$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft File: HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft (raw, json) Hash identifier: qQP4yzYSQ8MzrSX4BypokImxIwGurcGcxSQEW1y7+L0= Subject key identifier: F1:2C:35:2D:CD:79:9D:E9:4D:07:63:25:60:AF:B7:A1:D2:FA:32:EB Authority key identifier: 1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 Certificate issuer: /CN=A913277C/serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft Manifest number: 01AC Signing time: Sat 05 Jul 2025 03:29:37 +0000 Manifest this update: Sat 05 Jul 2025 03:29:36 +0000 Manifest next update: Sat 12 Jul 2025 03:29:36 +0000 Files and hashes: 1: HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl (hash: pWqZGd7xo6BWti0qwVPzKbXd1qZBlItbTCGcIiUE++g=) 2: 1EF2D862C9F511ED8771C865C4F9AE02.roa (hash: EksXJqRj0KH07WsHueUwybeZ3O7OwOE6F+VFPhINzRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913277C, serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Validity Not Before: Jul 5 03:29:36 2025 GMT Not After : Jul 12 03:29:36 2025 GMT Subject: CN=68689c20-5c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:56:b5:5a:e1:82:8c:ab:d5:5b:d4:46:31:76: 07:92:2d:62:8a:46:5f:81:0d:36:37:3f:83:66:eb: 15:c2:94:ce:27:e9:95:22:c6:43:37:94:91:ad:71: 3d:24:0f:61:dd:1f:7b:1c:e6:43:4c:f7:cf:87:dc: 7d:f4:ab:68:26:a3:0f:a5:02:7b:72:00:56:32:b3: fd:dd:ea:fa:ac:7d:77:38:42:ac:af:e1:60:b4:fb: f4:ad:8e:b4:05:65:e9:6b:be:25:2e:47:46:f6:b6: 4b:95:69:1c:88:bc:30:05:a0:bf:50:d2:fe:7a:19: e4:6d:a3:12:d6:44:89:b5:b8:27:ec:64:e5:10:e3: d5:18:b5:d0:54:d9:75:dc:1e:d2:fe:da:92:8e:10: 5d:bc:80:5f:25:19:ec:c5:f4:65:65:8d:1c:eb:f7: 14:1a:7a:44:a8:9f:41:da:9b:7a:f1:94:26:15:88: cd:6b:2b:94:af:92:27:65:4c:93:73:4e:5e:70:54: e2:69:c5:48:68:63:69:1d:ac:80:ce:c3:00:9e:0f: df:52:18:a9:b8:09:83:6e:24:7b:0f:31:6d:7d:19: 1d:ae:a4:70:67:ab:4d:4b:7f:53:39:79:58:ff:a2: d8:07:da:75:3d:a0:dd:de:23:2c:66:4a:84:1a:94: fc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2C:35:2D:CD:79:9D:E9:4D:07:63:25:60:AF:B7:A1:D2:FA:32:EB X509v3 Authority Key Identifier: keyid:1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:84:ca:fe:69:48:78:00:83:70:f1:d5:8b:8b:26:6c:3e:e6: 45:3e:1c:dc:7c:6f:00:8a:9d:0c:de:69:a7:8d:84:99:3a:0d: f4:e7:7d:f9:fe:f5:46:b4:ce:a2:10:ad:2c:92:22:28:a8:d9: d8:20:82:20:33:25:ef:3f:38:36:5d:9c:64:b0:50:7a:ff:9b: f1:0b:d2:5d:dd:76:a5:a9:53:fd:c1:1f:6e:9b:c0:fb:78:f7: 60:b5:f4:a9:f8:97:d9:e5:bf:a0:3c:12:e1:7c:9b:88:90:81: 7d:f7:c9:b2:25:0e:6b:c7:34:5a:2d:6a:71:ff:6d:7a:e6:f1: ba:1b:5f:ab:cf:94:3e:55:69:4e:cd:91:1b:b1:4a:2c:c9:73: 1a:84:57:30:82:31:e7:95:13:38:41:a2:95:47:8e:aa:51:9b: d2:ce:77:51:7e:92:0a:13:88:12:d1:1c:16:dd:19:16:20:04: 83:b9:c6:f7:e2:45:11:d9:d4:b7:d7:1c:f6:03:43:9b:82:3f: 7a:b9:62:24:91:12:fe:1f:fe:c3:c8:38:9d:8d:cf:b7:bc:02: e8:fa:9b:3d:1c:47:31:ea:0f:83:35:26:ee:1b:cd:ff:ab:64: b4:fb:7a:b1:f1:c4:00:be:9f:4b:14:c9:9e:ab:d0:aa:19:b0: 6c:f5:d3:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3N0MxMTAvBgNVBAUTKDFDRDQ5RUZCQzM3RUY0QThDNkM4ODc2NTYyQkQxMTMz NDRCQzdFRDEwHhcNMjUwNzA1MDMyOTM2WhcNMjUwNzEyMDMyOTM2WjAYMRYwFAYD VQQDEw02ODY4OWMyMC01Yzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1a1WuGCjKvVW9RGMXYHki1iikZfgQ02Nz+DZusVwpTOJ+mVIsZDN5SRrXE9 JA9h3R97HOZDTPfPh9x99KtoJqMPpQJ7cgBWMrP93er6rH13OEKsr+FgtPv0rY60 BWXpa74lLkdG9rZLlWkciLwwBaC/UNL+ehnkbaMS1kSJtbgn7GTlEOPVGLXQVNl1 3B7S/tqSjhBdvIBfJRnsxfRlZY0c6/cUGnpEqJ9B2pt68ZQmFYjNayuUr5InZUyT c05ecFTiacVIaGNpHayAzsMAng/fUhipuAmDbiR7DzFtfRkdrqRwZ6tNS39TOXlY /6LYB9p1PaDd3iMsZkqEGpT8vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEsNS3N eZ3pTQdjJWCvt6HS+jLrMB8GA1UdIwQYMBaAFBzUnvvDfvSoxsiHZWK9ETNEvH7R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc3Qy9COTdDNzM5NkM5 RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlLakd5SWRsWXIwUk0wUzhm dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hOU2UtOE4tOUtqR3lJZGxZcjBSTTBTOGZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc3Qy9COTdDNzM5NkM5RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlL akd5SWRsWXIwUk0wUzhmdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIhMr+aUh4AINw8dWLiyZsPuZFPhzcfG8Aip0M3mmnjYSZOg305335 /vVGtM6iEK0skiIoqNnYIIIgMyXvPzg2XZxksFB6/5vxC9Jd3XalqVP9wR9um8D7 ePdgtfSp+JfZ5b+gPBLhfJuIkIF998myJQ5rxzRaLWpx/2165vG6G1+rz5Q+VWlO zZEbsUosyXMahFcwgjHnlRM4QaKVR46qUZvSzndRfpIKE4gS0RwW3RkWIASDucb3 4kUR2dS31xz2A0Obgj96uWIkkRL+H/7DyDidjc+3vALo+ps9HEcx6g+DNSbuG83/ q2S0+3qx8cQAvp9LFMmeq9CqGbBs9dMH -----END CERTIFICATE-----Generated at Sat Jul 5 21:01:51 2025 by rpki-client