$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: cQOnYyt9Vv4xxvVqBBGtvhnddayy7s2gCIVyx4mo+kU= Subject key identifier: 19:38:58:F2:F1:80:BB:83:84:86:4F:12:54:C4:15:6B:8F:1D:69:1A Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 015D Signing time: Fri 25 Apr 2025 03:12:40 +0000 Manifest this update: Fri 25 Apr 2025 03:12:40 +0000 Manifest next update: Fri 02 May 2025 03:12:40 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: OrkFb5RfywTczSkUdO/oLrRoWX0OaETms7tr2fwEYzs=) 2: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: 5ZJCdzpl4XWTpRPY+o2rNRK6qDdlu92LlwpKc1ioNfk=) 3: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: klVQHwft/ej7AJly+6VuenTESngqYPqF3s8Sj7IYp+Y=) 4: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: V/kLBtdXeXcYSvHp21xjf6v4HKkI6h22RbG5oYBnA3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Apr 25 03:12:40 2025 GMT Not After : May 2 03:12:40 2025 GMT Subject: CN=680afda8-c08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:aa:f9:9f:7a:39:e6:38:ce:ab:5c:85:cc:eb: f5:f9:dd:6b:22:f6:71:6e:ce:ac:a5:78:e8:82:70: ff:6e:6c:f0:38:73:79:30:67:75:92:f2:6f:58:3c: ea:84:a3:b9:6b:90:94:e9:e3:30:a9:ec:0b:87:15: ea:f1:e0:25:b2:58:2c:56:2c:a5:cb:15:c7:56:fc: 1a:2c:b0:74:6c:d1:09:0f:c3:aa:81:8b:83:7a:42: 53:73:f9:0f:be:f4:88:0c:4e:fc:9d:09:63:64:95: 97:71:78:a1:77:4d:74:4a:c4:0a:b3:df:00:7f:5a: 32:82:20:49:fc:8d:ec:65:9e:64:20:91:c0:19:6a: 17:0b:9f:d6:20:94:5d:94:80:a4:c0:c9:32:5e:aa: 19:4a:56:25:36:66:90:00:b5:88:ba:80:95:67:47: 82:45:b8:51:c5:b7:ee:6c:fa:c1:97:35:02:ac:e7: 5f:aa:79:4e:02:9e:61:31:6f:f2:c9:16:87:cd:96: bf:4f:a8:77:99:1d:ea:ed:87:de:64:21:96:98:eb: 18:2f:35:d4:96:8b:f4:ed:72:03:d8:d7:82:5c:df: d8:d7:62:ef:3f:3b:1a:88:1f:8d:95:f8:e3:9a:e8: 50:89:8b:b7:4c:18:8f:86:1f:3e:74:c2:0d:aa:c3: c0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:38:58:F2:F1:80:BB:83:84:86:4F:12:54:C4:15:6B:8F:1D:69:1A X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:1b:36:fb:01:74:f6:2d:3b:47:6e:9a:94:ef:7a:e6:cf:21: 91:50:8d:fd:bf:01:c9:d9:c5:37:da:2f:95:b6:04:e1:3d:59: 7a:15:3b:2b:30:d8:81:c0:35:74:a3:87:2c:58:6b:65:f9:20: 60:b5:fd:9d:2a:d4:7c:47:7c:53:80:0c:e8:90:74:6e:b4:e3: 9d:e3:c9:92:c7:35:20:1f:4b:3e:7e:11:b4:11:a7:9c:01:c5: 92:53:0f:fe:a2:a4:7d:54:fa:04:18:5d:31:16:ca:ef:60:75: 2a:95:be:6e:da:c6:67:2f:d8:3b:86:d1:08:90:9a:bb:a9:78: f1:3a:4a:c4:03:ee:e2:88:53:c0:49:7c:d2:58:ac:91:0b:25: 60:5e:33:03:a4:9a:b1:a1:ab:21:16:5a:04:4a:a3:cc:ef:76: 8c:51:cc:9d:d3:4b:a3:12:4f:67:de:d5:b0:1c:aa:aa:1b:3b: 19:42:de:81:bf:b5:2e:b9:7e:49:b9:72:be:c3:bb:05:22:f5: b7:a7:78:7c:71:d9:b6:21:fd:ba:70:e9:cb:89:cc:24:b4:da: 09:9a:be:da:45:3b:9c:f6:4b:da:9e:6e:78:08:63:ed:d8:0f: ce:3c:e0:7e:5b:22:7d:91:d6:95:f3:50:50:be:30:f5:4c:9d: 14:2f:23:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjUwNDI1MDMxMjQwWhcNMjUwNTAyMDMxMjQwWjAYMRYwFAYD VQQDEw02ODBhZmRhOC1jMDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26r5n3o55jjOq1yFzOv1+d1rIvZxbs6spXjognD/bmzwOHN5MGd1kvJvWDzq hKO5a5CU6eMwqewLhxXq8eAlslgsViylyxXHVvwaLLB0bNEJD8OqgYuDekJTc/kP vvSIDE78nQljZJWXcXihd010SsQKs98Af1oygiBJ/I3sZZ5kIJHAGWoXC5/WIJRd lICkwMkyXqoZSlYlNmaQALWIuoCVZ0eCRbhRxbfubPrBlzUCrOdfqnlOAp5hMW/y yRaHzZa/T6h3mR3q7YfeZCGWmOsYLzXUlov07XID2NeCXN/Y12LvPzsaiB+Nlfjj muhQiYu3TBiPhh8+dMINqsPA+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBk4WPLx gLuDhIZPElTEFWuPHWkaMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0Gzb7AXT2LTtHbpqU73rmzyGRUI39vwHJ2cU32i+VtgThPVl6FTsr MNiBwDV0o4csWGtl+SBgtf2dKtR8R3xTgAzokHRutOOd48mSxzUgH0s+fhG0Eaec AcWSUw/+oqR9VPoEGF0xFsrvYHUqlb5u2sZnL9g7htEIkJq7qXjxOkrEA+7iiFPA SXzSWKyRCyVgXjMDpJqxoashFloESqPM73aMUcyd00ujEk9n3tWwHKqqGzsZQt6B v7UuuX5JuXK+w7sFIvW3p3h8cdm2If26cOnLicwktNoJmr7aRTuc9kvanm54CGPt 2A/OPOB+WyJ9kdaV81BQvjD1TJ0ULyM+ -----END CERTIFICATE-----Generated at Sat Apr 26 12:33:45 2025 by rpki-client