$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft File: hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json) Hash identifier: l1Ced3Kq7MWiMbLBMLolaTKZ2d16zAPd6JcsOm67q1I= Subject key identifier: 0E:B3:86:A0:7A:B3:B6:60:7C:82:FC:07:F2:43:92:D8:EE:5A:32:33 Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 0349 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft Manifest number: 02F5 Signing time: Sun 27 Apr 2025 01:03:24 +0000 Manifest this update: Sun 27 Apr 2025 01:03:23 +0000 Manifest next update: Sun 04 May 2025 01:03:23 +0000 Files and hashes: 1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: vIIb8iHVktAiDULVtWhdfkqm0cXCj42YEEPHNjL8Hpo=) 2: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: ZQ/fU5d1evPPnYD3iA98SPz8Kp3nQtzF91XOnGRTmko=) 3: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: c8x4WauwQnDwDqZuEAJ4h64A3YhZdzAuusRUf8JYYN8=) 4: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: itBUJ/NWTISnHVYwiSk058o8wCPmgPPTXD1wCEm1HPU=) 5: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: go1KQLAsWSMcDFpFZPzbcCoYXA902eWujQs5DRA5NuQ=) 6: 72D237AEEBA011EC87608210C4F9AE02.roa (hash: /6/vPtizZYxr5v7ORtDfd8JRwZk7T9USDbBUeYwxyPg=) 7: BE4B3228691411EFB573C120C4F9AE02.roa (hash: FluzuCEVsK4WA6irM+7AYglOFW70dV1BU5TUHFD621E=) 8: 19EC493AE32111ED9B98B683C4F9AE02.roa (hash: t9M7T3kGK/bHK5ZGPmj0eAYe1o0Vh2EqcoFWaTSjMIE=) 9: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: 5R/vByP+bLJ/gauluwV0ijjw0b2SOL4DSiyRAY6Etqs=) 10: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: m1fb1egRrU9+d8hQvMjnw8fgUgdDVqcZIQ0pMpm6ljc=) 11: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: E+BZL/7QU8UpRIJdbcW9rfaR46I2sLpkyfwtpdJN/VI=) 12: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: cN/u2ghL7Ty5H0rMkH3B9dtMoGNw2oNZ5rkn/Hb9xkU=) 13: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: 7Kj+4WHxVaVF82sSnOwl9LxBArA7W70r8lzjmBc5kVs=) 14: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: H7xrZOzZPQxCuJob9N/j2hDDJP833H9T1/f50kmyI3U=) 15: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: be0pdzXjf+dpXeRPaIldstiNx4QzCRK3M1bauqjIvLs=) 16: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: 9FLrfM7I4+bVcqyGWmEPmZO9HbNgyq3TURv3crH+HFI=) 17: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: zucr8aDjnFPBdo+ifl5g81+ainFQhQ/ksa8y2tjbLS4=) 18: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: kogXUDWKK78CAHTJtbOeSXgRNGSuMbtJtIHaw+cqK8c=) 19: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: cAER3YKLvVpIlFa2HmbUxYe1iz95sgNYpvM/4V9O1FM=) 20: EA792108690E11EF9396CC48C4F9AE02.roa (hash: umWQN4kGqAHPIk4w+IQl09gKoDRTIfMgnHpo1DCC4Pw=) 21: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: eF1xrltNfnruVqxNMjD44+JutJBXSUDGILKtju+n9dE=) 22: B35D540E68F611EFB785D145C4F9AE02.roa (hash: oyIjz/XYfgr26Spk6RY9XOtfUIT6X7uMOPMW03yZfAM=) 23: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: v2vRc6B+gwZg5NOfzaQPP6ML2YBJcqr080DwDx1pUOg=) 24: 218211CA68F911EF986C8281C4F9AE02.roa (hash: pHoz/kBOmkd5VG3teXH7pPsGNOOVgbbDMsd3VhHUAEo=) 25: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: Y3bQNy1ojyOB4N21qfu+0X9uUvLU+z0WanHBys0zBlU=) 26: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: HQ71fsK6HJEx6JB43+BRDscF/a1IXcYLFxyQuU5FBnw=) 27: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: kqYwhkwqrnPwUBbzCMbRJ6+BU/s1Jp8YtMASUL3cC6Y=) 28: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: