$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft File: ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft (raw, json) Hash identifier: fZn1lc7cu27a8WGAPxqvLw6GGIstg4y+5AwQIog02y8= Subject key identifier: 58:13:02:86:80:85:C6:59:6B:16:16:F1:A1:DF:5F:F7:67:80:CE:27 Authority key identifier: A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 Certificate issuer: /CN=A91EDF00/serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Certificate serial: 044C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft Manifest number: 0448 Signing time: Fri 11 Apr 2025 00:11:27 +0000 Manifest this update: Fri 11 Apr 2025 00:11:27 +0000 Manifest next update: Fri 18 Apr 2025 00:11:27 +0000 Files and hashes: 1: ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl (hash: zP8Cy94wEexbFFrnYAWAW46/CJezJz+834PYuCNJ6Ds=) 2: 1B97FEB84E8111ECA3589560C4F9AE02.roa (hash: xAvVS/7W7xtAjphmjIYm8eiwHHWi2VdeCNpBEO7D7og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 00:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1100 (0x44c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDF00, serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Validity Not Before: Apr 11 00:11:27 2025 GMT Not After : Apr 18 00:11:27 2025 GMT Subject: CN=67f85e2f-52b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:bb:96:98:58:f0:a4:72:b9:3b:31:ec:11: 5c:1c:d9:11:6a:75:04:0e:c9:03:e9:88:99:2b:1e: a5:2b:f0:a7:d6:1f:1d:62:71:77:8a:e7:b5:68:39: dc:35:6c:31:03:92:f2:b2:cd:8d:7f:2e:8f:fe:26: 5d:37:bc:d7:1b:5e:64:4b:96:ea:22:af:df:a2:be: fa:d4:4a:4b:0d:c8:bc:d6:ad:13:48:2f:90:07:08: 6b:d3:ad:32:c8:2b:78:86:26:78:5b:45:97:ce:fe: cc:7f:33:e1:70:8b:ea:a5:a4:6f:5a:e0:0f:f5:38: ec:9f:5d:61:12:35:01:ce:ff:fc:0c:d9:5c:e8:3c: df:b6:98:d3:f3:35:8c:3f:a4:55:2a:5e:3c:6f:14: 8c:70:02:bf:2b:3b:d9:79:26:61:a3:92:cc:53:02: 4a:b8:1c:ed:f8:84:10:fe:fd:29:7e:6e:dd:51:f2: e8:de:2a:b0:75:14:ad:fe:c9:65:c8:b2:8d:a3:0b: 99:dd:58:15:51:ff:31:10:6e:7a:ca:71:30:e9:1e: cf:8c:b4:d3:64:d7:ef:05:b9:11:87:5a:ad:71:71: 60:2a:fc:fb:08:58:e4:d1:6e:0f:d9:2c:18:41:4f: d9:de:f5:34:5c:96:3d:10:5e:81:c4:7a:45:3f:d2: c3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:13:02:86:80:85:C6:59:6B:16:16:F1:A1:DF:5F:F7:67:80:CE:27 X509v3 Authority Key Identifier: keyid:A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2b:75:0e:f2:d1:77:0f:cb:d3:24:df:0a:fa:02:7c:2b:f6: a5:80:5e:96:22:ac:12:89:50:10:8d:b9:e3:67:1b:37:9b:14: 1b:77:da:95:0d:d1:37:e7:28:10:a2:8d:52:1a:f2:de:9e:71: 13:63:b1:64:42:0f:af:56:c7:0f:74:15:9c:3f:b9:0a:bb:62: 60:2a:c7:bf:e2:93:9f:da:f6:97:3a:58:98:2d:56:ed:6b:71: b7:ea:06:b8:4e:c3:bc:08:15:05:1e:b5:66:31:53:f0:20:85: a5:ba:0c:c0:06:27:39:09:71:16:3d:90:3c:84:78:38:1c:e4: a9:27:60:9c:fe:c5:d3:03:3b:72:e2:f2:69:05:a5:25:d2:d6: e2:33:aa:ba:ab:91:1a:d2:66:50:5a:9a:0e:29:ca:84:7b:93: c9:06:72:ac:88:2d:04:8d:1c:4c:bf:6b:06:c0:3e:47:c1:fe: a6:7b:18:9e:e9:a6:1b:94:b8:44:47:6e:25:06:22:c2:41:81: 76:ed:50:f8:ca:e5:9d:15:a9:28:a4:b0:b7:ce:6e:d0:69:cd: 0a:5a:ec:0c:57:46:1a:3a:69:c6:13:6f:0a:a2:77:11:fe:d5: 3e:86:65:ab:d8:a3:38:01:dc:fd:79:a2:75:5e:8a:62:f1:cc: 51:10:7d:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGMDAxMTAvBgNVBAUTKEEzM0NDQTgxQjU1RTA0NjU1RDFCNUE3RTJDRTY4OEMz RTQ2RkM1MzAwHhcNMjUwNDExMDAxMTI3WhcNMjUwNDE4MDAxMTI3WjAYMRYwFAYD VQQDEw02N2Y4NWUyZi01MmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5m7lphY8KRyuTsx7BFcHNkRanUEDskD6YiZKx6lK/Cn1h8dYnF3iue1aDnc NWwxA5Lyss2Nfy6P/iZdN7zXG15kS5bqIq/for761EpLDci81q0TSC+QBwhr060y yCt4hiZ4W0WXzv7MfzPhcIvqpaRvWuAP9Tjsn11hEjUBzv/8DNlc6DzftpjT8zWM P6RVKl48bxSMcAK/KzvZeSZho5LMUwJKuBzt+IQQ/v0pfm7dUfLo3iqwdRSt/sll yLKNowuZ3VgVUf8xEG56ynEw6R7PjLTTZNfvBbkRh1qtcXFgKvz7CFjk0W4P2SwY QU/Z3vU0XJY9EF6BxHpFP9LDiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgTAoaA hcZZaxYW8aHfX/dngM4nMB8GA1UdIwQYMBaAFKM8yoG1XgRlXRtafizmiMPkb8Uw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREYwMC8zQUUwMDM0QTRF N0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJHVmRHMXAtTE9hSXctUnZ4 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL296ektnYlZlQkdWZEcxcC1MT2FJdy1SdnhUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REYwMC8zQUUwMDM0QTRFN0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJH VmRHMXAtTE9hSXctUnZ4VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuK3UO8tF3D8vTJN8K+gJ8K/algF6WIqwSiVAQjbnjZxs3mxQbd9qV DdE35ygQoo1SGvLennETY7FkQg+vVscPdBWcP7kKu2JgKse/4pOf2vaXOliYLVbt a3G36ga4TsO8CBUFHrVmMVPwIIWlugzABic5CXEWPZA8hHg4HOSpJ2Cc/sXTAzty 4vJpBaUl0tbiM6q6q5Ea0mZQWpoOKcqEe5PJBnKsiC0EjRxMv2sGwD5Hwf6mexie 6aYblLhER24lBiLCQYF27VD4yuWdFakopLC3zm7Qac0KWuwMV0YaOmnGE28KoncR /tU+hmWr2KM4Adz9eaJ1Xopi8cxREH1+ -----END CERTIFICATE-----Generated at Sat Apr 12 19:07:25 2025 by rpki-client