$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft File: HUA-MjAeWHgKBwV8syty7K9G19k.mft (raw, json) Hash identifier: LhPqCqvpFIJ2o9v+q7UX7sb7bU8Kk+JQvydIQ9D4NEk= Subject key identifier: 2B:ED:B4:CE:FB:39:D3:D7:0F:87:99:2B:E0:D8:D6:6F:AC:A3:38:6A Authority key identifier: 1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9 Certificate issuer: /CN=A91FA645/serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9 Certificate serial: 03E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft Manifest number: 03DB Signing time: Sat 19 Jul 2025 00:59:16 +0000 Manifest this update: Sat 19 Jul 2025 00:59:16 +0000 Manifest next update: Sat 26 Jul 2025 00:59:16 +0000 Files and hashes: 1: HUA-MjAeWHgKBwV8syty7K9G19k.crl (hash: HqFEta+XuKQ23n5140hbMHpl7k4FlI9jWcOpEm2ZQe4=) 2: F4639D76356211F09A66C487C4F9AE02.roa (hash: jMZlA46PjyS50Sc628904LMJ26KCWyrvOHiCQJKklTk=) 3: 76EBCD3E8C9911ECB051A327C4F9AE02.roa (hash: nmKky47wGKMcIzjIq8A+qFDV89GwShHdwrd8mFOXaec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 996 (0x3e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA645, serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9 Validity Not Before: Jul 19 00:59:16 2025 GMT Not After : Jul 26 00:59:16 2025 GMT Subject: CN=687aede4-c47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:ee:82:47:9a:2b:55:85:73:9e:88:fa:09: 1d:41:28:39:d4:c3:ac:02:25:a9:b7:aa:0b:48:95: 22:22:07:8f:4f:f5:78:ff:32:3b:9b:04:79:a8:df: e9:27:79:cf:ea:54:3c:23:f6:41:0d:49:fd:83:be: 16:aa:c2:21:e4:d0:a7:1e:f9:28:08:cc:b0:50:68: fd:18:2b:66:11:12:df:b5:45:73:03:b6:33:f1:16: fb:92:76:a5:a8:57:ef:8a:e1:9b:b4:fc:1f:df:73: 5a:fe:20:64:46:bb:9f:31:b6:33:75:e5:c9:fa:fe: ea:12:cd:95:f1:dd:80:bc:1d:4a:68:85:51:ee:7b: a7:ed:6c:a1:b4:63:36:d9:97:b4:04:55:88:0c:94: 29:6d:e0:d0:07:a5:e7:3d:98:22:b0:39:77:3c:52: e0:b7:a9:8e:97:c7:36:fe:b5:ba:25:b8:9c:94:9b: 3e:15:2a:81:73:11:20:1b:dd:8c:40:b9:5e:c9:f3: b2:ca:4b:c7:0b:6b:c0:bc:ad:63:34:84:9b:9e:95: 4e:d9:24:50:c6:f7:63:c0:b1:31:e9:c1:d6:83:1f: fd:91:a8:54:f4:62:b0:63:bd:33:a2:06:d9:72:94: a7:2b:45:90:c2:8f:7b:16:02:64:38:e6:37:a1:d5: 73:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:ED:B4:CE:FB:39:D3:D7:0F:87:99:2B:E0:D8:D6:6F:AC:A3:38:6A X509v3 Authority Key Identifier: keyid:1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:f3:91:ca:6e:f5:15:78:60:1e:8c:b6:29:b5:7e:fb:99:58: 