcd4JOoqScQ9sAfeSzuTnNKZcSz7xEUbBDpG2K8p1IPvhZXhrKA68 +WT59ozq4jweBeSnQpiABUsyNT6XEwsz9JX8nzPGLdR7glJZTrHurAG5hvygk/s9 zW3pZH96rQiyvidjySBSzOn4gVLNj6OiRN/8hka5ibJyvDoVuW/3S8PrutZ9FFyg +4H+VZcNNenxEdi6G/ibOTE5waJKIMKv -----END CERTIFICATE-----Generated at Sat May 31 17:07:38 2025 by rpki-client