$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft File: HuygOndlK5BwteEzgJoiODDInPk.mft (raw, json) Hash identifier: /MPuERTg5vY/aw/QQgU10Nfrf6Z8WlDCyXKZmXDhkjQ= Subject key identifier: D5:A3:47:4A:16:8E:E6:51:49:9F:12:41:14:0D:02:57:E0:4D:64:10 Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9 Certificate issuer: /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9 Certificate serial: 02B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft Manifest number: 02A8 Signing time: Sun 19 Oct 2025 03:45:26 +0000 Manifest this update: Sun 19 Oct 2025 03:45:25 +0000 Manifest next update: Sun 26 Oct 2025 03:45:25 +0000 Files and hashes: 1: HuygOndlK5BwteEzgJoiODDInPk.crl (hash: xSt2bJm74jgnotI1tGJkbPewGlFS9NOlGB+RsonEsp0=) 2: 9A59F7D670E411F0A8BFEE2AC4F9AE02.roa (hash: Pm7xX1vwf0DPPYIok3OlHUKVD8r7hcmVaxi8mGdbOm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAD56, serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9 Validity Not Before: Oct 19 03:45:25 2025 GMT Not After : Oct 26 03:45:25 2025 GMT Subject: CN=68f45ed6-cb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:73:75:0a:5a:49:11:8f:0a:05:63:9e:8b:af: 2d:6f:f2:85:68:cd:4d:dd:4d:79:5a:b5:d2:7f:86: 22:69:30:52:58:7d:d3:f8:fd:21:c6:96:f3:f7:0e: 70:b8:e9:b9:bc:78:a7:74:0d:6b:0f:ff:fa:ea:a5: 51:fe:5b:34:d5:aa:9b:b6:f9:33:f8:24:09:6a:26: f5:45:fb:6f:28:40:1d:5d:a1:be:2f:63:8a:a3:50: fc:f2:0e:30:c1:c3:7d:9d:e3:b9:4e:6b:c7:38:80: 27:ef:00:48:0a:88:58:14:0c:0d:eb:a8:2a:ae:16: dd:06:7c:45:8a:4e:64:64:a9:99:8d:59:56:32:fd: 59:56:e8:a1:b6:a5:f2:96:9b:9c:4b:e8:20:70:3c: 82:b0:46:a7:d7:f6:55:df:1d:10:df:55:86:ea:c4: 50:fc:8b:11:9d:1d:0f:ba:c2:7f:2a:c7:73:97:78: 54:b2:eb:87:70:7a:9e:12:7f:ce:82:3d:51:da:93: 8f:be:8f:14:91:2a:e6:ef:33:24:fc:e2:ef:8f:49: 88:e5:a0:5c:1c:69:d7:43:fd:0a:be:db:a5:a2:e3: b2:08:19:f0:07:d5:4b:42:cc:a7:8f:36:31:1b:b2: ae:52:f2:a7:77:8d:e8:dd:0e:72:c2:ab:13:ca:a9: e2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A3:47:4A:16:8E:E6:51:49:9F:12:41:14:0D:02:57:E0:4D:64:10 X509v3 Authority Key Identifier: keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:41:36:be:c6:d1:ab:64:74:68:00:a2:55:d5:b2:a9:8c:0f: 34:cb:3a:a2:a7:d6:3a:22:6f:6c:49:d1:82:96:e3:c2:9d:b5: 67:6d:af:c3:6c:e0:16:df:ff:95:65:bd:5f:90:e3:33:e2:78: 72:d4:2e:85:e9:7f:93:0f:e9:f4:5a:51:36:86:c2:85:a8:c8: 76:e3:24:60:51:63:c4:1b:fc:29:0f:e9:7a:73:de:6f:0a:93: 33:49:99:d8:0b:75:61:f1:c3:71:5d:96:f8:26:f7:01:6d:0f: 0b:d6:26:e5:0a:00:38:ac:b2:39:5e:4a:8f:8c:b8:f5:97:09: a2:f1:88:d8:82:f2:6b:31:be:f1:50:31:50:f7:6f:8d:1f:e9: c5:2e:80:31:7a:68:d4:51:0f:75:c5:fc:28:11:93:fd:9f:d9: 7a:83:4b:29:2f:b8:96:4b:43:ae:15:dc:12:1b:31:93:65:5f: a6:ab:cf:dd:e5:23:8f:ac:76:f1:a8:09:cc:a0:b4:f9:05:8a: 34:0b:34:d5:75:2a:49:6b:3c:21:87:e6:e3:a1:11:e4:71:6e: a9:74:28:96:64:6a:58:49:bf:16:ba:64:03:e2:24:2d:a7:f9: 6b:73:16:bf:2d:71:7b:d6:ec:a8:44:75:c8:d4:2d:fd:6b:10: 16:48:67:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFENTYxMTAvBgNVBAUTKDFFRUNBMDNBNzc2NTJCOTA3MEI1RTEzMzgwOUEyMjM4 MzBDODlDRjkwHhcNMjUxMDE5MDM0NTI1WhcNMjUxMDI2MDM0NTI1WjAYMRYwFAYD VQQDEw02OGY0NWVkNi1jYjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3N1ClpJEY8KBWOei68tb/KFaM1N3U15WrXSf4YiaTBSWH3T+P0hxpbz9w5w uOm5vHindA1rD//66qVR/ls01aqbtvkz+CQJaib1RftvKEAdXaG+L2OKo1D88g4w wcN9neO5TmvHOIAn7wBICohYFAwN66gqrhbdBnxFik5kZKmZjVlWMv1ZVuihtqXy lpucS+ggcDyCsEan1/ZV3x0Q31WG6sRQ/IsRnR0PusJ/Ksdzl3hUsuuHcHqeEn/O gj1R2pOPvo8UkSrm7zMk/OLvj0mI5aBcHGnXQ/0KvtulouOyCBnwB9VLQsynjzYx G7KuUvKnd43o3Q5ywqsTyqni6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWjR0oW juZRSZ8SQRQNAlfgTWQQMB8GA1UdIwQYMBaAFB7soDp3ZSuQcLXhM4CaIjgwyJz5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQ1Ni84MThCNEQwMjFB QUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1Qnd0ZUV6Z0pvaU9ERElu UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h1eWdPbmRsSzVCd3RlRXpnSm9pT0RESW5Qay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUQ1Ni84MThCNEQwMjFBQUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1 Qnd0ZUV6Z0pvaU9EREluUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzQTa+xtGrZHRoAKJV1bKpjA80yzqip9Y6Im9sSdGCluPCnbVnba/D bOAW3/+VZb1fkOMz4nhy1C6F6X+TD+n0WlE2hsKFqMh24yRgUWPEG/wpD+l6c95v CpMzSZnYC3Vh8cNxXZb4JvcBbQ8L1iblCgA4rLI5XkqPjLj1lwmi8YjYgvJrMb7x UDFQ92+NH+nFLoAxemjUUQ91xfwoEZP9n9l6g0spL7iWS0OuFdwSGzGTZV+mq8/d 5SOPrHbxqAnMoLT5BYo0CzTVdSpJazwhh+bjoRHkcW6pdCiWZGpYSb8WumQD4iQt p/lrcxa/LXF71uyoRHXI1C39axAWSGei -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:32 2025 by rpki-client