$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft File: ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft (raw, json) Hash identifier: w3GRad9Myt3WdHwdF+CR1P0/NUxrPxlk1ZAblAqSLXE= Subject key identifier: 5B:BF:2F:C0:64:F4:8D:0D:38:A7:3F:91:A9:F2:AD:A4:44:EA:AE:5B Authority key identifier: A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36 Certificate issuer: /CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft Manifest number: 01E7 Signing time: Sat 31 May 2025 02:22:18 +0000 Manifest this update: Sat 31 May 2025 02:22:17 +0000 Manifest next update: Sat 07 Jun 2025 02:22:17 +0000 Files and hashes: 1: ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl (hash: i9T2pG8mjwrsxAWqIeJw1lfOnaqSG5E7UgC30e3xgPQ=) 2: 0AFFF078577811ED959AC36FC4F9AE02.roa (hash: 7KGpbBEEym6owc+uaT6+xmtVoaHn3I3Wf4REEkb7Hck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8AC4, serialNumber=A337633E35919940BD729D912F3663158C267C36 Validity Not Before: May 31 02:22:17 2025 GMT Not After : Jun 7 02:22:17 2025 GMT Subject: CN=683a67d9-4d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b7:ca:00:60:c7:f5:03:f6:bc:fe:4d:e4:03: bd:46:47:ea:b0:e4:49:b2:9a:7c:fc:d9:9f:0a:c6: b1:98:4f:1e:b0:e4:a9:7c:c9:7a:fc:25:24:87:88: 40:63:76:0b:2c:27:26:d7:e4:92:83:79:6e:17:db: fd:47:78:06:af:82:e7:34:e9:d3:c8:ca:60:fb:1b: f0:9f:14:09:2a:15:94:88:b6:6d:07:4f:e7:74:fe: 1b:d6:27:1b:24:f7:31:e2:fd:fd:0c:e9:ca:01:d6: 4d:a0:9a:1c:5f:a4:8b:e0:ff:26:69:41:b2:32:d8: bb:1d:66:8c:f8:be:ee:b0:52:0f:41:41:a0:e6:fb: 85:16:cc:bb:5e:d9:71:5f:dd:4d:0a:c5:4b:38:df: 45:9d:00:b2:28:01:df:9f:c7:2a:f5:e1:86:e6:2e: 83:23:f9:0b:ed:ff:fa:b3:f3:39:13:78:51:03:12: 0b:20:59:20:80:ce:9b:73:0b:07:18:4f:19:e8:2b: 42:0e:1a:16:d9:c5:56:8d:40:07:e8:27:fc:c7:bb: 35:58:ed:ba:24:a7:00:16:8a:4a:47:9a:a8:a8:73: 3d:33:f2:ac:d8:29:12:11:32:29:5b:78:62:5e:19: 12:64:60:ea:4a:5d:f4:c2:0c:51:5d:26:49:d9:3d: f3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BF:2F:C0:64:F4:8D:0D:38:A7:3F:91:A9:F2:AD:A4:44:EA:AE:5B X509v3 Authority Key Identifier: keyid:A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:de:cb:b3:97:f4:60:54:4d:c4:b8:79:0c:0f:ad:82:d8:0c: 51:50:f6:69:e3:9e:a5:9b:e0:51:c2:67:11:7d:eb:cf:5c:b0: 9d:54:97:14:38:50:6d:6a:6e:57:b0:2b:41:77:46:51:18:b9: 48:bc:e8:bb:08:60:fd:61:d9:7d:9f:da:30:fb:d2:4d:08:cb: 76:b6:c2:96:93:aa:8d:e3:a7:5b:0c:54:b7:14:76:a9:ab:fd: e9:96:7d:8c:1a:28:5f:dd:49:40:a2:71:a0:ed:3f:1c:b2:ed: 6e:08:ca:d1:b3:d3:f6:16:ee:c3:a1:4f:8d:74:84:5e:f4:a3: 4a:41:5e:ed:3e:50:8e:1d:dd:82:14:1e:10:91:5c:2a:3c:25: d4:f2:21:20:b3:e2:25:7c:02:d3:bc:58:b0:95:70:15:1a:79: bb:e9:58:11:42:27:a3:6b:6d:a6:05:dd:1e:a1:fd:29:fb:45: c3:85:ee:e5:7d:49:ed:11:db:5e:90:35:29:ba:2d:01:ae:b9: 2d:ae:ae:3e:de:86:db:71:f2:95:3c:74:b0:64:d7:0c:28:e8: 52:58:92:7e:ba:87:19:b4:1d:ab:44:e2:5d:70:11:36:26:c8: 67:eb:e0:f7:63:69:a4:04:ef:a3:8e:c1:4b:4d:13:15:5d:11: d7:f9:5e:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBQzQxMTAvBgNVBAUTKEEzMzc2MzNFMzU5MTk5NDBCRDcyOUQ5MTJGMzY2MzE1 OEMyNjdDMzYwHhcNMjUwNTMxMDIyMjE3WhcNMjUwNjA3MDIyMjE3WjAYMRYwFAYD VQQDEw02ODNhNjdkOS00ZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7fKAGDH9QP2vP5N5AO9RkfqsORJspp8/NmfCsaxmE8esOSpfMl6/CUkh4hA Y3YLLCcm1+SSg3luF9v9R3gGr4LnNOnTyMpg+xvwnxQJKhWUiLZtB0/ndP4b1icb JPcx4v39DOnKAdZNoJocX6SL4P8maUGyMti7HWaM+L7usFIPQUGg5vuFFsy7Xtlx X91NCsVLON9FnQCyKAHfn8cq9eGG5i6DI/kL7f/6s/M5E3hRAxILIFkggM6bcwsH GE8Z6CtCDhoW2cVWjUAH6Cf8x7s1WO26JKcAFopKR5qoqHM9M/Ks2CkSETIpW3hi XhkSZGDqSl30wgxRXSZJ2T3zqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFu/L8Bk 9I0NOKc/kanyraRE6q5bMB8GA1UdIwQYMBaAFKM3Yz41kZlAvXKdkS82YxWMJnw2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEFDNC9DOEZFMTc0QzU3 NzUxMUVEODFGMTNCNkZDNEY5QUUwMi9vemRqUGpXUm1VQzljcDJSTHpaakZZd21m RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL296ZGpQaldSbVVDOWNwMlJMelpqRll3bWZEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEFDNC9DOEZFMTc0QzU3NzUxMUVEODFGMTNCNkZDNEY5QUUwMi9vemRqUGpXUm1V QzljcDJSTHpaakZZd21mRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH3suzl/RgVE3EuHkMD62C2AxRUPZp456lm+BRwmcRfevPXLCdVJcU OFBtam5XsCtBd0ZRGLlIvOi7CGD9Ydl9n9ow+9JNCMt2tsKWk6qN46dbDFS3FHap q/3pln2MGihf3UlAonGg7T8csu1uCMrRs9P2Fu7DoU+NdIRe9KNKQV7tPlCOHd2C FB4QkVwqPCXU8iEgs+IlfALTvFiwlXAVGnm76VgRQieja22mBd0eof0p+0XDhe7l fUntEdtekDUpui0Brrktrq4+3obbcfKVPHSwZNcMKOhSWJJ+uocZtB2rROJdcBE2 Jshn6+D3Y2mkBO+jjsFLTRMVXRHX+V4W -----END CERTIFICATE-----Generated at Sat May 31 16:49:13 2025 by rpki-client