$ rpki-client -vvf rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft File: OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft (raw, json) Hash identifier: xx6yfmvDSFVx05Xhaz5Y/JsNmrg/QGVhgO/RdYI5GeY= Subject key identifier: BB:F0:07:53:93:A4:9A:79:83:2A:C3:72:62:51:BD:A4:1B:1E:DC:F2 Authority key identifier: 38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 Certificate issuer: /CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft Manifest number: 01BF Signing time: Sat 07 Jun 2025 02:38:20 +0000 Manifest this update: Sat 07 Jun 2025 02:38:20 +0000 Manifest next update: Sat 14 Jun 2025 02:38:20 +0000 Files and hashes: 1: OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl (hash: LnwXjiNP73ZNGvRIpQUidI1wL0Bqu3sRl63sMu/UNao=) 2: DD8D4802932211EDBF466F52C4F9AE02.roa (hash: pmbN5fPCbO/oalKNS7ivInU9ETfH9WfdJG7H7rtfmr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 02:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192D09, serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Validity Not Before: Jun 7 02:38:20 2025 GMT Not After : Jun 14 02:38:20 2025 GMT Subject: CN=6843a61c-276a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7e:55:db:1c:95:74:ac:1d:89:42:5b:55:39: b4:ae:d1:58:17:8b:28:d1:dc:aa:e3:ff:0b:07:82: 51:f3:79:3f:98:5d:f8:51:87:6f:5b:55:b1:73:8f: 0e:ff:03:d1:38:00:20:46:78:70:c3:b8:f2:aa:fb: 25:c0:6e:1f:0c:fc:fb:b8:30:f6:2b:98:2c:f4:e8: 73:a4:57:46:91:56:22:f4:e8:0a:ef:78:c4:92:43: 2e:8f:9d:20:81:54:16:51:ed:2d:42:9a:cf:02:1d: a2:29:5b:df:5c:44:fb:f5:0c:af:07:cb:7a:5c:4e: 27:14:17:a9:53:f9:0a:3f:b1:61:a4:0c:49:b5:e8: 09:77:f0:b2:2f:4f:89:2d:ff:b7:74:70:3e:b7:9d: 27:6b:a5:93:70:02:1f:b9:06:05:70:0b:9b:9b:a6: 70:ae:c7:5f:b9:eb:75:a1:21:10:17:a4:d3:52:08: fa:a3:ad:18:78:86:7b:67:80:f9:fb:9a:c6:17:32: 2f:5c:89:2e:ec:0a:28:33:2c:8a:18:d2:32:29:96: 85:fa:f8:f4:35:43:80:11:da:25:0b:ab:33:18:f7: b6:0a:e0:1b:ac:66:73:59:a9:c2:ff:e0:37:94:9f: 30:8a:e9:50:06:61:fb:c0:3a:91:c5:95:64:46:64: 2e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F0:07:53:93:A4:9A:79:83:2A:C3:72:62:51:BD:A4:1B:1E:DC:F2 X509v3 Authority Key Identifier: keyid:38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:84:dd:02:6f:19:c6:a1:fe:53:7d:fb:75:4e:f6:0a:d3:b4: 36:1e:b8:a2:3e:02:a1:9e:12:97:32:73:7e:af:5f:64:cc:65: fb:c2:de:4d:cf:84:fd:7a:94:52:82:e0:4d:ae:5f:8f:a5:43: 95:ab:57:57:69:a5:c6:22:aa:c2:22:b2:72:a4:6f:42:21:d3: 5d:d2:3d:98:9a:4b:eb:02:e9:f9:0a:cb:18:ca:db:e4:c4:05: ac:a6:44:e3:4e:74:bd:b7:4b:ac:75:ff:04:82:f4:45:7e:87: 69:78:62:17:65:a1:f7:7d:df:63:b4:9b:5f:f6:15:c0:57:1f: 95:6b:72:51:73:bd:33:d2:c9:d7:2c:0f:01:04:bd:3d:50:32: 96:05:78:9d:6d:80:87:ca:7c:dc:02:18:ef:7a:fd:c6:27:f7: 0b:b1:1b:00:f5:cc:cd:f3:7b:52:c5:7a:94:bd:a9:56:6a:10: c3:d8:d1:82:9b:30:c7:e6:a0:26:35:cd:b5:56:d6:8d:47:a1: 0b:17:00:19:03:8a:78:2c:a9:11:aa:ef:07:b9:03:83:19:83: 43:56:4e:3f:76:32:58:3f:84:f3:b9:74:04:3a:be:81:65:21: ca:e7:64:45:62:9d:06:04:ac:3f:72:05:82:ff:68:62:00:8c: 1a:f1:f9:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJEMDkxMTAvBgNVBAUTKDM4NDU0NUQ2RjU1RjMyQjMxRkU4NjQ2RjI0NEE3QzA3 QkE2OTU0MDgwHhcNMjUwNjA3MDIzODIwWhcNMjUwNjE0MDIzODIwWjAYMRYwFAYD VQQDEw02ODQzYTYxYy0yNzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArn5V2xyVdKwdiUJbVTm0rtFYF4so0dyq4/8LB4JR83k/mF34UYdvW1Wxc48O /wPROAAgRnhww7jyqvslwG4fDPz7uDD2K5gs9OhzpFdGkVYi9OgK73jEkkMuj50g gVQWUe0tQprPAh2iKVvfXET79QyvB8t6XE4nFBepU/kKP7FhpAxJtegJd/CyL0+J Lf+3dHA+t50na6WTcAIfuQYFcAubm6Zwrsdfuet1oSEQF6TTUgj6o60YeIZ7Z4D5 +5rGFzIvXIku7AooMyyKGNIyKZaF+vj0NUOAEdolC6szGPe2CuAbrGZzWanC/+A3 lJ8wiulQBmH7wDqRxZVkRmQuZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvwB1OT pJp5gyrDcmJRvaQbHtzyMB8GA1UdIwQYMBaAFDhFRdb1XzKzH+hkbyRKfAe6aVQI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkQwOS9GMEYyRURCMjkz MUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1yTWY2R1J2SkVwOEI3cHBW QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FVkYxdlZmTXJNZjZHUnZKRXA4QjdwcFZBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkQwOS9GMEYyRURCMjkzMUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1y TWY2R1J2SkVwOEI3cHBWQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzhN0CbxnGof5Tfft1TvYK07Q2HriiPgKhnhKXMnN+r19kzGX7wt5N z4T9epRSguBNrl+PpUOVq1dXaaXGIqrCIrJypG9CIdNd0j2YmkvrAun5CssYytvk xAWspkTjTnS9t0usdf8EgvRFfodpeGIXZaH3fd9jtJtf9hXAVx+Va3JRc70z0snX LA8BBL09UDKWBXidbYCHynzcAhjvev3GJ/cLsRsA9czN83tSxXqUvalWahDD2NGC mzDH5qAmNc21VtaNR6ELFwAZA4p4LKkRqu8HuQODGYNDVk4/djJYP4TzuXQEOr6B ZSHK52RFYp0GBKw/cgWC/2hiAIwa8fld -----END CERTIFICATE-----Generated at Sat Jun 7 19:49:19 2025 by rpki-client