$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: tElpleD4BxK30Jk8Zd0gfhfCp6cYG2mKfr+j987NhnM= Subject key identifier: 58:32:7F:0B:B7:3D:52:C4:C8:01:AE:88:54:37:AD:DD:1C:78:A9:7F Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 015E Signing time: Sun 27 Apr 2025 03:01:54 +0000 Manifest this update: Sun 27 Apr 2025 03:01:54 +0000 Manifest next update: Sun 04 May 2025 03:01:54 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: z/8mWg+Bo8PWvMbEQofrXBNjpIGEMcEn/3LdZisbhHQ=) 2: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: 5ZJCdzpl4XWTpRPY+o2rNRK6qDdlu92LlwpKc1ioNfk=) 3: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: klVQHwft/ej7AJly+6VuenTESngqYPqF3s8Sj7IYp+Y=) 4: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: V/kLBtdXeXcYSvHp21xjf6v4HKkI6h22RbG5oYBnA3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Apr 27 03:01:54 2025 GMT Not After : May 4 03:01:54 2025 GMT Subject: CN=680d9e22-0ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:99:7e:8f:a2:f7:7b:02:e4:a0:d1:3d:45:ac: d9:14:c2:1d:ef:ed:9a:56:de:4b:83:3e:fd:85:4b: 41:78:79:1e:82:34:bf:ef:bf:10:8b:fa:c3:98:a8: 03:58:ef:fa:06:54:b8:ee:94:43:d6:7d:b2:4b:9a: 06:10:30:3f:92:8e:29:d0:8a:80:04:b9:6c:2c:04: a2:8a:2c:4e:7d:28:9b:07:db:a4:9c:76:c1:f5:b4: 0d:78:d3:0c:80:6d:0c:a4:4a:1b:ca:6d:cd:37:b9: 97:8b:73:6f:0e:41:d9:38:80:a8:24:05:3b:fe:a7: e9:97:42:2e:29:42:ec:fd:c8:90:47:e8:84:58:a8: 45:c9:8a:d5:4c:c4:82:9f:5d:2f:e7:2a:e0:5b:65: 5a:29:36:d2:82:a9:65:4e:84:1c:08:13:99:91:eb: 9f:cc:34:db:7f:92:22:1b:b4:3c:09:68:33:4e:73: 9d:4c:91:c9:94:7f:16:62:b6:d6:13:4a:a6:65:a3: c8:49:ef:44:73:cd:93:d8:88:02:c2:47:12:e6:c2: 35:5a:8b:a4:c3:a1:7b:22:11:dc:63:f2:8d:92:48: e8:95:b7:96:0e:c2:30:84:58:52:19:3a:60:32:ac: d6:df:fb:01:eb:4a:ef:1e:93:d8:bc:10:ad:82:9b: 63:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:32:7F:0B:B7:3D:52:C4:C8:01:AE:88:54:37:AD:DD:1C:78:A9:7F X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:d7:5a:e7:60:0d:b9:b2:bd:5a:ce:aa:4b:e1:aa:d9:c8:11: 7c:d6:28:b8:1a:8c:c2:96:ca:d6:87:2f:0c:ec:83:8b:e9:c3: 02:16:27:3d:72:1c:a8:b9:52:f4:6b:89:dc:25:0b:25:93:d7: b9:12:98:62:bd:da:38:30:7d:a4:b1:e8:aa:c0:9b:f2:a8:2d: 55:b7:76:dc:98:0b:6a:35:57:ff:59:fa:4b:e4:c7:27:b2:37: 51:ae:50:d4:4d:06:8b:f5:56:1c:25:75:20:84:13:45:a8:83: 57:03:c9:fe:a8:5f:10:46:ef:c4:d7:da:0f:b4:a4:fe:37:a7: 80:61:bd:8f:af:43:56:22:51:13:87:81:f1:26:e3:bf:64:da: 45:ae:03:7d:eb:83:77:14:32:54:1a:85:ec:e3:1b:e1:43:2d: 48:82:53:ba:d4:e7:34:ad:5f:65:ef:fb:e9:a8:9f:54:1f:d7: 39:50:f9:77:6a:f7:9f:8b:01:5f:17:b3:07:d9:3a:22:6c:b7: d2:dd:e3:3a:71:a4:77:34:44:f9:83:01:78:5d:e1:8a:c6:eb: 61:1d:84:d2:6e:18:5f:ea:e0:cb:f2:ff:d2:78:a1:53:ca:ce: fd:c9:c6:a3:87:fb:92:55:fb:e3:d3:44:4e:5e:81:99:a6:4b: 64:43:27:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjUwNDI3MDMwMTU0WhcNMjUwNTA0MDMwMTU0WjAYMRYwFAYD VQQDEw02ODBkOWUyMi0wZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65l+j6L3ewLkoNE9RazZFMId7+2aVt5Lgz79hUtBeHkegjS/778Qi/rDmKgD WO/6BlS47pRD1n2yS5oGEDA/ko4p0IqABLlsLASiiixOfSibB9uknHbB9bQNeNMM gG0MpEobym3NN7mXi3NvDkHZOICoJAU7/qfpl0IuKULs/ciQR+iEWKhFyYrVTMSC n10v5yrgW2VaKTbSgqllToQcCBOZkeufzDTbf5IiG7Q8CWgzTnOdTJHJlH8WYrbW E0qmZaPISe9Ec82T2IgCwkcS5sI1Woukw6F7IhHcY/KNkkjolbeWDsIwhFhSGTpg MqzW3/sB60rvHpPYvBCtgptj5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgyfwu3 PVLEyAGuiFQ3rd0ceKl/MB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy11rnYA25sr1azqpL4arZyBF81ii4GozClsrWhy8M7IOL6cMCFic9 chyouVL0a4ncJQslk9e5Ephivdo4MH2kseiqwJvyqC1Vt3bcmAtqNVf/WfpL5Mcn sjdRrlDUTQaL9VYcJXUghBNFqINXA8n+qF8QRu/E19oPtKT+N6eAYb2Pr0NWIlET h4HxJuO/ZNpFrgN964N3FDJUGoXs4xvhQy1IglO61Oc0rV9l7/vpqJ9UH9c5UPl3 avefiwFfF7MH2ToibLfS3eM6caR3NET5gwF4XeGKxuthHYTSbhhf6uDL8v/SeKFT ys79ycajh/uSVfvj00ROXoGZpktkQyer -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:51 2025 by rpki-client on console.sobornost.net