$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json) Hash identifier: c6OJusDaAkaeW8QSbQPRqxzNXfX5qJ07A/ge8ZA8K9U= Subject key identifier: 83:19:DE:1F:D2:1A:BD:DC:9E:43:F1:DD:9D:0E:C8:C6:CD:79:57:77 Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft Manifest number: 011C Signing time: Thu 03 Jul 2025 05:07:55 +0000 Manifest this update: Thu 03 Jul 2025 05:07:55 +0000 Manifest next update: Thu 10 Jul 2025 05:07:55 +0000 Files and hashes: 1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: B+jm9GVbqdoqkFIyHPmOwI7MU8cU8RI2lUreotrEI5w=) 2: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: z1tB95lFpcoG7gufS1WVI98iQupCm/LxCrECBfeoY8E=) 3: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: j/V4XNGNwoAwBD2fM6BAWHsPlbD9xKq2cTFKjMRTC08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911112F, serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Validity Not Before: Jul 3 05:07:55 2025 GMT Not After : Jul 10 05:07:55 2025 GMT Subject: CN=6866102b-65fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ed:fc:5e:62:9f:4b:62:a9:54:92:73:85:41: 1c:14:f6:32:48:e3:2a:13:06:eb:f7:af:2d:78:6d: c0:1b:b3:a2:b6:49:e4:4b:2d:a7:4e:b9:c9:25:71: 79:d1:4a:62:c1:94:b6:a2:f9:2a:cc:2e:53:64:2c: 0d:bf:bf:cc:86:25:e0:ed:28:7f:b2:f6:7f:96:f0: e5:7e:44:56:30:46:e0:f9:75:52:cb:14:86:71:0c: ef:5d:e0:50:3c:c4:9d:b8:c6:fc:b5:d1:c2:c0:3e: c7:67:d8:f1:91:05:27:27:c4:ae:8c:e8:3b:c1:75: b0:e9:3f:36:f3:23:a5:3f:8a:8d:26:55:74:0d:5e: 94:59:8d:8a:c4:b7:ed:60:ea:7c:54:11:83:3f:88: d8:91:ec:db:6f:87:c3:fd:46:76:6b:88:70:f6:1a: a5:28:f5:ad:87:77:3d:d7:94:09:13:d9:c8:61:41: 74:4f:57:b2:0d:cc:d1:b2:a1:ec:c0:91:d3:01:f0: f9:26:16:48:dc:3b:dc:fa:93:f4:82:c4:68:88:ec: 9c:91:c5:5e:58:58:f6:21:4e:e7:82:2b:c4:db:fe: 3f:dd:b5:8d:4f:ad:1a:1a:27:e8:15:ee:0b:ca:8d: 8d:8d:99:d1:ab:22:49:cd:32:a0:0e:36:58:4a:e6: 5b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:19:DE:1F:D2:1A:BD:DC:9E:43:F1:DD:9D:0E:C8:C6:CD:79:57:77 X509v3 Authority Key Identifier: keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:34:3d:ed:01:1b:46:ef:26:41:25:20:0f:49:8f:a6:ab:5d: 03:e5:d1:66:1e:1b:b5:17:e1:04:5c:35:21:ce:c3:82:bb:ab: 29:7a:18:c9:43:87:6a:61:db:e1:d9:ec:53:9c:d5:f0:9c:0d: 15:16:d6:5f:6a:5c:fa:6b:6c:99:96:c2:9e:e2:dc:22:21:21: a2:6b:47:c0:4b:b4:f8:fe:3c:75:11:4f:0b:0e:20:de:3a:f9: b0:d2:ae:fe:44:e3:71:b7:cf:52:64:8c:53:c4:ec:4c:67:0d: 22:88:ec:bf:e5:06:0b:e8:77:85:92:66:49:43:fe:48:0c:82: 80:01:8a:ad:aa:d8:a3:7c:69:b9:30:4d:e2:f3:83:3d:c4:2e: c3:4d:59:73:96:cb:d5:80:d4:6a:89:11:40:a1:de:4b:b5:c4: fe:2e:89:18:28:2e:63:08:75:15:15:ed:4e:60:9b:cb:3f:ea: 84:bf:2a:da:c5:4a:48:21:03:05:e2:bb:b3:6d:93:a5:d7:ac: 3b:3c:e2:29:6f:03:b5:43:43:06:12:92:d0:40:93:32:f7:1f: 65:b9:b0:eb:2f:97:1d:ea:a3:44:90:bf:da:cf:a2:3c:98:16: 4b:3b:10:90:e8:b0:9a:67:65:f8:c7:38:c9:5d:ed:fd:95:33: 40:6b:75:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTExMkYxMTAvBgNVBAUTKDFFNTdCNDNGMDQ0RDRBQkE4MjIyQTQwOTc4NjYxNDI4 MEFBNzM5QTEwHhcNMjUwNzAzMDUwNzU1WhcNMjUwNzEwMDUwNzU1WjAYMRYwFAYD VQQDEw02ODY2MTAyYi02NWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAse38XmKfS2KpVJJzhUEcFPYySOMqEwbr968teG3AG7OitknkSy2nTrnJJXF5 0UpiwZS2ovkqzC5TZCwNv7/MhiXg7Sh/svZ/lvDlfkRWMEbg+XVSyxSGcQzvXeBQ PMSduMb8tdHCwD7HZ9jxkQUnJ8SujOg7wXWw6T828yOlP4qNJlV0DV6UWY2KxLft YOp8VBGDP4jYkezbb4fD/UZ2a4hw9hqlKPWth3c915QJE9nIYUF0T1eyDczRsqHs wJHTAfD5JhZI3Dvc+pP0gsRoiOyckcVeWFj2IU7ngivE2/4/3bWNT60aGifoFe4L yo2NjZnRqyJJzTKgDjZYSuZbKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMZ3h/S Gr3cnkPx3Z0OyMbNeVd3MB8GA1UdIwQYMBaAFB5XtD8ETUq6giKkCXhmFCgKpzmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTEyRi85NjREQzY5QUJB OEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNycUNJcVFKZUdZVUtBcW5P YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hsZTBQd1JOU3JxQ0lxUUplR1lVS0Fxbk9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTEyRi85NjREQzY5QUJBOEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNy cUNJcVFKZUdZVUtBcW5PYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAND3tARtG7yZBJSAPSY+mq10D5dFmHhu1F+EEXDUhzsOCu6spehjJ Q4dqYdvh2exTnNXwnA0VFtZfalz6a2yZlsKe4twiISGia0fAS7T4/jx1EU8LDiDe Ovmw0q7+RONxt89SZIxTxOxMZw0iiOy/5QYL6HeFkmZJQ/5IDIKAAYqtqtijfGm5 ME3i84M9xC7DTVlzlsvVgNRqiRFAod5LtcT+LokYKC5jCHUVFe1OYJvLP+qEvyra xUpIIQMF4ruzbZOl16w7POIpbwO1Q0MGEpLQQJMy9x9lubDrL5cd6qNEkL/az6I8 mBZLOxCQ6LCaZ2X4xzjJXe39lTNAa3Xm -----END CERTIFICATE-----Generated at Thu Jul 3 07:38:08 2025 by rpki-client