$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: oOJzjxYbhD27AZPRUVw7JNE3Cy+U62U/PCxhN8uMimY= Subject key identifier: 29:32:05:12:D4:6F:C4:DC:BF:22:94:44:B9:FD:59:15:FF:CA:B8:2F Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: 023A Signing time: Fri 25 Apr 2025 03:16:09 +0000 Manifest this update: Fri 25 Apr 2025 03:16:08 +0000 Manifest next update: Fri 02 May 2025 03:16:08 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: Jb7tnZ+5bfqMgswzCrtuHqzTmM4Hu95F0WN9CnXlJV0=) 2: FC72D9F4DAD711EF92A87E5DC4F9AE02.roa (hash: yGKY9bGf3KO/fBsHJXYZtjw1LcLqxRqFqjzenpN601A=) 3: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: DqUd79ywwc0oIGvda4f69OJAvPxHaLz7wHn0gYGYCXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: Apr 25 03:16:08 2025 GMT Not After : May 2 03:16:08 2025 GMT Subject: CN=680afe78-6514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:b5:24:01:47:3f:b2:a1:05:a1:e2:8a:c3: d5:3d:11:fa:3d:04:80:23:e1:26:4e:ba:e1:bc:b4: 5a:7c:5b:f2:0c:ac:0a:50:e0:fd:b6:a1:4b:3e:e1: bf:7c:d9:7a:76:6c:69:fc:d2:92:22:53:47:11:8c: 15:e3:2d:40:75:bf:32:6f:1f:05:5b:60:1c:60:b6: 4a:7e:a0:71:b3:0e:5a:96:fc:92:b4:bf:f6:51:e8: 03:73:f0:c4:24:1a:1e:9f:91:68:5c:13:3f:ca:d5: 4c:45:53:17:e2:bf:0a:fa:0f:a6:ce:59:e0:07:34: 36:d4:61:96:82:f1:be:08:d0:e7:61:3e:6a:04:9b: 9c:79:ef:aa:32:89:bc:8f:be:6b:5a:b1:8d:51:6a: 50:d3:d9:45:81:a0:78:d6:31:83:e7:8b:9d:0f:b9: 69:ba:c1:25:3d:6e:86:1a:b3:3b:d4:2a:83:8e:8d: b2:e8:15:6c:0c:e8:4a:a1:52:ac:27:f6:f8:47:17: 6b:19:89:c6:ba:4f:52:a2:f8:59:7e:9e:b4:33:27: b8:9b:18:00:2f:d2:ee:2d:08:31:28:09:0a:59:bc: 53:94:4b:28:fc:1d:b1:3b:40:fc:01:59:b5:a2:14: 02:60:fb:8c:ce:31:a6:49:e2:b8:bc:4d:bd:50:69: a3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:32:05:12:D4:6F:C4:DC:BF:22:94:44:B9:FD:59:15:FF:CA:B8:2F X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:75:06:9e:80:2b:12:ba:df:29:94:44:32:d7:dc:7d:ed:94: c2:8d:9c:71:12:6b:cc:85:b4:85:c3:b9:bb:dd:a0:08:3b:45: fd:cc:8c:06:1c:6e:07:5b:76:6d:e7:7d:36:58:6e:11:5a:7b: 4a:e0:9d:26:cf:78:2c:a2:5b:7e:8e:4b:f3:e1:54:7e:d1:94: b4:c0:0a:e6:71:45:5d:33:11:93:52:ca:7c:fe:03:2d:50:d2: fd:75:22:85:b7:ab:a2:6c:36:a3:43:ae:dd:83:66:0d:82:ed: 18:be:75:60:a0:20:93:32:d3:c0:cc:b9:94:47:8f:14:8d:e1: f3:f1:06:85:90:8f:bf:fd:f5:04:20:39:d1:ad:32:8f:28:f8: 9e:a0:d1:58:62:66:52:3f:f5:38:48:bb:ef:e8:ea:e4:67:2b: 8d:7c:c2:8f:52:3c:39:28:c1:db:f5:8d:bf:6d:82:e1:f0:bc: cc:19:38:6f:48:a9:1c:2b:37:a5:2d:3d:ae:b9:02:f7:84:67: e9:30:33:39:8d:df:4c:0a:b6:aa:99:ea:ab:b3:ac:64:63:f8: ce:c6:b4:60:a7:d7:60:21:99:3b:64:20:db:57:50:24:dd:a8: e8:a3:c0:11:26:de:1e:64:2c:ae:c7:4c:60:d3:37:55:c8:fb: 5d:31:43:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjUwNDI1MDMxNjA4WhcNMjUwNTAyMDMxNjA4WjAYMRYwFAYD VQQDEw02ODBhZmU3OC02NTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvea1JAFHP7KhBaHiisPVPRH6PQSAI+EmTrrhvLRafFvyDKwKUOD9tqFLPuG/ fNl6dmxp/NKSIlNHEYwV4y1Adb8ybx8FW2AcYLZKfqBxsw5alvyStL/2UegDc/DE JBoen5FoXBM/ytVMRVMX4r8K+g+mzlngBzQ21GGWgvG+CNDnYT5qBJucee+qMom8 j75rWrGNUWpQ09lFgaB41jGD54udD7lpusElPW6GGrM71CqDjo2y6BVsDOhKoVKs J/b4RxdrGYnGuk9SovhZfp60Mye4mxgAL9LuLQgxKAkKWbxTlEso/B2xO0D8AVm1 ohQCYPuMzjGmSeK4vE29UGmjawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkyBRLU b8TcvyKURLn9WRX/yrgvMB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhH bXRxMUptUld5YVJmTFB3WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5dQaegCsSut8plEQy19x97ZTCjZxxEmvMhbSFw7m73aAIO0X9zIwG HG4HW3Zt5302WG4RWntK4J0mz3gsolt+jkvz4VR+0ZS0wArmcUVdMxGTUsp8/gMt UNL9dSKFt6uibDajQ67dg2YNgu0YvnVgoCCTMtPAzLmUR48UjeHz8QaFkI+//fUE IDnRrTKPKPieoNFYYmZSP/U4SLvv6OrkZyuNfMKPUjw5KMHb9Y2/bYLh8LzMGThv SKkcKzelLT2uuQL3hGfpMDM5jd9MCraqmeqrs6xkY/jOxrRgp9dgIZk7ZCDbV1Ak 3ajoo8ARJt4eZCyux0xg0zdVyPtdMUOy -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:09 2025 by rpki-client