$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft File: HtdycKSBilV07-7Kyvt0g812iCE.mft (raw, json) Hash identifier: 2BxWMUrVxVLpNoNLduFucsUgFjngg/tNpsl/xahNvKY= Subject key identifier: DC:F7:91:80:3E:0A:19:DE:96:EB:E7:33:76:82:0F:55:A7:CB:0A:8F Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 Certificate issuer: /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Certificate serial: 0AA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft Manifest number: 0A9A Signing time: Sat 18 Oct 2025 20:30:27 +0000 Manifest this update: Sat 18 Oct 2025 20:30:26 +0000 Manifest next update: Sat 25 Oct 2025 20:30:26 +0000 Files and hashes: 1: HtdycKSBilV07-7Kyvt0g812iCE.crl (hash: oGO5BGc2udY/2x92W+vIS/hiEl6yM0ahrRDWzYNbbGM=) 2: 7C29A45A669A11EA9A11434FC4F9AE02.roa (hash: zKN4F2avq+xJ9yq6Og5mmKvaFyZB2rEl8x2OZ87RL7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2721 (0xaa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Validity Not Before: Oct 18 20:30:26 2025 GMT Not After : Oct 25 20:30:26 2025 GMT Subject: CN=68f3f8e3-4bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:e7:59:ba:e0:8e:76:c6:fe:c3:04:1f:09: ef:f5:60:68:8e:9a:30:bf:44:9c:49:96:07:34:a3: 8d:fe:5a:c0:ab:f8:6c:4a:95:50:27:72:78:ea:af: 55:31:a8:7b:0e:8d:2f:ae:3b:2d:6d:de:38:ad:90: bf:d3:7b:c5:56:8c:0b:04:f6:00:a8:7a:d7:21:e6: 52:81:96:33:66:56:2f:8d:1b:27:d5:9f:a6:b1:77: 73:9b:ce:32:f0:f0:d5:b2:92:0f:4f:82:f3:95:5f: e1:4d:f4:a6:88:6d:5f:cc:60:ff:a9:d9:0c:73:6f: 58:2d:5f:a0:a6:47:ae:0b:88:0e:b7:12:ee:9d:9f: 6c:7e:1c:0f:84:0a:9c:7c:e7:bb:d6:a4:53:0c:6f: 48:b3:20:6b:ec:26:c2:ee:95:a8:5b:80:a9:fe:c3: 35:7f:43:df:57:d1:c4:ff:a6:f6:48:4c:1c:7d:f6: 96:55:b5:88:c0:d1:ca:72:d0:df:2a:cb:57:32:81: f4:70:fa:cd:ab:77:f1:4f:58:7d:67:82:7e:91:b0: 1a:c7:50:c4:3f:a7:7a:fa:11:14:08:d1:1a:27:3b: a4:72:4f:20:dc:5d:40:83:15:88:23:d1:a8:92:c2: a4:02:cc:50:fb:05:b0:5e:92:d2:28:9c:a8:46:09: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F7:91:80:3E:0A:19:DE:96:EB:E7:33:76:82:0F:55:A7:CB:0A:8F X509v3 Authority Key Identifier: keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ee:a7:45:69:c5:39:fc:45:5d:2a:84:2c:b5:f7:02:d7:b1: 7d:a0:bd:a9:c6:c7:fe:74:63:31:08:24:16:5d:34:50:8d:d6: df:b0:07:9a:bf:74:01:0c:28:4b:fe:88:c1:03:fb:39:95:a1: 9d:d7:be:41:da:15:6a:4a:66:9b:5e:d7:4a:47:24:f7:5b:2d: 94:4c:a4:40:db:9b:ec:a1:33:58:90:c6:df:6f:3c:f9:7a:ab: 49:b9:8e:b1:ab:d1:fd:b9:38:08:a4:47:e3:e3:5e:06:c2:36: 6b:ea:d6:61:3c:a1:ba:c8:0e:8a:42:f8:02:06:d7:1d:0f:03: 30:9a:d6:d8:c4:c9:a2:a3:27:f5:f3:93:44:92:eb:ef:3c:da: c0:69:a3:6d:0c:04:ea:25:76:8b:28:b5:54:28:04:79:81:ab: 71:e1:73:27:83:6a:8b:f7:c5:1a:d1:53:03:09:f5:93:1f:61: b6:cc:cc:d1:b8:d6:21:67:e2:ef:c0:4f:d7:09:e9:60:be:c0: 54:de:ab:63:a9:21:6e:8f:27:97:f3:cb:84:a2:f1:51:73:77: ec:6e:c6:03:74:81:72:d8:8c:5b:88:22:91:50:6b:95:9d:2f: 43:e0:b6:83:c6:a0:4e:95:81:5b:fb:c6:50:f3:42:1b:a9:52: 94:50:8a:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFNTgxMTAvBgNVBAUTKDFFRDc3MjcwQTQ4MThBNTU3NEVGRUVDQUNBRkI3NDgz Q0Q3Njg4MjEwHhcNMjUxMDE4MjAzMDI2WhcNMjUxMDI1MjAzMDI2WjAYMRYwFAYD VQQDEw02OGYzZjhlMy00YmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLPnWbrgjnbG/sMEHwnv9WBojpowv0ScSZYHNKON/lrAq/hsSpVQJ3J46q9V Mah7Do0vrjstbd44rZC/03vFVowLBPYAqHrXIeZSgZYzZlYvjRsn1Z+msXdzm84y 8PDVspIPT4LzlV/hTfSmiG1fzGD/qdkMc29YLV+gpkeuC4gOtxLunZ9sfhwPhAqc fOe71qRTDG9IsyBr7CbC7pWoW4Cp/sM1f0PfV9HE/6b2SEwcffaWVbWIwNHKctDf KstXMoH0cPrNq3fxT1h9Z4J+kbAax1DEP6d6+hEUCNEaJzukck8g3F1AgxWII9Go ksKkAsxQ+wWwXpLSKJyoRgnYkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNz3kYA+ ChneluvnM3aCD1WnywqPMB8GA1UdIwQYMBaAFB7XcnCkgYpVdO/uysr7dIPNdogh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkU1OC82MDMzQ0Y2QTY2 OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmlsVjA3LTdLeXZ0MGc4MTJp Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZHljS1NCaWxWMDctN0t5dnQwZzgxMmlDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkU1OC82MDMzQ0Y2QTY2OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmls VjA3LTdLeXZ0MGc4MTJpQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT7qdFacU5/EVdKoQstfcC17F9oL2pxsf+dGMxCCQWXTRQjdbfsAea v3QBDChL/ojBA/s5laGd175B2hVqSmabXtdKRyT3Wy2UTKRA25vsoTNYkMbfbzz5 eqtJuY6xq9H9uTgIpEfj414GwjZr6tZhPKG6yA6KQvgCBtcdDwMwmtbYxMmioyf1 85NEkuvvPNrAaaNtDATqJXaLKLVUKAR5gatx4XMng2qL98Ua0VMDCfWTH2G2zMzR uNYhZ+LvwE/XCelgvsBU3qtjqSFujyeX88uEovFRc3fsbsYDdIFy2IxbiCKRUGuV nS9D4LaDxqBOlYFb+8ZQ80IbqVKUUIoZ -----END CERTIFICATE-----Generated at Mon Oct 20 04:25:10 2025 by rpki-client