$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft File: HuygOndlK5BwteEzgJoiODDInPk.mft (raw, json) Hash identifier: P4QtelJ7H0yCutuZkYL++eTTH0/+V04FEDoau+FKDHg= Subject key identifier: B6:76:2A:AC:80:1A:38:F7:48:F8:43:90:60:4F:7B:15:A5:AB:6B:EC Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9 Certificate issuer: /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9 Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft Manifest number: 0242 Signing time: Thu 03 Apr 2025 01:54:28 +0000 Manifest this update: Thu 03 Apr 2025 01:54:28 +0000 Manifest next update: Thu 10 Apr 2025 01:54:28 +0000 Files and hashes: 1: HuygOndlK5BwteEzgJoiODDInPk.crl (hash: /2jfpiGU/65UfmGtpeZssPISGGg+76cCIehU2NwM2eI=) 2: AF13726403AD11F0B5D12A81C4F9AE02.roa (hash: XBaed8FJc7Gixv2UzCn4EyIQb1PKqJIn+WKksLyjxb8=) 3: 2080359097F711EF91AB0436C4F9AE02.roa (hash: ayF9Bv7+wkh7jzbmvM6fDF9jk/NLjmF1YhPtsg38ygk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAD56 Validity Not Before: Apr 3 01:54:28 2025 GMT Not After : Apr 10 01:54:28 2025 GMT Subject: CN=67edea54-f83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:5f:56:0e:cc:ef:c6:5e:a1:bc:df:01:bd: 9f:97:8d:1a:ba:64:69:d9:4f:e6:66:40:98:73:e2: 56:ab:2e:3f:83:7e:2d:b1:dd:ee:d0:fb:f4:71:c5: ca:78:43:d3:fb:f7:3e:83:20:a9:d2:f0:66:e6:1e: d8:f5:55:96:20:8d:13:c1:1d:ec:a3:e7:40:6a:98: fe:7e:c8:9a:96:d0:75:8b:e6:d1:eb:43:45:ce:19: 99:f8:0b:fc:f8:13:11:c8:0d:65:a8:23:08:cc:61: 20:1a:60:7a:53:9f:99:fa:e0:33:82:3c:e5:df:aa: 83:a3:4b:ce:51:06:bf:d1:a1:54:67:02:39:9e:05: b5:89:dc:1d:d9:2d:75:6d:82:69:78:e6:6a:64:9a: 1c:9d:8f:d9:26:a5:64:ef:e1:42:cc:58:22:c1:73: a6:4b:65:a1:33:15:53:b2:96:cd:3f:20:0f:69:94: 45:b0:28:dc:57:fe:c4:46:5e:eb:4c:fc:2d:09:0a: 99:ea:d5:8b:d7:3d:f8:94:81:0d:53:65:4d:51:2d: 8f:0c:6d:08:4b:4b:b6:31:46:67:13:d8:af:47:71: 68:d6:97:e7:22:e1:0f:f8:5b:3d:25:4b:d7:97:e3: 2a:f1:6c:2f:71:1a:bf:ef:64:d7:79:d0:03:14:10: 3b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:76:2A:AC:80:1A:38:F7:48:F8:43:90:60:4F:7B:15:A5:AB:6B:EC X509v3 Authority Key Identifier: keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:1e:87:44:d3:47:35:54:4c:69:3d:3c:03:bd:68:59:1c:3d: 10:6d:c8:51:7d:aa:2a:00:a5:53:56:84:d3:56:9a:d7:9c:cf: 04:2e:87:d6:c6:8b:3c:5f:49:aa:bf:fb:a4:1f:cb:bb:4c:5d: 30:a8:b6:69:87:d1:2e:f8:fa:57:13:3c:b2:23:88:b4:cb:9a: 57:d8:4e:0a:bc:dd:57:66:52:28:d3:f6:25:f0:05:a8:e4:41: 8c:0e:0d:7b:21:30:70:bb:b0:53:b3:98:81:8f:d0:ae:c7:b9: 5e:0b:c8:2b:4b:c5:e2:5f:0c:4b:25:20:34:b6:7c:15:56:f5: 5c:3b:22:ff:92:13:92:b7:eb:75:3f:9b:1d:96:56:e6:d0:03: da:25:56:97:bc:fe:0e:4e:ba:cd:0d:d2:80:dd:81:16:c4:d3: a9:6f:10:2b:94:c5:89:51:b4:fc:db:3c:24:62:9e:59:4f:16: e2:37:bd:b4:79:ac:ed:c8:72:c4:41:71:6a:af:8c:9a:0a:7d: 0a:24:1a:62:12:58:32:7f:53:35:63:c2:86:d2:5f:6b:b4:a0: 9e:34:5f:7a:5e:21:5b:f0:01:f7:76:dd:d3:d0:74:b4:bd:04: 9a:bd:3f:7a:cd:58:c9:ac:c5:3e:94:b7:5c:01:b5:09:36:58: b3:e9:04:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFENTYxMTAvBgNVBAUTKDFFRUNBMDNBNzc2NTJCOTA3MEI1RTEzMzgwOUEyMjM4 MzBDODlDRjkwHhcNMjUwNDAzMDE1NDI4WhcNMjUwNDEwMDE1NDI4WjAYMRYwFAYD VQQDEw02N2VkZWE1NC1mODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqdfVg7M78ZeobzfAb2fl40aumRp2U/mZkCYc+JWqy4/g34tsd3u0Pv0ccXK eEPT+/c+gyCp0vBm5h7Y9VWWII0TwR3so+dAapj+fsialtB1i+bR60NFzhmZ+Av8 +BMRyA1lqCMIzGEgGmB6U5+Z+uAzgjzl36qDo0vOUQa/0aFUZwI5ngW1idwd2S11 bYJpeOZqZJocnY/ZJqVk7+FCzFgiwXOmS2WhMxVTspbNPyAPaZRFsCjcV/7ERl7r TPwtCQqZ6tWL1z34lIENU2VNUS2PDG0IS0u2MUZnE9ivR3Fo1pfnIuEP+Fs9JUvX l+Mq8WwvcRq/72TXedADFBA7BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZ2KqyA Gjj3SPhDkGBPexWlq2vsMB8GA1UdIwQYMBaAFB7soDp3ZSuQcLXhM4CaIjgwyJz5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQ1Ni84MThCNEQwMjFB QUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1Qnd0ZUV6Z0pvaU9ERElu UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h1eWdPbmRsSzVCd3RlRXpnSm9pT0RESW5Qay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUQ1Ni84MThCNEQwMjFBQUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1 Qnd0ZUV6Z0pvaU9EREluUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgHodE00c1VExpPTwDvWhZHD0QbchRfaoqAKVTVoTTVprXnM8ELofW xos8X0mqv/ukH8u7TF0wqLZph9Eu+PpXEzyyI4i0y5pX2E4KvN1XZlIo0/Yl8AWo 5EGMDg17ITBwu7BTs5iBj9Cux7leC8grS8XiXwxLJSA0tnwVVvVcOyL/khOSt+t1 P5sdllbm0APaJVaXvP4OTrrNDdKA3YEWxNOpbxArlMWJUbT82zwkYp5ZTxbiN720 eaztyHLEQXFqr4yaCn0KJBpiElgyf1M1Y8KG0l9rtKCeNF96XiFb8AH3dt3T0HS0 vQSavT96zVjJrMU+lLdcAbUJNliz6QQc -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:46 2025 by rpki-client