$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft File: HmeMaiF9cVsw2csi1fiE0XxWmbY.mft (raw, json) Hash identifier: VTgY4SRFpTN8tY2yr4ullwe0iumj/qJ/9MBqq+WxQL4= Subject key identifier: D4:52:C9:C0:18:28:86:1A:AE:8D:AA:33:A8:45:1F:3F:BE:CF:BA:84 Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6 Certificate issuer: /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6 Certificate serial: 1873 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft Manifest number: 1857 Signing time: Mon 28 Apr 2025 16:41:04 +0000 Manifest this update: Mon 28 Apr 2025 16:41:03 +0000 Manifest next update: Mon 05 May 2025 16:41:03 +0000 Files and hashes: 1: HmeMaiF9cVsw2csi1fiE0XxWmbY.crl (hash: tQyGe4qAXDmb2+BtNJ9od2OKzKOniDKbzdcJ+1vYYmg=) 2: D34372461C8D11E9B21BD858C4F9AE02.roa (hash: KJiYW9fyvj2KonkdW9uDFpKuQ1dT83diO/QTtAE0e3A=) 3: A2BE54D2228B11F09A2FAA12C4F9AE02.roa (hash: KFzJJioj1JdEaM7mj8QrDhe5X+FxHdHyz1gyMqXEJCI=) 4: 3DC507001C8F11E9990F665CC4F9AE02.roa (hash: /Xd8kuiaq1Q5eF4PAbm/NjtYZtrHCHK1WvQKBeYKntw=) 5: A55682E0821A11EE9104BB68C4F9AE02.roa (hash: Frk606k9XfomHW0x/AMLebHr43yDTcWmfdXiLloTTiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6259 (0x1873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6 Validity Not Before: Apr 28 16:41:03 2025 GMT Not After : May 5 16:41:03 2025 GMT Subject: CN=680fafa0-f59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:e8:10:0c:a0:0d:90:01:ba:73:60:4e:d6: 25:c3:30:0c:e2:32:61:95:64:8b:45:97:f6:16:d5: 2d:fc:b4:46:e0:60:d9:4a:a9:ab:66:e0:99:1c:98: 77:b3:fd:56:e4:ea:72:d1:7d:03:dc:39:f3:ec:75: 8c:ac:e3:1a:35:c7:c3:7a:07:54:fd:83:86:94:5a: 9d:36:e4:7a:f6:0a:c0:10:53:b2:39:15:f1:33:89: a1:21:84:26:26:5d:9d:9a:41:95:07:84:b1:94:18: c9:77:53:e6:d5:06:88:33:99:a8:2b:78:ec:3b:f1: 8d:63:fa:04:e5:b6:95:c3:15:f4:82:06:62:b2:b3: 88:6a:07:92:b0:c2:5a:94:bd:70:e4:43:4e:c0:9e: 5a:22:fd:99:45:a8:bd:ef:f9:ac:1a:4d:2c:81:ed: 61:fd:71:28:1d:c6:13:a3:f4:7c:c9:79:67:a2:d1: 6f:fd:12:e5:20:0a:a0:63:94:b7:88:e5:96:c3:f3: 9d:c1:df:fd:f4:c1:4b:38:fd:15:55:10:d1:68:c9: 9a:bd:90:4d:85:14:fb:f3:c0:f7:14:b9:d9:93:9d: d5:6b:88:83:d2:68:bf:ba:2a:4c:be:41:94:54:90: d4:1b:4e:0e:6a:8a:f3:53:11:94:7f:ad:af:d5:f7: 7a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:52:C9:C0:18:28:86:1A:AE:8D:AA:33:A8:45:1F:3F:BE:CF:BA:84 X509v3 Authority Key Identifier: keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:de:77:2e:30:d1:bb:c5:de:13:44:51:64:b2:44:73:fc:1f: 