$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft File: HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft (raw, json) Hash identifier: Tjk/ogImTWJaT7zbsndsFsvX5vsKRVU9lOWzlo+OEKI= Subject key identifier: 7C:EB:5A:2A:78:E5:0D:C2:EF:A0:D5:E7:3A:53:A9:63:C8:50:BB:FA Authority key identifier: 1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 Certificate issuer: /CN=A913277C/serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft Manifest number: 01A4 Signing time: Thu 19 Jun 2025 02:43:35 +0000 Manifest this update: Thu 19 Jun 2025 02:43:35 +0000 Manifest next update: Thu 26 Jun 2025 02:43:35 +0000 Files and hashes: 1: HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl (hash: fmrpyiTjv8WhIW994lrfHNPuqccPhQCMOW0WY/BdzS4=) 2: 1EF2D862C9F511ED8771C865C4F9AE02.roa (hash: EksXJqRj0KH07WsHueUwybeZ3O7OwOE6F+VFPhINzRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913277C, serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Validity Not Before: Jun 19 02:43:35 2025 GMT Not After : Jun 26 02:43:35 2025 GMT Subject: CN=68537957-e250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:35:fe:1c:ca:73:98:02:d9:2f:6e:31:33: 0e:a7:3c:3e:66:54:1e:01:08:43:3c:21:3a:a0:a6: 59:67:1c:37:a0:ba:f8:47:2a:31:6d:e0:69:a2:0d: 4e:a7:50:00:3f:0f:c5:7a:c8:f2:5d:fd:a3:4b:b5: 3d:86:40:75:e4:0b:05:7a:44:75:8a:54:24:f7:c2: b5:3b:25:68:4f:b1:14:63:18:27:3d:20:4e:c6:b8: 74:2a:11:8e:75:96:b1:82:37:ec:af:f4:8e:23:8d: 0a:df:82:c8:7d:a7:09:5b:06:f0:47:bc:a9:a1:19: 32:06:49:61:98:e5:67:98:b4:2a:4a:ad:4b:99:ca: 07:fa:90:48:5a:c3:7c:a8:5d:89:27:7a:8b:d1:67: 46:0b:6b:6a:57:cf:42:63:5f:40:d7:8f:ef:42:87: c1:d7:5d:f5:bb:3f:32:9f:a3:79:15:40:8a:0b:6e: 56:55:9a:54:5d:60:db:e6:8f:9e:6f:40:8d:46:9e: 41:8e:49:14:30:8e:76:66:d4:ba:e9:ba:f7:8c:21: c4:fa:85:af:da:3c:66:40:e7:e4:88:6c:40:62:27: d4:a2:37:20:12:c2:2d:90:ae:b4:40:4b:de:a2:57: 6e:d2:9f:2d:1e:17:98:f6:84:e9:07:53:ca:f3:03: 7d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EB:5A:2A:78:E5:0D:C2:EF:A0:D5:E7:3A:53:A9:63:C8:50:BB:FA X509v3 Authority Key Identifier: keyid:1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ee:7f:06:bd:f9:fd:dd:96:cf:03:72:20:af:5e:9d:6c:39: 4c:74:1d:12:ef:21:d2:06:35:90:30:34:3c:c8:c6:38:5c:fb: a7:c7:18:2f:a5:b7:97:1a:c7:a3:dc:10:f2:e3:40:8d:45:6a: d2:fd:1a:2a:36:cd:d8:3a:35:e5:94:33:dd:bf:1a:fb:bd:e5: 0b:38:41:14:69:a6:85:74:0d:9c:ab:47:16:8b:73:e6:9b:c9: 10:e2:d8:95:8e:52:ca:99:60:9a:69:41:fb:56:79:39:c3:d8: 61:87:88:19:7e:15:e6:ce:b4:56:5c:08:0e:72:bb:6c:51:d9: c9:c4:5b:48:f7:e9:17:0c:19:f2:ae:39:e4:52:52:ce:3a:6e: 79:7d:73:ec:2b:6f:50:57:d1:db:be:ec:47:9e:1e:d2:b1:29: c7:77:34:98:57:72:39:53:5a:85:21:81:cb:b7:08:b9:45:7c: 43:fa:f6:c9:12:5a:73:d0:b0:23:46:a8:77:bf:2f:cb:04:f2: 40:37:6d:13:cd:1c:49:d4:ee:11:16:b6:19:9c:d7:d6:c7:ed: 28:1b:d6:62:68:71:57:ff:1c:f3:42:d1:b6:87:0f:67:f1:4a: 0f:7a:7d:d7:43:39:b4:e1:b1:a3:85:36:48:91:c6:2c:58:29: 69:20:34:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3N0MxMTAvBgNVBAUTKDFDRDQ5RUZCQzM3RUY0QThDNkM4ODc2NTYyQkQxMTMz NDRCQzdFRDEwHhcNMjUwNjE5MDI0MzM1WhcNMjUwNjI2MDI0MzM1WjAYMRYwFAYD VQQDEw02ODUzNzk1Ny1lMjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6g1/hzKc5gC2S9uMTMOpzw+ZlQeAQhDPCE6oKZZZxw3oLr4RyoxbeBpog1O p1AAPw/FesjyXf2jS7U9hkB15AsFekR1ilQk98K1OyVoT7EUYxgnPSBOxrh0KhGO dZaxgjfsr/SOI40K34LIfacJWwbwR7ypoRkyBklhmOVnmLQqSq1LmcoH+pBIWsN8 qF2JJ3qL0WdGC2tqV89CY19A14/vQofB1131uz8yn6N5FUCKC25WVZpUXWDb5o+e b0CNRp5BjkkUMI52ZtS66br3jCHE+oWv2jxmQOfkiGxAYifUojcgEsItkK60QEve oldu0p8tHheY9oTpB1PK8wN9ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzrWip4 5Q3C76DV5zpTqWPIULv6MB8GA1UdIwQYMBaAFBzUnvvDfvSoxsiHZWK9ETNEvH7R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc3Qy9COTdDNzM5NkM5 RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlLakd5SWRsWXIwUk0wUzhm dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hOU2UtOE4tOUtqR3lJZGxZcjBSTTBTOGZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc3Qy9COTdDNzM5NkM5RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlL akd5SWRsWXIwUk0wUzhmdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP7n8Gvfn93ZbPA3Igr16dbDlMdB0S7yHSBjWQMDQ8yMY4XPunxxgv pbeXGsej3BDy40CNRWrS/RoqNs3YOjXllDPdvxr7veULOEEUaaaFdA2cq0cWi3Pm m8kQ4tiVjlLKmWCaaUH7Vnk5w9hhh4gZfhXmzrRWXAgOcrtsUdnJxFtI9+kXDBny rjnkUlLOOm55fXPsK29QV9HbvuxHnh7SsSnHdzSYV3I5U1qFIYHLtwi5RXxD+vbJ Elpz0LAjRqh3vy/LBPJAN20TzRxJ1O4RFrYZnNfWx+0oG9ZiaHFX/xzzQtG2hw9n 8UoPen3XQzm04bGjhTZIkcYsWClpIDQg -----END CERTIFICATE-----Generated at Thu Jun 19 05:46:16 2025 by rpki-client