$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft File: hoEbsmeu-FQA2-cpcCMtQRotmuk.mft (raw, json) Hash identifier: LICWe65WY8vKrHgA+NcCPDqQTuV+dZKVwcZ/VfGSuFY= Subject key identifier: 1D:5C:A6:53:FC:57:CC:23:E2:5F:B6:05:EE:F3:20:F7:3A:91:E0:92 Authority key identifier: 86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9 Certificate issuer: /CN=A913AE7C/serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9 Certificate serial: 0B94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft Manifest number: 0B8E Signing time: Fri 04 Apr 2025 19:06:39 +0000 Manifest this update: Fri 04 Apr 2025 19:06:39 +0000 Manifest next update: Fri 11 Apr 2025 19:06:39 +0000 Files and hashes: 1: hoEbsmeu-FQA2-cpcCMtQRotmuk.crl (hash: DNPqYRRfSmWcjv5i679m2+oJRfgv+chTJQJt+4aTtgg=) 2: CE9692E0222311EAAED0162CC4F9AE02.roa (hash: CvAiV/QKU9nzbsmVn16l0FaQPJa5PJfMBf74/ijJ5jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2964 (0xb94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE7C Validity Not Before: Apr 4 19:06:39 2025 GMT Not After : Apr 11 19:06:39 2025 GMT Subject: CN=67f02dbf-59d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:be:cd:21:78:79:74:1d:f6:6b:0e:a7:06:b0: 31:a1:01:c0:23:29:bc:d3:74:6e:ea:58:e3:c0:07: 87:8d:8a:de:21:84:26:66:d5:c7:b6:94:aa:e9:2c: fd:ad:9e:86:4b:c4:9f:c9:4c:07:09:d7:f9:3b:8a: 23:8f:a5:c7:57:c4:39:51:f4:a0:65:42:37:7c:f7: 33:8b:1b:e7:81:58:4e:35:45:7e:eb:d5:a8:ce:7f: 8a:7b:a4:bc:2e:3f:0b:5a:b0:0f:0e:31:78:0c:2f: be:1a:cb:de:d6:7a:da:80:28:31:f8:2b:bb:43:3c: 5f:78:72:f2:ab:63:59:af:f9:a6:75:85:04:5a:be: 4d:a2:d0:1b:76:fb:78:16:d1:0b:da:4d:ad:42:17: 87:04:92:a7:50:b7:2c:a1:f2:64:c7:56:9b:af:f6: 60:21:7c:93:3c:fd:e6:9a:bf:45:51:f9:7b:b7:af: db:52:fc:9d:ac:a5:fb:82:ff:77:33:75:67:09:2c: 67:fe:64:10:d4:d0:8f:a6:d4:e6:ae:62:04:35:8c: 5d:7e:90:33:3e:15:cd:df:38:cf:d8:1c:7b:52:22: 32:f3:1d:5a:8a:f1:19:ce:96:83:a1:12:60:79:62: 53:51:c2:88:b7:6d:e3:4f:3d:f7:9c:0a:3a:10:37: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5C:A6:53:FC:57:CC:23:E2:5F:B6:05:EE:F3:20:F7:3A:91:E0:92 X509v3 Authority Key Identifier: keyid:86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:27:97:a0:f3:53:db:72:e3:38:1c:2c:e1:23:71:49:62:91: 4a:6e:c9:8f:d3:3c:d7:53:96:5f:1c:f2:c8:fb:28:15:70:f1: cc:8d:a2:cd:8f:0d:22:00:18:78:a6:5f:e0:a9:02:c6:75:f4: a0:55:8c:02:e1:43:fe:6d:9a:e3:e1:43:88:e6:21:64:4d:03: 0d:55:e7:cb:8e:e3:a8:3d:a8:ae:34:42:1e:2d:ed:f1:87:52: a0:01:60:18:2b:fc:2c:08:ae:19:f4:b7:6f:9d:a2:43:c3:9e: a1:7f:f0:a7:f6:df:20:c7:e7:b7:8d:ff:6c:04:73:35:ce:a8: 56:fa:be:c1:75:81:2b:07:0a:0f:6d:6f:f9:d6:7c:83:e3:9d: b1:8c:65:c8:cb:39:3d:73:c2:db:4c:aa:1e:b5:a3:7c:75:e3: d9:16:94:1f:4a:59:fb:48:83:24:9b:c6:55:ed:12:3a:ef:1a: 35:54:79:6d:ff:99:f6:1f:14:da:d9:0e:a0:32:b1:ce:0f:ba: 87:9b:89:f9:b2:04:0a:59:6f:6b:b3:2d:39:e9:82:ae:d1:19: d0:85:a5:ee:81:a4:bf:15:7a:2c:92:d8:6a:b1:bf:d6:b0:1d: 00:b0:e6:f9:4a:3f:48:d8:5e:68:9a:3b:77:65:5c:fc:fd:e5: b9:ff:c8:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFN0MxMTAvBgNVBAUTKDg2ODExQkIyNjdBRUY4NTQwMERCRTcyOTcwMjMyRDQx MUEyRDlBRTkwHhcNMjUwNDA0MTkwNjM5WhcNMjUwNDExMTkwNjM5WjAYMRYwFAYD VQQDEw02N2YwMmRiZi01OWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7r7NIXh5dB32aw6nBrAxoQHAIym803Ru6ljjwAeHjYreIYQmZtXHtpSq6Sz9 rZ6GS8SfyUwHCdf5O4ojj6XHV8Q5UfSgZUI3fPczixvngVhONUV+69Wozn+Ke6S8 Lj8LWrAPDjF4DC++Gsve1nragCgx+Cu7QzxfeHLyq2NZr/mmdYUEWr5NotAbdvt4 FtEL2k2tQheHBJKnULcsofJkx1abr/ZgIXyTPP3mmr9FUfl7t6/bUvydrKX7gv93 M3VnCSxn/mQQ1NCPptTmrmIENYxdfpAzPhXN3zjP2Bx7UiIy8x1aivEZzpaDoRJg eWJTUcKIt23jTz33nAo6EDdEYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1cplP8 V8wj4l+2Be7zIPc6keCSMB8GA1UdIwQYMBaAFIaBG7JnrvhUANvnKXAjLUEaLZrp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3Qy9GMzQwN0U1NDIy MjIxMUVBODc3REQ1MkFDNEY5QUUwMi9ob0Vic21ldS1GUUEyLWNwY0NNdFFSb3Rt dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvRWJzbWV1LUZRQTItY3BjQ010UVJvdG11ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU3Qy9GMzQwN0U1NDIyMjIxMUVBODc3REQ1MkFDNEY5QUUwMi9ob0Vic21ldS1G UUEyLWNwY0NNdFFSb3RtdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVJ5eg81PbcuM4HCzhI3FJYpFKbsmP0zzXU5ZfHPLI+ygVcPHMjaLN jw0iABh4pl/gqQLGdfSgVYwC4UP+bZrj4UOI5iFkTQMNVefLjuOoPaiuNEIeLe3x h1KgAWAYK/wsCK4Z9LdvnaJDw56hf/Cn9t8gx+e3jf9sBHM1zqhW+r7BdYErBwoP bW/51nyD452xjGXIyzk9c8LbTKoetaN8dePZFpQfSln7SIMkm8ZV7RI67xo1VHlt /5n2HxTa2Q6gMrHOD7qHm4n5sgQKWW9rsy056YKu0RnQhaXugaS/FXoskthqsb/W sB0AsOb5Sj9I2F5omjt3ZVz8/eW5/8iY -----END CERTIFICATE-----Generated at Sat Apr 5 22:05:50 2025 by rpki-client