$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft File: huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json) Hash identifier: pjOjjLuuaHPKWo8QcyU78ATR+3NWk0yzNmgKxBq/kE4= Subject key identifier: B2:35:D5:1D:DF:E3:B7:94:D4:75:C3:97:C7:D9:98:3A:55:05:2D:C0 Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft Manifest number: 7B Signing time: Sat 05 Apr 2025 05:57:27 +0000 Manifest this update: Sat 05 Apr 2025 05:57:26 +0000 Manifest next update: Sat 12 Apr 2025 05:57:26 +0000 Files and hashes: 1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: S5/DX/eTm7oBWQ+0NnrHZspI4HU8mf2ETprQ5qlAIqc=) 2: F5C5A42C5ADC11EF8061F335C4F9AE02.roa (hash: jyFeBHdKHmG1HRE/BTdZ4LEVyNfH72ioQGaOrtzmyn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604A8 Validity Not Before: Apr 5 05:57:26 2025 GMT Not After : Apr 12 05:57:26 2025 GMT Subject: CN=67f0c646-7277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:76:87:ba:72:b4:1d:b1:60:1f:12:42:4f: f2:93:da:d6:bc:fa:da:32:d5:98:c0:77:58:d6:bb: 96:96:6a:af:0b:2b:e5:29:7c:f6:aa:fc:10:c2:87: 07:14:85:a5:bb:55:00:48:1e:5c:18:7a:bb:70:e5: 43:e4:85:30:39:ba:04:9f:a4:4c:b5:f1:fa:30:58: 30:cd:71:ca:2e:8d:0b:98:48:26:a2:89:99:a3:f2: 67:c5:bf:d2:d9:80:60:5c:3a:e6:e6:c1:05:2b:96: 4e:7d:5f:fb:fa:b0:be:38:bb:ba:0b:66:78:ee:64: a1:88:00:a9:6d:e5:a1:d0:61:ee:0f:8e:c1:16:6e: df:2f:36:65:5c:3c:f4:3a:b4:a1:5b:b7:7e:c1:6c: 97:02:5e:e0:57:bc:a4:2a:8e:b7:45:de:4e:4d:38: 18:c1:d8:a5:9d:dd:25:22:6d:79:fe:ad:43:66:ee: d9:2d:da:28:50:6f:71:b6:d3:8a:65:62:5a:e0:54: f9:aa:2e:87:8e:ca:80:29:2b:2b:b8:56:fe:05:9e: 5d:81:74:5a:b4:a8:4a:e7:27:7d:58:9a:91:ca:1c: 35:6d:22:ac:2c:68:f2:19:47:cf:dd:15:cc:9f:92: 2e:1f:76:a0:50:d0:4c:ab:ad:76:8f:ec:cf:ba:f0: ff:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:35:D5:1D:DF:E3:B7:94:D4:75:C3:97:C7:D9:98:3A:55:05:2D:C0 X509v3 Authority Key Identifier: keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:8a:d7:56:83:0d:39:7f:c8:ae:1f:e2:06:49:26:a1:ad:8c: 01:69:b9:96:9c:58:37:72:f4:44:ba:cd:c4:ff:7b:54:8d:f8: 49:6e:18:97:dd:0c:d5:88:cc:19:f6:91:22:32:1d:64:30:79: d6:08:8f:c5:60:37:bd:ad:8d:91:8c:f8:94:85:5a:0d:98:82: 45:c2:97:9d:08:a7:81:5b:3d:f4:6a:88:2e:58:6b:7e:16:01: 21:4d:b4:94:a1:7e:bb:df:f2:4f:a2:96:9e:89:e9:85:8a:de: e6:31:2a:c9:cc:8f:70:4f:5c:93:33:71:3b:ec:6c:5c:3c:8e: 3c:d3:ce:f3:7c:db:11:d3:67:06:bf:92:4a:0b:cd:4d:81:08: 55:28:4c:22:70:28:ed:fd:4e:49:ff:83:4b:14:03:ea:9f:8f: 5c:4e:4d:cc:33:f4:4d:18:a9:d0:1e:20:08:46:d3:ab:db:d0: 60:68:5d:e3:c7:a7:37:52:93:3f:18:47:f0:4a:fe:9f:9c:4c: d9:2a:9c:bc:eb:44:1e:4c:23:e8:f8:d1:72:f1:5c:9d:ec:38: 35:66:72:51:0c:a5:8f:29:ae:a2:eb:0a:b5:17:bd:61:8b:92: 7f:d1:f4:f9:24:d6:eb:75:b2:40:c7:e9:e9:2d:b6:85:62:b8: 1f:70:c5:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MDRBODExMC8GA1UEBRMoODZFMjM0RTJFMUUyM0E0OTcxNDU4RDJBNzI2MTRERjEz ODk1RTI5QTAeFw0yNTA0MDUwNTU3MjZaFw0yNTA0MTIwNTU3MjZaMBgxFjAUBgNV BAMTDTY3ZjBjNjQ2LTcyNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCw3aHunK0HbFgHxJCT/KT2ta8+toy1ZjAd1jWu5aWaq8LK+UpfPaq/BDChwcU haW7VQBIHlwYertw5UPkhTA5ugSfpEy18fowWDDNccoujQuYSCaiiZmj8mfFv9LZ gGBcOubmwQUrlk59X/v6sL44u7oLZnjuZKGIAKlt5aHQYe4PjsEWbt8vNmVcPPQ6 tKFbt37BbJcCXuBXvKQqjrdF3k5NOBjB2KWd3SUibXn+rUNm7tkt2ihQb3G204pl YlrgVPmqLoeOyoApKyu4Vv4Fnl2BdFq0qErnJ31YmpHKHDVtIqwsaPIZR8/dFcyf ki4fdqBQ0EyrrXaP7M+68P+PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsjXVHd/j t5TUdcOXx9mYOlUFLcAwHwYDVR0jBBgwFoAUhuI04uHiOklxRY0qcmFN8TiV4pow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwNEE4L0E1RjhFODc4NUFE QzExRUY4RjRDOTM3N0M0RjlBRTAyL2h1STA0dUhpT2tseFJZMHFjbUZOOFRpVjRw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaHVJMDR1SGlPa2x4UlkwcWNtRk44VGlWNHBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw NEE4L0E1RjhFODc4NUFEQzExRUY4RjRDOTM3N0M0RjlBRTAyL2h1STA0dUhpT2ts eFJZMHFjbUZOOFRpVjRwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJqK11aDDTl/yK4f4gZJJqGtjAFpuZacWDdy9ES6zcT/e1SN+EluGJfd DNWIzBn2kSIyHWQwedYIj8VgN72tjZGM+JSFWg2YgkXCl50Ip4FbPfRqiC5Ya34W ASFNtJShfrvf8k+ilp6J6YWK3uYxKsnMj3BPXJMzcTvsbFw8jjzTzvN82xHTZwa/ kkoLzU2BCFUoTCJwKO39Tkn/g0sUA+qfj1xOTcwz9E0YqdAeIAhG06vb0GBoXePH pzdSkz8YR/BK/p+cTNkqnLzrRB5MI+j40XLxXJ3sODVmclEMpY8prqLrCrUXvWGL kn/R9Pkk1ut1skDH6ekttoViuB9wxUU= -----END CERTIFICATE-----Generated at Mon Apr 7 04:28:02 2025 by rpki-client