$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft File: huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json) Hash identifier: GPu4fz3oEgGxlYGDNh6zvWXqnKWesvwiQYFVxZCWltg= Subject key identifier: 34:23:85:AC:79:DB:10:14:9A:81:99:2D:27:A5:16:0D:E9:D3:00:28 Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft Manifest number: A6 Signing time: Tue 01 Jul 2025 06:48:52 +0000 Manifest this update: Tue 01 Jul 2025 06:48:52 +0000 Manifest next update: Tue 08 Jul 2025 06:48:52 +0000 Files and hashes: 1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: 2ZHtvX3u4UNh/khhV4n1+REVzQO5t25m7WyeAnKfHOk=) 2: F5C5A42C5ADC11EF8061F335C4F9AE02.roa (hash: jyFeBHdKHmG1HRE/BTdZ4LEVyNfH72ioQGaOrtzmyn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Validity Not Before: Jul 1 06:48:52 2025 GMT Not After : Jul 8 06:48:52 2025 GMT Subject: CN=686384d4-f947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f6:24:a4:8e:ba:57:96:20:e6:f5:2d:10:d2: 71:e5:63:e1:6e:0c:b2:e1:5f:db:2b:bb:78:2f:d5: c0:9f:cd:a3:98:9f:ec:38:80:44:41:a8:74:84:00: 7b:9f:39:e0:c0:cd:66:84:24:56:28:7d:10:eb:6b: 0b:3c:1b:ed:58:c4:a3:19:a1:df:28:5f:d1:19:7b: 23:16:23:e2:14:fd:a9:68:05:60:37:d5:8f:fd:91: ef:65:ff:e5:31:b4:b6:ba:af:9a:47:65:8d:74:cb: af:20:d6:12:1c:1a:89:da:58:ef:94:24:9a:bc:e0: e5:b3:36:12:27:d1:c9:80:c8:52:bc:02:44:43:24: e7:f0:06:f8:1f:34:7e:de:86:85:02:97:1b:c2:84: 0f:bd:0c:bf:78:5b:ea:97:a3:52:d3:c7:34:d1:92: 3f:88:c7:6b:63:45:e8:d8:40:be:55:60:35:9f:78: ee:4b:fc:10:55:12:2d:52:cd:d4:46:46:79:17:f9: 48:8d:8a:d3:a0:28:a5:da:c9:64:fa:e1:ee:02:fb: db:c0:72:3c:4a:63:48:00:fc:9e:ad:43:59:d2:74: b1:0a:b7:29:1b:c4:3e:5b:bd:d6:92:db:97:1f:ca: 1e:fa:80:8c:cc:f4:97:0a:f2:4f:e1:0d:f1:06:0b: a0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:23:85:AC:79:DB:10:14:9A:81:99:2D:27:A5:16:0D:E9:D3:00:28 X509v3 Authority Key Identifier: keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:20:28:56:88:b2:4c:61:58:84:80:06:56:72:75:c1:44:30: cd:dd:01:1e:0b:59:b4:41:1c:1d:d1:ef:e4:79:b9:cb:f4:fb: a0:9c:f7:43:4e:54:f6:17:6f:22:96:f9:97:21:f8:51:e2:8c: 09:21:96:39:9e:7c:0b:dc:dd:b6:93:c5:e6:c4:82:7b:24:6c: 66:55:20:a5:20:95:56:f0:10:d1:12:ed:60:a1:24:85:68:df: 18:2b:84:4b:b0:05:7e:55:9d:96:1e:22:13:b2:ee:78:eb:51: cf:66:ea:e5:81:cf:5a:72:e9:1a:d7:c5:3b:4c:a5:6a:80:ce: db:5a:a3:cd:5f:d6:d1:75:36:a5:13:84:b1:bc:f0:3f:94:8d: 99:95:60:2f:93:56:b2:6b:1b:cc:e7:38:4d:9c:97:d9:af:80: a1:75:76:50:16:a8:6a:e3:15:d3:3b:06:96:76:51:7b:e3:f7: ae:06:66:61:fb:bf:00:22:7b:c9:ea:4a:67:c0:51:14:bc:31: 63:11:db:96:3b:2c:e9:31:90:b2:f3:95:ee:0c:bc:94:74:eb: 20:5d:2c:ba:8f:a1:25:81:0a:32:10:0b:fa:7c:93:79:9a:b2: 5c:21:4a:27:a7:60:8e:68:1a:95:48:ef:d2:d7:4d:d3:d4:2d: 67:51:c7:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QTgxMTAvBgNVBAUTKDg2RTIzNEUyRTFFMjNBNDk3MTQ1OEQyQTcyNjE0REYx Mzg5NUUyOUEwHhcNMjUwNzAxMDY0ODUyWhcNMjUwNzA4MDY0ODUyWjAYMRYwFAYD VQQDEw02ODYzODRkNC1mOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfYkpI66V5Yg5vUtENJx5WPhbgyy4V/bK7t4L9XAn82jmJ/sOIBEQah0hAB7 nzngwM1mhCRWKH0Q62sLPBvtWMSjGaHfKF/RGXsjFiPiFP2paAVgN9WP/ZHvZf/l MbS2uq+aR2WNdMuvINYSHBqJ2ljvlCSavODlszYSJ9HJgMhSvAJEQyTn8Ab4HzR+ 3oaFApcbwoQPvQy/eFvql6NS08c00ZI/iMdrY0Xo2EC+VWA1n3juS/wQVRItUs3U RkZ5F/lIjYrToCil2slk+uHuAvvbwHI8SmNIAPyerUNZ0nSxCrcpG8Q+W73WktuX H8oe+oCMzPSXCvJP4Q3xBgugrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQjhax5 2xAUmoGZLSelFg3p0wAoMB8GA1UdIwQYMBaAFIbiNOLh4jpJcUWNKnJhTfE4leKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBOC9BNUY4RTg3ODVB REMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9rbHhSWTBxY21GTjhUaVY0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h1STA0dUhpT2tseFJZMHFjbUZOOFRpVjRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBOC9BNUY4RTg3ODVBREMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9r bHhSWTBxY21GTjhUaVY0cG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9IChWiLJMYViEgAZWcnXBRDDN3QEeC1m0QRwd0e/kebnL9PugnPdD TlT2F28ilvmXIfhR4owJIZY5nnwL3N22k8XmxIJ7JGxmVSClIJVW8BDREu1goSSF aN8YK4RLsAV+VZ2WHiITsu5461HPZurlgc9acuka18U7TKVqgM7bWqPNX9bRdTal E4SxvPA/lI2ZlWAvk1ayaxvM5zhNnJfZr4ChdXZQFqhq4xXTOwaWdlF74/euBmZh +78AInvJ6kpnwFEUvDFjEduWOyzpMZCy85XuDLyUdOsgXSy6j6ElgQoyEAv6fJN5 mrJcIUonp2COaBqVSO/S103T1C1nUcfO -----END CERTIFICATE-----Generated at Wed Jul 2 21:54:52 2025 by rpki-client