$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json) Hash identifier: Im4qgKuoXlf7l6ZWNoo4INQw5PSpCEeZ4Yv8fs3+URE= Subject key identifier: 96:B9:45:0E:F8:71:A3:BE:99:EA:91:55:9C:7D:DD:F7:B1:A6:4B:FD Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 3512 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft Manifest number: 34C9 Signing time: Mon 28 Apr 2025 14:46:22 +0000 Manifest this update: Mon 28 Apr 2025 14:46:22 +0000 Manifest next update: Mon 05 May 2025 14:46:22 +0000 Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: ojERfIn+1Li0IwzdYNtSno9w+9JEyrT73ktbetklSYU=) 2: 87EFB95AC01811EF90CE8B0EC4F9AE02.roa (hash: qZJPfG2amv1YRehnUzdlHxLOWwvXz8+dMtqCKRYUJpM=) 3: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: uxN4zJEmGXmB/qpIp2ey6SpNrf4s6W/tukdRHW9gvLc=) 4: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (hash: HhPaW5eoa8YAXMCyUgrMCG4GBbrYuP09obNUWTvTJmo=) 5: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: o+SVOkw4B+Pgr5TLQfMcQYEp6f3Jn3P38kWJLEEf/tQ=) 6: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: Kgqe2j6IHwMDhGgmbFi5UiveUmKiCe0XXLEEC0ovFyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13586 (0x3512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Apr 28 14:46:22 2025 GMT Not After : May 5 14:46:22 2025 GMT Subject: CN=680f94be-062c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:67:ec:4a:55:b3:10:34:76:9d:af:11:9a: 3b:cb:eb:e3:00:8e:c3:6b:2e:8a:6b:8a:49:7d:ac: 77:f2:83:a7:c7:0f:d7:1e:37:6d:c4:d9:e8:3c:72: 30:ea:d0:42:77:dc:ac:14:84:cf:de:2b:3f:5e:d6: 82:27:d2:92:94:fe:e8:84:07:61:98:49:b7:37:12: 9e:2d:2e:3a:ea:b5:58:43:c0:aa:e8:15:e5:d0:f6: 7e:18:4d:30:14:40:29:85:da:5b:b0:3b:59:8f:fe: 22:ae:64:98:a6:ea:af:15:68:be:69:4e:91:c6:8a: 30:58:ee:40:a0:87:b7:eb:d8:8e:b2:d2:9d:ee:e1: e7:f3:64:31:f0:5b:16:19:f6:9a:c7:fe:45:55:7e: 31:03:97:a8:6d:d6:eb:76:77:20:c4:29:35:a4:a3: dc:15:7a:a2:1d:be:1c:4a:e1:bf:54:da:b0:36:ff: fb:89:5a:74:b5:37:c3:a4:b2:1d:98:c3:ad:65:09: 66:4b:84:5e:f2:2a:68:69:5a:4a:01:bb:ca:84:ab: dd:37:fd:94:37:3a:eb:b4:1c:c2:5a:2d:52:45:e8: 4b:a9:07:2f:ff:fc:09:cb:cf:03:73:6b:ae:00:59: b0:89:05:c6:ba:1d:86:f9:26:57:19:7f:0d:fb:f2: fb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B9:45:0E:F8:71:A3:BE:99:EA:91:55:9C:7D:DD:F7:B1:A6:4B:FD X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f8:a4:4c:5e:a3:7e:46:4b:bc:f5:4c:b5:a9:00:a7:5f:19: f9:a9:68:1e:70:2c:15:a9:3d:b0:69:05:5a:b0:b2:80:e4:32: 80:14:d9:b9:e0:f0:86:9f:3b:9d:cb:4f:8e:23:1b:4c:6c:6e: 7c:20:86:d1:ed:60:e5:a1:84:e8:bd:2a:2d:fd:f3:06:49:58: 4c:97:60:cb:f3:ee:5f:86:7e:e7:b7:6b:28:4c:91:dd:9a:42: 9f:cd:1e:dc:5a:cc:59:60:55:81:ce:37:ea:f6:eb:50:de:73: 3a:fe:d4:3c:6f:5b:9e:b1:f7:dc:f5:50:22:59:a3:a3:d2:86: a6:28:48:53:77:1c:2b:a5:b1:9c:8f:52:fe:d5:ad:af:da:ec: d4:e9:97:f9:0b:1c:3e:8d:34:f3:5c:f9:09:fa:12:3c:5c:57: 5d:8a:58:3a:66:76:4f:62:2c:4f:3b:9a:7e:79:63:21:ce:e2: b1:31:4f:88:c9:c6:4e:cb:11:95:6b:57:f8:7f:5a:e9:05:fb: 0c:a0:8b:1f:36:e6:a3:3b:6b:fb:81:a0:5f:ea:64:e5:d2:23: 82:d6:56:73:55:bf:df:8e:1a:83:00:b8:4e:d1:99:42:37:de: 14:58:e9:04:dc:23:ad:2e:d6:00:42:15:50:18:c6:a2:3b:b4: 0f:a2:4c:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjUwNDI4MTQ0NjIyWhcNMjUwNTA1MTQ0NjIyWjAYMRYwFAYD VQQDEw02ODBmOTRiZS0wNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArM5n7EpVsxA0dp2vEZo7y+vjAI7Day6Ka4pJfax38oOnxw/XHjdtxNnoPHIw 6tBCd9ysFITP3is/XtaCJ9KSlP7ohAdhmEm3NxKeLS466rVYQ8Cq6BXl0PZ+GE0w FEAphdpbsDtZj/4irmSYpuqvFWi+aU6RxoowWO5AoIe369iOstKd7uHn82Qx8FsW Gfaax/5FVX4xA5eobdbrdncgxCk1pKPcFXqiHb4cSuG/VNqwNv/7iVp0tTfDpLId mMOtZQlmS4Re8ipoaVpKAbvKhKvdN/2UNzrrtBzCWi1SRehLqQcv//wJy88Dc2uu AFmwiQXGuh2G+SZXGX8N+/L7/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJa5RQ74 caO+meqRVZx93fexpkv9MB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc3MC9DMzM2ODNCNjFEOEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlq aWZwTFpzR1hRMUhqVEVLUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd+KRMXqN+Rku89Uy1qQCnXxn5qWgecCwVqT2waQVasLKA5DKAFNm5 4PCGnzudy0+OIxtMbG58IIbR7WDloYTovSot/fMGSVhMl2DL8+5fhn7nt2soTJHd mkKfzR7cWsxZYFWBzjfq9utQ3nM6/tQ8b1uesffc9VAiWaOj0oamKEhTdxwrpbGc j1L+1a2v2uzU6Zf5Cxw+jTTzXPkJ+hI8XFddilg6ZnZPYixPO5p+eWMhzuKxMU+I ycZOyxGVa1f4f1rpBfsMoIsfNuajO2v7gaBf6mTl0iOC1lZzVb/fjhqDALhO0ZlC N94UWOkE3COtLtYAQhVQGMaiO7QPokzc -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:01 2025 by rpki-client on console.sobornost.net