$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft File: HtdycKSBilV07-7Kyvt0g812iCE.mft (raw, json) Hash identifier: VHtPOMz1NSOTg1bvKN9itveB/2YOoN4u5mUZUpikDsU= Subject key identifier: 71:45:17:CC:A8:BA:EB:39:DF:22:C2:5A:E0:B5:94:84:A0:35:F9:16 Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 Certificate issuer: /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Certificate serial: 0A69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft Manifest number: 0A62 Signing time: Mon 30 Jun 2025 19:47:42 +0000 Manifest this update: Mon 30 Jun 2025 19:47:42 +0000 Manifest next update: Mon 07 Jul 2025 19:47:42 +0000 Files and hashes: 1: HtdycKSBilV07-7Kyvt0g812iCE.crl (hash: isPig+zpSHcXu1ySGXw5cDRq/imOc3vrhmp1EhlQB0U=) 2: 7C29A45A669A11EA9A11434FC4F9AE02.roa (hash: zKN4F2avq+xJ9yq6Og5mmKvaFyZB2rEl8x2OZ87RL7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2665 (0xa69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Validity Not Before: Jun 30 19:47:42 2025 GMT Not After : Jul 7 19:47:42 2025 GMT Subject: CN=6862e9de-a86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:01:fa:a2:3f:66:f7:3c:1e:10:3d:d6:50: d1:a6:77:fb:16:c4:5f:c7:d6:22:23:90:f6:10:3e: 2f:1b:2f:e8:e0:5d:58:13:1f:e5:84:2c:7e:83:a0: 54:98:65:04:5f:df:3c:f9:72:62:b1:97:55:e8:fa: 53:7c:a1:06:d0:12:22:59:97:c2:7b:68:d4:59:bc: f0:c9:72:76:87:15:f8:f4:ec:13:ee:87:03:e7:62: 29:e5:66:51:cb:d1:60:b9:07:bd:4b:74:21:14:70: 55:a5:4f:2f:4d:0a:f9:b1:a5:5e:64:c9:f9:38:07: 30:ef:34:aa:61:05:d1:5d:e2:a9:d3:1f:bf:82:fb: a4:c1:53:d2:de:86:44:0a:7d:86:74:da:e3:76:52: ab:af:c7:20:f8:48:1d:7d:c3:82:62:83:91:15:c7: 72:61:5c:43:57:8e:05:ca:d9:6d:af:7f:38:e0:57: 51:92:1d:9d:c6:6d:b2:04:7c:0b:b9:c3:df:ee:36: 3e:25:3a:a4:9f:ec:70:84:74:6a:c1:14:93:ba:d6: bb:35:bf:b5:e5:86:ba:54:cf:b2:d6:f8:af:a2:25: 32:89:73:16:b5:ba:e0:61:06:db:7a:3f:8e:8b:5e: af:5e:a0:47:ae:87:53:a3:bd:c4:1e:98:24:d2:6d: 54:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:45:17:CC:A8:BA:EB:39:DF:22:C2:5A:E0:B5:94:84:A0:35:F9:16 X509v3 Authority Key Identifier: keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:00:66:53:da:d9:6b:51:8f:4e:3c:9a:dd:4a:b4:59:f9:66: 8e:de:fa:de:37:9a:1e:6a:2d:8b:68:3d:7a:05:5b:0c:e4:c8: 5f:be:50:a4:a5:29:f2:23:eb:89:93:d1:76:f7:c1:aa:49:f3: 86:12:d1:49:71:e9:93:13:c7:58:90:4f:84:ba:0d:6e:84:a6: 75:72:0b:31:45:b3:18:ba:a6:b1:5d:8b:be:96:22:d0:74:94: 54:a6:c8:2b:8c:72:4b:a1:45:a9:6e:6b:48:21:86:ef:0b:2f: c4:a1:c1:f7:86:86:83:10:ee:51:d4:12:a7:33:3f:d6:ff:94: 83:b6:8b:e0:31:bd:b2:22:2e:06:6e:2c:ef:cd:4d:c1:da:8f: bb:2b:91:43:a2:cc:9d:e6:9b:e6:50:ab:45:0b:d7:ac:ee:55: 29:da:fe:e7:16:1d:9d:04:15:d3:51:3c:38:f2:c2:40:0c:ee: a1:e9:9f:db:c7:95:e4:4f:c8:1b:86:50:57:cd:76:a3:a2:a6: 0d:c2:91:dd:33:13:ae:8a:86:89:ba:05:26:2a:1a:40:08:d2: 59:a6:5c:24:3a:86:ed:fe:42:70:6b:cc:62:4d:b4:c8:f2:5e: f3:e8:5f:48:ff:14:bc:ac:ca:f2:01:01:40:1b:db:5b:4d:40: 85:5b:d9:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFNTgxMTAvBgNVBAUTKDFFRDc3MjcwQTQ4MThBNTU3NEVGRUVDQUNBRkI3NDgz Q0Q3Njg4MjEwHhcNMjUwNjMwMTk0NzQyWhcNMjUwNzA3MTk0NzQyWjAYMRYwFAYD VQQDEw02ODYyZTlkZS1hODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWwB+qI/Zvc8HhA91lDRpnf7FsRfx9YiI5D2ED4vGy/o4F1YEx/lhCx+g6BU mGUEX988+XJisZdV6PpTfKEG0BIiWZfCe2jUWbzwyXJ2hxX49OwT7ocD52Ip5WZR y9FguQe9S3QhFHBVpU8vTQr5saVeZMn5OAcw7zSqYQXRXeKp0x+/gvukwVPS3oZE Cn2GdNrjdlKrr8cg+EgdfcOCYoORFcdyYVxDV44Fytltr3844FdRkh2dxm2yBHwL ucPf7jY+JTqkn+xwhHRqwRSTuta7Nb+15Ya6VM+y1vivoiUyiXMWtbrgYQbbej+O i16vXqBHrodTo73EHpgk0m1UTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFFF8yo uus53yLCWuC1lISgNfkWMB8GA1UdIwQYMBaAFB7XcnCkgYpVdO/uysr7dIPNdogh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkU1OC82MDMzQ0Y2QTY2 OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmlsVjA3LTdLeXZ0MGc4MTJp Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZHljS1NCaWxWMDctN0t5dnQwZzgxMmlDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkU1OC82MDMzQ0Y2QTY2OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmls VjA3LTdLeXZ0MGc4MTJpQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIAGZT2tlrUY9OPJrdSrRZ+WaO3vreN5oeai2LaD16BVsM5MhfvlCk pSnyI+uJk9F298GqSfOGEtFJcemTE8dYkE+Eug1uhKZ1cgsxRbMYuqaxXYu+liLQ dJRUpsgrjHJLoUWpbmtIIYbvCy/EocH3hoaDEO5R1BKnMz/W/5SDtovgMb2yIi4G bizvzU3B2o+7K5FDosyd5pvmUKtFC9es7lUp2v7nFh2dBBXTUTw48sJADO6h6Z/b x5XkT8gbhlBXzXajoqYNwpHdMxOuioaJugUmKhpACNJZplwkOobt/kJwa8xiTbTI 8l7z6F9I/xS8rMryAQFAG9tbTUCFW9m3 -----END CERTIFICATE-----Generated at Wed Jul 2 16:26:48 2025 by rpki-client