$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft File: HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft (raw, json) Hash identifier: K1JKN6MK1oxjtQFGDL4NXKuRF9PCF1Pgia83fK6sGb8= Subject key identifier: 87:38:7D:D2:8D:17:DB:21:6C:27:F8:EE:46:C9:A1:DD:08:6D:15:EA Authority key identifier: 1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 Certificate issuer: /CN=A913277C/serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft Manifest number: 01BE Signing time: Sat 09 Aug 2025 03:22:35 +0000 Manifest this update: Sat 09 Aug 2025 03:22:34 +0000 Manifest next update: Sat 16 Aug 2025 03:22:34 +0000 Files and hashes: 1: HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl (hash: kFk4720n2iHb1iNviA/EWe+IFiY7ip2ipK1Ytd3pcas=) 2: 1EF2D862C9F511ED8771C865C4F9AE02.roa (hash: EksXJqRj0KH07WsHueUwybeZ3O7OwOE6F+VFPhINzRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913277C, serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Validity Not Before: Aug 9 03:22:34 2025 GMT Not After : Aug 16 03:22:34 2025 GMT Subject: CN=6896befb-6dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:24:d1:63:45:08:7f:28:d2:b5:f2:fa:8c: 7a:fb:b2:10:8a:f2:0c:ed:e3:d2:99:5a:99:3b:ba: 9f:dc:f5:c0:0a:98:5b:52:86:4d:d2:4f:06:37:e0: a7:81:fd:c2:33:3b:22:a6:93:37:ba:c0:84:62:20: 6e:28:59:41:14:98:5a:72:67:14:a3:e2:90:6a:02: a1:d9:03:12:85:97:ba:bc:1d:4c:8e:4f:22:b4:b5: 76:50:30:93:a2:c4:8c:6e:27:26:de:83:fe:df:27: 58:bb:f6:0f:1c:d4:33:37:a7:02:d4:a6:d4:16:7e: 3d:85:32:52:5b:73:96:65:53:6a:4d:b4:76:e1:c3: c3:3f:3e:04:a5:1d:f4:11:a6:c8:16:be:ce:9d:69: 62:fc:a5:e1:74:8c:91:ef:24:ac:42:8c:c0:a0:22: ed:f3:7b:81:f8:7a:09:3a:da:d4:a1:1e:73:01:65: 53:c3:80:88:36:7f:4d:43:a9:f7:61:dc:36:28:cd: c7:d3:7a:b7:17:30:a4:93:bd:a7:a4:58:8c:d2:08: be:31:22:ed:6f:4e:30:26:ba:17:d8:3e:cc:b5:66: 42:f8:3d:20:62:8b:9f:d9:42:7b:ab:2a:c3:1f:29: a5:cc:27:b1:32:50:fd:16:8b:60:5e:7a:7d:e7:be: d4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:38:7D:D2:8D:17:DB:21:6C:27:F8:EE:46:C9:A1:DD:08:6D:15:EA X509v3 Authority Key Identifier: keyid:1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a8:57:8d:5a:9f:1d:7c:67:92:c8:f3:6f:63:88:57:68:f5: 38:2f:bf:8b:6c:7d:6b:6c:c5:ba:71:a9:db:4d:ce:7d:60:41: e0:b8:60:fb:09:e7:47:aa:7e:5e:44:80:dd:1c:94:62:7f:fe: df:84:e7:3e:65:5c:09:58:c5:97:41:34:9a:fb:d5:97:75:bf: 23:9e:de:c7:ad:f1:e1:d4:b0:b2:29:8b:49:13:af:24:7b:b6: ce:6d:ea:f7:73:5c:71:e8:3d:c1:ce:0f:91:46:1c:c6:8e:5b: 74:7d:76:24:56:20:d4:e8:ca:e2:24:fc:a7:5d:0c:d9:53:bf: a1:1d:27:49:8d:c6:ae:1d:9b:ed:30:61:95:fb:e4:8f:ff:8d: 8a:e5:26:70:38:98:8b:87:d7:70:7e:0b:53:c4:d5:c7:9d:f2: 97:27:85:1d:45:c9:86:ce:d0:fb:2f:a7:9c:ed:03:3c:dd:81: fb:92:94:93:51:68:8a:68:ae:3c:c5:1a:92:3e:a7:dc:c2:c9: 56:e2:bd:ff:ca:81:a4:24:8a:6f:55:4b:5d:37:2b:06:9f:3c: 12:e6:5e:d7:21:47:60:42:9b:83:dd:9d:8f:41:35:92:21:d1: 8c:db:df:33:e2:d7:83:82:08:89:fe:0a:47:21:97:8c:7c:96: a4:5d:62:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3N0MxMTAvBgNVBAUTKDFDRDQ5RUZCQzM3RUY0QThDNkM4ODc2NTYyQkQxMTMz NDRCQzdFRDEwHhcNMjUwODA5MDMyMjM0WhcNMjUwODE2MDMyMjM0WjAYMRYwFAYD VQQDEw02ODk2YmVmYi02ZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTck0WNFCH8o0rXy+ox6+7IQivIM7ePSmVqZO7qf3PXACphbUoZN0k8GN+Cn gf3CMzsippM3usCEYiBuKFlBFJhacmcUo+KQagKh2QMShZe6vB1Mjk8itLV2UDCT osSMbicm3oP+3ydYu/YPHNQzN6cC1KbUFn49hTJSW3OWZVNqTbR24cPDPz4EpR30 EabIFr7OnWli/KXhdIyR7ySsQozAoCLt83uB+HoJOtrUoR5zAWVTw4CINn9NQ6n3 Ydw2KM3H03q3FzCkk72npFiM0gi+MSLtb04wJroX2D7MtWZC+D0gYouf2UJ7qyrD HymlzCexMlD9FotgXnp9577UoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIc4fdKN F9shbCf47kbJod0IbRXqMB8GA1UdIwQYMBaAFBzUnvvDfvSoxsiHZWK9ETNEvH7R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc3Qy9COTdDNzM5NkM5 RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlLakd5SWRsWXIwUk0wUzhm dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hOU2UtOE4tOUtqR3lJZGxZcjBSTTBTOGZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc3Qy9COTdDNzM5NkM5RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlL akd5SWRsWXIwUk0wUzhmdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqqFeNWp8dfGeSyPNvY4hXaPU4L7+LbH1rbMW6canbTc59YEHguGD7 CedHqn5eRIDdHJRif/7fhOc+ZVwJWMWXQTSa+9WXdb8jnt7HrfHh1LCyKYtJE68k e7bOber3c1xx6D3Bzg+RRhzGjlt0fXYkViDU6MriJPynXQzZU7+hHSdJjcauHZvt MGGV++SP/42K5SZwOJiLh9dwfgtTxNXHnfKXJ4UdRcmGztD7L6ec7QM83YH7kpST UWiKaK48xRqSPqfcwslW4r3/yoGkJIpvVUtdNysGnzwS5l7XIUdgQpuD3Z2PQTWS IdGM298z4teDggiJ/gpHIZeMfJakXWKJ -----END CERTIFICATE-----Generated at Sun Aug 10 15:59:06 2025 by rpki-client