$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft File: HUA-MjAeWHgKBwV8syty7K9G19k.mft (raw, json) Hash identifier: azFNSPo3bAKEOFtIwNE69Pmuim9Umef3yJFTfSEPADg= Subject key identifier: 9C:FC:12:61:71:1B:E1:09:32:64:8E:7A:8A:49:93:07:01:DD:CA:F0 Authority key identifier: 1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9 Certificate issuer: /CN=A91FA645/serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9 Certificate serial: 03AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft Manifest number: 03A5 Signing time: Thu 03 Apr 2025 00:45:12 +0000 Manifest this update: Thu 03 Apr 2025 00:45:12 +0000 Manifest next update: Thu 10 Apr 2025 00:45:12 +0000 Files and hashes: 1: HUA-MjAeWHgKBwV8syty7K9G19k.crl (hash: XW5OiyEDvfCmr6YwEIGCGzXGSfXXuf3vF0vmc9IDgVU=) 2: 76EBCD3E8C9911ECB051A327C4F9AE02.roa (hash: nmKky47wGKMcIzjIq8A+qFDV89GwShHdwrd8mFOXaec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 941 (0x3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA645 Validity Not Before: Apr 3 00:45:12 2025 GMT Not After : Apr 10 00:45:12 2025 GMT Subject: CN=67edda18-8f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:91:78:33:eb:87:15:9a:84:4a:17:2e:a6:6f: a0:8b:2f:92:bb:7e:71:93:65:1e:8f:76:a5:0f:54: 9a:7f:35:5c:f0:c0:1f:d5:cb:ba:2f:33:5b:34:26: 25:e9:20:13:82:07:0d:5b:5f:15:57:05:ca:ef:5e: 2c:d7:57:71:45:ef:4e:e5:31:be:c2:59:c1:70:76: be:de:c0:6a:b3:cc:d9:5c:2d:39:44:94:c3:9c:ec: 72:eb:2f:d0:70:07:cb:33:7f:d0:7c:a8:e0:e4:6e: 57:ad:1d:ec:f8:0e:f1:49:50:21:97:51:0d:5d:22: dc:7a:75:4e:21:04:7d:07:08:a4:38:43:47:23:ec: 2e:2b:db:9d:86:3f:3e:da:82:d5:4d:94:bc:e6:5b: 53:9b:49:61:03:05:60:b1:21:49:38:84:86:aa:86: 78:2d:a9:cc:4b:49:ad:6e:f7:3f:e7:ab:43:08:df: 97:32:ac:75:e7:20:c6:ea:bf:e9:5d:7a:25:14:e3: 1c:5e:6f:7b:76:c2:c2:a5:35:10:a3:68:de:55:5c: 6b:14:a5:f7:f3:a6:33:26:35:7a:48:90:97:1a:01: b0:03:f4:f4:ee:82:7a:04:df:cf:83:34:92:5d:f6: a5:95:8b:4e:ad:5a:33:03:b2:ba:f3:2c:00:a4:bc: 68:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FC:12:61:71:1B:E1:09:32:64:8E:7A:8A:49:93:07:01:DD:CA:F0 X509v3 Authority Key Identifier: keyid:1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:88:a7:75:17:7e:62:d4:7d:5e:4c:1d:9b:4c:b6:7b:99:74: 3d:71:fc:e6:7b:18:a0:02:2d:1b:b8:36:86:49:22:4e:ed:61: b7:d9:7e:fa:bb:b6:a2:31:2c:85:4d:f5:87:40:18:24:4e:3c: d6:fe:41:32:1e:1b:e7:6c:3b:71:2d:fa:72:6b:69:53:13:9c: 9c:61:a2:7e:74:9d:b6:09:5f:53:2e:36:25:b0:c3:5f:e2:df: b1:18:5c:c6:8e:99:c1:ea:83:c6:c8:11:5a:66:72:4a:45:6c: b1:d4:4c:d3:20:8d:f0:a2:e7:4e:7c:87:5c:0d:49:3d:8f:e0: 15:d0:ae:10:7a:f3:ea:8f:32:6b:ed:03:d3:57:dc:4b:8a:75: e2:07:c7:6d:2e:32:7a:8c:23:20:7a:ff:d9:b5:69:09:87:e3: 60:b1:d3:d6:c8:58:4e:69:3f:6d:b1:70:63:f6:1b:24:64:16: 8a:64:46:81:d3:74:48:cd:12:6f:0e:f3:32:9b:26:38:8d:cb: 8f:b1:49:98:c6:0f:3f:97:db:14:14:11:b7:42:d7:8d:e6:ee: 75:07:c9:ff:0a:d4:bd:e3:11:48:22:0f:2c:4e:37:45:38:25: 8a:4d:cf:07:71:9a:35:00:66:81:bb:53:1a:ad:35:4f:b0:73: 24:d2:6e:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NDUxMTAvBgNVBAUTKDFENDAzRTMyMzAxRTU4NzgwQTA3MDU3Q0IzMkI3MkVD QUY0NkQ3RDkwHhcNMjUwNDAzMDA0NTEyWhcNMjUwNDEwMDA0NTEyWjAYMRYwFAYD VQQDEw02N2VkZGExOC04ZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpF4M+uHFZqEShcupm+giy+Su35xk2Uej3alD1SafzVc8MAf1cu6LzNbNCYl 6SATggcNW18VVwXK714s11dxRe9O5TG+wlnBcHa+3sBqs8zZXC05RJTDnOxy6y/Q cAfLM3/QfKjg5G5XrR3s+A7xSVAhl1ENXSLcenVOIQR9BwikOENHI+wuK9udhj8+ 2oLVTZS85ltTm0lhAwVgsSFJOISGqoZ4LanMS0mtbvc/56tDCN+XMqx15yDG6r/p XXolFOMcXm97dsLCpTUQo2jeVVxrFKX386YzJjV6SJCXGgGwA/T07oJ6BN/PgzSS XfallYtOrVozA7K68ywApLxoJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJz8EmFx G+EJMmSOeopJkwcB3crwMB8GA1UdIwQYMBaAFB1APjIwHlh4CgcFfLMrcuyvRtfZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY0NS9FMEQ5RjM2NDhD OTUxMUVDQUU0RjFEMjNDNEY5QUUwMi9IVUEtTWpBZVdIZ0tCd1Y4c3l0eTdLOUcx OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVQS1NakFlV0hnS0J3VjhzeXR5N0s5RzE5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY0NS9FMEQ5RjM2NDhDOTUxMUVDQUU0RjFEMjNDNEY5QUUwMi9IVUEtTWpBZVdI Z0tCd1Y4c3l0eTdLOUcxOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgiKd1F35i1H1eTB2bTLZ7mXQ9cfzmexigAi0buDaGSSJO7WG32X76 u7aiMSyFTfWHQBgkTjzW/kEyHhvnbDtxLfpya2lTE5ycYaJ+dJ22CV9TLjYlsMNf 4t+xGFzGjpnB6oPGyBFaZnJKRWyx1EzTII3woudOfIdcDUk9j+AV0K4QevPqjzJr 7QPTV9xLinXiB8dtLjJ6jCMgev/ZtWkJh+NgsdPWyFhOaT9tsXBj9hskZBaKZEaB 03RIzRJvDvMymyY4jcuPsUmYxg8/l9sUFBG3QteN5u51B8n/CtS94xFIIg8sTjdF OCWKTc8HcZo1AGaBu1MarTVPsHMk0m63 -----END CERTIFICATE-----Generated at Fri Apr 4 21:51:54 2025 by rpki-client