$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft File: hoEbsmeu-FQA2-cpcCMtQRotmuk.mft (raw, json) Hash identifier: 79/uJwHmjF/7J5AqHVFr70lQruEPzW0dWErZN3ZRy7k= Subject key identifier: 67:A3:07:97:BA:07:80:78:7B:C1:4C:5B:8A:2D:CB:5F:E2:44:76:89 Authority key identifier: 86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9 Certificate issuer: /CN=A913AE7C/serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9 Certificate serial: 0BDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft Manifest number: 0BD6 Signing time: Fri 22 Aug 2025 19:00:55 +0000 Manifest this update: Fri 22 Aug 2025 19:00:54 +0000 Manifest next update: Fri 29 Aug 2025 19:00:54 +0000 Files and hashes: 1: hoEbsmeu-FQA2-cpcCMtQRotmuk.crl (hash: 2dQ6KLnR5daV/CWUWuHHuKfDFljZE+31mF2uQvimlaI=) 2: CE9692E0222311EAAED0162CC4F9AE02.roa (hash: 6S9iC+lPGI+USP0kW2oo4gsRf8UiFa21s5yfHc7liEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3037 (0xbdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE7C, serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9 Validity Not Before: Aug 22 19:00:54 2025 GMT Not After : Aug 29 19:00:54 2025 GMT Subject: CN=68a8be66-50c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:04:75:06:af:ad:ea:27:20:5c:fd:ae:b8: 42:9b:50:7b:96:ea:2d:25:f6:16:39:77:0c:f8:03: e5:e8:a8:34:d6:41:ba:f9:0e:0a:80:dd:d5:16:28: fc:c0:4d:8b:00:88:2a:d0:fa:3e:15:25:d5:e6:a0: e8:f2:29:7e:8c:b2:bc:81:1f:fb:e1:1f:26:f1:2a: a7:a3:ed:f3:4e:14:a0:2e:42:29:2a:28:50:7c:71: c3:20:d1:6c:9c:cf:21:a2:c6:98:26:b4:f2:c5:53: 9d:25:1c:1f:3d:38:8f:d9:45:06:03:b7:e2:db:df: 2e:15:ed:5f:e6:b9:ca:4b:2c:5c:e8:fa:6f:f7:14: 90:5d:b6:56:42:7d:2a:21:c4:59:e2:cf:8d:61:2e: ed:e5:e2:7e:4c:d1:49:ae:50:c7:f7:2a:d5:84:50: 1c:85:bf:fe:f2:79:ee:18:06:06:1b:19:d7:18:62: 83:a5:ca:23:17:02:88:63:1a:b4:8c:f4:8f:66:d4: 49:4a:d4:0f:b9:15:0a:23:c7:b1:fa:29:5f:eb:15: c6:87:06:95:6d:01:80:6c:3a:06:91:52:10:f1:ca: 49:00:80:c3:df:35:b6:0f:65:3f:9e:2a:44:c5:45: 7b:8f:21:a0:35:c1:2f:5d:ca:88:52:d1:51:9b:3b: ac:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A3:07:97:BA:07:80:78:7B:C1:4C:5B:8A:2D:CB:5F:E2:44:76:89 X509v3 Authority Key Identifier: keyid:86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7c:c3:15:9d:9c:9b:c9:43:e2:12:94:1b:9c:1f:aa:a4:76: 96:98:a3:04:a8:48:87:c1:d5:8e:b1:b6:ee:b9:d4:fc:88:a6: f2:d7:a9:7e:ec:51:f5:4f:ad:04:75:2c:d6:bd:ec:3b:39:81: 7e:6e:40:4d:ec:ca:97:18:c6:57:2e:12:da:77:5b:76:20:9e: 47:19:c6:1e:3d:c0:86:44:0d:b5:47:cd:d6:95:34:40:4e:3a: 2a:73:90:1c:ed:40:1a:3e:39:a8:12:bf:cf:ee:11:78:83:a4: 4b:fc:fc:5a:1d:3e:00:f3:7a:0e:8c:bb:ad:f8:ab:66:7a:d5: 97:6b:d1:40:09:e7:08:2f:6e:73:49:68:02:83:a0:b2:b4:0d: 64:31:e2:88:8b:2a:f3:f1:93:c3:e0:6d:99:36:f3:06:86:54: 09:12:b0:bf:39:f2:db:83:cb:b1:86:bb:38:8e:1f:ca:b4:a9: 6c:e9:e0:d4:be:ae:06:4d:84:a8:6b:05:39:63:96:0a:95:cc: 0e:dd:e7:02:5a:66:8b:f1:76:11:58:81:bb:ff:ca:2d:20:0c: 5e:11:e7:0d:91:fb:93:cf:91:7c:61:41:36:40:8b:44:bd:28: e9:88:d6:91:87:e9:fb:7e:38:55:f6:1c:9d:1d:7e:3c:fc:2c: fa:e7:89:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFN0MxMTAvBgNVBAUTKDg2ODExQkIyNjdBRUY4NTQwMERCRTcyOTcwMjMyRDQx MUEyRDlBRTkwHhcNMjUwODIyMTkwMDU0WhcNMjUwODI5MTkwMDU0WjAYMRYwFAYD VQQDEw02OGE4YmU2Ni01MGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQgEdQavreonIFz9rrhCm1B7luotJfYWOXcM+APl6Kg01kG6+Q4KgN3VFij8 wE2LAIgq0Po+FSXV5qDo8il+jLK8gR/74R8m8Sqno+3zThSgLkIpKihQfHHDINFs nM8hosaYJrTyxVOdJRwfPTiP2UUGA7fi298uFe1f5rnKSyxc6Ppv9xSQXbZWQn0q IcRZ4s+NYS7t5eJ+TNFJrlDH9yrVhFAchb/+8nnuGAYGGxnXGGKDpcojFwKIYxq0 jPSPZtRJStQPuRUKI8ex+ilf6xXGhwaVbQGAbDoGkVIQ8cpJAIDD3zW2D2U/nipE xUV7jyGgNcEvXcqIUtFRmzus6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGejB5e6 B4B4e8FMW4oty1/iRHaJMB8GA1UdIwQYMBaAFIaBG7JnrvhUANvnKXAjLUEaLZrp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3Qy9GMzQwN0U1NDIy MjIxMUVBODc3REQ1MkFDNEY5QUUwMi9ob0Vic21ldS1GUUEyLWNwY0NNdFFSb3Rt dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvRWJzbWV1LUZRQTItY3BjQ010UVJvdG11ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU3Qy9GMzQwN0U1NDIyMjIxMUVBODc3REQ1MkFDNEY5QUUwMi9ob0Vic21ldS1G UUEyLWNwY0NNdFFSb3RtdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKfMMVnZybyUPiEpQbnB+qpHaWmKMEqEiHwdWOsbbuudT8iKby16l+ 7FH1T60EdSzWvew7OYF+bkBN7MqXGMZXLhLad1t2IJ5HGcYePcCGRA21R83WlTRA Tjoqc5Ac7UAaPjmoEr/P7hF4g6RL/PxaHT4A83oOjLut+KtmetWXa9FACecIL25z SWgCg6CytA1kMeKIiyrz8ZPD4G2ZNvMGhlQJErC/OfLbg8uxhrs4jh/KtKls6eDU vq4GTYSoawU5Y5YKlcwO3ecCWmaL8XYRWIG7/8otIAxeEecNkfuTz5F8YUE2QItE vSjpiNaRh+n7fjhV9hydHX48/Cz654kQ -----END CERTIFICATE-----Generated at Sat Aug 23 17:02:47 2025 by rpki-client