$ rpki-client -vvf rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft File: hhe5_iqn_uIl8uDS3IdkCYE33m0.mft (raw, json) Hash identifier: aBQPS5Mf+VlPpqcoT8GFBcYYfnzCjea+j4cR51dwA3o= Subject key identifier: EF:F3:05:0B:F5:0A:74:04:53:84:F2:1F:24:3A:E0:CC:18:78:7B:6E Authority key identifier: 86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D Certificate issuer: /CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Certificate serial: 09D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft Manifest number: 09D0 Signing time: Tue 06 May 2025 19:50:14 +0000 Manifest this update: Tue 06 May 2025 19:50:13 +0000 Manifest next update: Tue 13 May 2025 19:50:13 +0000 Files and hashes: 1: hhe5_iqn_uIl8uDS3IdkCYE33m0.crl (hash: YT5zqzV2hnnKIUY6CtW5FVKNKQ6BUV3rl+0HEJ9Umrg=) 2: E118A9DA7CB911EABD07CE5EC4F9AE02.roa (hash: 3BzJCKxq6lxeVjXVlpYVRMXqU7zHik0ruN2Ba5iWxOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 19:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2519 (0x9d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117715, serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Validity Not Before: May 6 19:50:13 2025 GMT Not After : May 13 19:50:13 2025 GMT Subject: CN=681a67f5-5b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4f:51:ec:90:ec:46:4c:0a:0b:ef:c8:3a:bd: 51:99:c4:4c:a6:61:a0:9b:bc:56:ec:67:29:6f:35: f9:f6:10:ec:9a:74:51:91:89:4e:2f:06:4d:bf:c4: e5:f8:06:2a:c7:23:ce:39:dc:53:3d:f8:12:ab:02: 57:48:00:47:af:9a:7b:dd:a5:3b:e4:95:c8:1f:e5: 4a:02:52:e2:eb:67:3d:cf:b5:ca:e4:cf:5a:67:d7: a0:96:a2:11:df:84:36:be:5a:3e:54:b4:28:71:c6: 39:35:2b:f6:30:0b:80:ec:11:c8:09:ee:2d:d7:52: 9c:df:a2:e9:26:e3:1b:d1:53:83:43:93:e8:76:08: dc:ba:e2:e6:61:c5:18:3d:66:ed:62:f5:89:8e:61: c2:3f:08:42:32:68:2c:03:40:dd:f9:bc:03:88:fe: 23:74:5d:b5:df:3f:61:02:f0:46:a7:9a:ad:b5:c5: ca:d1:11:d6:23:d2:ae:7a:10:46:32:b1:95:27:a6: da:a6:06:f2:00:2d:7f:eb:0c:71:a7:05:e6:e8:7d: 72:e3:eb:08:6e:45:39:fb:fa:04:09:e0:a1:c8:a1: 52:d5:4d:44:8a:39:18:78:2b:0e:51:ae:a6:06:69: ae:e5:7e:64:d1:eb:06:98:99:15:5b:ea:58:3f:95: 52:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F3:05:0B:F5:0A:74:04:53:84:F2:1F:24:3A:E0:CC:18:78:7B:6E X509v3 Authority Key Identifier: keyid:86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:68:be:80:9a:21:1e:88:62:39:db:5d:13:ca:e2:b8:49:39: dc:b9:af:2c:b6:cf:51:c8:61:e4:9c:14:82:d7:61:4d:60:04: 7d:9e:27:12:80:bc:5d:e1:64:ff:ad:7b:97:61:cd:50:d6:cf: 47:d7:74:0f:cc:21:52:4c:39:d0:04:48:24:a8:b0:b0:e6:78: e9:44:71:33:71:ea:8e:cc:4d:88:d7:ab:31:a1:bb:51:be:7b: 14:d9:91:e1:ea:53:9d:46:83:59:f6:8b:c1:2c:06:69:18:b9: 79:7b:c4:1a:f7:5f:35:f4:bd:44:41:c8:8c:40:72:e6:38:82: 8b:36:0a:4d:71:d1:bb:20:6c:10:e2:d1:7c:53:06:94:c7:d1: 9e:a9:e0:76:c9:f6:c2:7c:b8:7a:2a:c0:7d:40:ec:7f:d5:74: 67:3c:f3:43:bd:52:53:ef:63:60:fb:7c:4f:6d:da:64:d8:a5: 0a:c2:7c:ed:d0:45:17:ea:20:10:00:f8:fe:1e:cc:8c:98:69: 36:0f:bd:ca:ab:d0:bc:fe:21:45:54:f0:97:a1:c0:0c:25:8d: cb:75:f3:9e:b4:33:7d:80:e4:b1:84:da:88:62:ec:cf:8d:41: 05:08:ec:5c:16:da:20:cf:7e:4e:27:0b:fd:75:91:9e:c0:0a: 27:fa:19:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3MTUxMTAvBgNVBAUTKDg2MTdCOUZFMkFBN0ZFRTIyNUYyRTBEMkRDODc2NDA5 ODEzN0RFNkQwHhcNMjUwNTA2MTk1MDEzWhcNMjUwNTEzMTk1MDEzWjAYMRYwFAYD VQQDEw02ODFhNjdmNS01YjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyU9R7JDsRkwKC+/IOr1RmcRMpmGgm7xW7GcpbzX59hDsmnRRkYlOLwZNv8Tl +AYqxyPOOdxTPfgSqwJXSABHr5p73aU75JXIH+VKAlLi62c9z7XK5M9aZ9eglqIR 34Q2vlo+VLQoccY5NSv2MAuA7BHICe4t11Kc36LpJuMb0VODQ5PodgjcuuLmYcUY PWbtYvWJjmHCPwhCMmgsA0Dd+bwDiP4jdF213z9hAvBGp5qttcXK0RHWI9KuehBG MrGVJ6bapgbyAC1/6wxxpwXm6H1y4+sIbkU5+/oECeChyKFS1U1EijkYeCsOUa6m Bmmu5X5k0esGmJkVW+pYP5VSzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/zBQv1 CnQEU4TyHyQ64MwYeHtuMB8GA1UdIwQYMBaAFIYXuf4qp/7iJfLg0tyHZAmBN95t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzcxNS9CQzFDNUYxMDdD QjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91SWw4dURTM0lka0NZRTMz bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hoZTVfaXFuX3VJbDh1RFMzSWRrQ1lFMzNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzcxNS9CQzFDNUYxMDdDQjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91 SWw4dURTM0lka0NZRTMzbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJaL6AmiEeiGI5210TyuK4STncua8sts9RyGHknBSC12FNYAR9nicS gLxd4WT/rXuXYc1Q1s9H13QPzCFSTDnQBEgkqLCw5njpRHEzceqOzE2I16sxobtR vnsU2ZHh6lOdRoNZ9ovBLAZpGLl5e8Qa91819L1EQciMQHLmOIKLNgpNcdG7IGwQ 4tF8UwaUx9GeqeB2yfbCfLh6KsB9QOx/1XRnPPNDvVJT72Ng+3xPbdpk2KUKwnzt 0EUX6iAQAPj+HsyMmGk2D73Kq9C8/iFFVPCXocAMJY3LdfOetDN9gOSxhNqIYuzP jUEFCOxcFtogz35OJwv9dZGewAon+hlN -----END CERTIFICATE-----Generated at Thu May 8 08:05:47 2025 by rpki-client