$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft File: hoEbsmeu-FQA2-cpcCMtQRotmuk.mft (raw, json) Hash identifier: 7h2qOOXCOWY/x3Re/JcWnq+6SVQ2dTXnByVV1NNcFfY= Subject key identifier: E9:7F:0E:DE:BE:7E:66:55:F7:FB:41:54:93:E5:D3:17:E3:A9:FE:11 Authority key identifier: 86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9 Certificate issuer: /CN=A913AE7C/serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9 Certificate serial: 0BBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft Manifest number: 0BB9 Signing time: Mon 30 Jun 2025 19:05:15 +0000 Manifest this update: Mon 30 Jun 2025 19:05:15 +0000 Manifest next update: Mon 07 Jul 2025 19:05:15 +0000 Files and hashes: 1: hoEbsmeu-FQA2-cpcCMtQRotmuk.crl (hash: T0DYk8k0L/xVBgeME+JutDz8F/Ajd2HiYFsyufKnPgw=) 2: CE9692E0222311EAAED0162CC4F9AE02.roa (hash: CvAiV/QKU9nzbsmVn16l0FaQPJa5PJfMBf74/ijJ5jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3007 (0xbbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE7C, serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9 Validity Not Before: Jun 30 19:05:15 2025 GMT Not After : Jul 7 19:05:15 2025 GMT Subject: CN=6862dfeb-123f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:23:9c:65:97:5a:a7:33:d7:12:a9:ff:1f:23: 9b:ae:b3:8d:81:fa:30:2d:04:a2:4c:d5:7c:ee:8d: 25:69:be:17:72:45:e8:e7:a4:fc:5a:77:31:51:81: 8d:f2:86:dc:a5:64:d0:38:ee:6c:3a:32:36:a3:a8: 6c:0e:20:63:32:f7:24:8e:de:29:dc:20:e5:03:23: f0:bb:79:22:65:30:3b:63:1b:fe:b2:49:d7:05:fc: 26:ed:63:bf:a9:78:0a:33:d1:d9:8f:68:f0:fd:84: 35:93:43:98:72:c5:31:00:94:ac:00:96:a4:df:f9: 53:89:b7:bc:6b:11:be:a8:12:4f:50:ea:00:d5:ab: a0:32:31:10:61:29:18:a7:b1:b4:12:4e:6c:96:47: c2:fe:3a:b0:fa:6a:02:28:ce:41:ac:b7:86:f8:2e: e3:a9:8c:83:34:68:bc:0a:09:fb:9e:e4:2c:db:6d: f6:87:5a:2c:c0:47:71:f6:1e:29:44:45:d8:4e:01: f3:7a:70:01:34:e4:ed:fc:1c:22:ba:bb:b6:57:a0: 92:2f:79:a1:43:b5:84:a7:e0:c2:42:f8:10:1b:69: 73:46:a3:36:d2:5c:5a:98:34:6a:84:dc:7d:37:ab: 40:c2:e9:08:c3:ef:7c:f9:e4:90:40:11:b1:92:7d: b5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7F:0E:DE:BE:7E:66:55:F7:FB:41:54:93:E5:D3:17:E3:A9:FE:11 X509v3 Authority Key Identifier: keyid:86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:44:f2:7e:46:d4:76:e2:d9:6e:f4:cb:6a:69:7b:7b:a1:88: 72:ff:b3:79:50:07:7b:f6:cc:14:01:9b:e5:01:42:97:ac:87: 68:31:5a:75:6d:2f:97:fd:2e:51:a4:76:3d:c4:eb:91:b4:8f: e1:87:a2:ed:48:04:86:c1:26:16:f8:56:d4:1a:32:14:fe:56: be:b5:8d:ae:b0:89:71:44:5c:9b:c7:b5:43:38:92:3e:e2:64: 8b:67:29:49:1c:dd:47:f0:08:82:43:8b:6f:f6:11:ff:94:b9: b2:35:69:75:f0:22:79:82:5b:7c:78:7d:3e:ab:4c:5e:19:66: a6:5f:ac:3a:71:47:3a:99:45:f9:53:3c:e3:fa:0c:29:ba:8a: a4:88:c3:a7:46:f2:11:a4:ca:e8:12:fe:91:e4:5d:dd:cb:76: e4:09:cf:c2:0a:15:7f:5c:4f:be:30:f8:b2:73:f2:2d:1a:67: b1:ba:18:7d:08:90:aa:c4:1a:22:fa:a1:ed:08:2f:b6:b5:84: d1:62:82:ba:ed:d2:71:32:c1:78:8c:f4:de:de:2a:26:19:b4: c6:45:f0:e2:b9:8a:fc:88:4e:c2:fb:99:5a:e8:a3:f2:ab:eb: 23:75:a1:1f:91:cc:ac:7e:2f:fe:3c:2b:bb:91:a5:89:f2:c6: c9:d5:70:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFN0MxMTAvBgNVBAUTKDg2ODExQkIyNjdBRUY4NTQwMERCRTcyOTcwMjMyRDQx MUEyRDlBRTkwHhcNMjUwNjMwMTkwNTE1WhcNMjUwNzA3MTkwNTE1WjAYMRYwFAYD VQQDEw02ODYyZGZlYi0xMjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+yOcZZdapzPXEqn/HyObrrONgfowLQSiTNV87o0lab4XckXo56T8WncxUYGN 8obcpWTQOO5sOjI2o6hsDiBjMvckjt4p3CDlAyPwu3kiZTA7Yxv+sknXBfwm7WO/ qXgKM9HZj2jw/YQ1k0OYcsUxAJSsAJak3/lTibe8axG+qBJPUOoA1augMjEQYSkY p7G0Ek5slkfC/jqw+moCKM5BrLeG+C7jqYyDNGi8Cgn7nuQs2232h1oswEdx9h4p REXYTgHzenABNOTt/Bwiuru2V6CSL3mhQ7WEp+DCQvgQG2lzRqM20lxamDRqhNx9 N6tAwukIw+98+eSQQBGxkn21dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOl/Dt6+ fmZV9/tBVJPl0xfjqf4RMB8GA1UdIwQYMBaAFIaBG7JnrvhUANvnKXAjLUEaLZrp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3Qy9GMzQwN0U1NDIy MjIxMUVBODc3REQ1MkFDNEY5QUUwMi9ob0Vic21ldS1GUUEyLWNwY0NNdFFSb3Rt dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvRWJzbWV1LUZRQTItY3BjQ010UVJvdG11ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU3Qy9GMzQwN0U1NDIyMjIxMUVBODc3REQ1MkFDNEY5QUUwMi9ob0Vic21ldS1G UUEyLWNwY0NNdFFSb3RtdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdRPJ+RtR24tlu9MtqaXt7oYhy/7N5UAd79swUAZvlAUKXrIdoMVp1 bS+X/S5RpHY9xOuRtI/hh6LtSASGwSYW+FbUGjIU/la+tY2usIlxRFybx7VDOJI+ 4mSLZylJHN1H8AiCQ4tv9hH/lLmyNWl18CJ5glt8eH0+q0xeGWamX6w6cUc6mUX5 Uzzj+gwpuoqkiMOnRvIRpMroEv6R5F3dy3bkCc/CChV/XE++MPiyc/ItGmexuhh9 CJCqxBoi+qHtCC+2tYTRYoK67dJxMsF4jPTe3iomGbTGRfDiuYr8iE7C+5la6KPy q+sjdaEfkcysfi/+PCu7kaWJ8sbJ1XDU -----END CERTIFICATE-----Generated at Wed Jul 2 07:13:05 2025 by rpki-client