$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft File: HtdycKSBilV07-7Kyvt0g812iCE.mft (raw, json) Hash identifier: Ix3QdJXSyP5G6kCLi4bWGAqXrAvviw+97sF8i8KQc9A= Subject key identifier: 41:C6:2A:1F:3A:05:02:3B:D6:0B:55:67:0B:29:F0:87:1B:C5:29:EC Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 Certificate issuer: /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Certificate serial: 0A84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft Manifest number: 0A7D Signing time: Fri 22 Aug 2025 19:44:32 +0000 Manifest this update: Fri 22 Aug 2025 19:44:31 +0000 Manifest next update: Fri 29 Aug 2025 19:44:31 +0000 Files and hashes: 1: HtdycKSBilV07-7Kyvt0g812iCE.crl (hash: otwalThdfIBjhNQBzp/mJFTeQJWl2URg8NvsvTUN1Dc=) 2: 7C29A45A669A11EA9A11434FC4F9AE02.roa (hash: zKN4F2avq+xJ9yq6Og5mmKvaFyZB2rEl8x2OZ87RL7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2692 (0xa84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Validity Not Before: Aug 22 19:44:31 2025 GMT Not After : Aug 29 19:44:31 2025 GMT Subject: CN=68a8c89f-b11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:79:7a:43:cd:3a:94:49:5b:1d:c9:d0:56:fc: 1c:b3:26:e3:6a:52:3a:81:e9:17:3c:54:a3:2c:12: 2f:11:a7:0d:90:50:7a:a4:2e:e4:07:24:e5:70:f7: e5:81:59:80:4c:2a:f6:c2:0f:39:27:74:45:b7:98: 5e:7b:07:19:7f:c1:38:44:87:48:ea:8c:c0:92:50: c6:81:7e:87:f5:e9:9f:4a:2e:6c:01:91:dc:7c:e9: 91:a0:16:58:1e:e0:c7:54:7e:b3:e1:8d:e6:5d:b4: 80:65:61:31:f2:ac:00:d3:6b:fd:fb:03:3a:a5:69: 26:20:cd:b2:25:ea:5b:ce:5f:6a:24:73:0d:1d:11: ac:b5:89:05:34:bc:6b:40:53:ee:73:0b:7d:84:90: 7a:9d:a7:5a:80:dd:56:6b:d4:07:28:7b:f5:14:6d: d9:68:32:33:35:31:6c:17:77:8e:d3:61:79:77:d7: 6e:a4:e9:4c:60:a7:48:91:a5:b3:dd:97:4b:5b:6b: 41:97:71:52:b5:c2:66:b6:e7:4c:70:a1:b0:ae:f2: 5a:ba:45:12:0d:55:0c:23:a0:98:3f:a2:dc:cb:b9: 0d:3c:06:5c:d7:91:65:82:a4:db:28:0f:0c:fa:7d: 74:6e:de:c3:c2:0e:ba:26:53:ec:a3:ef:b0:d5:7c: ae:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C6:2A:1F:3A:05:02:3B:D6:0B:55:67:0B:29:F0:87:1B:C5:29:EC X509v3 Authority Key Identifier: keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:8c:c7:f9:95:e4:a7:3f:cc:a1:6a:05:cf:d0:2c:dc:d4:35: b4:89:ef:9a:fd:49:83:ae:a5:8c:16:a8:e5:96:11:0d:ad:22: a4:b7:cb:a1:b4:f8:5a:cc:76:44:3d:46:59:5b:f0:4e:af:da: 33:50:15:92:f6:f5:9b:34:0a:33:ec:dc:74:c5:f3:35:43:81: 71:d2:2e:ca:75:60:26:cb:d5:49:19:79:7d:cf:f2:23:24:a9: 9a:16:53:e3:f0:98:20:80:09:ec:22:87:bd:56:40:40:3e:ce: dc:05:1c:96:4c:6b:b8:c4:1e:8a:a7:b1:2e:4f:85:0d:c6:c7: 82:9e:45:97:96:65:5c:57:7b:07:95:d5:72:c0:39:b4:f0:9b: 9b:b7:8b:98:3b:9b:54:29:39:9d:4e:e3:47:cc:6c:32:d6:51: bc:70:10:3b:85:51:7b:04:5c:67:16:d4:90:7f:36:f5:a6:d8: 00:3a:56:cd:75:91:a9:80:24:b2:61:24:82:40:e1:e8:ad:c5: 46:6a:65:7e:2c:ce:a5:2c:11:13:35:19:b3:49:dc:42:91:cb: 2f:80:67:62:46:34:9e:7c:d4:d3:30:54:25:d8:02:7f:23:b7: f5:8e:9f:66:4f:f1:72:19:b5:af:cf:d2:ac:2f:ee:9d:95:77: ce:3b:58:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFNTgxMTAvBgNVBAUTKDFFRDc3MjcwQTQ4MThBNTU3NEVGRUVDQUNBRkI3NDgz Q0Q3Njg4MjEwHhcNMjUwODIyMTk0NDMxWhcNMjUwODI5MTk0NDMxWjAYMRYwFAYD VQQDEw02OGE4Yzg5Zi1iMTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHl6Q806lElbHcnQVvwcsybjalI6gekXPFSjLBIvEacNkFB6pC7kByTlcPfl gVmATCr2wg85J3RFt5heewcZf8E4RIdI6ozAklDGgX6H9emfSi5sAZHcfOmRoBZY HuDHVH6z4Y3mXbSAZWEx8qwA02v9+wM6pWkmIM2yJepbzl9qJHMNHRGstYkFNLxr QFPucwt9hJB6nadagN1Wa9QHKHv1FG3ZaDIzNTFsF3eO02F5d9dupOlMYKdIkaWz 3ZdLW2tBl3FStcJmtudMcKGwrvJaukUSDVUMI6CYP6Lcy7kNPAZc15FlgqTbKA8M +n10bt7Dwg66JlPso++w1XyuZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHGKh86 BQI71gtVZwsp8IcbxSnsMB8GA1UdIwQYMBaAFB7XcnCkgYpVdO/uysr7dIPNdogh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkU1OC82MDMzQ0Y2QTY2 OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmlsVjA3LTdLeXZ0MGc4MTJp Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZHljS1NCaWxWMDctN0t5dnQwZzgxMmlDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkU1OC82MDMzQ0Y2QTY2OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmls VjA3LTdLeXZ0MGc4MTJpQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrjMf5leSnP8yhagXP0Czc1DW0ie+a/UmDrqWMFqjllhENrSKkt8uh tPhazHZEPUZZW/BOr9ozUBWS9vWbNAoz7Nx0xfM1Q4Fx0i7KdWAmy9VJGXl9z/Ij JKmaFlPj8JgggAnsIoe9VkBAPs7cBRyWTGu4xB6Kp7EuT4UNxseCnkWXlmVcV3sH ldVywDm08Jubt4uYO5tUKTmdTuNHzGwy1lG8cBA7hVF7BFxnFtSQfzb1ptgAOlbN dZGpgCSyYSSCQOHorcVGamV+LM6lLBETNRmzSdxCkcsvgGdiRjSefNTTMFQl2AJ/ I7f1jp9mT/FyGbWvz9KsL+6dlXfOO1iK -----END CERTIFICATE-----Generated at Sat Aug 23 17:12:14 2025 by rpki-client