$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft File: ogavyWamnnC0ibOPEEg9wfpdPiI.mft (raw, json) Hash identifier: PbNdjq6LfYpRwlRPTGEdy5rXPsWPDkDXXQHY1vvBHbc= Subject key identifier: F0:1E:BD:68:4C:3D:4E:A9:2D:22:C0:39:3D:FF:61:1E:D5:A8:9D:2C Authority key identifier: A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22 Certificate issuer: /CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22 Certificate serial: 03E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft Manifest number: 03E4 Signing time: Tue 01 Jul 2025 01:07:55 +0000 Manifest this update: Tue 01 Jul 2025 01:07:54 +0000 Manifest next update: Tue 08 Jul 2025 01:07:54 +0000 Files and hashes: 1: ogavyWamnnC0ibOPEEg9wfpdPiI.crl (hash: YaOx2L57yTEC/QfdooshEkzyV9ZCaSm4C428FGW9AIU=) 2: F7335D9484D911EC89E5246EC4F9AE02.roa (hash: zIQCvO1cYT9GDGEyMPF0tBOYTt1JAajUXmcBSrFDxrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B6A, serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22 Validity Not Before: Jul 1 01:07:54 2025 GMT Not After : Jul 8 01:07:54 2025 GMT Subject: CN=686334eb-4dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0a:0f:d0:80:ee:d4:15:6c:12:41:2e:bf:8e: c6:52:b4:ff:2f:31:03:de:22:b1:fc:3e:3c:36:fd: 1d:7e:4c:36:cb:dc:4b:02:80:6f:a3:b2:7a:35:ad: 19:4c:b0:6a:44:e3:3d:19:b1:94:bb:a8:b1:00:c0: af:13:b9:34:90:b6:3f:cb:64:73:13:b6:69:3f:32: b5:dc:86:9f:07:df:f6:82:27:fb:f4:b9:98:b6:89: 63:71:a2:39:0e:4b:a3:5f:ed:93:25:e0:86:8e:45: ad:94:55:dd:af:83:e6:cd:b4:22:6b:87:af:5c:70: 6b:ee:11:32:36:84:5a:1f:82:cf:4f:72:6e:b1:b3: 46:8e:0c:02:2c:07:43:1b:cf:f8:43:e9:05:6b:36: f9:b3:59:0b:9e:d2:5b:4e:2c:4a:1c:68:9b:56:5a: aa:8d:6e:49:a5:e1:7b:7d:d5:bc:b6:ac:f9:95:db: 90:56:4c:dd:2d:a1:b2:f4:eb:94:e7:4f:4a:12:fb: 6a:14:ac:2c:1a:3a:d0:e2:62:59:24:10:61:47:8c: 73:36:3e:9d:eb:0d:7a:70:cd:7e:05:b3:0f:a5:64: af:d5:61:e2:07:74:d8:09:31:7e:d7:91:33:1c:da: f8:c7:22:13:f2:94:67:4d:da:52:5b:02:11:59:cf: fc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1E:BD:68:4C:3D:4E:A9:2D:22:C0:39:3D:FF:61:1E:D5:A8:9D:2C X509v3 Authority Key Identifier: keyid:A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:28:5f:61:90:f8:6a:4a:74:e4:bd:54:97:d8:cf:16:ff:a7: 9a:48:30:de:d1:40:84:7a:23:20:0e:c0:f9:07:a5:b0:24:25: 65:d3:7a:15:22:7b:28:92:96:c4:3a:dd:56:a8:cb:ea:65:8a: 60:af:ae:02:37:91:89:da:10:6f:73:b2:07:da:0a:11:c8:61: 38:e0:ec:54:4a:bd:6f:80:8b:32:63:52:b2:cf:6b:5a:0d:db: 68:c9:3a:35:33:1f:26:d9:f9:d0:4c:9c:f7:c1:b4:88:2b:96: 90:f0:67:a3:11:37:a8:dd:ec:52:a7:67:1a:be:88:93:89:57: 93:b1:4a:ca:e2:19:f1:79:6e:25:4f:d3:87:70:0a:1b:0a:50: 77:ed:44:9b:d0:92:b2:04:4f:e8:f7:46:ed:e3:7e:09:ab:5c: 5a:d6:08:ef:ba:33:fb:f3:87:1a:13:4f:e5:8c:7b:49:cd:f3: 90:90:75:a7:4f:1a:6b:cb:e2:4c:bf:39:6b:9c:6f:d9:c8:5a: 1d:3f:ef:66:89:14:85:8c:50:ef:be:83:3e:1f:04:f1:16:14: 32:06:53:fe:af:03:19:db:ef:05:43:18:90:b7:75:33:f2:5f: d6:4b:7d:02:d1:81:69:44:43:24:59:00:ff:ba:63:81:4e:49: 18:0c:d3:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRCNkExMTAvBgNVBAUTKEEyMDZBRkM5NjZBNjlFNzBCNDg5QjM4RjEwNDgzREMx RkE1RDNFMjIwHhcNMjUwNzAxMDEwNzU0WhcNMjUwNzA4MDEwNzU0WjAYMRYwFAYD VQQDEw02ODYzMzRlYi00ZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6QoP0IDu1BVsEkEuv47GUrT/LzED3iKx/D48Nv0dfkw2y9xLAoBvo7J6Na0Z TLBqROM9GbGUu6ixAMCvE7k0kLY/y2RzE7ZpPzK13IafB9/2gif79LmYtoljcaI5 DkujX+2TJeCGjkWtlFXdr4PmzbQia4evXHBr7hEyNoRaH4LPT3JusbNGjgwCLAdD G8/4Q+kFazb5s1kLntJbTixKHGibVlqqjW5JpeF7fdW8tqz5lduQVkzdLaGy9OuU 509KEvtqFKwsGjrQ4mJZJBBhR4xzNj6d6w16cM1+BbMPpWSv1WHiB3TYCTF+15Ez HNr4xyIT8pRnTdpSWwIRWc/8ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAevWhM PU6pLSLAOT3/YR7VqJ0sMB8GA1UdIwQYMBaAFKIGr8lmpp5wtImzjxBIPcH6XT4i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEI2QS9CNDgxMzM0Mjg0 RDcxMUVDOEUwNzQxNkRDNEY5QUUwMi9vZ2F2eVdhbW5uQzBpYk9QRUVnOXdmcGRQ aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29nYXZ5V2Ftbm5DMGliT1BFRWc5d2ZwZFBpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEI2QS9CNDgxMzM0Mjg0RDcxMUVDOEUwNzQxNkRDNEY5QUUwMi9vZ2F2eVdhbW5u QzBpYk9QRUVnOXdmcGRQaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjKF9hkPhqSnTkvVSX2M8W/6eaSDDe0UCEeiMgDsD5B6WwJCVl03oV InsokpbEOt1WqMvqZYpgr64CN5GJ2hBvc7IH2goRyGE44OxUSr1vgIsyY1Kyz2ta DdtoyTo1Mx8m2fnQTJz3wbSIK5aQ8GejETeo3exSp2cavoiTiVeTsUrK4hnxeW4l T9OHcAobClB37USb0JKyBE/o90bt434Jq1xa1gjvujP784caE0/ljHtJzfOQkHWn Txpry+JMvzlrnG/ZyFodP+9miRSFjFDvvoM+HwTxFhQyBlP+rwMZ2+8FQxiQt3Uz 8l/WS30C0YFpREMkWQD/umOBTkkYDNMx -----END CERTIFICATE-----Generated at Tue Jul 1 19:37:00 2025 by rpki-client