$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft File: HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft (raw, json) Hash identifier: 30kH7ygsLy18JkUsARfzixbt1ZSgpocJpMgC9YkNsz8= Subject key identifier: 26:A6:11:C2:2C:EE:4F:66:BE:CB:C8:B1:D0:C2:37:17:B5:9C:EB:D3 Authority key identifier: 1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 Certificate issuer: /CN=A913277C/serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft Manifest number: 018A Signing time: Sun 27 Apr 2025 02:34:16 +0000 Manifest this update: Sun 27 Apr 2025 02:34:15 +0000 Manifest next update: Sun 04 May 2025 02:34:15 +0000 Files and hashes: 1: HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl (hash: nxdMlXSlmUmLUHTCss0bdj28L6XvtfNuuZhu2ni3Utw=) 2: 1EF2D862C9F511ED8771C865C4F9AE02.roa (hash: EksXJqRj0KH07WsHueUwybeZ3O7OwOE6F+VFPhINzRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913277C, serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Validity Not Before: Apr 27 02:34:15 2025 GMT Not After : May 4 02:34:15 2025 GMT Subject: CN=680d97a7-4051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5b:b2:1f:a7:55:aa:9f:1a:26:61:0e:89:48: ca:eb:39:f3:e9:c0:67:d2:c6:2b:87:2b:02:64:14: f3:46:b8:d1:de:9e:61:d1:62:7f:58:42:e6:80:f4: c9:fb:1a:06:bf:46:4e:62:b5:9e:f2:31:af:2c:b9: 73:86:22:2c:0d:c2:f1:c8:17:4f:ab:78:5a:aa:37: cd:e1:80:4f:4d:37:20:b1:47:3c:8a:22:d7:fe:71: 03:02:10:66:7a:72:a2:9e:7e:98:17:bf:35:4a:1c: e8:98:09:65:ba:08:3e:f8:d6:77:d4:9f:18:6e:3f: c9:86:98:7f:a5:27:62:17:e8:43:d6:79:84:60:ea: a7:83:0d:d7:fe:97:f5:9b:0a:db:98:ce:72:61:15: aa:1f:21:a3:33:b5:17:d6:4b:ba:5b:f6:df:cc:46: 0d:01:0c:25:31:c6:cb:7d:91:14:51:ba:2b:b7:29: 0f:9b:f0:7c:32:16:4e:20:34:ce:41:e1:6f:e4:1b: 14:39:b8:e0:06:de:f5:f2:10:66:a0:a1:48:74:a3: 89:33:39:19:83:f1:92:b8:e3:05:c2:a0:62:24:57: f1:81:4f:90:2d:02:70:e7:e2:9c:67:34:99:ac:39: 54:5c:b2:cb:d0:3f:0b:02:9b:d7:e3:02:33:0d:ea: 3d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A6:11:C2:2C:EE:4F:66:BE:CB:C8:B1:D0:C2:37:17:B5:9C:EB:D3 X509v3 Authority Key Identifier: keyid:1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:57:75:e5:85:b4:9d:36:48:98:9c:a1:2e:db:d4:10:40:ba: dc:2b:5d:46:70:82:8e:53:0c:27:c9:48:41:5c:8b:f3:9d:fd: 51:63:ff:05:35:ab:e2:54:64:f8:25:0f:54:19:39:de:78:cf: e4:33:18:4a:2c:fa:cd:83:fe:7d:c4:9c:68:66:ab:2c:73:48: 16:c2:2e:51:e8:ab:ae:07:8f:0a:5f:1e:53:a4:42:ca:a9:78: 23:06:3f:c2:99:7b:56:09:15:8a:1e:23:cb:ee:c2:70:6f:05: 9e:bc:d2:5c:01:b2:a3:18:02:92:c4:ae:4c:a9:ac:25:b3:7e: d5:1b:93:bb:6c:3e:e2:a0:19:b8:80:9b:e8:87:47:eb:af:1c: ff:e0:a4:8c:0d:cc:5f:b3:03:20:06:f4:5e:5d:da:da:24:7c: 6d:a5:13:97:c9:1c:e9:72:4b:1a:50:c6:47:43:36:18:5e:e0: c9:db:1b:10:01:c3:42:cd:e8:d1:0d:fc:86:d8:67:ec:7b:f0: cb:e0:60:39:ac:14:43:6e:ec:e8:86:a2:eb:a6:0e:1b:2e:54: 94:4e:52:ff:8f:94:4e:ec:94:df:3e:ad:28:99:b8:dd:33:2a: e9:78:9e:66:8f:eb:09:de:95:fb:3a:6d:73:8d:78:a7:ab:06: 9f:c9:00:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3N0MxMTAvBgNVBAUTKDFDRDQ5RUZCQzM3RUY0QThDNkM4ODc2NTYyQkQxMTMz NDRCQzdFRDEwHhcNMjUwNDI3MDIzNDE1WhcNMjUwNTA0MDIzNDE1WjAYMRYwFAYD VQQDEw02ODBkOTdhNy00MDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FuyH6dVqp8aJmEOiUjK6znz6cBn0sYrhysCZBTzRrjR3p5h0WJ/WELmgPTJ +xoGv0ZOYrWe8jGvLLlzhiIsDcLxyBdPq3haqjfN4YBPTTcgsUc8iiLX/nEDAhBm enKinn6YF781ShzomAllugg++NZ31J8Ybj/Jhph/pSdiF+hD1nmEYOqngw3X/pf1 mwrbmM5yYRWqHyGjM7UX1ku6W/bfzEYNAQwlMcbLfZEUUbortykPm/B8MhZOIDTO QeFv5BsUObjgBt718hBmoKFIdKOJMzkZg/GSuOMFwqBiJFfxgU+QLQJw5+KcZzSZ rDlUXLLL0D8LApvX4wIzDeo9pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCamEcIs 7k9mvsvIsdDCNxe1nOvTMB8GA1UdIwQYMBaAFBzUnvvDfvSoxsiHZWK9ETNEvH7R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc3Qy9COTdDNzM5NkM5 RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlLakd5SWRsWXIwUk0wUzhm dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hOU2UtOE4tOUtqR3lJZGxZcjBSTTBTOGZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc3Qy9COTdDNzM5NkM5RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlL akd5SWRsWXIwUk0wUzhmdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNV3XlhbSdNkiYnKEu29QQQLrcK11GcIKOUwwnyUhBXIvznf1RY/8F NaviVGT4JQ9UGTneeM/kMxhKLPrNg/59xJxoZqssc0gWwi5R6KuuB48KXx5TpELK qXgjBj/CmXtWCRWKHiPL7sJwbwWevNJcAbKjGAKSxK5Mqawls37VG5O7bD7ioBm4 gJvoh0frrxz/4KSMDcxfswMgBvReXdraJHxtpROXyRzpcksaUMZHQzYYXuDJ2xsQ AcNCzejRDfyG2Gfse/DL4GA5rBRDbuzohqLrpg4bLlSUTlL/j5RO7JTfPq0ombjd MyrpeJ5mj+sJ3pX7Om1zjXinqwafyQBF -----END CERTIFICATE-----Generated at Tue Apr 29 03:45:56 2025 by rpki-client