53:3a:02:67:40:30:28:eb:7b:2f:ed:e4:b5:75:b4:d8:09:ef: a2:dc:29:3e:03:37:ad:73:19:aa:7b:41:44:1f:91:2a:c0:d8: 8b:ee:b9:db:bb:20:dd:fb:c9:ad:f3:df:dd:1e:3f:ba:92:21: 66:0d:e8:96:86:ce:cf:ec:bf:b7:41:db:10:67:3e:d6:4e:93: d3:40:c1:6f:e0:15:cc:5e:56:a4:db:78:3e:7b:4d:c3:ba:5e: 07:9e:99:e9:6d:34:ae:54:00:5a:5a:db:29:9a:ee:7f:af:07: 07:68:d8:c6:dd:33:a9:30:d3:c9:6c:6e:8d:e4:12:9c:05:f6: 4c:f9:47:e1:cc:cd:47:06:03:92:f2:42:9a:9a:fe:0c:ff:cd: f1:57:83:3f:7e:42:7b:b5:fe:cb:c8:94:09:f3:b4:d7:40:d6: 41:da:e2:1e:d9:a0:51:1e:11:45:27:57:d3:c2:04:82:5e:71: 6d:26:8e:0e:43:3b:77:4a:73:65:95:d3:80:94:a4:73:34:6e: 48:07:3b:a7:f8:69:10:ea:f6:82:c8:dc:23:ee:07:c5:f7:08: af:2c:2d:2e:b9:e9:2f:1d:8b:ce:00:3d:ac:c7:19:c5:1f:5e: 4f:e5:88:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM5NTMxMTAvBgNVBAUTKDFFNjc4QzZBMjE3RDcxNUIzMEQ5Q0IyMkQ1Rjg4NEQx N0M1Njk5QjYwHhcNMjUwNDI4MTY0MTAzWhcNMjUwNTA1MTY0MTAzWjAYMRYwFAYD VQQDEw02ODBmYWZhMC1mNTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkzoEAygDZABunNgTtYlwzAM4jJhlWSLRZf2FtUt/LRG4GDZSqmrZuCZHJh3 s/1W5Opy0X0D3Dnz7HWMrOMaNcfDegdU/YOGlFqdNuR69grAEFOyORXxM4mhIYQm Jl2dmkGVB4SxlBjJd1Pm1QaIM5moK3jsO/GNY/oE5baVwxX0ggZisrOIageSsMJa lL1w5ENOwJ5aIv2ZRai97/msGk0sge1h/XEoHcYTo/R8yXlnotFv/RLlIAqgY5S3 iOWWw/Odwd/99MFLOP0VVRDRaMmavZBNhRT788D3FLnZk53Va4iD0mi/uipMvkGU VJDUG04OaorzUxGUf62v1fd6vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRSycAY KIYaro2qM6hFHz++z7qEMB8GA1UdIwQYMBaAFB5njGohfXFbMNnLItX4hNF8Vpm2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzk1My8xMjJEOEQyOEE0 OTYxMUU3QTkyNkVENERDNEY5QUUwMi9IbWVNYWlGOWNWc3cyY3NpMWZpRTBYeFdt YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htZU1haUY5Y1ZzdzJjc2kxZmlFMFh4V21iWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mzk1My8xMjJEOEQyOEE0OTYxMUU3QTkyNkVENERDNEY5QUUwMi9IbWVNYWlGOWNW c3cyY3NpMWZpRTBYeFdtYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz3ncuMNG7xd4TRFFkskRz/B9TOgJnQDAo63sv7eS1dbTYCe+i3Ck+ Azetcxmqe0FEH5EqwNiL7rnbuyDd+8mt89/dHj+6kiFmDeiWhs7P7L+3QdsQZz7W TpPTQMFv4BXMXlak23g+e03Dul4HnpnpbTSuVABaWtspmu5/rwcHaNjG3TOpMNPJ bG6N5BKcBfZM+UfhzM1HBgOS8kKamv4M/83xV4M/fkJ7tf7LyJQJ87TXQNZB2uIe 2aBRHhFFJ1fTwgSCXnFtJo4OQzt3SnNlldOAlKRzNG5IBzun+GkQ6vaCyNwj7gfF 9wivLC0uuekvHYvOAD2sxxnFH15P5YiN -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:28 2025 by rpki-client on console.sobornost.net