$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: W2gfrxg3KI/BF16nOlm7bTZdEE3dBmUjrwmfqCNtE0w= Subject key identifier: A5:42:C9:57:DB:C7:3E:D3:F5:48:9E:7A:CA:33:6A:4F:4B:CB:5E:BD Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 0166 Signing time: Tue 13 May 2025 03:12:59 +0000 Manifest this update: Tue 13 May 2025 03:12:58 +0000 Manifest next update: Tue 20 May 2025 03:12:58 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: DotpegCBtUGFNYHqZVBxwuXApv9L7SwEwaXFTZCfRr4=) 2: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: 5ZJCdzpl4XWTpRPY+o2rNRK6qDdlu92LlwpKc1ioNfk=) 3: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: klVQHwft/ej7AJly+6VuenTESngqYPqF3s8Sj7IYp+Y=) 4: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: V/kLBtdXeXcYSvHp21xjf6v4HKkI6h22RbG5oYBnA3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: May 13 03:12:58 2025 GMT Not After : May 20 03:12:58 2025 GMT Subject: CN=6822b8bb-727b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8a:dc:95:07:95:83:49:3f:47:59:cd:3e:38: 01:b5:1c:1d:09:eb:17:89:9c:22:79:bd:f9:e4:9d: 8a:40:73:7a:ec:19:9a:0a:b5:39:06:ec:c7:66:d2: 0e:f5:31:a1:08:1a:a7:35:e0:90:21:75:3b:2b:eb: 7f:bb:59:c8:cf:da:a6:3a:46:fc:a4:19:96:8d:04: 05:cc:bf:79:f8:3a:f2:b5:a4:47:61:00:24:1f:eb: 06:cc:24:d4:78:2f:e0:3b:b1:38:32:ad:d5:27:db: 01:a4:89:ec:32:db:41:8e:58:17:93:0a:ea:3a:96: bc:12:b8:78:e1:9e:76:f2:fe:17:af:38:95:d3:93: 6e:81:a6:fb:ea:97:99:0e:fe:0d:6c:67:2b:10:3a: cf:6f:1c:99:eb:2e:43:15:da:58:16:55:f8:52:a1: 2e:ab:70:b2:f6:fc:5a:7c:c2:70:f4:3a:05:c0:1f: f9:00:84:0c:17:55:d0:7d:e1:8b:bc:67:52:4c:bc: 13:5d:7e:a9:79:da:8b:a1:ee:7f:18:93:f0:39:cf: 0c:38:c6:07:c6:86:b7:3d:89:b8:44:33:17:89:df: 6d:ae:1e:68:fd:c6:5d:6b:5f:99:27:68:ae:4c:71: e5:e7:4d:17:b3:0a:50:fc:5f:1d:ff:33:23:26:9f: d2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:42:C9:57:DB:C7:3E:D3:F5:48:9E:7A:CA:33:6A:4F:4B:CB:5E:BD X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:01:31:50:d9:f7:99:0b:d8:f0:46:9c:ef:68:2b:0f:40:61: d7:a1:29:80:de:b9:4e:fa:15:2a:7b:3f:e0:27:0f:70:2f:60: fa:21:6b:58:60:50:e1:0c:d8:c0:a1:76:3f:00:e5:e8:cc:a6: b1:b9:bb:0d:2c:fc:b9:24:88:87:42:72:82:2e:41:76:fe:87: e4:05:fe:b2:7c:ae:12:1a:28:46:6a:2d:fe:ef:b5:c9:77:ab: b9:72:df:c1:06:8f:96:c4:70:7b:b4:2b:da:0d:51:9a:bf:b7: 01:3c:3c:1d:eb:cc:6c:84:42:b1:85:81:96:34:a3:0b:e0:73: 93:3e:77:dc:ef:95:1d:28:bb:e5:3c:8a:58:be:a8:ef:e2:f2: 29:55:96:18:55:7d:98:f5:11:7c:c8:af:7d:02:7a:5a:9b:c6: 95:33:ea:1a:ab:c1:49:d7:af:e6:2f:66:4b:af:18:bd:81:78: 5c:2a:24:35:33:96:57:40:d4:d8:53:00:68:5a:6d:f3:81:79: 6c:f9:ac:1e:45:0e:2a:d8:c9:29:de:c6:b7:e4:dc:4f:b6:10: 7f:11:91:d7:b4:55:34:ff:25:63:d2:3e:a5:ef:75:12:3e:fe: f0:33:55:0a:63:62:3d:c7:0f:97:5a:11:81:19:04:59:74:f7: 52:2a:c3:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjUwNTEzMDMxMjU4WhcNMjUwNTIwMDMxMjU4WjAYMRYwFAYD VQQDEw02ODIyYjhiYi03MjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24rclQeVg0k/R1nNPjgBtRwdCesXiZwieb355J2KQHN67BmaCrU5BuzHZtIO 9TGhCBqnNeCQIXU7K+t/u1nIz9qmOkb8pBmWjQQFzL95+DrytaRHYQAkH+sGzCTU eC/gO7E4Mq3VJ9sBpInsMttBjlgXkwrqOpa8Erh44Z528v4XrziV05Nugab76peZ Dv4NbGcrEDrPbxyZ6y5DFdpYFlX4UqEuq3Cy9vxafMJw9DoFwB/5AIQMF1XQfeGL vGdSTLwTXX6pedqLoe5/GJPwOc8MOMYHxoa3PYm4RDMXid9trh5o/cZda1+ZJ2iu THHl500XswpQ/F8d/zMjJp/S7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVCyVfb xz7T9Uieesozak9Ly169MB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4ATFQ2feZC9jwRpzvaCsPQGHXoSmA3rlO+hUqez/gJw9wL2D6IWtY YFDhDNjAoXY/AOXozKaxubsNLPy5JIiHQnKCLkF2/ofkBf6yfK4SGihGai3+77XJ d6u5ct/BBo+WxHB7tCvaDVGav7cBPDwd68xshEKxhYGWNKML4HOTPnfc75UdKLvl PIpYvqjv4vIpVZYYVX2Y9RF8yK99Anpam8aVM+oaq8FJ16/mL2ZLrxi9gXhcKiQ1 M5ZXQNTYUwBoWm3zgXls+aweRQ4q2Mkp3sa35NxPthB/EZHXtFU0/yVj0j6l73US Pv7wM1UKY2I9xw+XWhGBGQRZdPdSKsOs -----END CERTIFICATE-----Generated at Wed May 14 13:50:01 2025 by rpki-client