$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft File: HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft (raw, json) Hash identifier: v4IVAgREGhPUeA/9AI9WXjL4MYEnl7xF3gzvzaNRpss= Subject key identifier: 22:D1:6E:3F:CB:1B:2E:AE:0B:0D:4B:91:D4:5F:AA:85:9F:5A:FF:CD Authority key identifier: 1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 Certificate issuer: /CN=A913277C/serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft Manifest number: 0191 Signing time: Sun 11 May 2025 02:26:55 +0000 Manifest this update: Sun 11 May 2025 02:26:54 +0000 Manifest next update: Sun 18 May 2025 02:26:54 +0000 Files and hashes: 1: HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl (hash: nJFk/rRUEEybKVgp28XPQtsLQTZJdrW69Ffc9cPo78w=) 2: 1EF2D862C9F511ED8771C865C4F9AE02.roa (hash: EksXJqRj0KH07WsHueUwybeZ3O7OwOE6F+VFPhINzRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913277C, serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Validity Not Before: May 11 02:26:54 2025 GMT Not After : May 18 02:26:54 2025 GMT Subject: CN=68200aef-9493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2e:69:ff:b3:65:0a:22:44:45:bf:76:0b:1c: 58:34:99:7e:d9:67:a0:5c:b4:8c:4b:f3:a7:24:15: 26:a1:4a:d5:bd:e3:c2:ff:d0:24:69:0a:38:bf:90: a6:3d:bc:19:e8:3f:eb:30:43:08:eb:5c:4b:36:a3: af:a6:ae:3a:00:b9:cc:9c:22:9e:ed:47:a1:31:28: cd:de:b2:6f:41:de:d9:04:f0:df:a9:0c:e8:fe:9b: 8b:11:17:ea:7f:6b:d1:97:1f:69:db:b1:00:fe:c2: 7d:18:f7:b1:f1:f6:00:f8:b3:8a:e8:b7:d2:47:a4: b7:9b:f4:51:51:4e:ce:a0:19:5f:97:d9:50:cf:3a: c6:d7:a4:cb:ec:4d:79:e6:51:15:c0:0f:be:9d:49: d1:e8:98:c9:cd:e0:45:82:ed:ec:b9:06:5b:40:01: a9:33:63:05:bc:fa:65:97:01:8c:00:d2:03:b7:5b: a1:85:55:04:36:c3:cc:10:3b:a5:1f:4a:e9:06:cf: 8a:31:3c:ef:58:42:bd:db:8f:36:56:b0:08:1d:7f: eb:61:ff:f4:46:ef:92:ba:97:2e:4b:00:52:6d:63: 2d:b6:3f:24:5b:9c:ca:cf:de:07:59:7a:31:40:e2: a9:ec:6a:65:dc:ab:db:e8:df:e6:e3:1c:1b:81:1e: 12:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D1:6E:3F:CB:1B:2E:AE:0B:0D:4B:91:D4:5F:AA:85:9F:5A:FF:CD X509v3 Authority Key Identifier: keyid:1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:88:8e:d0:bd:d5:e1:3a:79:9d:96:17:2c:c4:a6:46:5b:c3: 1c:bc:fc:11:6c:4e:96:66:16:3b:96:f0:c8:9e:e7:b5:ad:90: 5f:da:39:98:f4:3e:67:d1:7b:ac:a8:f6:30:4a:8f:99:f9:bf: 50:88:a1:8f:df:e2:da:88:b3:7e:a3:bd:dd:c7:3a:16:88:de: 21:aa:ef:5a:db:42:ce:ee:ed:c5:f0:71:04:16:08:3e:46:df: 69:ef:0c:c1:6e:68:80:c7:f0:af:ac:ee:e5:09:b0:c5:e7:9e: c3:d8:69:03:4f:2b:ab:21:3e:e1:e4:42:eb:54:c5:20:e7:79: 68:1b:3b:e7:1b:4f:db:6f:93:6a:72:88:19:67:c1:7e:50:00: 0e:8a:3a:8e:c5:d1:2b:d1:d2:92:c8:11:77:02:fd:4e:8b:90: d6:71:71:5b:b6:2f:b5:6b:b2:80:99:3a:30:38:14:4d:6b:96: 66:f2:9f:24:25:0e:7b:3f:c2:be:21:73:84:14:87:bf:c0:4c: 53:3a:44:0d:c0:56:50:68:2a:51:5b:8d:79:12:2f:a0:32:93: 60:22:08:d8:b6:14:b6:91:dc:b0:f8:50:a6:33:59:f9:ed:44: 70:be:a0:ca:93:f1:a7:be:70:2e:c0:8a:65:f3:96:ef:0f:0b: 61:46:38:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3N0MxMTAvBgNVBAUTKDFDRDQ5RUZCQzM3RUY0QThDNkM4ODc2NTYyQkQxMTMz NDRCQzdFRDEwHhcNMjUwNTExMDIyNjU0WhcNMjUwNTE4MDIyNjU0WjAYMRYwFAYD VQQDEw02ODIwMGFlZi05NDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArS5p/7NlCiJERb92CxxYNJl+2WegXLSMS/OnJBUmoUrVvePC/9AkaQo4v5Cm PbwZ6D/rMEMI61xLNqOvpq46ALnMnCKe7UehMSjN3rJvQd7ZBPDfqQzo/puLERfq f2vRlx9p27EA/sJ9GPex8fYA+LOK6LfSR6S3m/RRUU7OoBlfl9lQzzrG16TL7E15 5lEVwA++nUnR6JjJzeBFgu3suQZbQAGpM2MFvPpllwGMANIDt1uhhVUENsPMEDul H0rpBs+KMTzvWEK92482VrAIHX/rYf/0Ru+SupcuSwBSbWMttj8kW5zKz94HWXox QOKp7Gpl3Kvb6N/m4xwbgR4SWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLRbj/L Gy6uCw1LkdRfqoWfWv/NMB8GA1UdIwQYMBaAFBzUnvvDfvSoxsiHZWK9ETNEvH7R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc3Qy9COTdDNzM5NkM5 RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlLakd5SWRsWXIwUk0wUzhm dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hOU2UtOE4tOUtqR3lJZGxZcjBSTTBTOGZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc3Qy9COTdDNzM5NkM5RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlL akd5SWRsWXIwUk0wUzhmdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANiI7QvdXhOnmdlhcsxKZGW8McvPwRbE6WZhY7lvDInue1rZBf2jmY 9D5n0XusqPYwSo+Z+b9QiKGP3+LaiLN+o73dxzoWiN4hqu9a20LO7u3F8HEEFgg+ Rt9p7wzBbmiAx/CvrO7lCbDF557D2GkDTyurIT7h5ELrVMUg53loGzvnG0/bb5Nq cogZZ8F+UAAOijqOxdEr0dKSyBF3Av1Oi5DWcXFbti+1a7KAmTowOBRNa5Zm8p8k JQ57P8K+IXOEFIe/wExTOkQNwFZQaCpRW415Ei+gMpNgIgjYthS2kdyw+FCmM1n5 7URwvqDKk/GnvnAuwIpl85bvDwthRjiH -----END CERTIFICATE-----Generated at Sun May 11 15:49:49 2025 by rpki-client