$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft File: HuygOndlK5BwteEzgJoiODDInPk.mft (raw, json) Hash identifier: MGQZSF7EZRPNHnl9CL/I+9VZi4lKDk2V9lY6Pgnpjxw= Subject key identifier: 14:AE:73:3D:6C:7F:89:3E:41:F1:3A:58:B0:69:F9:03:54:F0:B9:99 Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9 Certificate issuer: /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9 Certificate serial: 027A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft Manifest number: 026F Signing time: Thu 03 Jul 2025 02:10:35 +0000 Manifest this update: Thu 03 Jul 2025 02:10:35 +0000 Manifest next update: Thu 10 Jul 2025 02:10:35 +0000 Files and hashes: 1: HuygOndlK5BwteEzgJoiODDInPk.crl (hash: Xd+t1Vhijfhy0JtT3sXjr2w8uvUb3WWL2c3LmxT4OUw=) 2: AF13726403AD11F0B5D12A81C4F9AE02.roa (hash: XBaed8FJc7Gixv2UzCn4EyIQb1PKqJIn+WKksLyjxb8=) 3: 2080359097F711EF91AB0436C4F9AE02.roa (hash: ayF9Bv7+wkh7jzbmvM6fDF9jk/NLjmF1YhPtsg38ygk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 634 (0x27a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAD56, serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9 Validity Not Before: Jul 3 02:10:35 2025 GMT Not After : Jul 10 02:10:35 2025 GMT Subject: CN=6865e69b-9f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c2:45:74:7e:d4:b3:1f:9a:a6:21:cd:f5:60: 1a:d2:3f:3e:7e:be:27:3c:63:f4:40:b2:a2:de:13: c1:d6:23:db:d6:94:97:b9:eb:78:e2:85:4b:b9:e2: 06:44:ac:43:1d:8d:fe:1d:34:5d:2d:ad:e3:f8:f6: 1c:04:82:63:90:7e:4b:28:30:f7:a0:e5:a4:b0:6c: ce:8a:71:b4:46:85:b5:df:33:c0:00:60:87:bb:84: 3c:11:f1:f2:f9:7b:08:7c:5e:70:95:0e:fe:3e:9f: a5:83:22:32:e9:fe:9f:7b:2f:21:7c:6b:3a:cb:1c: 39:4d:c2:d6:8f:b6:4d:6a:6d:b8:ad:5c:65:55:a7: 45:e7:ef:12:30:52:99:a5:ba:5a:2e:2d:2c:51:49: 48:59:29:2b:75:76:25:1a:71:fd:e5:68:03:0e:af: c9:67:5a:05:f8:54:60:1c:aa:af:fd:9e:35:0f:d2: 26:05:b9:45:cc:8c:c6:ce:7b:4f:4f:7a:4d:ee:3c: 4e:ea:89:5e:27:0a:48:f0:18:9d:04:1e:5c:e7:db: e2:93:5e:4f:50:de:5a:30:fa:c3:8c:77:02:8f:83: da:ba:93:cb:6e:ba:22:8f:07:5a:f5:63:d8:2d:75: f8:20:20:cc:a9:d5:1c:0a:e6:50:19:08:54:43:1b: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AE:73:3D:6C:7F:89:3E:41:F1:3A:58:B0:69:F9:03:54:F0:B9:99 X509v3 Authority Key Identifier: keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ea:c3:32:c4:e0:17:53:18:3e:89:05:79:65:0e:a6:85:ae: fd:0a:23:1d:98:9d:e7:81:04:ee:19:04:30:e8:7f:c3:e2:6f: 31:a4:b0:85:b1:1a:10:a4:66:a6:8b:d1:cb:bc:d2:b4:8f:11: 85:4b:b0:62:fd:6e:99:2e:ea:c6:dd:9f:66:d8:11:0a:87:0c: 6d:85:73:4b:79:32:6f:2f:60:f3:c1:3b:b4:91:b7:d7:b8:b5: 71:6c:05:54:c0:07:f1:47:0f:33:27:9d:8d:4d:56:3d:10:a7: 6f:80:26:d5:00:e0:cc:b9:3a:d5:4c:71:ce:f0:3c:5e:01:71: b9:c4:09:f7:b4:07:3f:5d:8a:07:8e:09:52:f1:38:58:de:6a: 7e:75:68:8e:71:90:79:cc:9b:ec:a8:c8:5e:27:10:72:53:a5: 5a:6a:e4:d6:3a:06:ac:71:39:76:90:2f:95:db:5a:0a:0b:77: 52:67:17:7e:cb:89:c1:69:ea:ce:16:9c:29:84:9e:59:ae:20: d6:65:a4:10:d6:1c:88:04:c3:69:00:d0:af:2c:8b:c8:1d:8c: a8:2e:33:ae:49:42:d1:a6:52:e2:ef:d3:d3:9a:8a:b4:22:db: 7d:9c:dd:10:a9:18:26:e1:e2:f1:5d:fd:8b:0d:07:bc:36:15: 29:14:06:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFENTYxMTAvBgNVBAUTKDFFRUNBMDNBNzc2NTJCOTA3MEI1RTEzMzgwOUEyMjM4 MzBDODlDRjkwHhcNMjUwNzAzMDIxMDM1WhcNMjUwNzEwMDIxMDM1WjAYMRYwFAYD VQQDEw02ODY1ZTY5Yi05ZjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcJFdH7Usx+apiHN9WAa0j8+fr4nPGP0QLKi3hPB1iPb1pSXuet44oVLueIG RKxDHY3+HTRdLa3j+PYcBIJjkH5LKDD3oOWksGzOinG0RoW13zPAAGCHu4Q8EfHy +XsIfF5wlQ7+Pp+lgyIy6f6fey8hfGs6yxw5TcLWj7ZNam24rVxlVadF5+8SMFKZ pbpaLi0sUUlIWSkrdXYlGnH95WgDDq/JZ1oF+FRgHKqv/Z41D9ImBblFzIzGzntP T3pN7jxO6oleJwpI8BidBB5c59vik15PUN5aMPrDjHcCj4PaupPLbroijwda9WPY LXX4ICDMqdUcCuZQGQhUQxsQHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSucz1s f4k+QfE6WLBp+QNU8LmZMB8GA1UdIwQYMBaAFB7soDp3ZSuQcLXhM4CaIjgwyJz5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQ1Ni84MThCNEQwMjFB QUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1Qnd0ZUV6Z0pvaU9ERElu UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h1eWdPbmRsSzVCd3RlRXpnSm9pT0RESW5Qay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUQ1Ni84MThCNEQwMjFBQUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1 Qnd0ZUV6Z0pvaU9EREluUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj6sMyxOAXUxg+iQV5ZQ6mha79CiMdmJ3ngQTuGQQw6H/D4m8xpLCF sRoQpGami9HLvNK0jxGFS7Bi/W6ZLurG3Z9m2BEKhwxthXNLeTJvL2DzwTu0kbfX uLVxbAVUwAfxRw8zJ52NTVY9EKdvgCbVAODMuTrVTHHO8DxeAXG5xAn3tAc/XYoH jglS8ThY3mp+dWiOcZB5zJvsqMheJxByU6VaauTWOgascTl2kC+V21oKC3dSZxd+ y4nBaerOFpwphJ5ZriDWZaQQ1hyIBMNpANCvLIvIHYyoLjOuSULRplLi79PTmoq0 Itt9nN0QqRgm4eLxXf2LDQe8NhUpFAaW -----END CERTIFICATE-----Generated at Fri Jul 4 00:25:01 2025 by rpki-client