$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: YJ4Wp4SZZvNWW/CBqTMpqnQzYgSATbZmGlFdg+hmUdI= Subject key identifier: C5:02:C4:1D:5E:52:F3:92:CF:D3:C7:3F:32:74:A6:4F:9D:4A:1A:F8 Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 017C Signing time: Thu 19 Jun 2025 03:12:44 +0000 Manifest this update: Thu 19 Jun 2025 03:12:43 +0000 Manifest next update: Thu 26 Jun 2025 03:12:43 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: kr6ZX5+4ADvjZDNr8Ds1gUZ68J4XVJ1ulsR0iyHRck8=) 2: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: 3AQgtCiu1AvELGcQ0dN/q4SITzh5GfFFMFmGHpirqhw=) 3: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: 5/eMUVmevequFuGJFSqiqzgHPak9nF5vFMfMZWfmlQA=) 4: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: CrmsjWdSH1dRX4gtIVoZxCTBPv++0Trwf39jICU/c/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Jun 19 03:12:43 2025 GMT Not After : Jun 26 03:12:43 2025 GMT Subject: CN=6853802b-fd89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:69:1d:56:f2:fe:11:ab:fa:d0:d8:40:3a: 1c:44:a5:75:77:df:3c:8c:e1:ea:9d:0f:c9:40:85: de:e5:ca:ac:bb:49:08:f2:56:2a:74:6f:14:f3:ec: 17:41:d5:f9:14:64:10:0c:8b:e4:07:44:e6:c9:73: 0f:61:93:f5:a8:45:58:61:bf:93:bd:8e:bb:2f:96: 50:30:81:b8:f3:fa:f3:94:03:4c:61:8a:6b:e0:03: ac:c3:a0:ef:d7:73:fd:0e:83:08:cd:8f:59:4d:ab: 8f:36:42:ce:6a:66:81:9a:47:2d:16:b4:8a:76:16: 27:39:5b:76:09:bc:75:9f:c3:7c:d0:6b:fb:57:0d: 6d:ba:17:87:58:a1:3d:ea:f6:1b:c0:eb:3e:8b:1d: 3d:d6:81:48:b1:c2:eb:52:2d:9e:4d:46:02:1b:ba: 7f:71:ff:c2:89:dc:d9:80:bf:62:90:d7:67:67:4c: 15:04:f8:5c:d6:54:ad:a9:20:48:02:f4:9e:f8:0a: f0:52:f2:9d:f9:2b:68:df:3a:74:61:38:62:6e:86: cc:1b:c0:86:bc:2e:1e:56:20:ca:84:78:c5:b1:c7: 84:3c:2e:4a:0b:5c:99:2f:c8:f5:fd:0a:66:bf:af: 75:4d:29:2e:2e:3d:51:60:f9:ad:26:f0:39:53:3f: 86:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:02:C4:1D:5E:52:F3:92:CF:D3:C7:3F:32:74:A6:4F:9D:4A:1A:F8 X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7d:b6:00:7e:e0:7c:84:73:06:87:30:95:c1:88:aa:0a:9d: c7:1f:e3:f9:5f:91:e6:09:2c:4c:fe:62:35:7a:44:33:ba:33: 66:13:79:7d:f6:86:55:ae:f5:f4:02:19:db:4a:38:13:e3:1f: f0:4b:1c:fe:81:c7:e2:f2:3a:9f:22:07:f1:74:a5:ee:90:f3: 8b:ec:64:a6:fe:21:2b:90:a2:58:13:82:07:61:ac:16:34:fd: b4:db:88:05:53:dc:b9:79:07:c4:b0:d7:e1:b1:73:e9:ca:32: 9f:a1:c7:e9:02:0a:f1:f1:33:b1:22:43:4e:1d:28:2e:75:11: 09:fe:f3:0c:46:77:82:cd:c0:86:9d:ae:a5:2c:8f:d7:92:2b: ba:c5:4c:ca:75:86:05:e0:11:f1:75:ec:07:91:da:89:cd:8c: df:d9:61:85:b7:c7:6b:97:70:63:a4:df:f7:e3:1c:3b:6b:3f: e6:0c:82:64:d9:9f:c6:2c:05:f8:2e:36:0b:49:9a:ec:f2:8a: 62:07:70:43:e9:bf:72:ed:15:dc:e4:c5:e6:da:f8:f3:0b:a0: 33:94:74:0f:98:db:bf:95:44:4a:07:27:34:3e:63:fb:3e:61: c6:b3:3b:57:89:b6:cd:a6:10:5b:ba:54:c5:4c:05:4b:7c:d6: c2:ec:18:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjUwNjE5MDMxMjQzWhcNMjUwNjI2MDMxMjQzWjAYMRYwFAYD VQQDEw02ODUzODAyYi1mZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9dpHVby/hGr+tDYQDocRKV1d988jOHqnQ/JQIXe5cqsu0kI8lYqdG8U8+wX QdX5FGQQDIvkB0TmyXMPYZP1qEVYYb+TvY67L5ZQMIG48/rzlANMYYpr4AOsw6Dv 13P9DoMIzY9ZTauPNkLOamaBmkctFrSKdhYnOVt2Cbx1n8N80Gv7Vw1tuheHWKE9 6vYbwOs+ix091oFIscLrUi2eTUYCG7p/cf/CidzZgL9ikNdnZ0wVBPhc1lStqSBI AvSe+ArwUvKd+Sto3zp0YThibobMG8CGvC4eViDKhHjFsceEPC5KC1yZL8j1/Qpm v691TSkuLj1RYPmtJvA5Uz+GtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUCxB1e UvOSz9PHPzJ0pk+dShr4MB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+fbYAfuB8hHMGhzCVwYiqCp3HH+P5X5HmCSxM/mI1ekQzujNmE3l9 9oZVrvX0AhnbSjgT4x/wSxz+gcfi8jqfIgfxdKXukPOL7GSm/iErkKJYE4IHYawW NP2024gFU9y5eQfEsNfhsXPpyjKfocfpAgrx8TOxIkNOHSgudREJ/vMMRneCzcCG na6lLI/Xkiu6xUzKdYYF4BHxdewHkdqJzYzf2WGFt8drl3BjpN/34xw7az/mDIJk 2Z/GLAX4LjYLSZrs8opiB3BD6b9y7RXc5MXm2vjzC6AzlHQPmNu/lURKByc0PmP7 PmHGsztXibbNphBbulTFTAVLfNbC7Bil -----END CERTIFICATE-----Generated at Thu Jun 19 18:24:51 2025 by rpki-client