$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft File: HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json) Hash identifier: nRXZycG9rmYSefZJBEUSEFSx/WXPGmsQUiqQZWJBFFk= Subject key identifier: F2:EA:4D:50:BB:2A:29:90:52:76:0F:36:81:25:65:2D:6D:D4:77:A4 Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 Certificate issuer: /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Certificate serial: 0A54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft Manifest number: 0A4C Signing time: Wed 18 Jun 2025 19:35:07 +0000 Manifest this update: Wed 18 Jun 2025 19:35:07 +0000 Manifest next update: Wed 25 Jun 2025 19:35:07 +0000 Files and hashes: 1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: mFtHVYQbAKXjr+sYnEaVgnEq2OTqLv0haIISQcmQaSg=) 2: 9261E554464611EE84B7C534C4F9AE02.roa (hash: lLxl/sSYgP6ZriIWkj+AWN6PJcQcpVbRmAe2Y2lbT3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 19:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2644 (0xa54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BB4, serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Validity Not Before: Jun 18 19:35:07 2025 GMT Not After : Jun 25 19:35:07 2025 GMT Subject: CN=685314eb-2d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bb:2a:e5:a8:80:33:5e:2f:95:a6:a4:00:10: c0:81:7f:a9:fe:be:b9:4d:8d:59:5e:e7:28:ee:c1: 5a:53:75:15:10:9d:19:a2:8f:b8:c1:cd:87:96:13: 61:f1:27:4f:c6:35:b3:1b:27:7a:47:a1:c4:94:53: ba:73:9e:d2:f2:19:2b:31:44:4c:67:e9:27:fa:3a: cd:93:ca:27:b7:be:ce:bd:2d:e3:b9:78:fc:f7:1c: c8:ac:07:41:ed:76:49:1b:dc:86:9b:02:a1:b0:56: 58:43:f4:a3:c3:ec:3c:f1:78:8e:cb:9e:c8:59:87: 2a:92:4d:97:c7:9c:c2:00:df:f6:5a:ad:8b:d6:26: 45:97:00:ba:9d:0b:15:9f:28:b7:8c:5a:65:31:40: ca:97:75:68:c2:95:16:a2:e0:c2:e5:ae:31:6d:13: ab:04:7c:0c:cb:88:ab:1a:28:5e:ea:18:0b:4c:8f: a2:0c:f5:9e:92:f1:ab:8b:19:9d:97:53:ea:58:35: ed:0f:1e:f3:f8:56:38:1d:cf:5c:91:a5:07:64:d3: 6a:fe:19:6a:b4:7b:60:f7:d6:68:a3:71:98:74:f5: 4e:a8:76:77:22:df:60:d7:88:4b:d8:ca:18:38:1a: 01:57:c5:79:02:52:bd:f2:3c:e1:0f:fb:cd:d3:64: 9b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EA:4D:50:BB:2A:29:90:52:76:0F:36:81:25:65:2D:6D:D4:77:A4 X509v3 Authority Key Identifier: keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:27:97:b4:94:eb:b3:b4:3d:48:56:49:ef:e1:97:73:b8:31: a6:13:e6:2f:f1:e8:5e:22:bc:22:e3:2c:eb:5f:6b:05:b1:8f: 69:d9:a3:35:3a:8c:12:48:6e:0e:0d:1c:73:fa:64:93:df:d9: aa:a6:10:f8:8a:1e:01:87:51:99:25:3e:00:c5:0d:9d:78:93: 94:12:e7:53:f4:02:0a:c6:b1:29:d2:c9:d5:c9:ae:25:ba:34: 8b:b8:c4:b3:83:18:6c:35:6a:b6:f4:f9:d5:9b:f5:f8:97:af: fc:42:78:30:9a:7d:89:28:15:08:1c:16:5e:4e:26:8b:a8:26: 61:99:c7:0d:ca:1a:00:32:b4:76:43:72:50:2c:45:67:40:13: c3:62:5f:b8:55:9f:0f:8d:9b:14:84:cb:73:d2:01:43:dd:35: f2:12:af:b2:ab:ac:4e:d9:a4:a1:ea:4f:f2:d8:53:81:e4:79: 21:26:f7:e1:21:cc:e6:a7:54:42:68:3e:be:af:b1:b8:46:fb: e1:b0:05:c3:c9:0b:c7:a5:4a:eb:fe:76:56:ee:a8:10:6c:4b: a1:01:8c:f5:d3:ba:f1:f5:ca:ae:28:d0:4d:b9:08:51:ce:b9: d4:97:01:01:ca:35:d2:73:36:e8:5a:97:06:81:48:40:f8:a7: df:d1:be:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCQjQxMTAvBgNVBAUTKDFEMTIxN0VGOEZFODRCNTgyNTUxNjcxQkNBMzVFNjg0 NDg2OTI0OTcwHhcNMjUwNjE4MTkzNTA3WhcNMjUwNjI1MTkzNTA3WjAYMRYwFAYD VQQDEw02ODUzMTRlYi0yZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07sq5aiAM14vlaakABDAgX+p/r65TY1ZXuco7sFaU3UVEJ0Zoo+4wc2HlhNh 8SdPxjWzGyd6R6HElFO6c57S8hkrMURMZ+kn+jrNk8ont77OvS3juXj89xzIrAdB 7XZJG9yGmwKhsFZYQ/Sjw+w88XiOy57IWYcqkk2Xx5zCAN/2Wq2L1iZFlwC6nQsV nyi3jFplMUDKl3VowpUWouDC5a4xbROrBHwMy4irGihe6hgLTI+iDPWekvGrixmd l1PqWDXtDx7z+FY4Hc9ckaUHZNNq/hlqtHtg99Zoo3GYdPVOqHZ3It9g14hL2MoY OBoBV8V5AlK98jzhD/vN02Sb5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLqTVC7 KimQUnYPNoElZS1t1HekMB8GA1UdIwQYMBaAFB0SF++P6EtYJVFnG8o15oRIaSSX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEJCNC9EOTU0QkFCRTY5 QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1MxZ2xVV2NieWpYbWhFaHBK SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hSSVg3NF9vUzFnbFVXY2J5alhtaEVocEpKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEJCNC9EOTU0QkFCRTY5QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1Mx Z2xVV2NieWpYbWhFaHBKSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8J5e0lOuztD1IVknv4ZdzuDGmE+Yv8eheIrwi4yzrX2sFsY9p2aM1 OowSSG4ODRxz+mST39mqphD4ih4Bh1GZJT4AxQ2deJOUEudT9AIKxrEp0snVya4l ujSLuMSzgxhsNWq29PnVm/X4l6/8Qngwmn2JKBUIHBZeTiaLqCZhmccNyhoAMrR2 Q3JQLEVnQBPDYl+4VZ8PjZsUhMtz0gFD3TXyEq+yq6xO2aSh6k/y2FOB5HkhJvfh Iczmp1RCaD6+r7G4RvvhsAXDyQvHpUrr/nZW7qgQbEuhAYz107rx9cquKNBNuQhR zrnUlwEByjXSczboWpcGgUhA+Kff0b55 -----END CERTIFICATE-----Generated at Thu Jun 19 06:54:51 2025 by rpki-client