d/aMw06UKvCrIDovTtwhw18Yfx0jjxX2eyRA38OLxcQ=) 29: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: +1sHzrOMqBbheGIlr1WPdNiSvR59VAOdWWIJJa+mgHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 841 (0x349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Apr 27 01:03:23 2025 GMT Not After : May 4 01:03:23 2025 GMT Subject: CN=680d825b-a573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:29:cc:29:71:64:06:a0:2d:e6:0b:a8:e2: 52:72:4c:b9:11:40:79:67:cb:ba:d6:fc:f1:cc:b9: f2:81:9e:2a:bb:4d:9b:0f:09:c9:be:9c:e3:70:16: d6:98:2f:9a:cb:ba:36:ef:92:d8:16:83:13:b4:c5: a8:84:84:bd:09:5b:51:8a:7a:3f:05:b4:ea:ff:06: d6:cc:cd:76:c1:21:b4:b2:cb:58:3d:99:66:20:7d: 14:e8:af:b7:b0:b3:2c:73:a4:65:b6:53:d7:77:dc: ef:85:21:ba:c7:14:89:8e:59:5e:40:be:02:b6:92: 57:37:6d:c4:1d:85:83:1f:06:c8:7f:ca:a7:59:29: 12:a2:46:b7:71:80:83:3d:79:13:75:de:ad:a2:0b: 0f:50:62:74:05:60:9a:a4:f8:e8:b6:e2:8d:fa:8d: 5d:98:2c:21:7c:a4:11:90:69:a2:96:97:8e:aa:9d: 4e:8e:67:e8:dd:a9:74:3a:d7:03:30:bb:23:e3:73: c1:c3:d2:04:d4:68:3f:06:4c:91:36:c1:1d:2d:90: b4:68:c6:f9:43:20:0f:5a:81:29:1e:89:48:12:9e: 77:c6:7f:74:c4:6b:36:88:43:9e:b1:d5:3c:39:00: f5:6c:39:1d:13:84:fc:36:1d:13:14:3a:13:5f:ae: 23:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B3:86:A0:7A:B3:B6:60:7C:82:FC:07:F2:43:92:D8:EE:5A:32:33 X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:5e:44:f1:37:7d:f0:1f:a5:ee:63:0e:cd:dc:0d:62:f2:3e: e0:dd:7d:50:1a:fa:f4:21:54:71:93:76:cf:9e:48:23:d1:f6: 1b:89:a5:40:d0:27:dd:b6:2e:d3:bc:6f:8f:76:1f:ad:41:8b: ab:0b:05:ea:91:b4:1c:c9:06:7a:aa:97:ef:ad:66:81:18:cb: a3:96:0a:35:9d:3a:7e:c3:3e:4d:b1:8d:37:8e:8f:19:07:06: 21:b4:ba:1f:9d:24:48:07:c7:13:69:84:04:81:a2:18:3c:93: b9:90:d0:82:8a:7f:c2:61:c1:6f:dc:28:46:9b:c6:7c:43:f8: 3f:1f:0c:66:2d:a4:9a:31:cc:fe:3d:4f:03:91:3c:34:ff:ef: b0:ed:62:f8:2b:59:76:fc:dc:f8:5f:58:e9:dc:15:79:82:ea: 51:1f:76:6d:33:ec:01:d8:54:5a:43:33:3e:5d:e2:83:fb:7b: ad:2b:d8:b3:65:2d:55:a6:1b:bc:95:02:3d:17:8b:9b:9a:0a: 07:f9:c1:d5:b5:6a:07:45:10:01:57:40:d0:db:8e:cd:0e:96: 7f:1a:0f:b1:fc:ba:7c:cd:11:d0:99:76:8a:6e:59:7a:03:4c: 22:90:14:33:fa:59:3e:23:03:c7:fa:dc:3e:73:13:1e:00:80: 21:c5:50:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjUwNDI3MDEwMzIzWhcNMjUwNTA0MDEwMzIzWjAYMRYwFAYD VQQDEw02ODBkODI1Yi1hNTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpEpzClxZAagLeYLqOJScky5EUB5Z8u61vzxzLnygZ4qu02bDwnJvpzjcBbW mC+ay7o275LYFoMTtMWohIS9CVtRino/BbTq/wbWzM12wSG0sstYPZlmIH0U6K+3 sLMsc6RltlPXd9zvhSG6xxSJjlleQL4CtpJXN23EHYWDHwbIf8qnWSkSoka3cYCD PXkTdd6togsPUGJ0BWCapPjotuKN+o1dmCwhfKQRkGmilpeOqp1Ojmfo3al0OtcD MLsj43PBw9IE1Gg/BkyRNsEdLZC0aMb5QyAPWoEpHolIEp53xn90xGs2iEOesdU8 OQD1bDkdE4T8Nh0TFDoTX64jDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6zhqB6 s7ZgfIL8B/JDktjuWjIzMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDQyQS8yMEYyQ0IwMEVCOUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklT anQ5UG1iTENxQkgxd2dGWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnXkTxN33wH6XuYw7N3A1i8j7g3X1QGvr0IVRxk3bPnkgj0fYbiaVA 0Cfdti7TvG+Pdh+tQYurCwXqkbQcyQZ6qpfvrWaBGMujlgo1nTp+wz5NsY03jo8Z BwYhtLofnSRIB8cTaYQEgaIYPJO5kNCCin/CYcFv3ChGm8Z8Q/g/HwxmLaSaMcz+ PU8DkTw0/++w7WL4K1l2/Nz4X1jp3BV5gupRH3ZtM+wB2FRaQzM+XeKD+3utK9iz ZS1Vphu8lQI9F4ubmgoH+cHVtWoHRRABV0DQ247NDpZ/Gg+x/Lp8zRHQmXaKbll6 A0wikBQz+lk+IwPH+tw+cxMeAIAhxVBk -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:18 2025 by rpki-client on console.sobornost.net