$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft File: H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft (raw, json) Hash identifier: NDuSdZ2XkHPyZSJtMbCZoSWO9yS+VyR7e2hfY8x6FOo= Subject key identifier: 9E:74:AB:F8:02:9A:6F:19:42:E2:98:31:A4:4C:61:B0:8A:10:DC:0D Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24 Certificate issuer: /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft Manifest number: 75 Signing time: Sun 19 Oct 2025 10:11:08 +0000 Manifest this update: Sun 19 Oct 2025 10:11:07 +0000 Manifest next update: Sun 26 Oct 2025 10:11:07 +0000 Files and hashes: 1: H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl (hash: VnbbsnL5Pki9WZcnmHNo2xcfSxbBxf8gr3sj0jq7/xE=) 2: 0664C974FEF811EFB0C52572C4F9AE02.roa (hash: LMQmjwLQrmdrjw5ITfcjjvXTHrCvldYng4+Bqh2xDu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8282, serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24 Validity Not Before: Oct 19 10:11:07 2025 GMT Not After : Oct 26 10:11:07 2025 GMT Subject: CN=68f4b93c-c288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b0:87:56:f3:ef:8d:a0:a0:91:dd:3f:59:f2: 5e:64:2a:47:ad:e2:94:a1:b4:37:ba:81:03:e4:91: 21:ed:d2:89:7e:2b:3b:44:b2:c3:82:df:b9:4a:94: 09:4d:44:05:19:c0:e0:1c:ef:b1:11:fc:a1:ae:45: 76:b9:1a:10:00:90:5e:b7:db:dd:3e:74:9c:ee:00: b5:7f:29:c7:86:60:87:aa:71:06:a2:da:62:94:c8: c7:9b:15:9b:d8:de:28:b2:e4:2d:da:9b:af:5c:be: a3:55:6b:8f:62:fe:69:0f:f1:e3:70:19:08:68:46: 79:5b:6c:a4:b6:e2:6a:0f:cc:48:6f:77:8f:e6:09: c0:70:45:c2:3e:1e:d3:9f:1b:8b:98:38:dc:29:79: bf:0e:fe:5e:01:94:6c:64:18:47:70:b7:83:52:76: 73:38:3e:f4:03:fa:67:ac:73:e6:a6:b9:eb:be:70: 03:5c:9a:24:7d:15:ca:e8:7f:75:c8:fc:59:ee:81: b9:36:64:e9:7f:74:5d:b4:f4:1e:d1:1e:1e:a1:ea: e3:98:f5:80:6e:f1:6b:fd:03:49:00:3b:7b:ec:29: 91:16:03:b5:76:c4:4f:01:15:de:f0:66:1f:b8:00: 86:3b:f1:aa:77:5e:15:cb:1f:a4:cd:ac:89:4b:f9: 5c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:74:AB:F8:02:9A:6F:19:42:E2:98:31:A4:4C:61:B0:8A:10:DC:0D X509v3 Authority Key Identifier: keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:3b:53:b0:f6:a7:f6:5d:82:06:57:22:20:c9:2d:7e:69:d7: be:3c:99:08:c9:d6:21:7f:5d:19:ae:6d:8d:54:9d:1f:ab:71: bd:74:b4:7a:b0:5d:ec:51:42:ed:78:62:69:0c:91:b2:53:05: ce:6b:af:df:4d:83:57:cc:d7:31:3f:40:04:46:49:d0:10:11: 86:ec:c5:73:02:c2:78:b6:09:99:64:ab:0b:1b:29:e3:97:2f: 80:d9:b3:c5:37:50:0e:db:09:e8:79:0b:e1:50:52:2b:ef:f6: 1e:b1:ce:54:f5:a6:00:61:59:c2:0f:7b:d0:f7:70:c8:d3:dd: a1:e1:b7:fc:03:8f:63:4c:59:fa:f5:55:57:21:cf:e2:c2:d0: 5a:30:66:d7:2b:a4:e9:ac:5b:37:92:52:2d:5c:e0:fc:82:ac: 20:27:32:c2:5d:8a:d5:10:32:78:61:e6:06:b4:04:e6:ce:f2: e8:01:ba:f9:de:92:4b:ef:6f:e4:8d:66:79:f3:f8:cb:66:57: 73:40:27:01:23:e0:ee:7d:79:45:2e:52:22:43:72:71:7d:a1: 15:47:18:58:b4:09:37:9e:1b:93:21:78:a6:80:60:1b:9b:c5: 30:38:d8:cf:38:62:f8:14:65:0f:92:bc:22:76:c7:f1:f9:d2: 28:46:75:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODI4MjExMC8GA1UEBRMoMUY0RENFMzQzOUIxRjQwMzVGRkY4QzcxQ0UzNTlFNUQy MEU2OUEyNDAeFw0yNTEwMTkxMDExMDdaFw0yNTEwMjYxMDExMDdaMBgxFjAUBgNV BAMTDTY4ZjRiOTNjLWMyODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhsIdW8++NoKCR3T9Z8l5kKket4pShtDe6gQPkkSHt0ol+KztEssOC37lKlAlN RAUZwOAc77ER/KGuRXa5GhAAkF63290+dJzuALV/KceGYIeqcQai2mKUyMebFZvY 3iiy5C3am69cvqNVa49i/mkP8eNwGQhoRnlbbKS24moPzEhvd4/mCcBwRcI+HtOf G4uYONwpeb8O/l4BlGxkGEdwt4NSdnM4PvQD+mesc+amueu+cANcmiR9Fcrof3XI /Fnugbk2ZOl/dF209B7RHh6h6uOY9YBu8Wv9A0kAO3vsKZEWA7V2xE8BFd7wZh+4 AIY78ap3XhXLH6TNrIlL+VzLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnnSr+AKa bxlC4pgxpExhsIoQ3A0wHwYDVR0jBBgwFoAUH03ONDmx9ANf/4xxzjWeXSDmmiQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4MjgyLzJGMjUzQzFBRkJG RTExRUZCNTUyMEExMkM0RjlBRTAyL0gwM09ORG14OUFOZl80eHh6aldlWFNEbW1p US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvSDAzT05EbXg5QU5mXzR4eHpqV2VYU0RtbWlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 MjgyLzJGMjUzQzFBRkJGRTExRUZCNTUyMEExMkM0RjlBRTAyL0gwM09ORG14OUFO Zl80eHh6aldlWFNEbW1pUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAc7U7D2p/ZdggZXIiDJLX5p1748mQjJ1iF/XRmubY1UnR+rcb10tHqw XexRQu14YmkMkbJTBc5rr99Ng1fM1zE/QARGSdAQEYbsxXMCwni2CZlkqwsbKeOX L4DZs8U3UA7bCeh5C+FQUivv9h6xzlT1pgBhWcIPe9D3cMjT3aHht/wDj2NMWfr1 VVchz+LC0FowZtcrpOmsWzeSUi1c4PyCrCAnMsJditUQMnhh5ga0BObO8ugBuvne kkvvb+SNZnnz+MtmV3NAJwEj4O59eUUuUiJDcnF9oRVHGFi0CTeeG5MheKaAYBub xTA42M84YvgUZQ+SvCJ2x/H50ihGdW4= -----END CERTIFICATE-----Generated at Mon Oct 20 19:57:25 2025 by rpki-client