$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft File: ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft (raw, json) Hash identifier: xsr2VMJKebxGi2Zlq3BiXrg5yay8UpSRst9G39iCg5Q= Subject key identifier: BE:5D:B1:F6:D1:D4:D2:4C:18:F5:3E:11:EE:2E:A4:7B:96:58:23:14 Authority key identifier: A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36 Certificate issuer: /CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft Manifest number: 01D7 Signing time: Sun 27 Apr 2025 01:50:57 +0000 Manifest this update: Sun 27 Apr 2025 01:50:57 +0000 Manifest next update: Sun 04 May 2025 01:50:57 +0000 Files and hashes: 1: ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl (hash: T4qzTEu7DvDWgWCLirSINXhTxe6FBRPy6sOMft/Gz6c=) 2: 0AFFF078577811ED959AC36FC4F9AE02.roa (hash: 7KGpbBEEym6owc+uaT6+xmtVoaHn3I3Wf4REEkb7Hck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8AC4, serialNumber=A337633E35919940BD729D912F3663158C267C36 Validity Not Before: Apr 27 01:50:57 2025 GMT Not After : May 4 01:50:57 2025 GMT Subject: CN=680d8d81-996d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:dd:56:94:55:89:35:85:61:bf:01:03:f8: 99:21:b2:93:b2:97:cc:06:25:7c:2d:af:d3:fa:2e: 56:fc:b1:e6:52:97:fa:81:e4:05:6a:a9:42:d6:be: 25:47:67:d0:4e:b8:ab:85:eb:f1:73:ee:c8:20:1f: e6:7e:34:f0:36:fc:8f:f2:68:1b:a6:d8:09:7d:3a: 00:5e:07:1f:38:b8:9c:6c:3e:97:22:f8:df:ab:62: c2:5a:d8:3c:a7:11:bb:e3:79:da:f7:f3:15:2b:5e: 20:96:33:11:85:25:2f:98:dc:85:54:54:7f:61:9b: c8:86:3f:eb:22:9f:a7:b2:94:56:da:2d:51:5a:e6: 21:ae:ae:1e:18:17:4f:f1:c1:9e:fd:48:de:83:6d: d6:85:55:6c:96:81:2e:97:03:85:90:12:71:a7:85: 95:6c:db:d3:6c:c8:9d:fa:e4:48:84:9b:c9:75:05: 39:3d:a2:02:ea:cc:ed:6a:62:e6:96:26:c6:a6:cc: 06:f2:a5:b9:58:c6:95:70:87:cd:50:64:95:6d:6a: b5:66:47:e3:7d:4e:1e:2f:81:5d:73:b0:86:5b:4d: 6f:5b:e3:97:d1:3f:33:db:f1:86:eb:8a:67:60:9c: ed:c4:32:4e:fd:36:2f:01:81:02:d1:19:42:28:f6: 4a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5D:B1:F6:D1:D4:D2:4C:18:F5:3E:11:EE:2E:A4:7B:96:58:23:14 X509v3 Authority Key Identifier: keyid:A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:52:3b:1b:48:9e:48:b4:14:ea:9d:0d:fa:c7:d4:38:4f:cd: 06:d4:5d:13:7a:eb:3c:73:8d:65:89:5c:7d:88:4b:32:ae:61: 47:a8:b2:f8:7b:a4:a9:34:79:6d:ab:57:7e:c4:94:88:a5:17: 7c:6e:c4:24:ac:a9:dc:66:11:1f:c2:e2:2f:d2:f7:8b:19:df: 6a:9e:e8:31:13:4b:1d:57:61:77:e0:8b:f1:91:de:2f:c8:02: cc:ce:50:b7:4b:05:cf:8a:10:3a:10:ac:ef:f2:22:8c:aa:02: 89:e9:df:78:a6:66:2b:e8:12:5a:c0:24:0a:5a:95:25:a0:86: c2:60:e0:88:0e:cf:b9:98:5a:ca:59:28:70:f2:9e:76:eb:dd: 42:cb:cf:9f:fc:94:02:5b:a0:b8:8e:17:2a:69:ed:39:c4:02: 61:76:79:85:18:37:80:77:23:ee:a3:84:09:ce:ce:d8:8e:97: 9b:72:23:ab:e5:6d:72:60:4a:ee:f7:4b:6e:bb:ad:57:fb:c6: 4e:fe:c4:c6:d0:28:5f:51:5f:30:58:92:9d:33:17:b8:33:37: 3e:17:e0:b9:61:0a:0d:fc:bb:ab:77:0b:c4:3d:c4:96:fa:05: 50:3a:32:ef:ba:a3:95:47:70:21:47:23:2f:83:f8:63:1a:5e: 49:a6:d6:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBQzQxMTAvBgNVBAUTKEEzMzc2MzNFMzU5MTk5NDBCRDcyOUQ5MTJGMzY2MzE1 OEMyNjdDMzYwHhcNMjUwNDI3MDE1MDU3WhcNMjUwNTA0MDE1MDU3WjAYMRYwFAYD VQQDEw02ODBkOGQ4MS05OTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1y3dVpRViTWFYb8BA/iZIbKTspfMBiV8La/T+i5W/LHmUpf6geQFaqlC1r4l R2fQTrirhevxc+7IIB/mfjTwNvyP8mgbptgJfToAXgcfOLicbD6XIvjfq2LCWtg8 pxG743na9/MVK14gljMRhSUvmNyFVFR/YZvIhj/rIp+nspRW2i1RWuYhrq4eGBdP 8cGe/Ujeg23WhVVsloEulwOFkBJxp4WVbNvTbMid+uRIhJvJdQU5PaIC6sztamLm libGpswG8qW5WMaVcIfNUGSVbWq1ZkfjfU4eL4Fdc7CGW01vW+OX0T8z2/GG64pn YJztxDJO/TYvAYEC0RlCKPZK/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5dsfbR 1NJMGPU+Ee4upHuWWCMUMB8GA1UdIwQYMBaAFKM3Yz41kZlAvXKdkS82YxWMJnw2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEFDNC9DOEZFMTc0QzU3 NzUxMUVEODFGMTNCNkZDNEY5QUUwMi9vemRqUGpXUm1VQzljcDJSTHpaakZZd21m RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL296ZGpQaldSbVVDOWNwMlJMelpqRll3bWZEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEFDNC9DOEZFMTc0QzU3NzUxMUVEODFGMTNCNkZDNEY5QUUwMi9vemRqUGpXUm1V QzljcDJSTHpaakZZd21mRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwUjsbSJ5ItBTqnQ36x9Q4T80G1F0Teus8c41liVx9iEsyrmFHqLL4 e6SpNHltq1d+xJSIpRd8bsQkrKncZhEfwuIv0veLGd9qnugxE0sdV2F34Ivxkd4v yALMzlC3SwXPihA6EKzv8iKMqgKJ6d94pmYr6BJawCQKWpUloIbCYOCIDs+5mFrK WShw8p52691Cy8+f/JQCW6C4jhcqae05xAJhdnmFGDeAdyPuo4QJzs7YjpebciOr 5W1yYEru90tuu61X+8ZO/sTG0ChfUV8wWJKdMxe4Mzc+F+C5YQoN/LurdwvEPcSW +gVQOjLvuqOVR3AhRyMvg/hjGl5Jpta1 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:18 2025 by rpki-client on console.sobornost.net