$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft File: huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json) Hash identifier: 9niGeIKaBcxc0DPtIVEthuZ7XAyU8bJCGL0bKGp+8g8= Subject key identifier: 81:99:37:9E:7C:24:ED:2D:C4:E7:B0:C2:88:8F:D9:65:67:7D:E8:72 Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft Manifest number: 85 Signing time: Fri 25 Apr 2025 05:32:41 +0000 Manifest this update: Fri 25 Apr 2025 05:32:41 +0000 Manifest next update: Fri 02 May 2025 05:32:41 +0000 Files and hashes: 1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: +IlWdUL2pChJGA1mozGSo71psT0QOyiVt8lnQxxDY0k=) 2: F5C5A42C5ADC11EF8061F335C4F9AE02.roa (hash: jyFeBHdKHmG1HRE/BTdZ4LEVyNfH72ioQGaOrtzmyn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Validity Not Before: Apr 25 05:32:41 2025 GMT Not After : May 2 05:32:41 2025 GMT Subject: CN=680b1e79-ff8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a2:44:42:43:2f:86:71:ba:fd:ac:43:d0:08: 4b:35:21:ee:bc:e3:37:5d:3e:ed:e4:a4:d0:13:af: 1f:0a:76:73:ce:1d:1a:3c:66:08:86:db:97:0c:d6: 55:a4:b1:f9:a7:9f:9f:58:63:4f:90:99:a4:b2:b4: e8:db:1e:70:f8:ca:a7:fe:69:ce:42:74:fe:7f:0f: d0:61:34:4f:89:f3:3b:b8:3d:7b:4a:e5:0f:f0:ab: 84:a9:d9:1e:f8:3f:4c:1d:96:28:f7:66:d9:ea:ec: 51:7e:ca:c8:04:a7:13:f4:83:f3:77:df:5b:40:59: 66:f7:a5:1f:2a:b5:73:b4:58:9f:90:18:37:bc:32: 54:0e:40:5d:3c:61:1d:0d:c1:50:d3:5f:11:42:76: 63:62:ef:17:82:d6:eb:2b:15:a8:74:7e:83:ad:ef: f9:29:42:b2:f6:7e:d5:70:46:ab:80:fd:1c:82:0d: 7d:9b:34:2a:3d:15:58:b4:fa:9c:2b:56:94:87:65: 5a:c0:5e:35:c7:35:60:52:20:d3:83:f7:b0:47:d3: 75:2e:56:8a:12:06:6d:1c:af:6f:e7:13:b7:92:4d: 69:8c:18:03:a9:3f:93:10:8d:3a:8b:c5:e7:73:f7: 80:a9:87:5c:e3:05:b4:b3:f1:95:e3:95:aa:0c:66: e1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:99:37:9E:7C:24:ED:2D:C4:E7:B0:C2:88:8F:D9:65:67:7D:E8:72 X509v3 Authority Key Identifier: keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:1e:9d:77:1f:d5:46:d9:58:be:02:8e:62:8b:fa:cf:26:0b: 4a:4e:40:f1:9f:89:e3:ef:9d:d5:50:aa:ab:60:90:35:0c:ec: 40:40:db:65:f7:9b:3b:ea:e7:38:a1:9b:63:63:5e:b3:c7:cf: d5:bb:93:11:f2:4b:05:02:ec:a7:70:3d:0a:03:89:48:85:a5: 72:8f:da:ce:64:d0:b5:a5:1f:d5:8b:6f:12:dd:11:fa:0e:9a: 20:c0:33:92:fd:2f:1b:39:67:eb:8e:c2:2a:26:d9:ef:4a:0e: 4b:26:a2:73:a7:90:23:11:9b:68:9d:65:c1:b5:6b:c5:9b:77: ad:3f:b2:79:e0:40:1c:c3:d5:f1:ed:7f:60:57:23:b1:f3:03: 00:63:1d:81:a1:e7:f2:f6:a2:69:98:82:01:f9:ef:ed:2c:87: 1c:1b:a4:81:57:35:72:e4:8e:41:59:b3:36:3b:9c:4d:9f:6f: a6:83:b3:8d:68:98:d6:72:c7:22:fa:0f:89:be:1f:8c:68:ad: 83:f7:4d:fd:1c:78:a7:61:1b:07:c4:28:82:8e:e8:fd:76:3c: de:36:14:41:22:a6:75:fb:64:2a:75:22:c3:8e:3a:86:91:5a: 12:16:9f:4e:21:78:08:59:40:d5:ce:7f:4a:72:a1:5c:b5:f0: a5:4e:cf:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QTgxMTAvBgNVBAUTKDg2RTIzNEUyRTFFMjNBNDk3MTQ1OEQyQTcyNjE0REYx Mzg5NUUyOUEwHhcNMjUwNDI1MDUzMjQxWhcNMjUwNTAyMDUzMjQxWjAYMRYwFAYD VQQDEw02ODBiMWU3OS1mZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1aJEQkMvhnG6/axD0AhLNSHuvOM3XT7t5KTQE68fCnZzzh0aPGYIhtuXDNZV pLH5p5+fWGNPkJmksrTo2x5w+Mqn/mnOQnT+fw/QYTRPifM7uD17SuUP8KuEqdke +D9MHZYo92bZ6uxRfsrIBKcT9IPzd99bQFlm96UfKrVztFifkBg3vDJUDkBdPGEd DcFQ018RQnZjYu8XgtbrKxWodH6Dre/5KUKy9n7VcEargP0cgg19mzQqPRVYtPqc K1aUh2VawF41xzVgUiDTg/ewR9N1LlaKEgZtHK9v5xO3kk1pjBgDqT+TEI06i8Xn c/eAqYdc4wW0s/GV45WqDGbhKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGZN558 JO0txOewwoiP2WVnfehyMB8GA1UdIwQYMBaAFIbiNOLh4jpJcUWNKnJhTfE4leKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBOC9BNUY4RTg3ODVB REMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9rbHhSWTBxY21GTjhUaVY0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h1STA0dUhpT2tseFJZMHFjbUZOOFRpVjRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBOC9BNUY4RTg3ODVBREMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9r bHhSWTBxY21GTjhUaVY0cG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1Hp13H9VG2Vi+Ao5ii/rPJgtKTkDxn4nj753VUKqrYJA1DOxAQNtl 95s76uc4oZtjY16zx8/Vu5MR8ksFAuyncD0KA4lIhaVyj9rOZNC1pR/Vi28S3RH6 DpogwDOS/S8bOWfrjsIqJtnvSg5LJqJzp5AjEZtonWXBtWvFm3etP7J54EAcw9Xx 7X9gVyOx8wMAYx2Boefy9qJpmIIB+e/tLIccG6SBVzVy5I5BWbM2O5xNn2+mg7ON aJjWcsci+g+Jvh+MaK2D9039HHinYRsHxCiCjuj9djzeNhRBIqZ1+2QqdSLDjjqG kVoSFp9OIXgIWUDVzn9KcqFctfClTs8H -----END CERTIFICATE-----Generated at Sat Apr 26 12:29:32 2025 by rpki-client