$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft File: H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft (raw, json) Hash identifier: +5uKpBD8dt7iftZ6+JEewG7RKH1dWrQryABvARG19qk= Subject key identifier: FB:A9:38:0C:A3:96:56:8B:F0:33:8B:70:E2:7B:88:BD:AB:72:C3:D5 Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24 Certificate issuer: /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft Manifest number: 1D Signing time: Sun 27 Apr 2025 06:44:57 +0000 Manifest this update: Sun 27 Apr 2025 06:44:57 +0000 Manifest next update: Sun 04 May 2025 06:44:57 +0000 Files and hashes: 1: H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl (hash: cZJ5HFAegk+KEbukEAlJErc6IFA/Gwfbp1zgDlsp7JQ=) 2: 0664C974FEF811EFB0C52572C4F9AE02.roa (hash: LMQmjwLQrmdrjw5ITfcjjvXTHrCvldYng4+Bqh2xDu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8282, serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24 Validity Not Before: Apr 27 06:44:57 2025 GMT Not After : May 4 06:44:57 2025 GMT Subject: CN=680dd269-a22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a6:a3:aa:71:d8:c2:68:b1:aa:a7:5e:14:5f: 9e:08:0d:e4:8b:c3:85:15:d8:29:e1:1f:42:14:27: b4:58:b7:6f:0f:c7:b4:02:cc:15:f5:48:b8:b1:10: 7c:69:a6:db:23:95:c7:8a:2d:b8:3a:74:51:bd:08: 79:98:56:b1:e2:99:16:cc:2b:fe:da:55:74:80:89: ed:73:61:e6:71:84:6b:08:16:8d:32:a0:6d:8a:46: 13:56:29:0e:7b:7a:e6:3e:c1:af:b4:af:85:91:af: 62:9c:6b:ab:36:b0:50:99:6e:5f:93:c0:d1:75:58: 10:d7:f4:1e:a6:d4:9f:77:87:8d:67:cb:bd:23:e2: 03:b2:73:7e:22:e5:76:9b:04:62:70:01:c3:04:69: 62:1a:d1:ba:86:1c:2e:a7:bb:d7:48:50:6c:3a:bb: 53:e6:49:e3:37:8e:f4:9e:9e:d9:14:51:f7:91:90: 46:a1:e6:94:b7:e2:f9:91:63:3e:65:fd:0c:ca:00: f3:f4:ce:dd:75:34:12:ea:06:be:93:cd:45:95:1f: 01:3a:2d:c5:2c:49:96:c5:fd:2c:3d:d2:97:c8:fd: c2:27:d0:e2:44:aa:06:50:c8:a0:36:a7:84:1b:41: e2:be:6b:79:ee:3f:be:83:b7:70:85:54:f8:43:69: 90:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A9:38:0C:A3:96:56:8B:F0:33:8B:70:E2:7B:88:BD:AB:72:C3:D5 X509v3 Authority Key Identifier: keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:05:e1:4f:f5:99:c3:d6:40:a4:da:bc:74:6a:ad:83:c9:35: 27:64:1c:95:c8:9e:22:ad:5c:24:4c:c1:56:ac:ef:9b:35:69: ab:57:fc:d3:70:e2:83:ec:de:09:5a:15:e1:d4:10:1d:b8:d4: a4:18:f5:a9:d1:43:42:2f:c7:03:06:d3:07:32:3e:60:dc:33: 1a:52:b3:2e:54:00:83:b8:46:33:e5:53:ba:a4:b8:a0:9f:3b: e7:9d:00:4e:ae:56:49:73:a4:12:26:99:ef:0a:12:75:dc:91: 14:a8:90:29:73:48:c2:47:c9:59:b8:4a:42:1c:85:6f:78:90: 5b:32:ee:6a:00:08:bb:6a:3e:cc:9d:67:74:22:86:b6:8a:2c: 97:8c:f3:59:c1:ce:52:04:48:01:2a:e9:53:a1:72:49:30:77: 70:81:94:72:ef:cc:ea:85:5c:86:95:b0:73:49:ed:9e:6f:74: 5e:5a:00:50:0a:95:ee:6f:13:23:94:93:95:67:35:80:57:1b: 24:54:98:93:4a:6e:d0:47:11:d8:d5:1c:4a:7c:9a:35:96:2d: 03:95:80:bd:b7:0e:b9:4d:62:f7:19:92:33:92:af:54:6a:75: 72:94:81:42:ad:87:19:b8:84:de:1b:ff:f7:ad:f7:e1:6f:b6: 3a:ea:6d:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODI4MjExMC8GA1UEBRMoMUY0RENFMzQzOUIxRjQwMzVGRkY4QzcxQ0UzNTlFNUQy MEU2OUEyNDAeFw0yNTA0MjcwNjQ0NTdaFw0yNTA1MDQwNjQ0NTdaMBgxFjAUBgNV BAMTDTY4MGRkMjY5LWEyMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5pqOqcdjCaLGqp14UX54IDeSLw4UV2CnhH0IUJ7RYt28Px7QCzBX1SLixEHxp ptsjlceKLbg6dFG9CHmYVrHimRbMK/7aVXSAie1zYeZxhGsIFo0yoG2KRhNWKQ57 euY+wa+0r4WRr2Kca6s2sFCZbl+TwNF1WBDX9B6m1J93h41ny70j4gOyc34i5Xab BGJwAcMEaWIa0bqGHC6nu9dIUGw6u1PmSeM3jvSentkUUfeRkEah5pS34vmRYz5l /QzKAPP0zt11NBLqBr6TzUWVHwE6LcUsSZbF/Sw90pfI/cIn0OJEqgZQyKA2p4Qb QeK+a3nuP76Dt3CFVPhDaZBdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+6k4DKOW VovwM4tw4nuIvatyw9UwHwYDVR0jBBgwFoAUH03ONDmx9ANf/4xxzjWeXSDmmiQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4MjgyLzJGMjUzQzFBRkJG RTExRUZCNTUyMEExMkM0RjlBRTAyL0gwM09ORG14OUFOZl80eHh6aldlWFNEbW1p US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvSDAzT05EbXg5QU5mXzR4eHpqV2VYU0RtbWlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 MjgyLzJGMjUzQzFBRkJGRTExRUZCNTUyMEExMkM0RjlBRTAyL0gwM09ORG14OUFO Zl80eHh6aldlWFNEbW1pUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJAF4U/1mcPWQKTavHRqrYPJNSdkHJXIniKtXCRMwVas75s1aatX/NNw 4oPs3glaFeHUEB241KQY9anRQ0IvxwMG0wcyPmDcMxpSsy5UAIO4RjPlU7qkuKCf O+edAE6uVklzpBImme8KEnXckRSokClzSMJHyVm4SkIchW94kFsy7moACLtqPsyd Z3QihraKLJeM81nBzlIESAEq6VOhckkwd3CBlHLvzOqFXIaVsHNJ7Z5vdF5aAFAK le5vEyOUk5VnNYBXGyRUmJNKbtBHEdjVHEp8mjWWLQOVgL23DrlNYvcZkjOSr1Rq dXKUgUKthxm4hN4b//et9+FvtjrqbfM= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:19 2025 by rpki-client on console.sobornost.net