$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft File: HuygOndlK5BwteEzgJoiODDInPk.mft (raw, json) Hash identifier: T+9gpDWGfnVwvqTx1HCsxQDISIe5rTTInYDldHUC6Ns= Subject key identifier: 48:B1:60:B2:33:FC:9B:24:23:49:3B:DF:90:99:93:BC:5E:BC:EC:DF Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9 Certificate issuer: /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9 Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft Manifest number: 028B Signing time: Sat 23 Aug 2025 01:55:43 +0000 Manifest this update: Sat 23 Aug 2025 01:55:43 +0000 Manifest next update: Sat 30 Aug 2025 01:55:43 +0000 Files and hashes: 1: HuygOndlK5BwteEzgJoiODDInPk.crl (hash: E4q5rx2KD/13rcGiRSXY5UC24iXdLePGTX6cBAQfaqg=) 2: 9A59F7D670E411F0A8BFEE2AC4F9AE02.roa (hash: Pm7xX1vwf0DPPYIok3OlHUKVD8r7hcmVaxi8mGdbOm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAD56, serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9 Validity Not Before: Aug 23 01:55:43 2025 GMT Not After : Aug 30 01:55:43 2025 GMT Subject: CN=68a91f9f-c13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f9:4d:4c:03:1b:c7:6f:c7:e6:21:0c:7b:7f: fe:68:c4:70:23:f8:f0:77:05:5d:e8:f1:71:bf:d3: cd:80:e4:7e:de:49:27:2c:34:c6:79:5a:08:a6:65: c7:90:bc:d9:de:fa:f8:d6:23:81:73:d5:19:f3:b2: f2:e0:9b:db:b9:24:cd:90:86:bb:5e:d5:a5:c9:77: cf:b2:5a:04:65:71:74:39:ec:6f:5b:ef:c8:0e:df: 76:62:0a:db:e5:50:4e:e7:49:c0:7f:c6:b9:88:c5: c6:e8:2b:6b:51:84:3a:0a:dc:46:ff:64:12:0e:a5: bf:37:35:c9:1c:fa:07:97:83:61:da:32:6b:3f:f9: 69:ff:df:8d:62:34:8c:b7:33:1a:68:60:74:12:dd: 0c:53:0b:74:4e:8c:e5:31:54:dd:1f:a6:e4:19:c2: 33:bc:7d:87:4f:ac:a7:79:a7:57:9f:20:fd:ea:c1: 73:3c:a7:ba:a8:6d:b8:5e:9a:50:22:c6:e7:62:2f: a4:f8:a0:dd:8d:af:82:3a:7a:96:6c:a8:16:d3:2e: 99:43:15:4f:76:58:15:65:3c:f7:17:ab:b6:38:55: 6d:a4:ed:49:4b:19:a4:1b:4e:79:da:00:c1:89:c3: 3c:44:25:d8:a9:4e:1d:81:82:b8:8d:34:48:91:8b: 44:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B1:60:B2:33:FC:9B:24:23:49:3B:DF:90:99:93:BC:5E:BC:EC:DF X509v3 Authority Key Identifier: keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:78:e2:fd:90:cf:e6:0c:a3:d0:f4:3a:a8:5e:c5:01:9f:f1: 6a:30:ff:10:02:21:59:7a:a8:ec:c1:cb:e0:2d:2f:d4:99:0e: 8d:64:1b:15:ae:bd:2d:9e:be:ee:e2:01:43:4c:41:5c:25:37: 11:a7:df:2f:30:1e:6c:13:a6:c8:d8:aa:75:90:a8:43:1c:01: 16:7f:94:e2:68:3d:9d:08:a2:2a:03:62:31:c4:68:fd:25:28: 44:e6:fa:ef:90:96:91:19:9b:3f:2f:f4:46:55:93:b1:a0:81: 12:56:da:63:60:e2:a3:0d:79:2a:a2:24:0d:43:2b:1f:17:9b: 35:e2:e5:88:5d:71:60:cb:f8:8d:d9:e0:ce:52:d7:85:2b:b6: 08:d1:3f:83:88:bb:1f:80:f1:37:ca:87:c3:7f:3f:a7:e2:ae: 4a:1c:d2:e3:b5:fd:97:90:89:f4:74:7e:8f:eb:b9:6e:e9:ac: 70:4a:1d:b6:4c:9f:e0:58:ad:d1:0b:32:7e:f7:cf:00:a0:dd: 37:d2:6d:01:10:d3:b9:03:69:f7:57:06:e3:b2:6e:d3:ba:2a: 6a:09:f9:85:d0:0f:0f:a1:00:ef:e7:eb:da:f6:c0:7e:8b:90: d1:8b:66:e3:a0:13:e1:98:ab:cc:00:e1:a0:a8:71:8d:5b:5a: a1:58:06:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFENTYxMTAvBgNVBAUTKDFFRUNBMDNBNzc2NTJCOTA3MEI1RTEzMzgwOUEyMjM4 MzBDODlDRjkwHhcNMjUwODIzMDE1NTQzWhcNMjUwODMwMDE1NTQzWjAYMRYwFAYD VQQDEw02OGE5MWY5Zi1jMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvlNTAMbx2/H5iEMe3/+aMRwI/jwdwVd6PFxv9PNgOR+3kknLDTGeVoIpmXH kLzZ3vr41iOBc9UZ87Ly4JvbuSTNkIa7XtWlyXfPsloEZXF0OexvW+/IDt92Ygrb 5VBO50nAf8a5iMXG6CtrUYQ6CtxG/2QSDqW/NzXJHPoHl4Nh2jJrP/lp/9+NYjSM tzMaaGB0Et0MUwt0TozlMVTdH6bkGcIzvH2HT6yneadXnyD96sFzPKe6qG24XppQ IsbnYi+k+KDdja+COnqWbKgW0y6ZQxVPdlgVZTz3F6u2OFVtpO1JSxmkG0552gDB icM8RCXYqU4dgYK4jTRIkYtEZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEixYLIz /JskI0k735CZk7xevOzfMB8GA1UdIwQYMBaAFB7soDp3ZSuQcLXhM4CaIjgwyJz5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQ1Ni84MThCNEQwMjFB QUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1Qnd0ZUV6Z0pvaU9ERElu UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h1eWdPbmRsSzVCd3RlRXpnSm9pT0RESW5Qay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUQ1Ni84MThCNEQwMjFBQUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1 Qnd0ZUV6Z0pvaU9EREluUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAeOL9kM/mDKPQ9DqoXsUBn/FqMP8QAiFZeqjswcvgLS/UmQ6NZBsV rr0tnr7u4gFDTEFcJTcRp98vMB5sE6bI2Kp1kKhDHAEWf5TiaD2dCKIqA2IxxGj9 JShE5vrvkJaRGZs/L/RGVZOxoIESVtpjYOKjDXkqoiQNQysfF5s14uWIXXFgy/iN 2eDOUteFK7YI0T+DiLsfgPE3yofDfz+n4q5KHNLjtf2XkIn0dH6P67lu6axwSh22 TJ/gWK3RCzJ+988AoN030m0BENO5A2n3Vwbjsm7TuipqCfmF0A8PoQDv5+va9sB+ i5DRi2bjoBPhmKvMAOGgqHGNW1qhWAZs -----END CERTIFICATE-----Generated at Sun Aug 24 05:17:07 2025 by rpki-client