$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: 1vgJ+Y9i1YgRMebcI5j+OarFDfRu6w+JJM2aD6a6Bsk= Subject key identifier: FF:CD:8A:5C:3A:13:4C:54:39:80:29:80:B9:60:46:8A:64:55:5E:13 Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: 023C Signing time: Sun 27 Apr 2025 03:05:23 +0000 Manifest this update: Sun 27 Apr 2025 03:05:22 +0000 Manifest next update: Sun 04 May 2025 03:05:22 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: yZIF6I6DpNi2royq0pu/W11SmfGnNXJ3szD96izgHoE=) 2: FC72D9F4DAD711EF92A87E5DC4F9AE02.roa (hash: yGKY9bGf3KO/fBsHJXYZtjw1LcLqxRqFqjzenpN601A=) 3: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: DqUd79ywwc0oIGvda4f69OJAvPxHaLz7wHn0gYGYCXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: Apr 27 03:05:22 2025 GMT Not After : May 4 03:05:22 2025 GMT Subject: CN=680d9ef2-91a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:11:0e:0d:18:71:82:4f:bd:44:3d:dd:c9:38: a7:8d:51:66:64:52:60:50:36:7a:5b:0b:5d:64:53: 9c:f4:86:c2:0a:be:98:40:10:31:80:30:42:70:35: 8f:46:10:49:1e:54:4f:60:09:e1:f2:94:6b:72:1a: e5:31:69:cb:9a:46:11:6f:8e:5f:d5:05:7b:88:1e: 1f:0d:e7:32:39:52:bf:8f:cb:a6:70:e1:38:f5:b4: 00:1d:f5:d4:57:36:26:76:72:d4:36:d7:cc:17:35: cd:27:c0:bb:34:fe:9e:51:e0:04:a0:db:1d:26:cf: 88:72:af:d9:13:f4:c5:0b:29:c5:85:29:d9:d0:d4: 17:b0:e9:55:1a:ba:90:4f:f0:56:5f:89:67:6a:0f: c0:74:04:64:92:21:e2:da:f0:5a:68:2b:4f:b5:1e: ae:00:11:18:85:70:aa:43:36:30:f2:36:a7:6d:66: 23:bc:25:04:a6:53:09:d8:2f:33:17:9d:b6:8c:8b: 62:c9:85:4d:0e:f8:9d:db:4f:d3:2e:6f:ab:99:c8: 97:f4:ff:df:73:b9:ce:1c:a6:a1:93:ed:80:65:eb: 04:ae:2d:09:95:80:e2:be:fe:ff:0a:bf:f7:d8:37: d6:e5:3d:9f:b0:bf:74:26:b0:e2:04:0d:48:f9:41: b8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CD:8A:5C:3A:13:4C:54:39:80:29:80:B9:60:46:8A:64:55:5E:13 X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:57:17:a9:c9:f9:a4:ed:95:95:3d:17:26:4c:a3:e3:4c:a7: f5:da:3b:2e:b3:fa:f6:e7:93:b0:c0:f1:a9:06:17:f0:0c:10: 89:ea:f0:8b:1f:8e:2f:dd:47:a8:e5:83:8e:c0:19:cf:6a:3f: 63:9f:19:9c:8c:90:cd:6d:11:a2:89:21:ca:ed:a4:c5:d1:38: 78:59:68:fd:3c:1f:a0:86:81:f0:12:03:d8:2a:47:bc:b4:46: 79:3e:89:23:64:5a:1a:43:ed:09:4c:ae:20:b7:c9:c1:59:ff: cc:9a:49:12:c0:5d:5b:e1:c2:93:c1:64:00:56:f0:f3:e4:d6: 59:4d:67:f0:6f:0a:f5:10:b0:e8:72:2e:0d:2e:6b:00:be:13: 33:73:5e:1b:8c:1c:1f:79:4d:fd:d9:51:c6:58:d1:f1:e7:c9: 70:69:5b:2a:13:df:69:04:84:bf:23:54:1d:c8:b0:a1:4f:92: 52:d7:97:e6:56:60:e7:bc:cc:e8:52:29:70:63:ed:61:37:e2: 1d:28:1b:f6:45:42:83:d7:d9:6c:20:20:f2:67:02:ff:3f:86: ef:b3:9c:b6:df:a1:0f:77:1c:c3:1e:8a:b4:44:44:f6:2c:24: b8:98:51:1c:97:7a:80:4c:41:56:21:7b:3e:14:01:cd:61:b2: 2b:87:7a:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjUwNDI3MDMwNTIyWhcNMjUwNTA0MDMwNTIyWjAYMRYwFAYD VQQDEw02ODBkOWVmMi05MWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohEODRhxgk+9RD3dyTinjVFmZFJgUDZ6WwtdZFOc9IbCCr6YQBAxgDBCcDWP RhBJHlRPYAnh8pRrchrlMWnLmkYRb45f1QV7iB4fDecyOVK/j8umcOE49bQAHfXU VzYmdnLUNtfMFzXNJ8C7NP6eUeAEoNsdJs+Icq/ZE/TFCynFhSnZ0NQXsOlVGrqQ T/BWX4lnag/AdARkkiHi2vBaaCtPtR6uABEYhXCqQzYw8janbWYjvCUEplMJ2C8z F522jItiyYVNDvid20/TLm+rmciX9P/fc7nOHKahk+2AZesEri0JlYDivv7/Cr/3 2DfW5T2fsL90JrDiBA1I+UG4gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/Nilw6 E0xUOYApgLlgRopkVV4TMB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhH bXRxMUptUld5YVJmTFB3WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiVxepyfmk7ZWVPRcmTKPjTKf12jsus/r255OwwPGpBhfwDBCJ6vCL H44v3Ueo5YOOwBnPaj9jnxmcjJDNbRGiiSHK7aTF0Th4WWj9PB+ghoHwEgPYKke8 tEZ5PokjZFoaQ+0JTK4gt8nBWf/MmkkSwF1b4cKTwWQAVvDz5NZZTWfwbwr1ELDo ci4NLmsAvhMzc14bjBwfeU392VHGWNHx58lwaVsqE99pBIS/I1QdyLChT5JS15fm VmDnvMzoUilwY+1hN+IdKBv2RUKD19lsICDyZwL/P4bvs5y236EPdxzDHoq0RET2 LCS4mFEcl3qATEFWIXs+FAHNYbIrh3ot -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:38 2025 by rpki-client on console.sobornost.net