$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft File: ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft (raw, json) Hash identifier: 5+NnjM816DoRBrJOjitLS1Qhs7QV47GboFfRAYuS6dQ= Subject key identifier: A8:09:67:48:43:22:08:B3:8A:1E:63:82:5B:D1:03:5F:7D:2B:AA:D4 Authority key identifier: A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 Certificate issuer: /CN=A91EDF00/serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Certificate serial: 0464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft Manifest number: 0460 Signing time: Sat 31 May 2025 00:21:46 +0000 Manifest this update: Sat 31 May 2025 00:21:46 +0000 Manifest next update: Sat 07 Jun 2025 00:21:46 +0000 Files and hashes: 1: ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl (hash: OJfsx7VPww4MAiRNnkMWgtupk9glBR6eJwjnWDx9ZfM=) 2: 1B97FEB84E8111ECA3589560C4F9AE02.roa (hash: xAvVS/7W7xtAjphmjIYm8eiwHHWi2VdeCNpBEO7D7og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDF00, serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Validity Not Before: May 31 00:21:46 2025 GMT Not After : Jun 7 00:21:46 2025 GMT Subject: CN=683a4b9a-3dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:54:19:e2:5f:9b:80:0e:6b:0a:4a:da:dc:f7: 7a:fb:72:a0:20:67:e7:82:7c:c8:35:2c:fd:40:94: 33:d4:06:62:a1:3f:04:91:ea:fa:67:1c:d1:27:13: 00:c7:87:90:22:15:cd:ba:14:cd:d4:0e:15:08:54: 7f:a9:d0:c7:78:36:9b:04:d5:07:45:ad:b6:a0:a3: 83:ca:72:f6:d3:01:e7:cc:71:9c:79:9b:fa:b2:4a: db:a6:70:17:7d:0d:92:aa:03:05:29:55:49:dd:d8: 17:c3:bb:8c:58:3a:ca:87:0c:51:c1:90:7c:45:4f: 92:ba:f8:6a:89:75:07:f8:ce:84:46:d4:e3:dd:33: 98:df:d9:85:8c:0f:0a:e2:2e:f5:d2:8e:15:92:d5: 3d:5d:e6:f7:10:aa:9e:f2:60:90:8c:ad:63:b8:fa: 0e:20:a8:a4:55:ec:fe:b6:57:fe:0c:8b:8b:5d:5e: ef:df:9a:63:8c:45:44:2a:9f:4b:6e:66:a9:17:1e: fc:51:23:74:7e:b6:bc:e0:c5:41:e1:1f:0c:2b:bd: fd:6c:32:43:2d:5f:aa:8c:1a:10:06:b7:fc:0c:ef: 50:77:31:19:70:6d:a2:19:9c:04:96:5a:60:d2:34: 81:d5:22:c0:79:5a:b9:d6:14:88:75:83:a8:9c:47: 39:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:09:67:48:43:22:08:B3:8A:1E:63:82:5B:D1:03:5F:7D:2B:AA:D4 X509v3 Authority Key Identifier: keyid:A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:c1:68:f5:24:9e:12:cf:3f:63:cf:8b:b6:ad:98:70:24:84: d8:58:22:e7:83:77:2d:0a:5f:7c:a5:92:20:9b:3a:38:6d:b6: 45:ac:21:dc:18:97:bb:5f:75:d7:8d:e5:55:37:59:5e:07:b8: 5f:08:91:e4:c6:60:37:3f:eb:c2:62:44:2a:3f:b6:6d:b4:b1: 17:88:91:45:32:01:dc:ff:59:d4:2a:35:5b:89:cb:c4:d8:2f: 0b:0a:2b:92:69:d9:06:af:3e:76:4e:17:b6:ca:99:50:66:12: d7:f7:ab:4e:5d:2a:e1:14:01:0d:c2:db:e6:5a:53:84:10:c2: 0b:03:b3:6c:14:e0:7a:70:f9:bb:7f:ff:51:8b:c2:f4:a8:c2: 5e:42:16:44:55:96:71:1b:3e:49:11:0f:70:40:20:53:aa:b7: 62:f0:35:55:4a:ef:6e:8b:a0:f4:10:e5:58:50:c2:62:63:11: f8:4b:fa:7f:de:57:ec:dd:76:8d:20:cb:53:51:fd:ef:2d:21: 9e:cb:9b:a2:8e:e6:9b:a9:23:9b:52:b0:6d:91:03:79:6b:c0: e4:59:58:52:d7:b1:76:a7:c2:e3:03:9f:d7:9d:4d:48:49:e0: f6:c1:5f:2c:7e:e5:66:10:cc:a5:99:72:20:5b:f6:c9:02:7a: c7:01:87:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGMDAxMTAvBgNVBAUTKEEzM0NDQTgxQjU1RTA0NjU1RDFCNUE3RTJDRTY4OEMz RTQ2RkM1MzAwHhcNMjUwNTMxMDAyMTQ2WhcNMjUwNjA3MDAyMTQ2WjAYMRYwFAYD VQQDEw02ODNhNGI5YS0zZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA81QZ4l+bgA5rCkra3Pd6+3KgIGfngnzINSz9QJQz1AZioT8Eker6ZxzRJxMA x4eQIhXNuhTN1A4VCFR/qdDHeDabBNUHRa22oKODynL20wHnzHGceZv6skrbpnAX fQ2SqgMFKVVJ3dgXw7uMWDrKhwxRwZB8RU+SuvhqiXUH+M6ERtTj3TOY39mFjA8K 4i710o4VktU9Xeb3EKqe8mCQjK1juPoOIKikVez+tlf+DIuLXV7v35pjjEVEKp9L bmapFx78USN0fra84MVB4R8MK739bDJDLV+qjBoQBrf8DO9QdzEZcG2iGZwEllpg 0jSB1SLAeVq51hSIdYOonEc5MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgJZ0hD Igizih5jglvRA199K6rUMB8GA1UdIwQYMBaAFKM8yoG1XgRlXRtafizmiMPkb8Uw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREYwMC8zQUUwMDM0QTRF N0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJHVmRHMXAtTE9hSXctUnZ4 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL296ektnYlZlQkdWZEcxcC1MT2FJdy1SdnhUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REYwMC8zQUUwMDM0QTRFN0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJH VmRHMXAtTE9hSXctUnZ4VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUwWj1JJ4Szz9jz4u2rZhwJITYWCLng3ctCl98pZIgmzo4bbZFrCHc GJe7X3XXjeVVN1leB7hfCJHkxmA3P+vCYkQqP7ZttLEXiJFFMgHc/1nUKjVbicvE 2C8LCiuSadkGrz52The2yplQZhLX96tOXSrhFAENwtvmWlOEEMILA7NsFOB6cPm7 f/9Ri8L0qMJeQhZEVZZxGz5JEQ9wQCBTqrdi8DVVSu9ui6D0EOVYUMJiYxH4S/p/ 3lfs3XaNIMtTUf3vLSGey5uijuabqSObUrBtkQN5a8DkWVhS17F2p8LjA5/XnU1I SeD2wV8sfuVmEMylmXIgW/bJAnrHAYe8 -----END CERTIFICATE-----Generated at Sat May 31 16:43:53 2025 by rpki-client