$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft File: huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json) Hash identifier: u/NzwLftNIkn1p9ufRUFPFuyFIUvl7LXWgsTiAKH5cA= Subject key identifier: 9C:C0:EE:24:4F:3B:7B:2E:1C:2C:74:76:E6:6D:2D:97:B0:3D:3B:63 Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft Manifest number: 96 Signing time: Sat 31 May 2025 05:54:14 +0000 Manifest this update: Sat 31 May 2025 05:54:14 +0000 Manifest next update: Sat 07 Jun 2025 05:54:14 +0000 Files and hashes: 1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: HBnmz6CpWk+5uPzgmaxPxsY5ycfmvWt7reJkScQ5DR4=) 2: F5C5A42C5ADC11EF8061F335C4F9AE02.roa (hash: jyFeBHdKHmG1HRE/BTdZ4LEVyNfH72ioQGaOrtzmyn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Validity Not Before: May 31 05:54:14 2025 GMT Not After : Jun 7 05:54:14 2025 GMT Subject: CN=683a9986-e292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:ab:ad:51:a0:4c:58:96:d2:3f:c3:93:13: 4a:ce:24:66:0b:3b:17:98:d7:f7:ff:aa:07:79:7e: fe:68:58:9b:1b:00:bf:ec:47:23:7d:3e:26:89:72: e8:e2:bd:17:bc:d0:f1:0f:cb:6a:97:cd:d4:ec:ea: 27:b0:3f:2b:87:13:c9:7f:93:1b:9a:1f:ab:af:1f: 47:ce:f0:35:25:3f:c0:63:77:78:09:2a:b3:b9:e1: 96:13:ef:26:e0:e6:ff:15:f1:15:85:85:0e:16:00: e5:1c:ab:c2:84:f6:cb:2e:55:fc:30:4c:7a:66:86: 43:da:60:9f:e3:27:a6:cd:83:da:c0:2c:f4:c0:a2: b0:d2:83:52:74:b6:d5:f8:23:ae:10:c3:fb:67:3e: 39:b8:aa:4c:59:7d:d2:f4:1d:c0:3d:bf:39:3b:b7: c2:52:e4:ea:d5:42:15:44:23:40:03:ce:f7:be:e7: 2a:cd:2e:60:0c:67:f4:1d:62:46:46:71:e8:1a:89: c9:4e:ad:44:3a:77:3e:2c:26:ea:71:36:1f:a9:9b: d1:89:cc:cd:1b:ad:42:8b:02:ea:a4:e8:00:da:25: f5:ad:4f:45:61:cc:f4:fa:d3:00:42:8d:6f:fc:95: 64:10:26:df:12:8f:8e:3c:22:08:58:32:5b:ee:14: 0e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C0:EE:24:4F:3B:7B:2E:1C:2C:74:76:E6:6D:2D:97:B0:3D:3B:63 X509v3 Authority Key Identifier: keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:dc:17:4a:a1:ef:5a:77:b2:8a:7f:6a:03:71:f6:45:b1:28: 0c:8c:04:62:3b:5a:9a:2c:c9:07:49:33:2a:d0:1a:b2:3f:8b: db:f3:98:2a:03:64:5c:e6:70:41:78:de:50:cb:2a:35:1e:4d: 49:3b:f8:ab:db:85:1f:23:f7:f3:67:63:1f:72:f1:51:d9:5d: e3:26:11:8b:71:af:1d:e7:21:6a:5a:bc:50:80:47:69:be:6d: 0b:c8:13:60:47:30:45:2e:d0:69:6c:f7:16:33:4f:92:54:c6: f5:e2:4b:58:05:38:4e:aa:0f:4e:9f:b5:7d:12:41:a8:eb:52: 50:2e:e7:2b:b0:ef:a6:ad:e1:31:a1:fe:82:e3:be:65:9e:56: b7:7d:ad:53:46:a1:8e:7d:0f:a6:a0:df:81:7e:1d:d2:f7:a6: 41:1e:87:b3:01:bc:e9:38:63:7d:fe:f1:d9:f3:9a:25:b6:0a: fb:41:a7:0f:3c:05:09:9d:75:3f:36:87:59:93:d9:ec:78:fa: f1:f6:a8:2b:8d:8e:a1:1e:09:a3:22:20:25:07:07:01:f0:90: e0:06:b3:34:bd:27:50:42:b9:ec:ba:37:3d:50:f8:50:ab:78: c4:02:21:d5:50:17:87:7c:06:a1:e6:2c:74:9e:d6:62:c3:7c: 18:49:79:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QTgxMTAvBgNVBAUTKDg2RTIzNEUyRTFFMjNBNDk3MTQ1OEQyQTcyNjE0REYx Mzg5NUUyOUEwHhcNMjUwNTMxMDU1NDE0WhcNMjUwNjA3MDU1NDE0WjAYMRYwFAYD VQQDEw02ODNhOTk4Ni1lMjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsG2rrVGgTFiW0j/DkxNKziRmCzsXmNf3/6oHeX7+aFibGwC/7EcjfT4miXLo 4r0XvNDxD8tql83U7OonsD8rhxPJf5Mbmh+rrx9HzvA1JT/AY3d4CSqzueGWE+8m 4Ob/FfEVhYUOFgDlHKvChPbLLlX8MEx6ZoZD2mCf4yemzYPawCz0wKKw0oNSdLbV +COuEMP7Zz45uKpMWX3S9B3APb85O7fCUuTq1UIVRCNAA873vucqzS5gDGf0HWJG RnHoGonJTq1EOnc+LCbqcTYfqZvRiczNG61CiwLqpOgA2iX1rU9FYcz0+tMAQo1v /JVkECbfEo+OPCIIWDJb7hQOPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzA7iRP O3suHCx0duZtLZewPTtjMB8GA1UdIwQYMBaAFIbiNOLh4jpJcUWNKnJhTfE4leKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBOC9BNUY4RTg3ODVB REMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9rbHhSWTBxY21GTjhUaVY0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h1STA0dUhpT2tseFJZMHFjbUZOOFRpVjRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBOC9BNUY4RTg3ODVBREMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9r bHhSWTBxY21GTjhUaVY0cG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA63BdKoe9ad7KKf2oDcfZFsSgMjARiO1qaLMkHSTMq0BqyP4vb85gq A2Rc5nBBeN5Qyyo1Hk1JO/ir24UfI/fzZ2MfcvFR2V3jJhGLca8d5yFqWrxQgEdp vm0LyBNgRzBFLtBpbPcWM0+SVMb14ktYBThOqg9On7V9EkGo61JQLucrsO+mreEx of6C475lnla3fa1TRqGOfQ+moN+Bfh3S96ZBHoezAbzpOGN9/vHZ85oltgr7QacP PAUJnXU/NodZk9nsePrx9qgrjY6hHgmjIiAlBwcB8JDgBrM0vSdQQrnsujc9UPhQ q3jEAiHVUBeHfAah5ix0ntZiw3wYSXmi -----END CERTIFICATE-----Generated at Sat May 31 17:02:15 2025 by rpki-client