$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft File: ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft (raw, json) Hash identifier: 6AzzmWEZJl1GJlrgz8Qg6AOgpdIV05dnO8UFNHYq1k0= Subject key identifier: 2A:32:C9:C2:A5:6D:C3:EB:B4:45:60:72:F8:50:3D:F8:CB:9A:FF:B2 Authority key identifier: A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 Certificate issuer: /CN=A91EDF00/serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft Manifest number: 047A Signing time: Mon 21 Jul 2025 00:18:21 +0000 Manifest this update: Mon 21 Jul 2025 00:18:21 +0000 Manifest next update: Mon 28 Jul 2025 00:18:21 +0000 Files and hashes: 1: ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl (hash: eHFz663ZSYVTNlwkrllIKYhlP9XeQT5rHGx+gJw3QGI=) 2: 1B97FEB84E8111ECA3589560C4F9AE02.roa (hash: xAvVS/7W7xtAjphmjIYm8eiwHHWi2VdeCNpBEO7D7og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDF00, serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Validity Not Before: Jul 21 00:18:21 2025 GMT Not After : Jul 28 00:18:21 2025 GMT Subject: CN=687d874d-465d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ab:73:e0:54:be:58:6c:7b:44:0e:b4:a3:99: 40:49:0a:c7:43:47:a8:86:e8:98:5a:8b:13:ac:79: dd:24:b8:ee:7c:a6:43:67:ee:44:f4:46:d0:7c:8c: 60:56:3d:a8:72:27:5f:e8:6d:c4:7c:14:10:f1:bf: 3a:4d:e2:12:8f:8d:2f:b1:c8:c9:48:aa:a1:d0:77: bb:f7:b9:cc:ee:45:c0:f1:d0:ab:c2:35:bc:6c:12: 9c:e5:be:37:70:17:e7:4f:a7:8c:36:b5:3a:a1:a4: 32:6a:ce:e9:d4:c2:71:ee:38:d7:84:71:1f:29:d3: 7d:2e:1b:da:63:63:13:61:93:d8:c1:ab:de:20:20: f9:ac:38:03:28:99:cc:54:33:e9:cd:61:c5:1c:da: 6c:d5:c7:cb:86:c3:fa:ea:93:b0:51:8c:eb:35:f3: 21:6e:a6:40:67:6f:95:19:95:ab:cc:ac:60:c6:28: 90:85:4b:4d:cd:59:d2:35:48:94:1a:70:8a:bd:d3: 71:d4:ad:2c:b6:6d:28:8a:26:25:45:17:0b:a5:e6: 5e:c3:29:25:df:28:a3:3b:15:b9:64:78:8c:24:8c: fe:d1:58:e6:7b:50:df:2c:c2:7f:64:34:20:de:89: fa:99:46:e3:af:98:fc:24:dc:22:ab:6a:2a:97:93: d7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:32:C9:C2:A5:6D:C3:EB:B4:45:60:72:F8:50:3D:F8:CB:9A:FF:B2 X509v3 Authority Key Identifier: keyid:A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:bf:bb:46:52:c1:ae:1a:7b:27:40:ee:bb:70:aa:75:a2:ba: de:95:e1:fa:14:07:fc:7b:e2:70:e6:4a:91:f7:bf:bb:2b:20: 7e:17:20:ce:5c:7d:d6:e4:e3:f3:8e:02:c8:4b:24:59:40:cd: 9b:3a:38:d1:c9:cf:27:80:8c:d3:fa:35:4d:80:0c:bc:99:f6: ff:a5:26:b8:eb:50:43:4e:49:3c:e4:a8:84:87:bf:9a:81:b2: bc:d3:7f:f7:3e:22:de:57:aa:70:9c:8e:2f:90:37:22:49:64: 18:47:da:48:df:b4:5d:7e:e1:a9:a1:06:8e:d5:c3:ae:ee:2e: eb:bf:c7:25:2b:89:c3:3a:1b:a1:e2:d3:c4:46:8f:6a:ed:84: c0:41:1a:65:70:8b:7c:93:bc:ff:ac:0c:b4:47:e9:97:11:eb: c0:6c:0e:28:82:e2:e9:fb:c8:8e:c2:e6:e5:fb:53:80:a2:47: 41:f6:c8:93:cb:13:78:b0:c8:a7:29:0e:00:c3:ce:1b:6e:00: 8e:5f:2d:f5:d2:c1:e1:66:d1:98:a8:8c:42:3c:5d:b8:f3:38: ae:45:82:e1:41:af:9d:84:d7:60:00:c4:70:08:df:ed:f7:86: 01:17:33:f9:51:72:2e:c5:19:fc:c3:f9:1f:9e:47:8a:48:da: d1:3b:f2:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGMDAxMTAvBgNVBAUTKEEzM0NDQTgxQjU1RTA0NjU1RDFCNUE3RTJDRTY4OEMz RTQ2RkM1MzAwHhcNMjUwNzIxMDAxODIxWhcNMjUwNzI4MDAxODIxWjAYMRYwFAYD VQQDEw02ODdkODc0ZC00NjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6tz4FS+WGx7RA60o5lASQrHQ0eohuiYWosTrHndJLjufKZDZ+5E9EbQfIxg Vj2ocidf6G3EfBQQ8b86TeISj40vscjJSKqh0He797nM7kXA8dCrwjW8bBKc5b43 cBfnT6eMNrU6oaQyas7p1MJx7jjXhHEfKdN9LhvaY2MTYZPYwaveICD5rDgDKJnM VDPpzWHFHNps1cfLhsP66pOwUYzrNfMhbqZAZ2+VGZWrzKxgxiiQhUtNzVnSNUiU GnCKvdNx1K0stm0oiiYlRRcLpeZewykl3yijOxW5ZHiMJIz+0Vjme1DfLMJ/ZDQg 3on6mUbjr5j8JNwiq2oql5PXwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoyycKl bcPrtEVgcvhQPfjLmv+yMB8GA1UdIwQYMBaAFKM8yoG1XgRlXRtafizmiMPkb8Uw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREYwMC8zQUUwMDM0QTRF N0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJHVmRHMXAtTE9hSXctUnZ4 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL296ektnYlZlQkdWZEcxcC1MT2FJdy1SdnhUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REYwMC8zQUUwMDM0QTRFN0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJH VmRHMXAtTE9hSXctUnZ4VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnv7tGUsGuGnsnQO67cKp1orreleH6FAf8e+Jw5kqR97+7KyB+FyDO XH3W5OPzjgLISyRZQM2bOjjRyc8ngIzT+jVNgAy8mfb/pSa461BDTkk85KiEh7+a gbK803/3PiLeV6pwnI4vkDciSWQYR9pI37RdfuGpoQaO1cOu7i7rv8clK4nDOhuh 4tPERo9q7YTAQRplcIt8k7z/rAy0R+mXEevAbA4oguLp+8iOwubl+1OAokdB9siT yxN4sMinKQ4Aw84bbgCOXy310sHhZtGYqIxCPF248ziuRYLhQa+dhNdgAMRwCN/t 94YBFzP5UXIuxRn8w/kfnkeKSNrRO/Lv -----END CERTIFICATE-----Generated at Mon Jul 21 06:53:29 2025 by rpki-client