$ rpki-client -vvf rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft File: hhe5_iqn_uIl8uDS3IdkCYE33m0.mft (raw, json) Hash identifier: IGN1DEaBFv1F0UTLBwB2YWIxgebHKJKvGdjKf8/mAPU= Subject key identifier: 24:C8:7D:95:3C:93:3A:6E:28:25:44:A2:DE:D8:96:BB:54:36:4B:A3 Authority key identifier: 86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D Certificate issuer: /CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Certificate serial: 0A0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft Manifest number: 0A06 Signing time: Fri 22 Aug 2025 19:57:56 +0000 Manifest this update: Fri 22 Aug 2025 19:57:55 +0000 Manifest next update: Fri 29 Aug 2025 19:57:55 +0000 Files and hashes: 1: hhe5_iqn_uIl8uDS3IdkCYE33m0.crl (hash: 1+7r0pqMvAgi7wKVLQAhhqqETvkkMSxKW8OqKgSgaIw=) 2: E118A9DA7CB911EABD07CE5EC4F9AE02.roa (hash: 3BzJCKxq6lxeVjXVlpYVRMXqU7zHik0ruN2Ba5iWxOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2573 (0xa0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117715, serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Validity Not Before: Aug 22 19:57:55 2025 GMT Not After : Aug 29 19:57:55 2025 GMT Subject: CN=68a8cbc3-0d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ef:74:09:8d:07:07:1c:7b:cb:d6:38:03:44: 33:3c:cc:82:06:c4:e8:bc:2c:05:51:7f:e7:6b:83: 85:da:01:40:24:01:9e:27:28:f6:86:f1:97:62:77: c7:08:9f:88:70:7a:29:53:3f:42:74:6a:5d:5c:5a: 07:c9:f9:ec:86:c3:56:37:9a:4f:e9:d3:66:82:ca: 3b:02:28:e3:60:3f:b1:bc:f4:31:ae:9b:87:32:a7: 1c:da:ca:31:ac:57:36:5a:4a:00:56:30:38:2f:1d: dd:7c:7e:fe:a6:f5:ee:8d:86:32:c2:1a:c6:00:04: 5e:b8:15:ca:84:49:61:37:e8:5e:8e:52:16:cd:28: f4:3d:88:ff:4e:d8:47:a3:84:73:6c:18:4b:f0:60: 49:d2:52:40:32:22:9b:cb:33:c2:f9:c4:c7:39:61: 43:57:f0:d5:b1:18:b1:5a:86:b1:13:a8:38:c1:37: 48:c2:37:03:03:44:82:71:1b:60:35:e9:cd:66:96: 05:14:61:84:44:ba:ce:c1:04:ae:f7:4b:dd:3b:cd: f9:86:8f:2e:62:a2:74:27:d4:a3:9c:58:40:1b:25: 5c:8a:71:1b:28:77:bd:5c:8e:1b:45:e2:cb:ab:dc: 1c:d4:1f:6e:4f:be:61:e5:88:3d:26:4a:4c:90:2e: 39:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C8:7D:95:3C:93:3A:6E:28:25:44:A2:DE:D8:96:BB:54:36:4B:A3 X509v3 Authority Key Identifier: keyid:86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:29:89:f6:fc:64:b7:8b:56:75:57:bb:d4:29:2a:df:d7:29: 50:38:5f:29:ef:ea:41:ac:68:76:31:f6:ca:82:93:f1:4b:c8: 12:c9:de:ad:48:62:7f:ae:13:0e:77:8a:51:dd:99:f1:16:72: 60:69:69:5e:c0:90:86:9d:dd:e6:21:38:8f:82:af:2e:e7:b4: c3:17:61:4b:46:d2:4a:4d:2e:83:d6:89:0a:c5:53:9f:7d:c3: 82:cd:64:95:d6:2c:3f:36:c1:5d:ea:c4:c5:d4:d7:94:a6:d3: 87:10:a7:5e:2a:d6:8f:ba:ba:3d:bd:d3:30:d7:fe:bf:ac:b9: c9:9e:60:c9:d3:c3:32:69:fd:03:d7:59:8e:4c:cd:69:89:7c: a2:f8:57:fd:2f:76:11:ea:62:19:5e:ae:79:c0:9b:f1:64:a0: a0:41:76:61:a4:10:80:df:ec:a2:f4:2f:76:20:e2:f8:2c:65: bc:ac:54:0f:ff:4b:74:57:3f:4e:d2:c3:70:ae:32:74:01:b0: 69:77:0c:f9:b8:25:17:07:37:75:c5:2a:28:65:68:7e:f3:51: 99:64:7e:54:a4:15:87:66:20:76:38:f1:40:5a:b4:51:62:5c: d0:72:56:3e:01:3d:06:23:49:6a:b1:b0:8c:f5:d8:29:71:30: d9:e9:e5:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3MTUxMTAvBgNVBAUTKDg2MTdCOUZFMkFBN0ZFRTIyNUYyRTBEMkRDODc2NDA5 ODEzN0RFNkQwHhcNMjUwODIyMTk1NzU1WhcNMjUwODI5MTk1NzU1WjAYMRYwFAYD VQQDEw02OGE4Y2JjMy0wZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxu90CY0HBxx7y9Y4A0QzPMyCBsTovCwFUX/na4OF2gFAJAGeJyj2hvGXYnfH CJ+IcHopUz9CdGpdXFoHyfnshsNWN5pP6dNmgso7AijjYD+xvPQxrpuHMqcc2sox rFc2WkoAVjA4Lx3dfH7+pvXujYYywhrGAAReuBXKhElhN+hejlIWzSj0PYj/TthH o4RzbBhL8GBJ0lJAMiKbyzPC+cTHOWFDV/DVsRixWoaxE6g4wTdIwjcDA0SCcRtg NenNZpYFFGGERLrOwQSu90vdO835ho8uYqJ0J9SjnFhAGyVcinEbKHe9XI4bReLL q9wc1B9uT75h5Yg9JkpMkC45sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTIfZU8 kzpuKCVEot7YlrtUNkujMB8GA1UdIwQYMBaAFIYXuf4qp/7iJfLg0tyHZAmBN95t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzcxNS9CQzFDNUYxMDdD QjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91SWw4dURTM0lka0NZRTMz bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hoZTVfaXFuX3VJbDh1RFMzSWRrQ1lFMzNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzcxNS9CQzFDNUYxMDdDQjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91 SWw4dURTM0lka0NZRTMzbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0KYn2/GS3i1Z1V7vUKSrf1ylQOF8p7+pBrGh2MfbKgpPxS8gSyd6t SGJ/rhMOd4pR3ZnxFnJgaWlewJCGnd3mITiPgq8u57TDF2FLRtJKTS6D1okKxVOf fcOCzWSV1iw/NsFd6sTF1NeUptOHEKdeKtaPuro9vdMw1/6/rLnJnmDJ08Myaf0D 11mOTM1piXyi+Ff9L3YR6mIZXq55wJvxZKCgQXZhpBCA3+yi9C92IOL4LGW8rFQP /0t0Vz9O0sNwrjJ0AbBpdwz5uCUXBzd1xSooZWh+81GZZH5UpBWHZiB2OPFAWrRR YlzQclY+AT0GI0lqsbCM9dgpcTDZ6eXA -----END CERTIFICATE-----Generated at Sat Aug 23 15:23:34 2025 by rpki-client