$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft File: huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json) Hash identifier: xf9NID7Djy6cf/FuQRudGrU+nbrpJj0Ld8ftWKbf4Vo= Subject key identifier: F3:0F:4F:BD:AC:50:92:1E:D7:03:81:AD:8F:31:22:21:1C:28:F9:B4 Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft Manifest number: C1 Signing time: Sat 23 Aug 2025 05:58:11 +0000 Manifest this update: Sat 23 Aug 2025 05:58:11 +0000 Manifest next update: Sat 30 Aug 2025 05:58:11 +0000 Files and hashes: 1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: PxMk6waIYTS1ay+ZitezKXZ8CZI6fcn9kQsVzW+qR9k=) 2: F5C5A42C5ADC11EF8061F335C4F9AE02.roa (hash: jyFeBHdKHmG1HRE/BTdZ4LEVyNfH72ioQGaOrtzmyn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Validity Not Before: Aug 23 05:58:11 2025 GMT Not After : Aug 30 05:58:11 2025 GMT Subject: CN=68a95873-370d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8a:f7:a5:62:04:43:fb:f5:33:77:1d:e6:b9: b1:b5:a6:05:d0:26:e7:17:2c:7d:cf:dd:c1:9e:47: 61:55:9f:6b:fe:92:38:e1:0b:bf:99:c5:3e:27:19: 85:e1:e8:91:4d:ab:7e:6a:de:e1:00:e6:e4:2b:53: 65:cb:69:a4:2d:c3:a3:5a:97:13:46:8e:ce:d3:9c: ae:51:c5:15:34:98:e7:ac:92:55:f4:fd:06:fc:3f: 10:ff:4c:de:d3:77:b7:1e:c5:31:6e:fb:06:c7:84: d7:0d:a7:64:cb:41:94:7a:15:8a:49:13:ea:96:d6: 9e:2f:3e:3f:23:92:6c:c3:00:b9:40:90:95:1b:96: 10:4b:2f:9e:2a:f2:b3:94:fe:a8:82:7f:1c:62:a1: d6:45:51:ab:4a:7f:2f:69:7a:d2:20:9c:69:b7:fa: 59:ec:18:f7:98:35:34:55:d6:9f:65:f8:15:41:d6: 01:d4:3d:86:b8:8f:37:18:20:9f:5e:c6:6b:71:64: a3:ca:2d:bc:e3:1e:d5:d2:f9:76:70:91:cf:05:5d: e7:0f:44:c1:f7:8e:01:5e:86:0b:32:17:25:9c:d3: a2:66:d4:aa:27:fa:4e:56:cd:85:42:ba:15:64:3e: 47:15:be:38:24:b4:80:b7:85:ba:a3:0f:79:97:2b: 45:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0F:4F:BD:AC:50:92:1E:D7:03:81:AD:8F:31:22:21:1C:28:F9:B4 X509v3 Authority Key Identifier: keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4f:7c:76:b6:ec:c0:bb:f9:03:94:33:0a:23:0c:95:87:69: 3a:42:8c:16:d3:cb:92:e3:21:7c:81:f9:ef:69:72:66:1d:9c: 36:8f:74:4c:22:a4:dd:d4:74:92:dc:47:c3:36:cb:af:30:54: 40:1e:2c:33:ae:be:11:5f:66:6c:6d:2b:61:49:86:84:1b:54: 49:a8:03:89:b2:4c:3a:f4:24:11:09:6a:54:49:49:ac:be:4a: 14:b2:5b:b1:4e:2a:3a:e1:1f:36:79:73:ad:3a:65:02:48:76: dd:8c:bf:2a:70:a3:89:93:0b:93:d4:56:d1:70:eb:54:ff:31: 43:21:f8:95:fa:8c:41:30:30:57:77:f5:4b:aa:03:e0:37:17: b6:42:6f:80:04:a8:c5:6e:5d:bd:0a:05:2e:c4:2d:97:d0:88: f3:de:4a:fd:b3:c7:4a:61:ee:43:11:3a:86:b4:ed:f9:8c:16: 45:ba:4a:6e:8f:9c:a8:b6:78:82:b4:ce:22:9a:a9:45:8c:31: b7:9b:3b:95:e5:ea:c9:b1:d6:c9:af:6b:a9:5d:af:2d:c7:8f: cb:e3:5c:13:61:e8:94:e1:69:82:9b:fc:83:a6:4e:23:ad:03: ba:3e:21:4b:66:c1:cb:cf:6e:f4:87:04:68:06:01:44:20:8a: cb:53:7b:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QTgxMTAvBgNVBAUTKDg2RTIzNEUyRTFFMjNBNDk3MTQ1OEQyQTcyNjE0REYx Mzg5NUUyOUEwHhcNMjUwODIzMDU1ODExWhcNMjUwODMwMDU1ODExWjAYMRYwFAYD VQQDEw02OGE5NTg3My0zNzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4r3pWIEQ/v1M3cd5rmxtaYF0CbnFyx9z93BnkdhVZ9r/pI44Qu/mcU+JxmF 4eiRTat+at7hAObkK1Nly2mkLcOjWpcTRo7O05yuUcUVNJjnrJJV9P0G/D8Q/0ze 03e3HsUxbvsGx4TXDadky0GUehWKSRPqltaeLz4/I5JswwC5QJCVG5YQSy+eKvKz lP6ogn8cYqHWRVGrSn8vaXrSIJxpt/pZ7Bj3mDU0VdafZfgVQdYB1D2GuI83GCCf XsZrcWSjyi284x7V0vl2cJHPBV3nD0TB944BXoYLMhclnNOiZtSqJ/pOVs2FQroV ZD5HFb44JLSAt4W6ow95lytF5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMPT72s UJIe1wOBrY8xIiEcKPm0MB8GA1UdIwQYMBaAFIbiNOLh4jpJcUWNKnJhTfE4leKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBOC9BNUY4RTg3ODVB REMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9rbHhSWTBxY21GTjhUaVY0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h1STA0dUhpT2tseFJZMHFjbUZOOFRpVjRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBOC9BNUY4RTg3ODVBREMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9r bHhSWTBxY21GTjhUaVY0cG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeT3x2tuzAu/kDlDMKIwyVh2k6QowW08uS4yF8gfnvaXJmHZw2j3RM IqTd1HSS3EfDNsuvMFRAHiwzrr4RX2ZsbSthSYaEG1RJqAOJskw69CQRCWpUSUms vkoUsluxTio64R82eXOtOmUCSHbdjL8qcKOJkwuT1FbRcOtU/zFDIfiV+oxBMDBX d/VLqgPgNxe2Qm+ABKjFbl29CgUuxC2X0Ijz3kr9s8dKYe5DETqGtO35jBZFukpu j5yotniCtM4imqlFjDG3mzuV5erJsdbJr2upXa8tx4/L41wTYeiU4WmCm/yDpk4j rQO6PiFLZsHLz270hwRoBgFEIIrLU3ux -----END CERTIFICATE-----Generated at Sat Aug 23 19:05:49 2025 by rpki-client