$ rpki-client -vvf rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft File: hhe5_iqn_uIl8uDS3IdkCYE33m0.mft (raw, json) Hash identifier: +pu/0A/qBAbK+NI05CsNBGUqnTfyuT7oAzxBvNAFPXI= Subject key identifier: A3:60:FA:6C:4F:0D:91:2D:A5:C4:B8:29:82:C2:4C:DE:5C:74:6C:20 Authority key identifier: 86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D Certificate issuer: /CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Certificate serial: 09E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft Manifest number: 09DF Signing time: Fri 06 Jun 2025 19:58:24 +0000 Manifest this update: Fri 06 Jun 2025 19:58:23 +0000 Manifest next update: Fri 13 Jun 2025 19:58:23 +0000 Files and hashes: 1: hhe5_iqn_uIl8uDS3IdkCYE33m0.crl (hash: J9s1y0A2OTYpxcvsdikHLtu5BhwaGKPia+XAqu5C6S0=) 2: E118A9DA7CB911EABD07CE5EC4F9AE02.roa (hash: 3BzJCKxq6lxeVjXVlpYVRMXqU7zHik0ruN2Ba5iWxOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 19:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2534 (0x9e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117715, serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Validity Not Before: Jun 6 19:58:23 2025 GMT Not After : Jun 13 19:58:23 2025 GMT Subject: CN=6843485f-2cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d4:a3:46:62:f9:e4:f6:e9:d9:ed:6c:53:48: 8d:fc:18:3d:16:bb:16:f7:bf:4a:8d:a6:eb:a0:ed: c5:30:55:dd:6e:b0:e1:4d:17:94:43:45:07:44:f7: 5b:ef:c5:45:2a:cb:37:ad:76:2b:9d:b3:83:c2:88: 4c:04:05:c9:e4:4d:20:36:92:a0:ea:2c:58:1f:ff: f2:7b:22:fd:d0:0f:8e:15:27:a0:83:c7:a5:85:1a: 73:ec:95:af:ba:55:73:d4:6e:d5:25:65:5c:f0:49: 5a:74:1b:cf:9a:87:5f:50:ae:d5:48:ba:be:82:ba: c0:85:31:e5:12:be:d1:36:3c:6b:0a:64:60:57:b3: 1c:45:f3:3c:f4:e5:20:db:62:53:37:b0:51:f8:48: e9:f5:ab:dd:8a:46:94:24:b5:74:6a:75:db:f9:bb: 0a:16:d3:bb:3b:d5:21:7a:5d:a0:6b:35:97:de:23: 72:71:92:2d:1a:0a:00:4a:61:e7:98:d6:e5:5c:b7: 04:38:4b:ff:1c:e5:77:00:5b:50:e6:0b:b8:6b:4b: 3e:09:91:28:b6:9f:3b:18:7a:aa:a4:9d:d8:6b:12: 53:5a:42:cd:b4:7e:c8:e8:bf:8d:22:79:30:3f:07: 3c:b2:10:18:bd:4f:ab:a1:cc:86:e1:1e:93:e3:e0: 8a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:60:FA:6C:4F:0D:91:2D:A5:C4:B8:29:82:C2:4C:DE:5C:74:6C:20 X509v3 Authority Key Identifier: keyid:86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:4c:ca:40:fc:a6:fc:66:ab:5c:5b:2d:73:85:c7:8a:5a:1a: a5:53:aa:f1:d7:23:3c:9c:d5:2e:6c:ff:c6:ef:31:f2:28:28: 7b:fd:a6:d5:f4:d2:49:68:85:22:43:d3:8e:0b:0b:d5:31:db: 60:80:99:21:f7:61:dc:7e:59:7d:01:32:18:1a:7b:81:92:a1: c5:3b:6b:69:cc:a4:f5:2f:4d:05:75:99:55:12:b9:fc:b6:62: 64:9d:28:60:50:ea:aa:f8:ca:93:87:74:c1:95:84:e7:b3:1b: 70:3d:03:70:68:23:4a:2d:46:f9:80:8e:66:e1:10:d9:96:a5: a3:c1:19:b8:8e:04:21:66:c5:53:92:52:fb:6b:b0:68:26:55: d6:98:06:11:85:09:00:45:7b:7f:59:1f:82:0a:4d:88:ac:9c: 06:ef:5a:75:83:31:e9:95:01:59:d9:1e:dd:60:97:6a:b4:ef: a1:50:0c:dc:fc:0d:84:65:96:3f:24:1a:d5:9a:d7:27:c4:4a: 58:ac:e2:f9:9a:76:17:50:43:38:c5:3a:c2:38:b7:51:23:42: cf:30:ed:61:80:23:e0:92:13:51:ca:16:93:93:a2:3d:50:03: e9:6e:36:bd:69:16:4b:06:9a:e4:63:19:f4:b4:cf:14:71:ef: 67:78:03:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3MTUxMTAvBgNVBAUTKDg2MTdCOUZFMkFBN0ZFRTIyNUYyRTBEMkRDODc2NDA5 ODEzN0RFNkQwHhcNMjUwNjA2MTk1ODIzWhcNMjUwNjEzMTk1ODIzWjAYMRYwFAYD VQQDEw02ODQzNDg1Zi0yY2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotSjRmL55Pbp2e1sU0iN/Bg9FrsW979KjabroO3FMFXdbrDhTReUQ0UHRPdb 78VFKss3rXYrnbODwohMBAXJ5E0gNpKg6ixYH//yeyL90A+OFSegg8elhRpz7JWv ulVz1G7VJWVc8EladBvPmodfUK7VSLq+grrAhTHlEr7RNjxrCmRgV7McRfM89OUg 22JTN7BR+Ejp9avdikaUJLV0anXb+bsKFtO7O9Uhel2gazWX3iNycZItGgoASmHn mNblXLcEOEv/HOV3AFtQ5gu4a0s+CZEotp87GHqqpJ3YaxJTWkLNtH7I6L+NInkw Pwc8shAYvU+rocyG4R6T4+CKUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNg+mxP DZEtpcS4KYLCTN5cdGwgMB8GA1UdIwQYMBaAFIYXuf4qp/7iJfLg0tyHZAmBN95t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzcxNS9CQzFDNUYxMDdD QjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91SWw4dURTM0lka0NZRTMz bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hoZTVfaXFuX3VJbDh1RFMzSWRrQ1lFMzNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzcxNS9CQzFDNUYxMDdDQjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91 SWw4dURTM0lka0NZRTMzbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWTMpA/Kb8ZqtcWy1zhceKWhqlU6rx1yM8nNUubP/G7zHyKCh7/abV 9NJJaIUiQ9OOCwvVMdtggJkh92Hcfll9ATIYGnuBkqHFO2tpzKT1L00FdZlVErn8 tmJknShgUOqq+MqTh3TBlYTnsxtwPQNwaCNKLUb5gI5m4RDZlqWjwRm4jgQhZsVT klL7a7BoJlXWmAYRhQkARXt/WR+CCk2IrJwG71p1gzHplQFZ2R7dYJdqtO+hUAzc /A2EZZY/JBrVmtcnxEpYrOL5mnYXUEM4xTrCOLdRI0LPMO1hgCPgkhNRyhaTk6I9 UAPpbja9aRZLBprkYxn0tM8Uce9neAPh -----END CERTIFICATE-----Generated at Sat Jun 7 20:25:21 2025 by rpki-client