$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json) Hash identifier: FmbCPzCjHWg202/wMbKfvDCpf8APXITd5Xsl/CfJAU8= Subject key identifier: BD:73:9F:97:C8:DD:4A:C1:5C:D2:58:95:DC:AE:F0:04:51:8F:FC:D2 Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft Manifest number: 0112 Signing time: Tue 17 Jun 2025 04:03:17 +0000 Manifest this update: Tue 17 Jun 2025 04:03:17 +0000 Manifest next update: Tue 24 Jun 2025 04:03:17 +0000 Files and hashes: 1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: Wsd8PevwkYYdyKQCDNv3e6HwI8vRuYZcmAhKX6MoGc4=) 2: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: Xkd+Op7ObANSl7hSEgXBDp6fu8FLqlrIdcxaq4iFP2k=) 3: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: opgCLiPvltRVZTimE7GHd6S5jzb7OIm+U5D/6sM4IWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911112F, serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Validity Not Before: Jun 17 04:03:17 2025 GMT Not After : Jun 24 04:03:17 2025 GMT Subject: CN=6850e905-6907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3d:4f:b5:d9:8a:4d:12:88:36:99:bd:3b:05: 62:96:31:89:52:9f:6d:66:84:2d:78:a6:3f:c1:46: 97:3d:d6:ec:1c:13:58:f3:a8:40:d1:90:65:8a:55: 93:6e:ec:11:06:14:2d:4a:62:fc:02:fa:5f:bf:38: b0:80:2c:0c:ff:a4:c1:3d:f0:e5:ff:4e:2c:93:c3: d1:fa:3e:24:74:8f:3f:49:b2:86:35:fd:1a:cf:83: 5a:e7:7f:25:70:b7:cf:3d:ae:59:29:82:cf:fb:60: 76:4b:63:c8:a0:52:dc:49:82:84:6b:1e:3a:8b:7f: fb:a9:04:c0:47:1a:d8:dc:67:e4:3b:d7:3a:fb:da: c2:09:6a:19:87:4d:9c:e6:96:2c:8c:80:96:ff:fa: 06:52:6a:5a:65:50:ab:b4:8e:d4:53:96:31:db:6a: 39:b3:75:f0:cb:d3:35:85:9d:ad:07:7b:83:cd:03: 0f:d8:2d:d6:e6:50:ac:b6:5b:eb:6c:49:43:69:72: 0d:74:f9:46:2b:f4:76:ef:8f:67:fd:06:01:80:fd: 08:af:78:88:98:41:ca:27:21:03:50:d7:cd:84:0b: 4b:76:7c:4e:d7:1a:2a:15:ad:44:29:91:0a:9c:77: 52:3f:93:88:0c:31:15:0f:6a:cb:9c:72:8e:57:ee: 40:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:73:9F:97:C8:DD:4A:C1:5C:D2:58:95:DC:AE:F0:04:51:8F:FC:D2 X509v3 Authority Key Identifier: keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:87:26:6b:b4:43:30:8a:ab:d7:ae:e4:d0:18:77:5c:5c:6e: 40:b5:16:e6:3d:02:57:c4:f7:b7:ec:1e:97:7a:8d:1e:e4:f3: c3:e2:99:c0:5f:ff:ea:cb:a4:f1:06:5b:51:9e:79:0b:15:6e: 32:bc:9b:7c:5a:d7:06:45:ec:b1:bc:ce:40:79:bd:23:86:c8: 06:66:6f:cc:5d:75:9d:15:5c:3e:42:19:52:85:41:a5:47:b7: 54:fb:71:43:7a:5d:80:75:13:5f:06:40:08:86:06:cb:e5:b9: c9:79:17:5c:7c:10:75:c3:54:7f:37:59:f6:dd:f1:ba:80:ec: 0c:99:94:17:f1:03:b6:cc:6f:38:c0:d1:22:ee:bf:e8:ad:85: c7:1a:7a:97:15:0c:b8:8d:a3:61:a9:0e:28:97:e1:97:df:92: 1c:54:a9:47:be:d5:b5:c1:fe:50:74:50:49:41:f3:c4:25:cb: dd:f3:2f:ec:78:b6:1f:ee:ed:45:89:eb:2c:f7:ea:19:58:e5: 30:9b:ea:52:bd:ad:f8:25:6f:62:b5:24:0b:b3:4d:c3:97:d0: 50:cb:b4:fa:33:6d:42:d0:fc:8a:5e:33:db:cf:ba:2a:38:87: f4:3d:c9:3e:63:b7:8a:b2:53:e2:b6:0c:09:05:93:db:cf:a4: 63:48:48:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTExMkYxMTAvBgNVBAUTKDFFNTdCNDNGMDQ0RDRBQkE4MjIyQTQwOTc4NjYxNDI4 MEFBNzM5QTEwHhcNMjUwNjE3MDQwMzE3WhcNMjUwNjI0MDQwMzE3WjAYMRYwFAYD VQQDEw02ODUwZTkwNS02OTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4z1PtdmKTRKINpm9OwViljGJUp9tZoQteKY/wUaXPdbsHBNY86hA0ZBlilWT buwRBhQtSmL8AvpfvziwgCwM/6TBPfDl/04sk8PR+j4kdI8/SbKGNf0az4Na538l cLfPPa5ZKYLP+2B2S2PIoFLcSYKEax46i3/7qQTARxrY3GfkO9c6+9rCCWoZh02c 5pYsjICW//oGUmpaZVCrtI7UU5Yx22o5s3Xwy9M1hZ2tB3uDzQMP2C3W5lCstlvr bElDaXINdPlGK/R2749n/QYBgP0Ir3iImEHKJyEDUNfNhAtLdnxO1xoqFa1EKZEK nHdSP5OIDDEVD2rLnHKOV+5AjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1zn5fI 3UrBXNJYldyu8ARRj/zSMB8GA1UdIwQYMBaAFB5XtD8ETUq6giKkCXhmFCgKpzmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTEyRi85NjREQzY5QUJB OEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNycUNJcVFKZUdZVUtBcW5P YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hsZTBQd1JOU3JxQ0lxUUplR1lVS0Fxbk9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTEyRi85NjREQzY5QUJBOEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNy cUNJcVFKZUdZVUtBcW5PYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAhyZrtEMwiqvXruTQGHdcXG5AtRbmPQJXxPe37B6Xeo0e5PPD4pnA X//qy6TxBltRnnkLFW4yvJt8WtcGReyxvM5Aeb0jhsgGZm/MXXWdFVw+QhlShUGl R7dU+3FDel2AdRNfBkAIhgbL5bnJeRdcfBB1w1R/N1n23fG6gOwMmZQX8QO2zG84 wNEi7r/orYXHGnqXFQy4jaNhqQ4ol+GX35IcVKlHvtW1wf5QdFBJQfPEJcvd8y/s eLYf7u1Fiess9+oZWOUwm+pSva34JW9itSQLs03Dl9BQy7T6M21C0PyKXjPbz7oq OIf0Pck+Y7eKslPitgwJBZPbz6RjSEjo -----END CERTIFICATE-----Generated at Thu Jun 19 05:12:43 2025 by rpki-client