$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: ZslvuACn+Ip8lc6yVk8LBOh9hgNIFkNigt5Nu05tGpE= Subject key identifier: 51:30:7B:11:6D:07:F5:60:CB:27:D9:06:CD:60:7A:6F:9F:F0:66:65 Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 018C Signing time: Mon 21 Jul 2025 03:40:30 +0000 Manifest this update: Mon 21 Jul 2025 03:40:29 +0000 Manifest next update: Mon 28 Jul 2025 03:40:29 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: GB0uMRjccNumvx1mxJhNeI/5d8ejUrdESMI6Qbt4SrE=) 2: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: 3AQgtCiu1AvELGcQ0dN/q4SITzh5GfFFMFmGHpirqhw=) 3: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: 5/eMUVmevequFuGJFSqiqzgHPak9nF5vFMfMZWfmlQA=) 4: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: CrmsjWdSH1dRX4gtIVoZxCTBPv++0Trwf39jICU/c/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Jul 21 03:40:29 2025 GMT Not After : Jul 28 03:40:29 2025 GMT Subject: CN=687db6ad-cf96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:92:d2:24:03:4c:66:d1:41:47:b7:8a:74:db: 80:1c:35:fc:5a:64:f9:b5:72:51:61:d4:b1:9e:48: 79:72:a5:66:b3:4f:d6:8d:a9:a7:d8:9b:82:c0:6d: 65:f0:aa:04:fc:fc:b7:38:14:e1:f4:06:26:96:ec: 1c:c1:66:b4:2b:30:49:76:e3:0c:b8:ef:36:19:30: 9f:f2:6e:e3:50:ce:bc:1b:10:4e:74:7f:7c:5c:e1: b8:f1:1f:d3:fc:98:18:42:64:0a:ab:10:5c:68:17: 02:d6:96:6e:49:f4:b0:4f:7a:f3:a2:33:ed:d0:b3: a4:62:59:b2:ed:8d:ad:1e:60:42:7e:6a:92:4c:be: d1:8e:8b:c6:00:a6:5a:4e:e5:69:46:46:d6:55:57: fd:58:71:1e:df:01:f5:b0:16:f1:61:43:a2:1a:ae: 41:17:e0:d4:86:bf:9c:eb:3e:f8:3a:10:e6:a5:43: 22:65:f3:bc:19:87:6b:bc:dd:45:05:76:ee:b9:33: e1:de:8d:ae:34:44:94:68:a2:fa:5e:c1:2e:90:fe: c0:1b:f9:05:aa:bd:9b:c9:09:a0:b4:6a:fa:51:5e: e7:8f:6a:3c:a6:05:ed:f7:ef:d6:8e:57:a0:09:ae: 3f:fc:08:b3:a3:dd:11:b0:ad:a2:a8:25:a4:4b:cb: 48:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:30:7B:11:6D:07:F5:60:CB:27:D9:06:CD:60:7A:6F:9F:F0:66:65 X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:df:57:b3:85:85:fb:7a:42:f1:15:4e:d7:f8:ed:e3:b2:47: 87:49:28:09:33:ce:bd:88:e4:c7:a4:7a:4d:5e:fa:d5:08:e0: b4:ad:5e:0e:45:96:89:14:75:52:93:b0:a7:0e:b9:1e:c6:ed: 3e:60:9a:8c:76:ad:8a:67:c0:0d:a1:80:96:f0:95:f6:77:67: 82:45:d4:d1:c7:59:db:b3:8c:64:9e:fa:2d:5c:16:53:30:8b: 65:81:cf:a2:2a:a3:4c:9d:86:77:b0:4a:d9:bc:45:6b:a4:b1: df:fa:50:2f:fb:f4:50:f9:1e:df:47:a6:96:d4:d2:dc:e7:36: 3d:a6:c4:96:41:24:c8:55:b1:1d:ca:66:3b:9e:1b:5b:56:33: d3:9c:a6:10:5a:4b:07:7e:99:91:c0:00:84:e2:88:44:82:f7: 60:1f:f2:9c:74:5b:4d:b8:bc:be:47:28:b4:e6:3b:4c:dc:0b: 60:f2:65:20:47:d1:b2:34:c7:b2:01:f8:78:c5:02:ae:69:ad: 35:58:9f:01:dd:2b:8f:f9:3f:91:ca:bc:cb:33:bc:1b:1a:3e: 60:45:ea:0a:55:db:9c:0e:0d:6a:20:1f:60:72:b6:38:8c:85: 31:3c:e7:09:0a:50:fd:77:6f:91:d9:2d:89:ab:ce:b2:88:77: 92:74:ab:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjUwNzIxMDM0MDI5WhcNMjUwNzI4MDM0MDI5WjAYMRYwFAYD VQQDEw02ODdkYjZhZC1jZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAopLSJANMZtFBR7eKdNuAHDX8WmT5tXJRYdSxnkh5cqVms0/Wjamn2JuCwG1l 8KoE/Py3OBTh9AYmluwcwWa0KzBJduMMuO82GTCf8m7jUM68GxBOdH98XOG48R/T /JgYQmQKqxBcaBcC1pZuSfSwT3rzojPt0LOkYlmy7Y2tHmBCfmqSTL7RjovGAKZa TuVpRkbWVVf9WHEe3wH1sBbxYUOiGq5BF+DUhr+c6z74OhDmpUMiZfO8GYdrvN1F BXbuuTPh3o2uNESUaKL6XsEukP7AG/kFqr2byQmgtGr6UV7nj2o8pgXt9+/Wjleg Ca4//Aizo90RsK2iqCWkS8tIdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEwexFt B/VgyyfZBs1gem+f8GZlMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh31ezhYX7ekLxFU7X+O3jskeHSSgJM869iOTHpHpNXvrVCOC0rV4O RZaJFHVSk7CnDrkexu0+YJqMdq2KZ8ANoYCW8JX2d2eCRdTRx1nbs4xknvotXBZT MItlgc+iKqNMnYZ3sErZvEVrpLHf+lAv+/RQ+R7fR6aW1NLc5zY9psSWQSTIVbEd ymY7nhtbVjPTnKYQWksHfpmRwACE4ohEgvdgH/KcdFtNuLy+Ryi05jtM3Atg8mUg R9GyNMeyAfh4xQKuaa01WJ8B3SuP+T+RyrzLM7wbGj5gReoKVducDg1qIB9gcrY4 jIUxPOcJClD9d2+R2S2Jq86yiHeSdKuJ -----END CERTIFICATE-----Generated at Mon Jul 21 12:56:37 2025 by rpki-client