$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft File: HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json) Hash identifier: xelXVGA5aTvRH33wRrTAEviQt+WKfvwAhqPcHvAuj58= Subject key identifier: E7:2E:E7:D8:1B:47:BC:22:24:C4:5E:19:CF:C8:C7:8F:CF:8D:90:08 Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 Certificate issuer: /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Certificate serial: 0A39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft Manifest number: 0A31 Signing time: Thu 24 Apr 2025 19:39:58 +0000 Manifest this update: Thu 24 Apr 2025 19:39:57 +0000 Manifest next update: Thu 01 May 2025 19:39:57 +0000 Files and hashes: 1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: R43kLos1qEYSqWO1sdaNuSWbOnIVc6k9sJNDm88MxX0=) 2: 9261E554464611EE84B7C534C4F9AE02.roa (hash: lLxl/sSYgP6ZriIWkj+AWN6PJcQcpVbRmAe2Y2lbT3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2617 (0xa39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BB4, serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Validity Not Before: Apr 24 19:39:57 2025 GMT Not After : May 1 19:39:57 2025 GMT Subject: CN=680a938d-d7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:66:3b:48:e0:44:3c:ee:0f:f8:f0:f2:f4:4b: c0:f3:62:94:cc:dc:ef:5e:a3:91:9b:be:9c:a3:74: 04:21:e2:75:49:ab:62:f7:33:5a:ed:57:47:95:57: 09:c2:99:db:11:ee:bf:40:86:39:96:36:ce:1a:a3: 8f:51:89:6a:e1:91:b6:42:1f:f0:2d:74:bb:dc:5a: 2b:c7:95:a9:33:9e:17:5e:9e:29:c2:71:76:89:a7: fe:c9:af:33:6b:3c:60:44:ae:44:40:62:03:38:6b: c4:ff:4e:b0:a2:bc:81:1b:89:8a:fa:e7:18:71:dd: a1:b8:49:63:92:c6:a4:b3:c6:db:1e:35:d5:cf:d0: 60:43:87:59:b5:b3:95:bc:bf:cc:58:83:ae:05:aa: b9:ec:41:47:cb:81:e4:28:11:59:5a:d0:5c:11:71: 5b:5b:0a:b6:25:e4:2c:62:29:c0:cf:49:5d:4b:82: cb:39:c3:1e:d8:21:d1:82:cd:d1:f3:b9:33:d6:ee: f1:ef:80:4f:7b:c8:59:30:6b:9f:9d:04:77:76:a3: ee:0e:ae:15:ba:9e:2f:9c:21:e9:13:e1:db:3b:3c: 5f:6d:24:73:b9:be:40:a1:1c:ed:42:14:d3:c1:03: 98:1e:b0:ef:eb:25:d7:72:67:e8:fb:87:62:22:8d: 5a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2E:E7:D8:1B:47:BC:22:24:C4:5E:19:CF:C8:C7:8F:CF:8D:90:08 X509v3 Authority Key Identifier: keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:de:5f:44:99:2a:81:b7:8b:a1:3e:25:39:6f:43:be:a7:82: 78:8a:2a:fa:61:13:89:66:89:87:e7:90:72:9f:99:e0:3d:52: d0:41:34:14:59:71:5e:32:ac:6b:77:97:63:7b:0a:8a:b1:b4: 38:f4:c1:e2:7a:59:82:96:3d:a3:07:10:72:b4:18:6d:32:55: d5:99:99:14:1b:22:f7:4b:56:7c:36:51:59:42:89:41:55:5d: 07:7e:44:ac:d2:ee:9c:60:89:df:3f:44:2c:7a:0b:b0:71:55: a9:7e:84:d7:ea:2f:ba:d1:dc:de:ae:9b:d9:b7:f2:bb:7c:01: 5f:e1:07:2a:1b:93:a0:89:3e:c1:a5:63:99:66:dc:da:31:dd: f5:cf:e0:84:8a:03:55:80:bf:3b:aa:9a:b6:48:d9:bb:90:3e: b1:61:23:28:22:93:80:1c:2c:30:6e:0e:ad:1b:34:fb:b8:b5: 89:02:8a:83:9e:d9:68:f8:76:0e:58:f8:36:0c:c0:b8:4f:fa: 03:93:c8:67:c7:d1:0d:a2:08:3b:1a:3d:02:10:fd:4e:32:31: 81:10:4f:73:de:c1:37:23:4c:3d:17:7c:46:63:69:5d:f1:49: 72:cc:82:85:65:d6:20:21:e8:c8:d8:7a:be:12:10:b0:13:63: cc:d9:ac:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCQjQxMTAvBgNVBAUTKDFEMTIxN0VGOEZFODRCNTgyNTUxNjcxQkNBMzVFNjg0 NDg2OTI0OTcwHhcNMjUwNDI0MTkzOTU3WhcNMjUwNTAxMTkzOTU3WjAYMRYwFAYD VQQDEw02ODBhOTM4ZC1kN2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GY7SOBEPO4P+PDy9EvA82KUzNzvXqORm76co3QEIeJ1Sati9zNa7VdHlVcJ wpnbEe6/QIY5ljbOGqOPUYlq4ZG2Qh/wLXS73Forx5WpM54XXp4pwnF2iaf+ya8z azxgRK5EQGIDOGvE/06woryBG4mK+ucYcd2huEljksaks8bbHjXVz9BgQ4dZtbOV vL/MWIOuBaq57EFHy4HkKBFZWtBcEXFbWwq2JeQsYinAz0ldS4LLOcMe2CHRgs3R 87kz1u7x74BPe8hZMGufnQR3dqPuDq4Vup4vnCHpE+HbOzxfbSRzub5AoRztQhTT wQOYHrDv6yXXcmfo+4diIo1aOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcu59gb R7wiJMReGc/Ix4/PjZAIMB8GA1UdIwQYMBaAFB0SF++P6EtYJVFnG8o15oRIaSSX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEJCNC9EOTU0QkFCRTY5 QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1MxZ2xVV2NieWpYbWhFaHBK SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hSSVg3NF9vUzFnbFVXY2J5alhtaEVocEpKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEJCNC9EOTU0QkFCRTY5QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1Mx Z2xVV2NieWpYbWhFaHBKSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+3l9EmSqBt4uhPiU5b0O+p4J4iir6YROJZomH55Byn5ngPVLQQTQU WXFeMqxrd5djewqKsbQ49MHielmClj2jBxBytBhtMlXVmZkUGyL3S1Z8NlFZQolB VV0HfkSs0u6cYInfP0QseguwcVWpfoTX6i+60dzerpvZt/K7fAFf4QcqG5OgiT7B pWOZZtzaMd31z+CEigNVgL87qpq2SNm7kD6xYSMoIpOAHCwwbg6tGzT7uLWJAoqD ntlo+HYOWPg2DMC4T/oDk8hnx9ENogg7Gj0CEP1OMjGBEE9z3sE3I0w9F3xGY2ld 8UlyzIKFZdYgIejI2Hq+EhCwE2PM2azw -----END CERTIFICATE-----Generated at Sat Apr 26 14:01:44 2025 by rpki-client