$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft File: HuygOndlK5BwteEzgJoiODDInPk.mft (raw, json) Hash identifier: 3Xf5kXkRBcVktbsiv91t1EUc/HTrLe/IilPPqwqOAmA= Subject key identifier: 48:DB:F7:2E:56:F5:97:CB:90:E0:87:A2:7F:3A:39:07:4C:C6:96:41 Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9 Certificate issuer: /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9 Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft Manifest number: 0256 Signing time: Tue 13 May 2025 01:38:47 +0000 Manifest this update: Tue 13 May 2025 01:38:46 +0000 Manifest next update: Tue 20 May 2025 01:38:46 +0000 Files and hashes: 1: HuygOndlK5BwteEzgJoiODDInPk.crl (hash: 9AGrcu6JU1jworuBef5HBQFbjLc8fTKLd61cV28TCws=) 2: AF13726403AD11F0B5D12A81C4F9AE02.roa (hash: XBaed8FJc7Gixv2UzCn4EyIQb1PKqJIn+WKksLyjxb8=) 3: 2080359097F711EF91AB0436C4F9AE02.roa (hash: ayF9Bv7+wkh7jzbmvM6fDF9jk/NLjmF1YhPtsg38ygk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAD56, serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9 Validity Not Before: May 13 01:38:46 2025 GMT Not After : May 20 01:38:46 2025 GMT Subject: CN=6822a2a7-ad8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f0:4c:74:3d:72:c6:dd:1a:da:2c:2f:52:b2: ce:f1:08:14:de:2b:78:aa:01:b5:a7:6d:27:4a:2b: 65:aa:3c:5e:9a:18:f0:48:b4:5f:ff:b6:57:ac:c3: 71:70:4a:23:34:2c:7e:75:ef:1d:72:6f:df:9a:f4: 23:4f:6d:73:08:f0:a0:c9:5a:86:b6:ed:52:2e:10: 6b:a8:a4:37:86:5d:d0:13:e2:d3:45:84:cf:b3:ab: 1b:cd:d1:33:9b:ed:8a:aa:7d:d5:c1:2b:02:68:b8: e9:68:6f:b1:08:b6:fe:b1:59:a1:22:9b:b9:ed:b0: cb:bc:5c:0a:a2:b3:4a:52:08:26:a0:45:89:a7:3e: 28:b6:4f:5a:89:42:93:ac:ff:68:a2:ec:89:48:0d: ce:70:34:47:a2:11:91:4a:0a:66:74:c4:ae:db:6c: 40:21:94:d4:61:41:ee:6a:6c:46:44:6e:85:7e:dc: 7e:00:14:0b:b4:69:b0:e4:c5:80:73:4e:fb:7b:dc: 1c:2f:11:56:7b:77:88:59:43:80:53:db:43:3d:52: 4d:92:31:6b:ec:8b:da:fb:b3:b2:8e:65:95:67:a7: 9a:e5:2d:cf:77:1c:aa:ad:ec:5e:22:79:af:62:62: ac:41:58:cf:eb:de:ad:40:27:3f:57:3b:a6:ab:9b: d6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DB:F7:2E:56:F5:97:CB:90:E0:87:A2:7F:3A:39:07:4C:C6:96:41 X509v3 Authority Key Identifier: keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c1:37:47:d5:dc:11:38:20:6e:12:12:7d:c2:4d:df:6e:5e: 48:50:e0:c8:0b:32:2c:88:b7:6f:f9:e9:d9:79:2b:7d:b3:c5: f3:d4:0b:c8:6e:a7:fb:9a:71:b1:14:db:be:2f:16:77:07:6c: 52:1d:19:70:c7:7c:ce:62:01:a6:11:58:b2:b3:4f:12:c8:b1: ca:5a:56:62:7a:46:39:2f:99:5d:38:2d:4b:4e:e4:81:72:43: 6f:92:52:91:93:d5:ea:62:54:6b:e1:8a:b8:69:0a:10:19:e3: c8:2f:06:b8:eb:c3:e6:83:3d:f3:41:5d:7a:f3:aa:32:49:5a: 37:cf:7c:85:7d:07:23:59:ba:e6:c2:24:8c:cc:ff:c6:7b:53: 92:bb:55:d2:b5:82:b0:08:d1:ab:05:db:2e:35:87:c5:8b:da: 8d:de:55:ae:a0:42:65:54:4d:9e:de:8c:4f:9f:be:94:aa:06: da:e6:7c:ac:37:14:99:77:96:83:4e:d6:65:67:6a:14:b6:bf: 1c:f7:98:c0:27:b9:47:24:13:73:00:18:b0:e4:30:ab:7a:c4: ca:bd:fd:37:01:41:40:69:b8:eb:bc:b0:24:13:1d:d3:66:94: a3:1d:7a:be:0a:3b:a1:92:3b:79:68:e3:e9:c7:07:c1:60:c4: 09:9a:09:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFENTYxMTAvBgNVBAUTKDFFRUNBMDNBNzc2NTJCOTA3MEI1RTEzMzgwOUEyMjM4 MzBDODlDRjkwHhcNMjUwNTEzMDEzODQ2WhcNMjUwNTIwMDEzODQ2WjAYMRYwFAYD VQQDEw02ODIyYTJhNy1hZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PBMdD1yxt0a2iwvUrLO8QgU3it4qgG1p20nSitlqjxemhjwSLRf/7ZXrMNx cEojNCx+de8dcm/fmvQjT21zCPCgyVqGtu1SLhBrqKQ3hl3QE+LTRYTPs6sbzdEz m+2Kqn3VwSsCaLjpaG+xCLb+sVmhIpu57bDLvFwKorNKUggmoEWJpz4otk9aiUKT rP9oouyJSA3OcDRHohGRSgpmdMSu22xAIZTUYUHuamxGRG6Fftx+ABQLtGmw5MWA c077e9wcLxFWe3eIWUOAU9tDPVJNkjFr7Iva+7OyjmWVZ6ea5S3PdxyqrexeInmv YmKsQVjP696tQCc/Vzumq5vWuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjb9y5W 9ZfLkOCHon86OQdMxpZBMB8GA1UdIwQYMBaAFB7soDp3ZSuQcLXhM4CaIjgwyJz5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQ1Ni84MThCNEQwMjFB QUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1Qnd0ZUV6Z0pvaU9ERElu UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h1eWdPbmRsSzVCd3RlRXpnSm9pT0RESW5Qay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUQ1Ni84MThCNEQwMjFBQUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1 Qnd0ZUV6Z0pvaU9EREluUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZwTdH1dwROCBuEhJ9wk3fbl5IUODICzIsiLdv+enZeSt9s8Xz1AvI bqf7mnGxFNu+LxZ3B2xSHRlwx3zOYgGmEViys08SyLHKWlZiekY5L5ldOC1LTuSB ckNvklKRk9XqYlRr4Yq4aQoQGePILwa468Pmgz3zQV1686oySVo3z3yFfQcjWbrm wiSMzP/Ge1OSu1XStYKwCNGrBdsuNYfFi9qN3lWuoEJlVE2e3oxPn76Uqgba5nys NxSZd5aDTtZlZ2oUtr8c95jAJ7lHJBNzABiw5DCresTKvf03AUFAabjrvLAkEx3T ZpSjHXq+Cjuhkjt5aOPpxwfBYMQJmglc -----END CERTIFICATE-----Generated at Wed May 14 23:59:55 2025 by rpki-client