$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft File: huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json) Hash identifier: qWEwc6b2FpiWa8biMk9FaFAz2fr1gTRNMTi00BpwRxA= Subject key identifier: BB:F9:4E:2F:30:1A:88:0D:3F:18:0C:B2:96:35:60:24:01:F8:34:BD Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft Manifest number: 8E Signing time: Tue 13 May 2025 05:37:06 +0000 Manifest this update: Tue 13 May 2025 05:37:05 +0000 Manifest next update: Tue 20 May 2025 05:37:05 +0000 Files and hashes: 1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: 8yPmn5QPdgGl9qJgZdpRWr9GQWClU1vrPY9TYG7Tm3c=) 2: F5C5A42C5ADC11EF8061F335C4F9AE02.roa (hash: jyFeBHdKHmG1HRE/BTdZ4LEVyNfH72ioQGaOrtzmyn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Validity Not Before: May 13 05:37:05 2025 GMT Not After : May 20 05:37:05 2025 GMT Subject: CN=6822da82-9316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cd:3e:21:4e:74:38:f6:f5:9d:80:b4:20:ad: 22:d1:e3:40:78:34:3f:51:c9:7e:f4:78:43:22:9f: fd:13:73:1c:36:b4:d4:f5:e0:a3:e3:0a:27:a0:1e: cf:db:76:13:fb:06:b1:b2:77:cb:fa:bc:b0:76:f9: 5f:c6:fd:95:97:f9:b0:69:5b:3c:2c:69:f1:ee:7e: e8:0c:bc:1c:e5:92:a1:de:89:45:d9:fc:b9:e3:d0: d8:cd:50:1c:1b:f9:11:a3:2b:cc:13:28:a2:fa:4f: 88:63:f9:ba:a0:58:3b:b0:4b:c9:b8:f6:f2:1f:a1: fc:a2:c7:2d:ae:a0:49:59:ae:2c:6c:6a:88:5f:0b: 0f:de:6c:e2:2d:c8:cc:97:05:cc:ba:7f:24:db:54: b2:eb:36:e4:d3:57:ce:39:9f:1e:1e:56:61:3e:40: 42:11:cd:9d:2a:71:15:f8:0b:8f:22:c1:1e:85:e4: 88:f6:25:f4:1c:e9:e4:2b:30:41:18:71:11:30:93: 9a:5f:b3:68:22:30:3a:44:13:b5:da:a3:e9:86:59: 6a:15:0a:5b:53:4e:13:32:d7:73:f1:9b:86:11:1d: 01:23:7f:9d:3c:59:0a:b0:ca:87:b5:23:82:77:9a: 9d:c4:fa:55:88:9f:05:d0:2f:28:a4:c3:4e:d7:ae: 43:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F9:4E:2F:30:1A:88:0D:3F:18:0C:B2:96:35:60:24:01:F8:34:BD X509v3 Authority Key Identifier: keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:8b:0b:b7:bc:50:2a:45:34:b0:b0:e6:1a:b0:7d:12:59:ba: dc:e6:c4:b7:88:20:ec:e4:6f:ea:4a:ff:db:87:70:30:26:57: db:bd:75:37:7e:1b:61:0b:46:35:4a:48:46:25:1c:b1:45:80: ed:44:d4:be:a5:60:b7:d5:b6:a8:41:58:41:10:f4:90:01:8b: f0:00:05:d7:28:20:c3:10:5a:1b:db:4f:59:f8:37:d8:c1:a9: dd:3d:34:38:74:57:66:60:c0:3a:2d:50:17:14:46:72:7c:64: d8:b4:06:7d:d7:e7:8a:11:a1:73:cf:aa:78:50:31:5e:2e:9f: f4:5b:ec:7f:f1:28:a3:7b:72:91:7a:16:7d:34:23:c7:39:3a: f8:05:4e:d7:2a:fe:78:33:c3:99:49:25:5d:5b:01:c5:00:c7: d7:af:1e:2b:68:ab:7c:c6:b2:63:a2:05:ca:39:a7:75:bf:1a: 79:65:27:9b:c4:8b:50:c2:9c:8a:f8:95:55:64:32:89:3d:8c: 88:51:1a:0a:7d:12:79:ee:b5:b4:50:ad:44:4f:81:91:f3:a6: 52:46:ee:c8:0e:b7:84:1f:c6:23:b5:5e:4b:6f:b1:29:22:d6: f1:fc:23:04:f1:c7:ce:66:2e:12:08:15:f6:1c:ff:d2:e3:de: 67:d2:50:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QTgxMTAvBgNVBAUTKDg2RTIzNEUyRTFFMjNBNDk3MTQ1OEQyQTcyNjE0REYx Mzg5NUUyOUEwHhcNMjUwNTEzMDUzNzA1WhcNMjUwNTIwMDUzNzA1WjAYMRYwFAYD VQQDEw02ODIyZGE4Mi05MzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7c0+IU50OPb1nYC0IK0i0eNAeDQ/Ucl+9HhDIp/9E3McNrTU9eCj4wonoB7P 23YT+waxsnfL+rywdvlfxv2Vl/mwaVs8LGnx7n7oDLwc5ZKh3olF2fy549DYzVAc G/kRoyvMEyii+k+IY/m6oFg7sEvJuPbyH6H8osctrqBJWa4sbGqIXwsP3mziLcjM lwXMun8k21Sy6zbk01fOOZ8eHlZhPkBCEc2dKnEV+AuPIsEeheSI9iX0HOnkKzBB GHERMJOaX7NoIjA6RBO12qPphllqFQpbU04TMtdz8ZuGER0BI3+dPFkKsMqHtSOC d5qdxPpViJ8F0C8opMNO165DPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLv5Ti8w GogNPxgMspY1YCQB+DS9MB8GA1UdIwQYMBaAFIbiNOLh4jpJcUWNKnJhTfE4leKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBOC9BNUY4RTg3ODVB REMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9rbHhSWTBxY21GTjhUaVY0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h1STA0dUhpT2tseFJZMHFjbUZOOFRpVjRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBOC9BNUY4RTg3ODVBREMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9r bHhSWTBxY21GTjhUaVY0cG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHiwu3vFAqRTSwsOYasH0SWbrc5sS3iCDs5G/qSv/bh3AwJlfbvXU3 fhthC0Y1SkhGJRyxRYDtRNS+pWC31baoQVhBEPSQAYvwAAXXKCDDEFob209Z+DfY wandPTQ4dFdmYMA6LVAXFEZyfGTYtAZ91+eKEaFzz6p4UDFeLp/0W+x/8Sije3KR ehZ9NCPHOTr4BU7XKv54M8OZSSVdWwHFAMfXrx4raKt8xrJjogXKOad1vxp5ZSeb xItQwpyK+JVVZDKJPYyIURoKfRJ57rW0UK1ET4GR86ZSRu7IDreEH8YjtV5Lb7Ep Itbx/CME8cfOZi4SCBX2HP/S495n0lBG -----END CERTIFICATE-----Generated at Tue May 13 09:17:29 2025 by rpki-client