$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft File: HUA-MjAeWHgKBwV8syty7K9G19k.mft (raw, json) Hash identifier: 7SbyENKp+dYFtnNIaenqjB8KAjjaLaW21dEV4t1hCc4= Subject key identifier: 8E:BE:22:AF:AD:E3:D8:02:8C:F8:A9:FA:A5:B8:82:76:3F:6D:B5:00 Authority key identifier: 1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9 Certificate issuer: /CN=A91FA645/serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9 Certificate serial: 03F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft Manifest number: 03ED Signing time: Sat 23 Aug 2025 00:45:30 +0000 Manifest this update: Sat 23 Aug 2025 00:45:29 +0000 Manifest next update: Sat 30 Aug 2025 00:45:29 +0000 Files and hashes: 1: HUA-MjAeWHgKBwV8syty7K9G19k.crl (hash: o4mlMaWfY6WMTz0gqefT725qwIFp2xbW6Rbn0P8quBI=) 2: F4639D76356211F09A66C487C4F9AE02.roa (hash: jMZlA46PjyS50Sc628904LMJ26KCWyrvOHiCQJKklTk=) 3: 76EBCD3E8C9911ECB051A327C4F9AE02.roa (hash: nmKky47wGKMcIzjIq8A+qFDV89GwShHdwrd8mFOXaec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1014 (0x3f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA645, serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9 Validity Not Before: Aug 23 00:45:29 2025 GMT Not After : Aug 30 00:45:29 2025 GMT Subject: CN=68a90f29-f263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a8:52:7c:4e:ff:ce:09:39:19:db:71:54:b4: 44:b6:31:fd:d4:a9:ce:d4:b6:78:00:a8:4b:d9:cd: 8e:7f:88:64:3c:bb:47:df:9c:1b:82:50:8b:4c:cc: c5:25:85:b4:09:df:51:80:35:8a:e5:b7:92:fd:84: ad:f6:67:07:9f:99:f4:a7:53:f6:e2:de:c2:46:b3: c8:1c:a1:df:91:d4:f5:71:51:4c:c7:a4:42:88:b5: 3c:d3:fa:8b:35:49:50:a5:6c:46:9e:47:dc:34:5a: 41:49:f0:83:2e:cd:15:6d:81:9d:36:89:63:17:dd: 16:94:4b:ea:1f:a1:91:d9:60:84:09:32:51:85:2e: b9:bb:29:e9:b9:62:16:ca:57:9f:19:56:70:4a:59: 5b:5f:7a:66:c9:9b:87:8c:1d:53:ac:a3:53:7f:8a: f3:ab:38:f9:59:49:bb:1d:26:08:5e:8e:67:15:7b: 04:e3:95:f9:16:24:7b:3e:49:80:f7:ab:24:3d:71: f6:de:42:23:8e:00:15:92:80:ed:70:ce:e4:3f:11: 22:1e:a5:65:07:37:bf:cc:8a:68:6e:d6:e5:e1:93: 6f:dd:d6:37:01:24:36:31:a5:65:4c:1a:70:1b:69: 1f:ca:6e:40:16:e4:13:2b:f7:c1:80:5a:29:94:ea: 41:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BE:22:AF:AD:E3:D8:02:8C:F8:A9:FA:A5:B8:82:76:3F:6D:B5:00 X509v3 Authority Key Identifier: keyid:1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b7:6d:6b:bf:ee:47:28:9d:2b:03:5e:3b:f7:42:de:aa:fa: 