$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft File: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft (raw, json) Hash identifier: B0E2a3v++PlYjoKwzdyFc+soQAVDHzIo72YjIHaQyYQ= Subject key identifier: FF:71:B6:D2:26:26:7B:1A:E0:7D:47:92:C5:0B:0F:5A:4D:36:57:C0 Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C Certificate issuer: /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C Certificate serial: 0305 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft Manifest number: 02FF Signing time: Sat 31 May 2025 01:08:24 +0000 Manifest this update: Sat 31 May 2025 01:08:24 +0000 Manifest next update: Sat 07 Jun 2025 01:08:24 +0000 Files and hashes: 1: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl (hash: FnVDoH32YVY9Z4Bb8864HsnxYMQtoCib4d4S0fqyEVU=) 2: 03C06766DC1211EC80AE816DC4F9AE02.roa (hash: Utn78ATYCOJD2s8KH2tHbQkxop0M2VDIkapS9+XLIf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 773 (0x305) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED, serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C Validity Not Before: May 31 01:08:24 2025 GMT Not After : Jun 7 01:08:24 2025 GMT Subject: CN=683a5688-091d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:55:b3:db:0b:79:ab:a9:07:c1:20:6a:79: 70:21:56:56:f6:ad:41:ee:05:b6:43:18:73:6f:67: bb:33:93:dc:f2:89:2c:c6:3c:47:10:00:fe:df:14: cb:18:9a:96:7e:46:4f:0a:8f:76:c3:2c:ee:3e:cb: ab:27:c1:ad:dc:8b:b4:47:f8:c7:1b:99:43:0b:e4: 1a:27:e0:37:92:c6:90:41:11:6b:05:c1:43:87:38: 44:c2:2f:0e:c2:a6:67:7b:dc:fa:da:21:b1:a1:8e: 8e:2c:57:35:bc:34:93:86:85:8a:39:11:a2:6a:a8: 56:7e:27:f9:91:5f:d2:43:ba:60:56:11:36:ff:9d: d0:2e:a9:31:bd:33:ce:58:89:2b:da:7d:e7:89:18: 28:8e:b8:bb:3b:aa:af:7a:e3:43:85:ae:48:a0:f6: 87:dd:c4:4c:d5:a5:59:c3:92:97:e6:d7:07:34:61: b4:3a:e9:4c:58:59:89:67:67:56:1d:b3:bc:e2:94: 1f:c1:5c:35:0b:ab:d1:33:ab:e0:80:1d:58:dd:19: 28:55:56:20:0d:5b:54:85:08:22:d0:d7:fa:6e:12: a4:c2:88:5e:96:a4:27:52:ca:6c:08:a1:d6:3e:af: d4:d2:bf:57:c2:0f:a6:e8:c3:e2:08:3e:91:d0:cb: b1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:71:B6:D2:26:26:7B:1A:E0:7D:47:92:C5:0B:0F:5A:4D:36:57:C0 X509v3 Authority Key Identifier: keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:71:45:ee:8c:cd:8d:ea:e6:1e:78:01:e6:0f:d4:56:3a:42: 88:22:96:f5:ca:4a:18:35:f2:3a:1a:29:d2:a9:1f:5c:6b:af: 0b:81:20:3d:a1:f3:6a:1d:c4:5c:24:a1:28:05:85:41:ad:c2: 6d:62:3c:88:26:58:63:56:a3:eb:e3:97:12:12:74:c2:15:4f: 8b:0a:fc:a4:2f:02:db:37:80:15:82:aa:fe:32:b4:e2:3a:16: bc:66:ab:9a:4a:98:d3:f8:dc:41:9e:8c:77:39:aa:fa:5a:d9: 26:d1:cd:99:c5:f9:b1:4c:d9:8c:02:a0:ec:c6:76:8b:54:33: 61:1e:08:ed:f9:88:34:8b:b7:b4:7b:cb:4a:b2:02:8d:60:c1: 7e:ce:f3:8b:03:76:91:91:03:d7:5e:33:0c:f1:7c:82:e0:82: 06:83:11:47:79:bc:74:57:52:ef:af:f2:83:28:23:38:4e:c6: c3:3e:1f:e1:02:1b:5a:ae:13:79:ef:99:34:cf:b8:39:5c:c2: a7:14:68:a2:cc:a3:a5:d4:60:a3:e7:53:5f:65:9d:5c:db:f4: 57:de:ac:00:f8:5e:d7:7a:d9:b1:9c:68:aa:27:1c:ce:b3:1a: 2a:c9:a1:f2:37:be:4d:8d:c8:6a:9d:ea:15:dc:c9:72:ee:fc: 4c:62:5b:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKDNCM0Q2QkE5RkJFRjQyNEFGQUJGRDJCQTMwQzhCODU3 RDQ1OUYwOUMwHhcNMjUwNTMxMDEwODI0WhcNMjUwNjA3MDEwODI0WjAYMRYwFAYD VQQDEw02ODNhNTY4OC0wOTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRFVs9sLeaupB8EganlwIVZW9q1B7gW2Qxhzb2e7M5Pc8oksxjxHEAD+3xTL GJqWfkZPCo92wyzuPsurJ8Gt3Iu0R/jHG5lDC+QaJ+A3ksaQQRFrBcFDhzhEwi8O wqZne9z62iGxoY6OLFc1vDSThoWKORGiaqhWfif5kV/SQ7pgVhE2/53QLqkxvTPO WIkr2n3niRgojri7O6qveuNDha5IoPaH3cRM1aVZw5KX5tcHNGG0OulMWFmJZ2dW HbO84pQfwVw1C6vRM6vggB1Y3RkoVVYgDVtUhQgi0Nf6bhKkwohelqQnUspsCKHW Pq/U0r9Xwg+m6MPiCD6R0MuxTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9xttIm Jnsa4H1HksULD1pNNlfAMB8GA1UdIwQYMBaAFDs9a6n770JK+r/SujDIuFfUWfCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC9CMzVFQjUwQ0RC RjgxMUVDOTMyNDBFNURDNEY5QUUwMi9PejFycWZ2dlFrcjZ2OUs2TU1pNFY5Ulo4 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL096MXJxZnZ2UWtyNnY5SzZNTWk0VjlSWjhKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC9CMzVFQjUwQ0RCRjgxMUVDOTMyNDBFNURDNEY5QUUwMi9PejFycWZ2dlFr cjZ2OUs2TU1pNFY5Ulo4SncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAacUXujM2N6uYeeAHmD9RWOkKIIpb1ykoYNfI6GinSqR9ca68LgSA9 ofNqHcRcJKEoBYVBrcJtYjyIJlhjVqPr45cSEnTCFU+LCvykLwLbN4AVgqr+MrTi Oha8ZquaSpjT+NxBnox3Oar6Wtkm0c2ZxfmxTNmMAqDsxnaLVDNhHgjt+Yg0i7e0 e8tKsgKNYMF+zvOLA3aRkQPXXjMM8XyC4IIGgxFHebx0V1Lvr/KDKCM4TsbDPh/h AhtarhN575k0z7g5XMKnFGiizKOl1GCj51NfZZ1c2/RX3qwA+F7XetmxnGiqJxzO sxoqyaHyN75NjchqneoV3Mly7vxMYlso -----END CERTIFICATE-----Generated at Sat May 31 17:50:35 2025 by rpki-client