$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft File: H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft (raw, json) Hash identifier: 8MBOM0TrFBWP3QxIIudaCX5xPj+NMnC+aYKHHLK2hkc= Subject key identifier: B6:9F:96:76:C3:04:2D:AE:15:AD:0F:7B:EA:46:16:01:BE:46:74:41 Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24 Certificate issuer: /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft Manifest number: 11 Signing time: Thu 03 Apr 2025 07:20:59 +0000 Manifest this update: Thu 03 Apr 2025 07:20:59 +0000 Manifest next update: Thu 10 Apr 2025 07:20:59 +0000 Files and hashes: 1: H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl (hash: aQnar8PosYdcA5sqb4V6tZsnKtEIybcSRaMUR8JD5HQ=) 2: 0664C974FEF811EFB0C52572C4F9AE02.roa (hash: LMQmjwLQrmdrjw5ITfcjjvXTHrCvldYng4+Bqh2xDu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8282 Validity Not Before: Apr 3 07:20:59 2025 GMT Not After : Apr 10 07:20:59 2025 GMT Subject: CN=67ee36db-176f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:72:42:47:b3:40:10:74:7d:73:1f:ef:65: 7b:79:06:b5:ec:7b:e9:6f:01:48:4f:c5:d2:88:1a: bf:b4:18:4a:85:17:c6:a3:e6:9f:8d:ff:f4:80:9e: 22:d0:eb:2b:bf:60:fb:83:7b:c4:e4:a4:b1:22:6e: fe:60:70:20:23:d8:17:39:6e:ac:b7:0f:f5:7d:8d: d5:fb:fa:34:36:15:b6:5d:08:34:2b:4d:52:94:2a: cb:ee:f4:2b:15:15:e5:7a:02:7f:49:8f:c7:74:5f: 22:8e:3a:18:c2:be:5f:b6:9d:5c:ef:6c:7f:cd:bc: 49:40:94:10:3c:00:fd:d7:87:8d:d1:26:61:c7:1a: 18:2b:b5:20:ba:41:5f:36:57:50:c2:ff:3d:98:9f: c8:db:41:9a:70:6b:09:02:39:17:9b:1d:5c:d9:b0: dd:ea:8a:3a:79:1d:19:e2:57:39:24:aa:29:49:e6: e2:38:40:f3:19:15:ac:ce:fc:b2:dc:2b:d0:f3:8a: 83:98:94:2f:86:05:f9:18:1b:49:d4:3a:a5:2f:75: 44:8c:4f:ac:05:6e:95:e7:e2:bb:09:cb:a2:bc:7e: b9:84:20:fa:53:dd:c5:ef:c0:c7:06:f8:e6:c9:fd: 41:59:60:2b:a9:75:63:b6:cf:03:e3:a3:ab:8a:03: 51:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9F:96:76:C3:04:2D:AE:15:AD:0F:7B:EA:46:16:01:BE:46:74:41 X509v3 Authority Key Identifier: keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:33:31:ce:05:bc:13:63:63:6c:cf:f4:27:8a:c1:ac:72:b8: 76:57:33:df:cc:ca:4b:7d:11:13:ac:2d:57:ee:87:c7:52:3f: fe:75:2e:a6:4e:b8:1e:b3:c5:3a:4e:0a:62:df:20:5f:14:05: 70:e2:a6:bb:40:09:af:9b:96:45:6f:6a:c5:21:e4:e9:2c:ec: b2:53:89:8f:4e:89:64:0c:a4:ae:ec:8b:17:8f:8a:5b:76:08: f7:02:6b:bd:57:bf:21:9f:53:10:27:54:72:c2:91:02:5e:8a: aa:3a:3f:8e:db:a6:76:e3:a4:06:82:e0:bd:24:ef:0c:5e:92: 7d:df:ea:08:15:62:c4:8c:2a:ec:a7:40:4e:42:1f:c7:f1:ce: 2b:26:e0:e2:1d:da:f7:34:4c:6d:a1:93:e5:42:9a:be:8d:fd: 0b:ee:19:84:4f:c8:93:03:72:68:b3:a9:06:c3:24:e1:2a:37: 4e:a1:4c:66:ee:eb:99:2c:68:a3:04:f8:01:ae:52:71:65:9a: b5:c9:47:45:c4:b2:c3:71:a3:82:f5:1c:b1:9a:7b:04:4a:22: 76:8b:3c:3d:d1:4e:c7:eb:c3:78:5a:31:b5:29:7c:80:c7:6e: 75:dd:29:a8:df:8d:ab:d3:4a:e4:87:23:40:13:1f:18:cb:b1: 65:7a:46:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODI4MjExMC8GA1UEBRMoMUY0RENFMzQzOUIxRjQwMzVGRkY4QzcxQ0UzNTlFNUQy MEU2OUEyNDAeFw0yNTA0MDMwNzIwNTlaFw0yNTA0MTAwNzIwNTlaMBgxFjAUBgNV BAMTDTY3ZWUzNmRiLTE3NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4E3JCR7NAEHR9cx/vZXt5BrXse+lvAUhPxdKIGr+0GEqFF8aj5p+N//SAniLQ 6yu/YPuDe8TkpLEibv5gcCAj2Bc5bqy3D/V9jdX7+jQ2FbZdCDQrTVKUKsvu9CsV FeV6An9Jj8d0XyKOOhjCvl+2nVzvbH/NvElAlBA8AP3Xh43RJmHHGhgrtSC6QV82 V1DC/z2Yn8jbQZpwawkCORebHVzZsN3qijp5HRniVzkkqilJ5uI4QPMZFazO/LLc K9DzioOYlC+GBfkYG0nUOqUvdUSMT6wFbpXn4rsJy6K8frmEIPpT3cXvwMcG+ObJ /UFZYCupdWO2zwPjo6uKA1HZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtp+WdsME La4VrQ976kYWAb5GdEEwHwYDVR0jBBgwFoAUH03ONDmx9ANf/4xxzjWeXSDmmiQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4MjgyLzJGMjUzQzFBRkJG RTExRUZCNTUyMEExMkM0RjlBRTAyL0gwM09ORG14OUFOZl80eHh6aldlWFNEbW1p US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvSDAzT05EbXg5QU5mXzR4eHpqV2VYU0RtbWlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 MjgyLzJGMjUzQzFBRkJGRTExRUZCNTUyMEExMkM0RjlBRTAyL0gwM09ORG14OUFO Zl80eHh6aldlWFNEbW1pUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIUzMc4FvBNjY2zP9CeKwaxyuHZXM9/Mykt9EROsLVfuh8dSP/51LqZO uB6zxTpOCmLfIF8UBXDiprtACa+blkVvasUh5Oks7LJTiY9OiWQMpK7sixePilt2 CPcCa71XvyGfUxAnVHLCkQJeiqo6P47bpnbjpAaC4L0k7wxekn3f6ggVYsSMKuyn QE5CH8fxzism4OId2vc0TG2hk+VCmr6N/QvuGYRPyJMDcmizqQbDJOEqN06hTGbu 65ksaKME+AGuUnFlmrXJR0XEssNxo4L1HLGaewRKInaLPD3RTsfrw3haMbUpfIDH bnXdKajfjavTSuSHI0ATHxjLsWV6Rr4= -----END CERTIFICATE-----Generated at Sat Apr 5 00:00:31 2025 by rpki-client