$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft File: huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json) Hash identifier: dE4/AI0VGOFKkSuj2zeHWVX5kwc5Fc7lftjKmI3R0YY= Subject key identifier: 0A:57:10:CC:81:08:FE:40:28:72:CF:96:48:82:6B:58:32:B6:42:13 Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft Manifest number: AF Signing time: Sat 19 Jul 2025 06:14:00 +0000 Manifest this update: Sat 19 Jul 2025 06:14:00 +0000 Manifest next update: Sat 26 Jul 2025 06:14:00 +0000 Files and hashes: 1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: kjemmAdCgAYK9xv808SiLrOQcXXflS6KKUjj/CL3AeM=) 2: F5C5A42C5ADC11EF8061F335C4F9AE02.roa (hash: jyFeBHdKHmG1HRE/BTdZ4LEVyNfH72ioQGaOrtzmyn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Validity Not Before: Jul 19 06:14:00 2025 GMT Not After : Jul 26 06:14:00 2025 GMT Subject: CN=687b37a8-4255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fb:c9:5c:44:7e:a1:e9:ac:0c:53:23:81:d6: a3:af:50:82:7f:5b:7d:8b:00:27:4c:1a:41:86:6e: 99:b6:cc:d0:66:1c:37:9c:f5:d7:8b:23:36:a4:a4: ca:1f:96:d9:7a:52:e7:44:9f:2d:b0:09:99:33:e9: af:9e:65:94:b0:58:a7:69:c1:99:d9:3b:72:d1:c7: d2:cc:a5:85:90:45:31:5a:c2:f9:a0:99:9d:81:b8: 69:22:c8:a8:e7:f0:db:f0:6c:7f:de:00:0e:6c:5b: a3:ba:82:62:07:0f:e0:ab:94:60:82:ba:4a:3f:a3: e3:ed:15:30:25:b8:7a:79:33:a0:0d:c3:92:95:65: 7b:17:a5:20:78:cb:b9:78:65:bf:9d:d1:5c:ad:ba: 58:26:56:76:d5:cc:10:c0:57:20:99:d0:10:a0:fd: 11:d6:0a:32:e2:d7:b2:65:2b:48:58:27:4a:4e:2a: 8a:9f:97:22:dd:fb:1f:ff:26:e6:04:fb:ed:06:87: d0:0c:20:21:a3:02:4a:55:29:3a:09:f6:a1:d8:8e: 3f:d7:fd:90:60:ae:62:26:5e:85:8b:b2:38:c8:0f: 49:d0:9d:45:12:a3:27:5b:90:92:22:46:2b:3e:13: 64:60:23:50:f8:4e:9f:1a:62:93:19:31:f6:9c:84: 14:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:57:10:CC:81:08:FE:40:28:72:CF:96:48:82:6B:58:32:B6:42:13 X509v3 Authority Key Identifier: keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:e7:29:71:60:ae:73:0a:b9:ba:b0:6a:a3:1e:3d:c5:b1:f2: ac:62:e9:6c:bc:59:1d:43:7d:41:20:c5:97:24:ab:9a:e6:8c: 76:63:16:01:3f:4b:ad:f1:4c:df:0c:fc:33:d8:3a:68:cc:3d: bd:af:31:33:90:95:74:22:fa:a4:e0:7e:8f:2e:b9:d0:cd:f4: 93:6a:ac:45:86:5e:ff:1e:72:7d:3d:f7:47:b7:b8:6a:18:d6: 90:32:e5:7a:e4:8a:0a:28:be:e3:81:9b:6a:a9:05:da:18:ed: 93:42:12:80:d3:99:e6:f0:46:25:12:5c:ad:97:42:51:f7:0b: 88:04:d0:00:29:6d:65:0c:6d:c8:6d:bc:40:e4:6a:c1:bb:f7: 99:5d:1e:d9:83:23:d2:62:36:c8:76:46:a5:63:6a:14:17:c4: 86:42:e5:be:cc:08:9a:5c:2a:81:ce:c9:6a:5a:c5:da:ca:9e: 97:38:78:68:fc:89:b8:26:d4:b9:7e:1a:7e:a7:09:76:54:ee: 2b:33:d0:41:49:f2:c3:d1:e1:a3:bd:9b:0a:07:1f:4a:f0:5c: 71:a5:56:c4:d1:a3:78:41:68:87:74:25:38:f7:ff:19:87:2e: c3:3a:d2:a1:7d:8b:53:76:a9:31:77:ed:5f:1e:11:86:02:61: 1f:6e:50:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QTgxMTAvBgNVBAUTKDg2RTIzNEUyRTFFMjNBNDk3MTQ1OEQyQTcyNjE0REYx Mzg5NUUyOUEwHhcNMjUwNzE5MDYxNDAwWhcNMjUwNzI2MDYxNDAwWjAYMRYwFAYD VQQDEw02ODdiMzdhOC00MjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/vJXER+oemsDFMjgdajr1CCf1t9iwAnTBpBhm6ZtszQZhw3nPXXiyM2pKTK H5bZelLnRJ8tsAmZM+mvnmWUsFinacGZ2Tty0cfSzKWFkEUxWsL5oJmdgbhpIsio 5/Db8Gx/3gAObFujuoJiBw/gq5RggrpKP6Pj7RUwJbh6eTOgDcOSlWV7F6UgeMu5 eGW/ndFcrbpYJlZ21cwQwFcgmdAQoP0R1goy4teyZStIWCdKTiqKn5ci3fsf/ybm BPvtBofQDCAhowJKVSk6Cfah2I4/1/2QYK5iJl6Fi7I4yA9J0J1FEqMnW5CSIkYr PhNkYCNQ+E6fGmKTGTH2nIQUawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApXEMyB CP5AKHLPlkiCa1gytkITMB8GA1UdIwQYMBaAFIbiNOLh4jpJcUWNKnJhTfE4leKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBOC9BNUY4RTg3ODVB REMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9rbHhSWTBxY21GTjhUaVY0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h1STA0dUhpT2tseFJZMHFjbUZOOFRpVjRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBOC9BNUY4RTg3ODVBREMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9r bHhSWTBxY21GTjhUaVY0cG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC05ylxYK5zCrm6sGqjHj3FsfKsYulsvFkdQ31BIMWXJKua5ox2YxYB P0ut8UzfDPwz2DpozD29rzEzkJV0Ivqk4H6PLrnQzfSTaqxFhl7/HnJ9PfdHt7hq GNaQMuV65IoKKL7jgZtqqQXaGO2TQhKA05nm8EYlElytl0JR9wuIBNAAKW1lDG3I bbxA5GrBu/eZXR7ZgyPSYjbIdkalY2oUF8SGQuW+zAiaXCqBzslqWsXayp6XOHho /Im4JtS5fhp+pwl2VO4rM9BBSfLD0eGjvZsKBx9K8FxxpVbE0aN4QWiHdCU49/8Z hy7DOtKhfYtTdqkxd+1fHhGGAmEfblC8 -----END CERTIFICATE-----Generated at Sun Jul 20 15:07:12 2025 by rpki-client