$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft File: hoEbsmeu-FQA2-cpcCMtQRotmuk.mft (raw, json) Hash identifier: elsYY4vDSoRTBmGyRqdF4pzAI8LFTt/GiVb7TZuLOi0= Subject key identifier: 9C:7C:EB:C6:DD:E3:1D:E1:05:10:E3:2F:19:47:C4:B4:EF:D7:79:A8 Authority key identifier: 86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9 Certificate issuer: /CN=A913AE7C/serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9 Certificate serial: 0BAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft Manifest number: 0BA9 Signing time: Fri 30 May 2025 19:09:29 +0000 Manifest this update: Fri 30 May 2025 19:09:29 +0000 Manifest next update: Fri 06 Jun 2025 19:09:29 +0000 Files and hashes: 1: hoEbsmeu-FQA2-cpcCMtQRotmuk.crl (hash: BSGU4rdJbQi14qJzLIJqoODe6SAEVYb3y1jOPVYe+UE=) 2: CE9692E0222311EAAED0162CC4F9AE02.roa (hash: CvAiV/QKU9nzbsmVn16l0FaQPJa5PJfMBf74/ijJ5jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2991 (0xbaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE7C, serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9 Validity Not Before: May 30 19:09:29 2025 GMT Not After : Jun 6 19:09:29 2025 GMT Subject: CN=683a0269-0a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:30:3b:cd:24:23:41:27:3c:38:72:57:7a:e9: ad:5f:09:2b:3d:98:fd:69:80:b2:33:76:da:7e:16: 70:14:9e:33:4b:f2:3f:92:49:e5:4d:6b:47:37:9b: b2:ae:a8:96:6f:94:1a:c4:d5:5e:20:2c:60:a7:00: 80:15:69:ab:35:44:df:36:df:f4:8a:01:19:12:d4: 30:16:3e:2a:05:1d:d3:ae:c4:80:26:2c:82:0f:38: d1:86:d8:58:5f:c4:cb:80:9b:21:d5:23:ca:a2:4a: 93:66:0d:de:2e:22:f3:0e:24:1b:d1:c3:df:1d:58: 4b:6c:c3:16:53:46:81:a1:2a:38:ee:e7:5c:72:73: b8:cd:a1:66:73:24:b0:54:c6:3f:6a:f6:4a:18:75: 27:0b:4f:72:cd:46:38:c7:5b:1e:ea:94:3d:e7:5e: 6e:37:d0:d5:e6:a3:5a:cd:33:01:03:c1:bf:a5:1c: f8:18:5e:a7:04:92:d5:4e:df:92:38:60:c3:23:ae: 8c:99:c8:54:06:2b:9d:68:e4:80:99:61:28:b5:a0: 0e:cf:2f:83:0a:ad:cb:cb:f6:18:8f:0c:e0:1c:e5: 17:db:29:64:db:51:79:14:7d:ff:47:19:37:b0:c6: 3b:13:8a:15:ef:c8:eb:10:d5:b4:b3:89:06:c3:e1: 8c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7C:EB:C6:DD:E3:1D:E1:05:10:E3:2F:19:47:C4:B4:EF:D7:79:A8 X509v3 Authority Key Identifier: keyid:86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:83:a1:92:92:d3:79:bd:1e:fb:2b:6f:59:d1:bc:ab:95:fe: 97:38:0b:f9:d5:3f:74:72:26:f6:1b:45:4a:02:4f:75:34:94: 8f:e7:80:64:0b:06:ec:f8:d5:c0:d4:ad:e2:55:cc:8f:15:5b: 47:52:e9:6f:87:99:d5:d6:45:8f:a2:a8:d1:22:b4:1c:00:4c: 7d:bf:86:43:05:98:f6:44:73:a1:f5:0b:09:54:60:62:d9:48: 90:13:06:de:5c:a2:ad:df:48:b6:eb:3b:1c:0c:8e:5d:19:7b: 5a:27:89:e8:8b:d7:2f:5e:10:44:df:b5:8b:ed:9e:18:15:2b: e4:4e:82:a3:54:e7:02:03:00:70:97:bd:6c:5b:07:bb:00:a5: 38:64:00:2c:ad:ec:09:d3:8b:cb:34:52:8b:af:e3:f1:15:7b: 33:6f:db:5d:3a:9b:5b:16:eb:21:f0:a6:33:2c:2c:13:02:30: 07:a6:19:2a:18:8e:df:60:73:67:b7:c7:1c:3c:cd:6c:d5:34: ca:bf:54:71:42:4d:92:d6:26:d7:c3:42:49:f8:05:d0:65:8e: 51:51:0d:e3:91:84:b6:94:dd:00:f6:5f:49:a5:c4:59:11:03: 2d:af:b5:2d:3a:d9:c9:66:37:a8:1b:4e:06:31:69:54:d8:f9: 95:3f:0e:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFN0MxMTAvBgNVBAUTKDg2ODExQkIyNjdBRUY4NTQwMERCRTcyOTcwMjMyRDQx MUEyRDlBRTkwHhcNMjUwNTMwMTkwOTI5WhcNMjUwNjA2MTkwOTI5WjAYMRYwFAYD VQQDEw02ODNhMDI2OS0wYTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6TA7zSQjQSc8OHJXeumtXwkrPZj9aYCyM3bafhZwFJ4zS/I/kknlTWtHN5uy rqiWb5QaxNVeICxgpwCAFWmrNUTfNt/0igEZEtQwFj4qBR3TrsSAJiyCDzjRhthY X8TLgJsh1SPKokqTZg3eLiLzDiQb0cPfHVhLbMMWU0aBoSo47udccnO4zaFmcySw VMY/avZKGHUnC09yzUY4x1se6pQ9515uN9DV5qNazTMBA8G/pRz4GF6nBJLVTt+S OGDDI66MmchUBiudaOSAmWEotaAOzy+DCq3Ly/YYjwzgHOUX2ylk21F5FH3/Rxk3 sMY7E4oV78jrENW0s4kGw+GMUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJx868bd 4x3hBRDjLxlHxLTv13moMB8GA1UdIwQYMBaAFIaBG7JnrvhUANvnKXAjLUEaLZrp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3Qy9GMzQwN0U1NDIy MjIxMUVBODc3REQ1MkFDNEY5QUUwMi9ob0Vic21ldS1GUUEyLWNwY0NNdFFSb3Rt dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvRWJzbWV1LUZRQTItY3BjQ010UVJvdG11ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU3Qy9GMzQwN0U1NDIyMjIxMUVBODc3REQ1MkFDNEY5QUUwMi9ob0Vic21ldS1G UUEyLWNwY0NNdFFSb3RtdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/g6GSktN5vR77K29Z0byrlf6XOAv51T90cib2G0VKAk91NJSP54Bk Cwbs+NXA1K3iVcyPFVtHUulvh5nV1kWPoqjRIrQcAEx9v4ZDBZj2RHOh9QsJVGBi 2UiQEwbeXKKt30i26zscDI5dGXtaJ4noi9cvXhBE37WL7Z4YFSvkToKjVOcCAwBw l71sWwe7AKU4ZAAsrewJ04vLNFKLr+PxFXszb9tdOptbFush8KYzLCwTAjAHphkq GI7fYHNnt8ccPM1s1TTKv1RxQk2S1ibXw0JJ+AXQZY5RUQ3jkYS2lN0A9l9JpcRZ EQMtr7UtOtnJZjeoG04GMWlU2PmVPw4L -----END CERTIFICATE-----Generated at Sat May 31 16:49:08 2025 by rpki-client