$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft File: hoEbsmeu-FQA2-cpcCMtQRotmuk.mft (raw, json) Hash identifier: gG5HXY9AtvkZHRu0EGDtJC+QIUNJXHKiquTB2ri76ws= Subject key identifier: B6:66:60:69:A6:50:F2:BC:ED:59:C8:72:D5:33:70:E4:41:0A:89:6D Authority key identifier: 86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9 Certificate issuer: /CN=A913AE7C/serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9 Certificate serial: 0BA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft Manifest number: 0BA0 Signing time: Sat 10 May 2025 18:45:33 +0000 Manifest this update: Sat 10 May 2025 18:45:32 +0000 Manifest next update: Sat 17 May 2025 18:45:32 +0000 Files and hashes: 1: hoEbsmeu-FQA2-cpcCMtQRotmuk.crl (hash: jRjx94TCWZKnAns+b76E5lUX9/tDmw3srrMP7Injf5U=) 2: CE9692E0222311EAAED0162CC4F9AE02.roa (hash: CvAiV/QKU9nzbsmVn16l0FaQPJa5PJfMBf74/ijJ5jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2982 (0xba6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE7C, serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9 Validity Not Before: May 10 18:45:32 2025 GMT Not After : May 17 18:45:32 2025 GMT Subject: CN=681f9ecc-defe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:88:49:2b:d5:42:46:46:59:c7:21:b6:63: 48:d0:9c:85:76:9e:09:a2:60:e9:dd:50:9c:6d:22: 8e:be:b6:9c:c8:4e:a2:62:27:0e:49:e8:78:2c:f3: e9:f7:43:09:ac:a1:21:68:94:08:df:8b:45:87:e7: 60:11:b3:0f:e1:c7:be:d5:af:f5:d6:8e:0c:18:a1: 30:94:26:fd:4e:d9:d2:9a:c3:82:83:4d:e4:0e:fc: 79:0f:3e:00:7b:74:23:3d:fe:86:94:7c:aa:cb:06: 53:2b:52:be:87:2e:fa:ef:3b:b4:f5:c0:25:2b:61: c7:67:bf:7e:f3:3a:7d:f5:6c:df:2c:42:0e:56:5e: 62:f5:9e:e1:02:7d:a7:50:d4:18:7b:ba:e6:bb:17: 95:d0:22:fc:a2:b0:c4:ae:d5:51:7a:30:a6:cd:be: 09:a8:98:14:10:66:03:94:4d:f3:01:ad:3d:25:c3: 69:b4:b4:ab:38:4d:b5:c4:17:91:db:45:14:6c:01: 6a:64:e9:36:b8:20:08:66:ca:4a:4e:11:f0:b4:f0: a1:c9:ab:3e:32:71:de:e5:76:85:e6:1c:e8:cb:90: 20:1c:dd:b9:04:22:f2:a3:5b:a3:24:56:36:cf:3a: 75:33:e4:d5:66:bd:2f:6e:20:12:07:50:a4:08:38: ca:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:66:60:69:A6:50:F2:BC:ED:59:C8:72:D5:33:70:E4:41:0A:89:6D X509v3 Authority Key Identifier: keyid:86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fc:1d:dc:f0:c1:e1:41:80:f2:3e:17:41:42:97:cd:cc:e8: 11:53:64:b1:d6:ac:e7:10:5f:f5:a4:07:30:41:1b:f6:c7:33: 9a:3a:90:9c:67:70:b4:4d:21:e2:bd:1a:9c:01:40:b7:8b:61: 0f:27:f0:e3:bf:c9:f9:a6:cb:a6:b8:dc:95:18:c5:ba:90:1a: 96:5a:37:65:89:e5:c4:d2:dc:f8:59:bc:a8:19:ef:67:00:7a: f3:ce:c7:a4:af:7c:25:5c:a3:15:1b:50:80:d4:dd:f6:52:48: 8f:c1:bc:0b:d9:c8:5e:13:12:d9:d8:ea:33:fb:f5:e5:56:7e: 4a:6f:3a:5f:15:70:4d:c9:64:dd:4f:7a:e5:f7:24:09:f1:57: aa:5d:88:2a:3d:9d:4c:a2:f8:bd:21:6c:a6:5d:0b:04:33:45: bb:03:c2:51:19:ce:71:8a:e6:7d:e5:de:64:f3:fe:84:0e:d6: 28:e6:04:94:c0:2d:e4:4f:32:41:5d:0b:ca:fc:fc:bf:7f:10: fe:d8:91:f7:29:1f:8f:a5:6b:f8:2d:57:e5:9b:1d:f0:c9:da: 7d:09:16:e0:7a:1d:52:97:d5:62:ce:a2:05:87:95:a5:74:29: 03:d1:fd:78:2f:eb:39:8b:95:14:d4:5e:3a:32:43:5d:a7:0d: 6c:1b:b6:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFN0MxMTAvBgNVBAUTKDg2ODExQkIyNjdBRUY4NTQwMERCRTcyOTcwMjMyRDQx MUEyRDlBRTkwHhcNMjUwNTEwMTg0NTMyWhcNMjUwNTE3MTg0NTMyWjAYMRYwFAYD VQQDEw02ODFmOWVjYy1kZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHGISSvVQkZGWcchtmNI0JyFdp4JomDp3VCcbSKOvracyE6iYicOSeh4LPPp 90MJrKEhaJQI34tFh+dgEbMP4ce+1a/11o4MGKEwlCb9TtnSmsOCg03kDvx5Dz4A e3QjPf6GlHyqywZTK1K+hy767zu09cAlK2HHZ79+8zp99WzfLEIOVl5i9Z7hAn2n UNQYe7rmuxeV0CL8orDErtVRejCmzb4JqJgUEGYDlE3zAa09JcNptLSrOE21xBeR 20UUbAFqZOk2uCAIZspKThHwtPChyas+MnHe5XaF5hzoy5AgHN25BCLyo1ujJFY2 zzp1M+TVZr0vbiASB1CkCDjKTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZmYGmm UPK87VnIctUzcORBColtMB8GA1UdIwQYMBaAFIaBG7JnrvhUANvnKXAjLUEaLZrp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3Qy9GMzQwN0U1NDIy MjIxMUVBODc3REQ1MkFDNEY5QUUwMi9ob0Vic21ldS1GUUEyLWNwY0NNdFFSb3Rt dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvRWJzbWV1LUZRQTItY3BjQ010UVJvdG11ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU3Qy9GMzQwN0U1NDIyMjIxMUVBODc3REQ1MkFDNEY5QUUwMi9ob0Vic21ldS1G UUEyLWNwY0NNdFFSb3RtdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO/B3c8MHhQYDyPhdBQpfNzOgRU2Sx1qznEF/1pAcwQRv2xzOaOpCc Z3C0TSHivRqcAUC3i2EPJ/Djv8n5psumuNyVGMW6kBqWWjdlieXE0tz4WbyoGe9n AHrzzsekr3wlXKMVG1CA1N32UkiPwbwL2cheExLZ2Ooz+/XlVn5KbzpfFXBNyWTd T3rl9yQJ8VeqXYgqPZ1Movi9IWymXQsEM0W7A8JRGc5xiuZ95d5k8/6EDtYo5gSU wC3kTzJBXQvK/Py/fxD+2JH3KR+PpWv4LVflmx3wydp9CRbgeh1Sl9VizqIFh5Wl dCkD0f14L+s5i5UU1F46MkNdpw1sG7aq -----END CERTIFICATE-----Generated at Sun May 11 22:59:46 2025 by rpki-client