$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: vvFz4l7WRvvdMTiukDx1/9QJAIgYGyMocofu00QbUvc= Subject key identifier: 8C:63:FF:36:D8:A7:48:4E:74:FE:C5:4D:5F:FA:8B:6C:E7:B1:B0:BA Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 0151 Signing time: Sat 05 Apr 2025 03:35:32 +0000 Manifest this update: Sat 05 Apr 2025 03:35:31 +0000 Manifest next update: Sat 12 Apr 2025 03:35:31 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: b67Iq4olwkg0chiicbRCPXFkyVV52u26MdZW1bYv4x8=) 2: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: fORQkqLvJ2dGBDBnaZU9L7Plq+kw/h2X+nWJ/fFzZps=) 3: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: WHaadnKjNZQDbadv+Fexmh1Wu5Tp8jJIMAgwTj5mmBw=) 4: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: NyRhFKoeq17kmMX8OQZh3mkXOb3bkuMOT5GFnj9SEJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC Validity Not Before: Apr 5 03:35:31 2025 GMT Not After : Apr 12 03:35:31 2025 GMT Subject: CN=67f0a504-bd17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:f9:20:b3:74:90:7a:b6:19:5a:25:b7:55: 66:fb:94:e8:55:10:99:84:53:01:22:1a:0e:36:b0: 6c:3d:7c:bb:64:89:bc:ec:72:79:a9:f9:8b:93:b0: 24:ed:34:ef:ba:62:62:84:bb:22:93:82:69:b0:24: c2:5a:55:2e:76:6f:8b:19:87:f4:be:4c:b0:4e:86: 3c:fd:15:d2:04:e6:ce:ac:72:52:29:32:a5:e2:e1: 8f:81:29:de:0b:a2:0d:70:1d:b2:7f:cd:a4:b1:af: 7d:fb:64:20:a2:13:29:49:8e:45:14:ec:6f:47:8c: 64:6b:d0:53:7f:fa:92:a7:b2:77:d0:5c:b2:d0:bb: 97:68:a2:4b:67:bd:9f:de:eb:bd:34:fd:c5:0b:26: 76:59:28:e7:70:cf:2c:12:f2:19:4e:a5:34:d0:d2: 39:0e:d4:92:06:4c:18:aa:b4:44:41:ab:05:87:73: fc:f7:33:de:cc:ef:6b:be:48:ca:e6:fd:4f:b9:cd: b3:cb:42:5c:f5:b9:46:fa:aa:73:b4:ec:ff:48:66: 77:e1:ef:fd:e8:c2:78:5f:1b:46:de:7c:b5:e9:bf: cc:79:b4:4e:bc:a9:f9:53:40:22:92:06:d4:f0:7c: da:47:16:5e:bd:ba:02:18:23:c9:50:4d:da:35:10: 05:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:63:FF:36:D8:A7:48:4E:74:FE:C5:4D:5F:FA:8B:6C:E7:B1:B0:BA X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:17:07:57:16:b9:2c:e2:60:00:7c:ae:21:6f:ef:d9:e7:4c: 2c:1b:00:85:01:54:7b:00:e0:a4:03:ee:8f:f5:0c:89:0b:45: 78:94:a8:6a:3e:4d:bd:9c:06:b2:ff:cb:af:9a:f4:33:8c:c9: 75:65:e5:1c:a1:41:cf:2c:a6:41:c2:f3:95:cf:8c:9c:19:8a: 36:f4:0f:1c:40:0a:9b:fc:21:8a:1a:fb:c5:24:87:f5:34:74: ae:7e:b0:0e:77:f4:3e:4f:ec:26:65:2f:94:36:fe:3e:c3:2e: b3:11:1e:59:fd:d6:ba:97:30:0d:b2:e1:4a:bc:70:7d:43:f6: b8:de:88:4a:5d:1d:2a:c2:4e:fc:45:db:4a:b9:0d:20:f0:34: 2c:a1:f6:42:5b:ce:90:85:ca:92:64:3b:b8:04:35:1a:c1:0f: c9:f6:22:7c:2f:7a:a7:ad:bf:6e:6d:46:e3:72:e2:53:41:d5: 3e:a7:76:89:8b:49:2c:15:15:76:86:5b:4d:11:ec:ba:47:f0: a1:66:81:2e:22:17:23:dc:15:fe:73:88:aa:d3:9d:09:70:c1: 00:fc:dc:9f:8e:46:c0:aa:f8:37:d0:8d:2b:8c:27:4e:df:92: 3e:08:33:16:8f:4e:11:d9:28:72:dc:12:a4:53:d9:7d:84:68: 07:b3:c6:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjUwNDA1MDMzNTMxWhcNMjUwNDEyMDMzNTMxWjAYMRYwFAYD VQQDEw02N2YwYTUwNC1iZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2v5ILN0kHq2GVolt1Vm+5ToVRCZhFMBIhoONrBsPXy7ZIm87HJ5qfmLk7Ak 7TTvumJihLsik4JpsCTCWlUudm+LGYf0vkywToY8/RXSBObOrHJSKTKl4uGPgSne C6INcB2yf82ksa99+2QgohMpSY5FFOxvR4xka9BTf/qSp7J30Fyy0LuXaKJLZ72f 3uu9NP3FCyZ2WSjncM8sEvIZTqU00NI5DtSSBkwYqrREQasFh3P89zPezO9rvkjK 5v1Puc2zy0Jc9blG+qpztOz/SGZ34e/96MJ4XxtG3ny16b/MebROvKn5U0AikgbU 8HzaRxZevboCGCPJUE3aNRAFOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxj/zbY p0hOdP7FTV/6i2znsbC6MB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoFwdXFrks4mAAfK4hb+/Z50wsGwCFAVR7AOCkA+6P9QyJC0V4lKhq Pk29nAay/8uvmvQzjMl1ZeUcoUHPLKZBwvOVz4ycGYo29A8cQAqb/CGKGvvFJIf1 NHSufrAOd/Q+T+wmZS+UNv4+wy6zER5Z/da6lzANsuFKvHB9Q/a43ohKXR0qwk78 RdtKuQ0g8DQsofZCW86QhcqSZDu4BDUawQ/J9iJ8L3qnrb9ubUbjcuJTQdU+p3aJ i0ksFRV2hltNEey6R/ChZoEuIhcj3BX+c4iq050JcMEA/NyfjkbAqvg30I0rjCdO 35I+CDMWj04R2Shy3BKkU9l9hGgHs8ZN -----END CERTIFICATE-----Generated at Sun Apr 6 02:58:10 2025 by rpki-client