$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft File: H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft (raw, json) Hash identifier: sbTcvKu1JtMe6TLIUOFffTRZY7c5H1toBodQ0n1C69g= Subject key identifier: DB:05:C0:49:80:DB:C7:47:41:8D:8C:8A:13:1F:77:B8:E4:3F:BC:BD Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24 Certificate issuer: /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft Manifest number: 58 Signing time: Sat 23 Aug 2025 07:27:09 +0000 Manifest this update: Sat 23 Aug 2025 07:27:09 +0000 Manifest next update: Sat 30 Aug 2025 07:27:09 +0000 Files and hashes: 1: H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl (hash: VlN3pM5JCMeifZriNwyKf8d2+ZaJT+SACHn25eXIlgs=) 2: 0664C974FEF811EFB0C52572C4F9AE02.roa (hash: LMQmjwLQrmdrjw5ITfcjjvXTHrCvldYng4+Bqh2xDu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8282, serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24 Validity Not Before: Aug 23 07:27:09 2025 GMT Not After : Aug 30 07:27:09 2025 GMT Subject: CN=68a96d4d-fccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:23:4b:a2:92:ba:00:25:5d:c9:ed:2e:37:26: a7:52:b9:95:7f:9a:bf:72:0d:9d:77:13:13:df:6b: c0:5c:d8:6c:1d:26:40:aa:38:93:72:1c:91:b9:b3: 9d:a6:a6:57:59:fb:c5:c4:73:ee:26:65:38:56:a6: ba:06:a9:36:53:c0:fe:d3:20:d3:eb:ad:3f:0d:06: ce:00:33:b8:85:05:d9:71:12:1a:55:a5:ed:82:dc: 7f:46:7d:14:fa:6c:4a:05:d5:46:f9:fa:03:7f:3f: be:28:98:2f:96:1b:f8:db:81:6e:2d:a6:e9:6d:4c: 7c:26:ea:c1:7e:9d:72:2b:05:85:55:d7:5c:f0:a9: 19:20:87:17:c8:10:a5:08:4d:6d:50:ef:44:f2:85: f5:b7:93:8a:58:42:c8:5c:6e:bd:75:2a:d0:8e:9f: 27:0e:71:d1:79:72:ed:ea:12:df:3a:1f:29:02:24: d9:71:1e:6c:ec:a5:0d:a7:f9:a7:2d:db:1d:5c:0c: f3:43:0b:98:6b:73:43:e3:f4:a9:64:28:b0:b8:a4: 63:fe:fb:c6:23:b2:ef:3f:82:90:49:b0:6b:60:e3: df:4f:b0:5b:31:71:f8:c4:41:f9:e3:22:da:49:1d: e3:a2:71:96:4c:0e:3e:5b:15:81:f4:06:30:45:e8: e6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:05:C0:49:80:DB:C7:47:41:8D:8C:8A:13:1F:77:B8:E4:3F:BC:BD X509v3 Authority Key Identifier: keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:25:fa:b5:7e:55:d6:28:f1:41:34:cc:e4:f6:a8:18:90:21: 45:d4:56:2d:c4:a1:f8:16:47:94:f5:3f:ad:d5:08:e8:f8:3b: a9:ec:19:a7:1c:ba:9a:ad:86:f6:17:75:d8:fe:5c:75:00:4b: 49:20:50:21:46:5a:51:ae:fb:da:48:9e:b2:cc:47:80:2f:34: 8a:3c:0d:40:a2:67:50:52:a7:6d:0f:e1:01:ce:d1:40:2b:3f: 50:58:05:98:ab:2b:41:23:a4:0c:0d:6e:b6:19:00:34:86:4d: 1d:c7:56:77:d4:63:56:f3:08:02:48:c4:62:36:51:bd:7e:2b: 0b:ca:db:7d:00:41:e6:9b:f8:04:e3:be:18:aa:77:10:12:c3: 35:6e:cd:2a:47:17:42:ac:f2:f0:17:3e:c8:b5:a0:4e:32:f2: b4:46:bb:10:4a:9b:66:2f:62:09:b1:a5:70:96:75:e2:20:dd: 4b:33:96:d5:9c:f3:8f:4f:33:44:69:22:a3:b2:4d:d6:06:9e: 62:14:ae:1d:74:e2:b6:82:97:f2:9d:63:d3:07:83:fb:09:6b: bb:df:9b:e3:28:bb:5f:9b:8c:35:a2:a5:85:87:24:34:66:5d: d3:ae:b4:1f:49:ec:2b:f4:f7:65:ef:b0:fc:63:f4:bf:65:ec: 3b:7c:ca:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODI4MjExMC8GA1UEBRMoMUY0RENFMzQzOUIxRjQwMzVGRkY4QzcxQ0UzNTlFNUQy MEU2OUEyNDAeFw0yNTA4MjMwNzI3MDlaFw0yNTA4MzAwNzI3MDlaMBgxFjAUBgNV BAMTDTY4YTk2ZDRkLWZjY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcI0uikroAJV3J7S43JqdSuZV/mr9yDZ13ExPfa8Bc2GwdJkCqOJNyHJG5s52m pldZ+8XEc+4mZThWproGqTZTwP7TINPrrT8NBs4AM7iFBdlxEhpVpe2C3H9GfRT6 bEoF1Ub5+gN/P74omC+WG/jbgW4tpultTHwm6sF+nXIrBYVV11zwqRkghxfIEKUI TW1Q70TyhfW3k4pYQshcbr11KtCOnycOcdF5cu3qEt86HykCJNlxHmzspQ2n+act 2x1cDPNDC5hrc0Pj9KlkKLC4pGP++8Yjsu8/gpBJsGtg499PsFsxcfjEQfnjItpJ HeOicZZMDj5bFYH0BjBF6ObFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2wXASYDb x0dBjYyKEx93uOQ/vL0wHwYDVR0jBBgwFoAUH03ONDmx9ANf/4xxzjWeXSDmmiQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4MjgyLzJGMjUzQzFBRkJG RTExRUZCNTUyMEExMkM0RjlBRTAyL0gwM09ORG14OUFOZl80eHh6aldlWFNEbW1p US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvSDAzT05EbXg5QU5mXzR4eHpqV2VYU0RtbWlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 MjgyLzJGMjUzQzFBRkJGRTExRUZCNTUyMEExMkM0RjlBRTAyL0gwM09ORG14OUFO Zl80eHh6aldlWFNEbW1pUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACAl+rV+VdYo8UE0zOT2qBiQIUXUVi3EofgWR5T1P63VCOj4O6nsGacc upqthvYXddj+XHUAS0kgUCFGWlGu+9pInrLMR4AvNIo8DUCiZ1BSp20P4QHO0UAr P1BYBZirK0EjpAwNbrYZADSGTR3HVnfUY1bzCAJIxGI2Ub1+KwvK230AQeab+ATj vhiqdxASwzVuzSpHF0Ks8vAXPsi1oE4y8rRGuxBKm2YvYgmxpXCWdeIg3UszltWc 849PM0RpIqOyTdYGnmIUrh104raCl/KdY9MHg/sJa7vfm+Mou1+bjDWipYWHJDRm XdOutB9J7Cv092XvsPxj9L9l7Dt8yhw= -----END CERTIFICATE-----Generated at Sun Aug 24 00:50:42 2025 by rpki-client