$ rpki-client -vvf rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft File: hhe5_iqn_uIl8uDS3IdkCYE33m0.mft (raw, json) Hash identifier: bt/Mo9laG5qvOfDWAMWwatfhvH8sdmKmFtjejaAH7H4= Subject key identifier: E4:44:6B:A7:47:F2:BC:FA:FF:36:08:5C:B9:82:E1:2D:8C:6B:A2:9A Authority key identifier: 86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D Certificate issuer: /CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Certificate serial: 09F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft Manifest number: 09EA Signing time: Sat 28 Jun 2025 19:35:09 +0000 Manifest this update: Sat 28 Jun 2025 19:35:08 +0000 Manifest next update: Sat 05 Jul 2025 19:35:08 +0000 Files and hashes: 1: hhe5_iqn_uIl8uDS3IdkCYE33m0.crl (hash: A4Re4YRCbKBVK51fwdgQhJA/Jsg/ml3rLqz2rp5Q+28=) 2: E118A9DA7CB911EABD07CE5EC4F9AE02.roa (hash: 3BzJCKxq6lxeVjXVlpYVRMXqU7zHik0ruN2Ba5iWxOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2545 (0x9f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117715, serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Validity Not Before: Jun 28 19:35:08 2025 GMT Not After : Jul 5 19:35:08 2025 GMT Subject: CN=686043ed-98ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4e:e6:c0:9a:f7:d2:0b:8f:30:ce:52:b1:c2: a2:a2:ed:a6:47:ed:bb:a7:ff:aa:c7:38:00:0c:3d: 0e:a3:f6:4a:cc:02:9f:3a:ff:d8:1a:fe:44:1f:f7: 63:ac:7b:a9:46:43:df:8f:10:30:1f:82:1f:4d:fe: b9:9f:29:64:96:9b:3f:11:88:05:2d:bc:8b:46:f2: 42:b7:56:0f:65:54:77:18:7e:81:5b:bb:ad:6b:fe: 7b:3b:d6:8f:cc:b9:6b:0d:18:98:6a:57:83:3a:27: 82:42:18:70:70:ce:11:94:21:0d:ca:93:89:b0:1d: a8:64:b4:7e:a1:fc:64:06:68:35:b8:e9:1b:45:69: 91:6f:19:1e:09:e6:16:31:83:0a:49:29:6c:02:53: ee:f3:32:bb:9f:10:77:d1:86:b1:e2:44:ca:85:be: 07:e8:1e:fa:f6:01:9a:7b:49:b1:62:81:4b:43:c5: 68:fa:9b:09:e1:99:3d:cf:07:a7:02:95:7e:22:1c: fc:ec:df:7b:01:79:3e:4c:11:22:93:d9:9d:c1:d3: 91:c7:d7:a9:a4:89:fd:dd:e3:69:c1:0b:c7:3b:cc: 0f:e8:de:5f:58:ff:85:4d:56:62:ec:45:7d:e8:bf: b4:8c:0a:f4:de:dd:07:03:a7:95:db:dd:69:45:1e: a9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:44:6B:A7:47:F2:BC:FA:FF:36:08:5C:B9:82:E1:2D:8C:6B:A2:9A X509v3 Authority Key Identifier: keyid:86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:a0:2c:4d:49:69:71:59:0a:60:45:b6:21:2f:ee:e8:e3:f4: f6:1d:bf:bb:fa:33:58:fd:2a:6a:4f:90:43:66:01:a8:36:c9: 40:1f:a8:e4:d6:3b:14:40:94:96:97:cb:0c:dd:ee:1e:48:ad: d3:05:91:7b:a8:3d:1e:be:4d:f3:48:0f:65:05:7e:fd:2a:7f: 57:81:3a:8c:b0:7b:4e:6c:cb:11:ed:7e:dc:ff:f4:76:50:95: 1e:fb:73:25:9a:2e:97:e7:9f:3b:06:41:23:ce:de:f0:ff:3b: b7:8c:66:cb:be:44:ac:f2:0e:99:16:99:02:7e:93:44:d5:94: a7:b6:05:5f:28:c8:41:19:73:a5:6c:8e:e2:95:d7:46:a0:9e: f7:ac:18:3b:25:4d:7b:9d:22:a6:09:07:c0:b9:b4:fa:3f:09: 26:68:b4:65:a1:e3:cf:d0:10:47:a3:a8:da:80:e8:ec:44:89: e6:f2:62:e9:49:71:ef:33:30:3d:ab:46:54:39:9c:d0:19:1c: 00:3e:28:40:cb:cf:9e:38:b4:f8:38:05:39:2d:02:48:d6:63: 5b:21:76:0b:94:b1:ce:c9:35:f2:cb:9f:27:5a:2b:61:28:40: df:31:f5:39:27:f9:bd:95:d2:88:08:44:20:bd:d3:33:f4:a0: 42:3e:52:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3MTUxMTAvBgNVBAUTKDg2MTdCOUZFMkFBN0ZFRTIyNUYyRTBEMkRDODc2NDA5 ODEzN0RFNkQwHhcNMjUwNjI4MTkzNTA4WhcNMjUwNzA1MTkzNTA4WjAYMRYwFAYD VQQDEw02ODYwNDNlZC05OGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E7mwJr30guPMM5SscKiou2mR+27p/+qxzgADD0Oo/ZKzAKfOv/YGv5EH/dj rHupRkPfjxAwH4IfTf65nylklps/EYgFLbyLRvJCt1YPZVR3GH6BW7uta/57O9aP zLlrDRiYaleDOieCQhhwcM4RlCENypOJsB2oZLR+ofxkBmg1uOkbRWmRbxkeCeYW MYMKSSlsAlPu8zK7nxB30Yax4kTKhb4H6B769gGae0mxYoFLQ8Vo+psJ4Zk9zwen ApV+Ihz87N97AXk+TBEik9mdwdORx9eppIn93eNpwQvHO8wP6N5fWP+FTVZi7EV9 6L+0jAr03t0HA6eV291pRR6pnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOREa6dH 8rz6/zYIXLmC4S2Ma6KaMB8GA1UdIwQYMBaAFIYXuf4qp/7iJfLg0tyHZAmBN95t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzcxNS9CQzFDNUYxMDdD QjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91SWw4dURTM0lka0NZRTMz bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hoZTVfaXFuX3VJbDh1RFMzSWRrQ1lFMzNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzcxNS9CQzFDNUYxMDdDQjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91 SWw4dURTM0lka0NZRTMzbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgoCxNSWlxWQpgRbYhL+7o4/T2Hb+7+jNY/SpqT5BDZgGoNslAH6jk 1jsUQJSWl8sM3e4eSK3TBZF7qD0evk3zSA9lBX79Kn9XgTqMsHtObMsR7X7c//R2 UJUe+3Mlmi6X5587BkEjzt7w/zu3jGbLvkSs8g6ZFpkCfpNE1ZSntgVfKMhBGXOl bI7ilddGoJ73rBg7JU17nSKmCQfAubT6PwkmaLRloePP0BBHo6jagOjsRInm8mLp SXHvMzA9q0ZUOZzQGRwAPihAy8+eOLT4OAU5LQJI1mNbIXYLlLHOyTXyy58nWith KEDfMfU5J/m9ldKICEQgvdMz9KBCPlIF -----END CERTIFICATE-----Generated at Mon Jun 30 00:31:48 2025 by rpki-client