$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: qCPlEWTQ+RKd6ACt6Uyhi9nyOjbWckfqZej8xl2/szg= Subject key identifier: BE:56:B6:C3:C0:93:10:00:F0:2D:EC:96:63:B9:7C:99:A3:4E:3B:27 Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: 024E Signing time: Thu 15 May 2025 03:26:32 +0000 Manifest this update: Thu 15 May 2025 03:26:32 +0000 Manifest next update: Thu 22 May 2025 03:26:32 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: 1xGuYow/1tJ1QJfm4lu1DUCPN8XtPLxVImD7LillXsg=) 2: FC72D9F4DAD711EF92A87E5DC4F9AE02.roa (hash: yGKY9bGf3KO/fBsHJXYZtjw1LcLqxRqFqjzenpN601A=) 3: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: DqUd79ywwc0oIGvda4f69OJAvPxHaLz7wHn0gYGYCXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: May 15 03:26:32 2025 GMT Not After : May 22 03:26:32 2025 GMT Subject: CN=68255ee8-0cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9b:e0:fd:92:d1:63:ae:58:40:d2:10:64:fd: d0:06:32:c3:97:bd:1d:51:80:ac:87:59:4d:80:88: 82:8b:33:0d:40:49:e0:77:64:82:c9:d9:3b:72:55: 3b:43:bd:71:b4:56:44:87:5e:cf:63:de:4b:8a:04: 4c:a9:b5:2f:93:57:b9:e8:3f:60:cb:0b:5e:84:c4: b4:c7:a6:67:3b:0f:87:79:9a:92:1a:c6:b4:93:68: 72:53:e5:c6:68:74:05:4b:81:48:f7:b5:a8:21:87: 68:5c:9f:0c:4c:4f:e9:bd:a4:20:35:df:3e:64:88: 2b:ae:d7:13:e2:f0:2b:9b:5d:de:a3:c5:8a:1d:bb: 46:43:a2:61:f8:2a:11:63:29:97:23:e2:7e:45:db: 5e:78:6d:d8:f3:36:57:df:c8:cb:d8:5c:85:08:ba: 75:07:87:9c:5d:4a:01:52:3d:bf:88:77:de:c6:76: 00:06:8e:db:12:d1:b1:ca:c1:56:4c:ce:36:d5:a0: e0:73:94:a7:a8:34:28:20:78:1d:28:c3:d6:16:09: 16:02:81:ca:41:e6:58:79:f4:1a:08:5a:94:1d:8c: 64:16:96:51:2f:76:09:de:91:9d:98:14:8a:ec:0a: 08:6e:4b:fc:85:78:cb:a8:23:f8:b8:9d:23:9c:eb: 32:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:56:B6:C3:C0:93:10:00:F0:2D:EC:96:63:B9:7C:99:A3:4E:3B:27 X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:dc:da:10:7e:4a:a5:11:57:e9:0e:be:75:bd:d7:5d:64:2c: bf:95:d7:91:c6:5d:69:43:79:0f:7d:5a:a3:bf:84:c0:23:47: d0:e8:e5:a7:95:ea:d8:6d:30:3d:d5:6b:e8:c7:43:f9:87:e2: b5:5f:32:10:11:d2:a1:a7:7b:1f:73:9c:1b:89:b1:3f:bb:31: 2d:49:32:35:2d:79:4a:5f:09:37:1e:d8:0e:86:94:df:ab:2e: 95:e1:15:ba:29:90:0b:a4:11:95:d0:04:ed:30:5a:13:46:3b: f1:a4:a7:5e:d3:a8:b0:ee:91:2a:4d:e1:6f:32:a4:f8:c1:c5: de:27:19:22:fa:6d:86:78:64:ca:6d:3d:d3:6c:e1:c0:09:29: 0c:2f:f7:80:77:f9:74:a2:b1:9c:e3:a6:26:b5:6d:1e:1a:4a: 23:c4:49:33:f2:de:b3:9a:2f:fc:7b:4a:36:9f:9e:c5:82:07: c3:c6:22:02:de:7d:8e:df:41:12:56:6e:7c:49:3c:0d:d7:d9: a5:72:cc:2d:ec:73:ef:03:be:f6:69:81:e9:50:89:97:11:58: 9e:b3:92:69:f4:15:95:57:a5:e4:1a:3c:dc:0d:eb:d9:b4:26: f8:40:00:87:7e:c6:59:68:70:18:d3:74:73:fa:1e:e2:4a:3d: d8:26:82:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjUwNTE1MDMyNjMyWhcNMjUwNTIyMDMyNjMyWjAYMRYwFAYD VQQDEw02ODI1NWVlOC0wY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypvg/ZLRY65YQNIQZP3QBjLDl70dUYCsh1lNgIiCizMNQEngd2SCydk7clU7 Q71xtFZEh17PY95LigRMqbUvk1e56D9gywtehMS0x6ZnOw+HeZqSGsa0k2hyU+XG aHQFS4FI97WoIYdoXJ8MTE/pvaQgNd8+ZIgrrtcT4vArm13eo8WKHbtGQ6Jh+CoR YymXI+J+RdteeG3Y8zZX38jL2FyFCLp1B4ecXUoBUj2/iHfexnYABo7bEtGxysFW TM421aDgc5SnqDQoIHgdKMPWFgkWAoHKQeZYefQaCFqUHYxkFpZRL3YJ3pGdmBSK 7AoIbkv8hXjLqCP4uJ0jnOsyfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5WtsPA kxAA8C3slmO5fJmjTjsnMB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhH bXRxMUptUld5YVJmTFB3WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDM3NoQfkqlEVfpDr51vdddZCy/ldeRxl1pQ3kPfVqjv4TAI0fQ6OWn lerYbTA91Wvox0P5h+K1XzIQEdKhp3sfc5wbibE/uzEtSTI1LXlKXwk3HtgOhpTf qy6V4RW6KZALpBGV0ATtMFoTRjvxpKde06iw7pEqTeFvMqT4wcXeJxki+m2GeGTK bT3TbOHACSkML/eAd/l0orGc46YmtW0eGkojxEkz8t6zmi/8e0o2n57FggfDxiIC 3n2O30ESVm58STwN19mlcswt7HPvA772aYHpUImXEVies5Jp9BWVV6XkGjzcDevZ tCb4QACHfsZZaHAY03Rz+h7iSj3YJoI5 -----END CERTIFICATE-----Generated at Sat May 17 02:02:42 2025 by rpki-client