$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json) Hash identifier: Hr5mrXYcTEIv2bCg607zqwjVLdAuzjy21P3giGBv7SE= Subject key identifier: E8:B2:CB:C3:A7:B6:45:1A:16:78:05:F1:BD:27:A2:65:40:CC:7E:3F Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft Manifest number: 0109 Signing time: Sat 31 May 2025 04:46:20 +0000 Manifest this update: Sat 31 May 2025 04:46:20 +0000 Manifest next update: Sat 07 Jun 2025 04:46:20 +0000 Files and hashes: 1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: jm0NKvNJmAI65u500Lel0N+rSakzL0zilQP1bGciqlg=) 2: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: Xkd+Op7ObANSl7hSEgXBDp6fu8FLqlrIdcxaq4iFP2k=) 3: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: opgCLiPvltRVZTimE7GHd6S5jzb7OIm+U5D/6sM4IWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911112F, serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Validity Not Before: May 31 04:46:20 2025 GMT Not After : Jun 7 04:46:20 2025 GMT Subject: CN=683a899c-6efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:58:ab:25:89:06:1a:98:f3:ad:d5:b3:5c:1a: 89:a4:35:bc:05:c3:32:06:3d:bd:cd:d6:10:d1:d8: df:f1:60:db:f9:eb:a3:c2:f4:1a:44:9e:bf:c3:e7: ba:eb:a1:3a:07:0d:a1:b8:83:72:81:de:2a:7b:15: cd:a2:a2:f8:64:40:8b:02:40:3d:63:09:e8:bb:05: 98:d1:36:09:d1:1d:ef:8f:3e:1d:fc:53:65:31:e2: d6:83:61:a8:d0:83:e5:34:1a:dc:35:03:14:b9:5f: 3c:3e:29:b1:45:3c:dd:5c:07:5f:4f:9c:02:cc:63: 5e:5d:86:14:58:f0:fc:bf:63:b3:73:0f:84:94:1b: 5c:44:5c:ae:96:64:53:c8:21:de:fb:aa:71:13:05: d9:21:cd:17:34:9b:92:73:14:7b:ca:71:f7:8a:07: 6b:98:64:a5:e6:4b:36:44:92:cb:7c:fa:8f:67:59: 12:c6:f4:f9:e2:d6:9b:36:50:03:23:9d:5a:a4:f7: 28:06:f2:59:28:66:30:d6:af:0e:ea:38:eb:dc:d9: 62:97:37:2a:0b:a6:fb:d1:47:3d:66:c1:d1:bd:ac: 30:7e:d6:9e:0b:6f:a5:ed:3a:17:4d:80:05:7d:91: dd:0e:a6:0b:98:36:c7:72:67:9c:99:2b:33:4f:be: 0b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B2:CB:C3:A7:B6:45:1A:16:78:05:F1:BD:27:A2:65:40:CC:7E:3F X509v3 Authority Key Identifier: keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:d0:34:7d:ff:fb:1f:b4:2e:ec:ec:57:9c:39:f6:a1:f5:f5: 29:7e:89:aa:d6:f0:50:2e:c1:68:20:ba:94:d1:a8:8d:10:82: 0d:3e:ce:d4:3d:ad:0c:71:03:10:18:c0:a9:64:a5:7c:fb:cd: 25:a9:09:2d:08:e4:a4:b9:c5:f3:8d:a8:5d:10:61:32:aa:58: e1:ac:86:b9:9a:f1:87:32:d8:71:67:69:a2:25:88:54:df:29: 1b:0e:04:47:c6:0d:86:6f:b2:88:d5:93:a1:90:36:e7:e1:18: ce:88:c7:ae:d4:62:d9:17:19:5b:97:d4:5c:fd:8c:15:1b:cf: 75:4a:5b:00:76:98:64:9a:9c:e7:80:b3:57:b3:25:d6:84:13: f5:03:b5:4b:9c:fe:f0:23:86:b3:2e:2c:1b:fe:90:d8:73:05: c0:6a:ed:97:1f:ca:72:61:1c:16:87:86:4e:b6:19:1f:0e:f7: 6a:26:c4:fc:49:85:bf:b7:7b:e6:a6:99:0b:0a:86:a9:f5:5e: 67:39:f9:3a:55:e0:c9:3d:72:05:3b:19:06:1e:28:a3:f0:74: 4e:95:d8:1a:e6:42:0c:e1:00:6b:d3:6c:1d:31:de:f9:b4:c3: 67:6e:31:bc:7e:74:21:a0:8f:91:40:60:0e:9e:6c:b6:40:fc: 8c:1b:0b:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTExMkYxMTAvBgNVBAUTKDFFNTdCNDNGMDQ0RDRBQkE4MjIyQTQwOTc4NjYxNDI4 MEFBNzM5QTEwHhcNMjUwNTMxMDQ0NjIwWhcNMjUwNjA3MDQ0NjIwWjAYMRYwFAYD VQQDEw02ODNhODk5Yy02ZWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulirJYkGGpjzrdWzXBqJpDW8BcMyBj29zdYQ0djf8WDb+eujwvQaRJ6/w+e6 66E6Bw2huINygd4qexXNoqL4ZECLAkA9YwnouwWY0TYJ0R3vjz4d/FNlMeLWg2Go 0IPlNBrcNQMUuV88PimxRTzdXAdfT5wCzGNeXYYUWPD8v2Ozcw+ElBtcRFyulmRT yCHe+6pxEwXZIc0XNJuScxR7ynH3igdrmGSl5ks2RJLLfPqPZ1kSxvT54tabNlAD I51apPcoBvJZKGYw1q8O6jjr3NlilzcqC6b70Uc9ZsHRvawwftaeC2+l7ToXTYAF fZHdDqYLmDbHcmecmSszT74LpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiyy8On tkUaFngF8b0nomVAzH4/MB8GA1UdIwQYMBaAFB5XtD8ETUq6giKkCXhmFCgKpzmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTEyRi85NjREQzY5QUJB OEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNycUNJcVFKZUdZVUtBcW5P YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hsZTBQd1JOU3JxQ0lxUUplR1lVS0Fxbk9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTEyRi85NjREQzY5QUJBOEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNy cUNJcVFKZUdZVUtBcW5PYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC20DR9//sftC7s7FecOfah9fUpfomq1vBQLsFoILqU0aiNEIINPs7U Pa0McQMQGMCpZKV8+80lqQktCOSkucXzjahdEGEyqljhrIa5mvGHMthxZ2miJYhU 3ykbDgRHxg2Gb7KI1ZOhkDbn4RjOiMeu1GLZFxlbl9Rc/YwVG891SlsAdphkmpzn gLNXsyXWhBP1A7VLnP7wI4azLiwb/pDYcwXAau2XH8pyYRwWh4ZOthkfDvdqJsT8 SYW/t3vmppkLCoap9V5nOfk6VeDJPXIFOxkGHiij8HROldga5kIM4QBr02wdMd75 tMNnbjG8fnQhoI+RQGAOnmy2QPyMGwsk -----END CERTIFICATE-----Generated at Sat May 31 17:08:52 2025 by rpki-client