$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft File: huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json) Hash identifier: +GMUAbtQ/D5LPnkecuC19etx1OV8OyjlcbomgWohiMA= Subject key identifier: EE:13:4B:47:E7:02:35:B0:2C:3A:FB:E2:90:13:9E:76:AB:FE:67:02 Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft Manifest number: CA Signing time: Tue 09 Sep 2025 05:48:05 +0000 Manifest this update: Tue 09 Sep 2025 05:48:05 +0000 Manifest next update: Tue 16 Sep 2025 05:48:05 +0000 Files and hashes: 1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: 0oPej+N8rLHHYGCNuDisf1OzqC9tnkfjTw8q1tSO8RM=) 2: F5C5A42C5ADC11EF8061F335C4F9AE02.roa (hash: jyFeBHdKHmG1HRE/BTdZ4LEVyNfH72ioQGaOrtzmyn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Validity Not Before: Sep 9 05:48:05 2025 GMT Not After : Sep 16 05:48:05 2025 GMT Subject: CN=68bfbf95-ed83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:64:d3:85:97:72:3a:c3:43:94:63:31:69: a4:76:55:d0:a3:69:52:08:49:58:5f:2a:85:c5:12: 7d:b1:0e:9f:01:33:46:ac:47:8a:ec:d8:b7:ef:69: d9:a4:07:78:1a:f3:78:4e:02:17:47:01:96:a9:5d: 2f:09:6f:1c:8f:e2:04:bc:b5:d3:11:19:d5:8a:46: 4e:bb:1a:36:fb:98:d1:b8:8d:35:d8:47:71:a1:c4: 49:c4:8b:37:b2:5e:15:27:03:11:31:a0:88:47:07: d3:7a:3c:36:e6:84:1a:91:f2:91:37:92:65:42:64: 46:b8:7a:ec:b4:7a:79:1e:15:3d:a0:c4:1f:21:41: 74:71:5c:77:9d:dd:f5:a2:5b:49:a6:3f:9f:f8:7a: ca:7b:ae:d6:70:d7:b0:25:c8:6b:dd:9e:90:38:19: 97:4a:b8:3e:88:b3:8e:a4:36:b4:9d:25:71:8e:22: 50:98:9d:23:62:9a:29:3f:fd:2e:f8:b9:2c:ac:b6: 0a:a5:ff:8a:bb:c7:d3:7c:f8:ac:61:15:a9:17:41: f5:a4:97:d0:77:3d:54:2b:55:88:d2:08:5f:f3:f9: a4:58:64:02:d5:b5:f6:ea:63:a2:ef:e3:d8:3a:ea: 81:8c:76:e1:a6:b5:a0:a8:dc:ae:3e:f3:67:c3:4f: 92:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:13:4B:47:E7:02:35:B0:2C:3A:FB:E2:90:13:9E:76:AB:FE:67:02 X509v3 Authority Key Identifier: keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:57:e4:36:73:7f:38:1f:f8:cf:a5:00:fa:71:1d:c2:aa:76: 53:ea:2c:06:ba:21:60:6c:c4:f4:0e:cf:9e:57:ff:f7:e1:38: 7e:1f:7c:52:ef:5a:26:a5:1c:19:ac:b5:6f:43:d1:29:1f:71: e1:6e:b0:ce:e8:6e:13:70:11:c9:b0:f8:e4:c0:d2:01:d3:bc: be:ca:6f:bd:14:8f:1e:57:b5:26:2e:5c:80:ff:5a:04:cd:ce: 1e:93:6c:16:78:b0:a6:06:0c:7f:69:9b:c1:fb:f9:f3:66:65: ef:80:dc:29:1c:dc:39:5a:01:e3:0b:a7:bd:91:1c:43:47:28: 4e:d3:ff:71:24:2c:b1:77:07:40:0a:40:84:45:1b:ab:a0:d1: 26:4a:9a:8b:d1:61:a9:9c:06:55:3f:80:22:c9:4a:a7:0b:36: 0b:af:c4:d6:b0:98:fb:3f:e5:fa:3b:26:a8:00:77:86:11:3d: 6f:16:25:71:f6:94:9f:63:31:e7:61:3f:cd:3f:50:ac:79:1c: 65:54:f1:25:3e:4b:ed:1f:21:dc:7c:5a:26:9e:04:9e:b9:99: f2:47:db:f6:e4:a4:75:ba:67:5d:d8:3c:b6:7b:54:c5:92:d5: fc:18:5a:1b:e5:37:51:b9:3f:27:ba:6d:bc:9b:3e:59:92:82: ab:dd:4c:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QTgxMTAvBgNVBAUTKDg2RTIzNEUyRTFFMjNBNDk3MTQ1OEQyQTcyNjE0REYx Mzg5NUUyOUEwHhcNMjUwOTA5MDU0ODA1WhcNMjUwOTE2MDU0ODA1WjAYMRYwFAYD VQQDEw02OGJmYmY5NS1lZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdVk04WXcjrDQ5RjMWmkdlXQo2lSCElYXyqFxRJ9sQ6fATNGrEeK7Ni372nZ pAd4GvN4TgIXRwGWqV0vCW8cj+IEvLXTERnVikZOuxo2+5jRuI012EdxocRJxIs3 sl4VJwMRMaCIRwfTejw25oQakfKRN5JlQmRGuHrstHp5HhU9oMQfIUF0cVx3nd31 oltJpj+f+HrKe67WcNewJchr3Z6QOBmXSrg+iLOOpDa0nSVxjiJQmJ0jYpopP/0u +LksrLYKpf+Ku8fTfPisYRWpF0H1pJfQdz1UK1WI0ghf8/mkWGQC1bX26mOi7+PY OuqBjHbhprWgqNyuPvNnw0+SxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4TS0fn AjWwLDr74pATnnar/mcCMB8GA1UdIwQYMBaAFIbiNOLh4jpJcUWNKnJhTfE4leKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBOC9BNUY4RTg3ODVB REMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9rbHhSWTBxY21GTjhUaVY0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h1STA0dUhpT2tseFJZMHFjbUZOOFRpVjRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBOC9BNUY4RTg3ODVBREMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9r bHhSWTBxY21GTjhUaVY0cG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMV+Q2c384H/jPpQD6cR3CqnZT6iwGuiFgbMT0Ds+eV//34Th+H3xS 71ompRwZrLVvQ9EpH3HhbrDO6G4TcBHJsPjkwNIB07y+ym+9FI8eV7UmLlyA/1oE zc4ek2wWeLCmBgx/aZvB+/nzZmXvgNwpHNw5WgHjC6e9kRxDRyhO0/9xJCyxdwdA CkCERRuroNEmSpqL0WGpnAZVP4AiyUqnCzYLr8TWsJj7P+X6OyaoAHeGET1vFiVx 9pSfYzHnYT/NP1CseRxlVPElPkvtHyHcfFomngSeuZnyR9v25KR1umdd2Dy2e1TF ktX8GFob5TdRuT8num28mz5ZkoKr3Uwv -----END CERTIFICATE-----Generated at Tue Sep 9 14:18:16 2025 by rpki-client