71:5e:96:7b:1c:a1:7c:d7:5c:48:3b:71:67:0d:1f:e2:27:84: 61:1b:5b:5a:b6:6f:5c:68:62:ac:3b:0e:fc:f9:17:b4:57:ee: 49:5b:93:bf:7e:7e:10:f4:14:ea:d5:e7:3d:b8:22:dc:a1:70: c5:7d:2f:0d:a3:5a:3f:1d:0f:c8:b5:29:7c:2f:b6:be:e1:9f: 4c:ff:98:c4:9d:03:b6:3e:0c:28:f6:d1:55:8c:90:46:60:d8: b2:10:bf:44:8a:34:c7:31:27:a2:f9:ff:f1:5a:ff:50:e5:ad: 28:1e:27:0f:80:e1:cb:63:ac:7c:4d:18:dc:16:64:1a:c5:ca: 17:77:3e:fd:f2:0b:81:cf:3f:45:96:10:5a:3e:64:1b:eb:c0: 3c:0d:64:bf:39:54:42:7d:72:c3:41:ad:ef:1f:a8:b2:be:3e: 9d:d3:63:03:1e:07:27:ee:1a:42:19:c9:cf:6d:cd:9b:af:88: 29:2e:d7:9c:b9:e5:fc:4a:c7:33:5c:59:c1:04:e4:92:b6:30: ec:b6:8a:dc:e6:f0:b6:56:5a:06:83:17:cd:02:d6:0c:13:0b: 72:9e:68:23:89:ad:7d:5b:09:42:10:5e:c6:e2:25:93:ed:ed: c6:cd:c3:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NDUxMTAvBgNVBAUTKDFENDAzRTMyMzAxRTU4NzgwQTA3MDU3Q0IzMkI3MkVD QUY0NkQ3RDkwHhcNMjUwNzE5MDA1OTE2WhcNMjUwNzI2MDA1OTE2WjAYMRYwFAYD VQQDEw02ODdhZWRlNC1jNDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArj/ugkeaK1WFc56I+gkdQSg51MOsAiWpt6oLSJUiIgePT/V4/zI7mwR5qN/p J3nP6lQ8I/ZBDUn9g74WqsIh5NCnHvkoCMywUGj9GCtmERLftUVzA7Yz8Rb7knal qFfviuGbtPwf33Na/iBkRrufMbYzdeXJ+v7qEs2V8d2AvB1KaIVR7nun7WyhtGM2 2Ze0BFWIDJQpbeDQB6XnPZgisDl3PFLgt6mOl8c2/rW6JbiclJs+FSqBcxEgG92M QLleyfOyykvHC2vAvK1jNISbnpVO2SRQxvdjwLEx6cHWgx/9kahU9GKwY70zogbZ cpSnK0WQwo97FgJkOOY3odVzAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvttM77 OdPXD4eZK+DY1m+sozhqMB8GA1UdIwQYMBaAFB1APjIwHlh4CgcFfLMrcuyvRtfZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY0NS9FMEQ5RjM2NDhD OTUxMUVDQUU0RjFEMjNDNEY5QUUwMi9IVUEtTWpBZVdIZ0tCd1Y4c3l0eTdLOUcx OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVQS1NakFlV0hnS0J3VjhzeXR5N0s5RzE5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY0NS9FMEQ5RjM2NDhDOTUxMUVDQUU0RjFEMjNDNEY5QUUwMi9IVUEtTWpBZVdI Z0tCd1Y4c3l0eTdLOUcxOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn85HKbvUVeGAejLYptX77mVhxXpZ7HKF811xIO3FnDR/iJ4RhG1ta tm9caGKsOw78+Re0V+5JW5O/fn4Q9BTq1ec9uCLcoXDFfS8No1o/HQ/ItSl8L7a+ 4Z9M/5jEnQO2Pgwo9tFVjJBGYNiyEL9EijTHMSei+f/xWv9Q5a0oHicPgOHLY6x8 TRjcFmQaxcoXdz798guBzz9FlhBaPmQb68A8DWS/OVRCfXLDQa3vH6iyvj6d02MD Hgcn7hpCGcnPbc2br4gpLtecueX8SsczXFnBBOSStjDstorc5vC2VloGgxfNAtYM Ewtynmgjia19WwlCEF7G4iWT7e3GzcMs -----END CERTIFICATE-----Generated at Sun Jul 20 06:20:53 2025 by rpki-client