$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft File: HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json) Hash identifier: TsZ74CXW8oIOyacLsdXKMIP29p4KpM0b6jDmqXYv78c= Subject key identifier: 73:71:E6:35:64:CB:9B:9B:3B:2B:4E:95:71:FF:F6:1C:AB:EC:C6:55 Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 Certificate issuer: /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Certificate serial: 0A5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft Manifest number: 0A53 Signing time: Wed 02 Jul 2025 19:55:21 +0000 Manifest this update: Wed 02 Jul 2025 19:55:21 +0000 Manifest next update: Wed 09 Jul 2025 19:55:21 +0000 Files and hashes: 1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: Sv2pnaki7rT6gbZU0c2F4eTQg/857im+7ynbg3O2f6g=) 2: 9261E554464611EE84B7C534C4F9AE02.roa (hash: lLxl/sSYgP6ZriIWkj+AWN6PJcQcpVbRmAe2Y2lbT3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2651 (0xa5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BB4, serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Validity Not Before: Jul 2 19:55:21 2025 GMT Not After : Jul 9 19:55:21 2025 GMT Subject: CN=68658ea9-61fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e4:54:2c:be:a0:71:fd:f3:c5:d6:64:73:1e: a3:3d:e6:ca:11:90:fb:29:b0:2b:fd:b2:91:cc:05: b2:30:b0:73:e2:ec:46:b9:2b:fd:06:be:7a:5e:49: 73:fc:36:47:1e:98:21:af:b3:2a:75:cb:ba:bd:9f: 5e:05:d6:7e:93:88:8c:15:93:50:79:ca:89:63:d3: ba:22:08:c8:95:e6:c3:e4:34:e4:29:d9:ca:cf:00: c5:a3:44:c9:22:7b:fb:99:6e:ed:e9:ec:96:fc:69: a1:cd:8b:07:a7:35:c1:1b:40:ba:1a:32:a4:70:ae: ba:2d:17:1c:6e:11:ab:b3:f9:d8:0e:7c:1f:e3:da: e8:5c:0f:3e:0e:73:d1:b0:dd:45:59:83:17:e9:12: 65:fc:53:b9:88:67:ff:17:fd:e0:7d:35:cb:10:26: b0:63:10:0a:2c:37:57:fa:20:aa:7a:b2:94:b5:c8: 5e:e0:dd:a6:54:ef:28:05:db:23:e7:57:c2:23:54: 5a:c1:b1:ac:e5:39:be:24:8e:e2:a8:c0:bd:a8:ea: 00:a1:4f:59:99:95:92:fb:f1:45:2f:bf:2f:ca:0d: 99:c8:b3:84:0b:83:3f:49:cf:8f:ad:0e:e3:4c:df: a2:eb:2c:e1:d9:38:58:32:46:96:33:a5:e1:7a:21: 7b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:71:E6:35:64:CB:9B:9B:3B:2B:4E:95:71:FF:F6:1C:AB:EC:C6:55 X509v3 Authority Key Identifier: keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:a1:e4:de:ab:f3:85:cd:f5:41:18:14:c5:ac:09:bc:6f:d5: 15:25:4b:91:e1:0d:13:9f:3b:1d:ea:9e:81:7f:b8:ff:8e:97: e8:71:40:0c:a4:80:30:1f:06:9d:91:30:ce:01:9a:a7:8d:c6: 9e:3e:57:45:36:32:cf:b6:c0:9b:a4:99:36:b7:a9:05:55:09: 6c:dd:b3:0c:5d:0e:81:9c:e3:60:b3:85:5c:ac:63:c8:4d:f5: 08:1b:35:27:85:b1:45:9e:2f:c1:c8:13:84:20:7d:26:53:61: c8:0e:54:47:09:f9:5a:ed:46:05:ab:85:18:77:d8:c2:ad:02: c2:ad:64:c4:97:e6:86:c1:4f:80:8c:b7:1e:e9:0e:49:56:d8: c3:70:ed:af:19:2b:b9:3d:bb:73:0c:0f:15:47:00:c4:49:52: 64:06:38:9d:c6:17:8b:38:05:01:eb:bd:ac:fa:2c:07:c5:71: 50:c3:10:37:17:98:a1:74:1e:7a:d2:3b:24:4a:6c:02:f7:f3: 0e:75:83:32:e4:10:b0:b7:8f:78:11:03:75:7a:87:c9:7f:98: 2c:15:25:98:7a:0d:54:9f:16:56:a5:0a:d6:1d:36:7e:7d:1a: da:b2:c2:74:09:ee:23:33:3a:fb:55:9a:7c:9f:6f:c7:65:eb: d6:13:e7:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCQjQxMTAvBgNVBAUTKDFEMTIxN0VGOEZFODRCNTgyNTUxNjcxQkNBMzVFNjg0 NDg2OTI0OTcwHhcNMjUwNzAyMTk1NTIxWhcNMjUwNzA5MTk1NTIxWjAYMRYwFAYD VQQDEw02ODY1OGVhOS02MWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+RULL6gcf3zxdZkcx6jPebKEZD7KbAr/bKRzAWyMLBz4uxGuSv9Br56Xklz /DZHHpghr7Mqdcu6vZ9eBdZ+k4iMFZNQecqJY9O6IgjIlebD5DTkKdnKzwDFo0TJ Inv7mW7t6eyW/GmhzYsHpzXBG0C6GjKkcK66LRccbhGrs/nYDnwf49roXA8+DnPR sN1FWYMX6RJl/FO5iGf/F/3gfTXLECawYxAKLDdX+iCqerKUtche4N2mVO8oBdsj 51fCI1RawbGs5Tm+JI7iqMC9qOoAoU9ZmZWS+/FFL78vyg2ZyLOEC4M/Sc+PrQ7j TN+i6yzh2ThYMkaWM6XheiF7CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNx5jVk y5ubOytOlXH/9hyr7MZVMB8GA1UdIwQYMBaAFB0SF++P6EtYJVFnG8o15oRIaSSX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEJCNC9EOTU0QkFCRTY5 QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1MxZ2xVV2NieWpYbWhFaHBK SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hSSVg3NF9vUzFnbFVXY2J5alhtaEVocEpKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEJCNC9EOTU0QkFCRTY5QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1Mx Z2xVV2NieWpYbWhFaHBKSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGoeTeq/OFzfVBGBTFrAm8b9UVJUuR4Q0Tnzsd6p6Bf7j/jpfocUAM pIAwHwadkTDOAZqnjcaePldFNjLPtsCbpJk2t6kFVQls3bMMXQ6BnONgs4VcrGPI TfUIGzUnhbFFni/ByBOEIH0mU2HIDlRHCfla7UYFq4UYd9jCrQLCrWTEl+aGwU+A jLce6Q5JVtjDcO2vGSu5PbtzDA8VRwDESVJkBjidxheLOAUB672s+iwHxXFQwxA3 F5ihdB560jskSmwC9/MOdYMy5BCwt494EQN1eofJf5gsFSWYeg1UnxZWpQrWHTZ+ fRrassJ0Ce4jMzr7VZp8n2/HZevWE+dU -----END CERTIFICATE-----Generated at Thu Jul 3 10:31:34 2025 by rpki-client