2e:1b:65:d5:33:02:6b:64:c8:e4:d4:1d:bf:37:2a:01:23:09: a8:39:af:7b:6c:77:96:a4:58:ef:3f:4c:a8:64:1c:5c:63:fe: 38:59:d4:e0:6c:72:f9:ee:6d:bd:7a:a2:17:ce:f3:0d:4b:21: c1:c3:dc:8b:97:3a:09:b7:b1:f9:b7:30:60:a2:68:6f:cf:62: b3:75:6f:12:95:c3:cf:8e:29:c7:a2:65:60:cb:9f:5a:ab:a6: de:d7:e9:3e:17:80:6f:11:e5:c1:67:9c:7f:2d:65:44:a9:1c: 94:35:55:77:ff:80:11:ae:2b:f1:ac:57:56:ae:e2:6d:71:e7: da:09:69:df:80:86:6e:fb:40:42:ff:37:32:31:b2:a8:d0:94: 5b:1d:59:5b:74:ac:54:b2:d5:ce:1f:2e:ca:e5:7b:a3:f9:45: 8d:91:ce:d3:4e:6c:88:67:7e:30:48:c8:60:2d:f7:0e:a4:97: 9b:6c:8d:0d:19:dd:20:a2:22:cb:b2:c8:7f:da:ef:c4:4f:07: 80:9a:4d:5a:9f:ff:7b:45:1d:82:1f:ca:16:c7:8a:f2:5f:d2: ef:94:1a:c0:11:0d:8e:0a:be:2a:c1:e4:67:f9:85:79:1f:44: b6:d4:3b:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NDUxMTAvBgNVBAUTKDFENDAzRTMyMzAxRTU4NzgwQTA3MDU3Q0IzMkI3MkVD QUY0NkQ3RDkwHhcNMjUwODIzMDA0NTI5WhcNMjUwODMwMDA0NTI5WjAYMRYwFAYD VQQDEw02OGE5MGYyOS1mMjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6hSfE7/zgk5GdtxVLREtjH91KnO1LZ4AKhL2c2Of4hkPLtH35wbglCLTMzF JYW0Cd9RgDWK5beS/YSt9mcHn5n0p1P24t7CRrPIHKHfkdT1cVFMx6RCiLU80/qL NUlQpWxGnkfcNFpBSfCDLs0VbYGdNoljF90WlEvqH6GR2WCECTJRhS65uynpuWIW ylefGVZwSllbX3pmyZuHjB1TrKNTf4rzqzj5WUm7HSYIXo5nFXsE45X5FiR7PkmA 96skPXH23kIjjgAVkoDtcM7kPxEiHqVlBze/zIpobtbl4ZNv3dY3ASQ2MaVlTBpw G2kfym5AFuQTK/fBgFoplOpBuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6+Iq+t 49gCjPip+qW4gnY/bbUAMB8GA1UdIwQYMBaAFB1APjIwHlh4CgcFfLMrcuyvRtfZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY0NS9FMEQ5RjM2NDhD OTUxMUVDQUU0RjFEMjNDNEY5QUUwMi9IVUEtTWpBZVdIZ0tCd1Y4c3l0eTdLOUcx OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVQS1NakFlV0hnS0J3VjhzeXR5N0s5RzE5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY0NS9FMEQ5RjM2NDhDOTUxMUVDQUU0RjFEMjNDNEY5QUUwMi9IVUEtTWpBZVdI Z0tCd1Y4c3l0eTdLOUcxOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJt21rv+5HKJ0rA14790LeqvouG2XVMwJrZMjk1B2/NyoBIwmoOa97 bHeWpFjvP0yoZBxcY/44WdTgbHL57m29eqIXzvMNSyHBw9yLlzoJt7H5tzBgomhv z2KzdW8SlcPPjinHomVgy59aq6be1+k+F4BvEeXBZ5x/LWVEqRyUNVV3/4ARrivx rFdWruJtcefaCWnfgIZu+0BC/zcyMbKo0JRbHVlbdKxUstXOHy7K5Xuj+UWNkc7T TmyIZ34wSMhgLfcOpJebbI0NGd0goiLLssh/2u/ETweAmk1an/97RR2CH8oWx4ry X9LvlBrAEQ2OCr4qweRn+YV5H0S21DtH -----END CERTIFICATE-----Generated at Sat Aug 23 21:17:19 2025 by rpki-client