$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft File: HteCvmLXEBdmiyijJonkcO2iAfg.mft (raw, json) Hash identifier: XzYiHgSVktc+8XOa2qHeCbkC5ck1F2EAYx4WarTXgyI= Subject key identifier: 66:2D:66:A9:30:F4:CE:02:9F:18:C3:5F:D0:35:CC:28:29:FE:48:0F Authority key identifier: 1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 Certificate issuer: /CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8 Certificate serial: 0703 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft Manifest number: 06FB Signing time: Mon 12 May 2025 21:44:35 +0000 Manifest this update: Mon 12 May 2025 21:44:35 +0000 Manifest next update: Mon 19 May 2025 21:44:35 +0000 Files and hashes: 1: HteCvmLXEBdmiyijJonkcO2iAfg.crl (hash: bdlLxb5T6KDKE+Oulhk8B4e8V1Zv3+fYEVKQMO+6VY0=) 2: D41A1814442211EBBF7D9D65C4F9AE02.roa (hash: hsjXTWdh2kRzdeWF4Q+QGn60PDeZ8kmbCtOiIhRsRRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1795 (0x703) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1257, serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8 Validity Not Before: May 12 21:44:35 2025 GMT Not After : May 19 21:44:35 2025 GMT Subject: CN=68226bc3-333e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:a5:42:72:f2:db:d0:85:a5:92:14:1b:9a: ce:f7:e3:56:12:cc:a7:27:65:da:09:b5:4d:06:67: 16:89:b9:8a:eb:26:76:a2:e2:c4:e6:9c:8b:75:97: 86:20:9d:5c:79:76:2d:17:13:0a:c5:aa:14:08:5a: d5:36:cd:85:49:28:cb:22:50:1d:c8:2f:a1:1c:f3: d8:2c:4d:4a:90:00:d4:ec:c4:88:c8:fc:fc:71:f4: 5e:24:24:66:a4:57:45:65:25:c6:f5:ed:90:2c:22: b5:19:e0:e2:ce:f9:81:93:6a:c6:e7:0d:47:32:61: 3f:a7:dc:9c:69:b3:72:30:4c:7d:90:e2:a8:b1:7d: 35:67:1d:4c:37:43:9d:8a:03:48:bd:aa:5c:6d:49: e8:b1:5e:00:30:7f:65:84:39:5e:31:da:cd:47:84: 29:33:b4:d1:1d:9b:64:dd:88:4e:65:27:da:cc:28: d9:3c:8f:91:75:f8:2c:6f:ff:5e:fa:19:62:32:6f: 62:ab:e2:62:43:d7:c9:bd:02:2c:5f:a3:9c:6d:7a: 27:96:52:d2:84:fe:44:8c:d9:4b:92:b1:73:94:e9: 03:12:ce:cb:d6:7e:20:0a:cf:fb:0d:6b:06:80:11: 77:63:00:76:f3:a0:92:d8:35:8e:8e:b2:bc:63:54: 76:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2D:66:A9:30:F4:CE:02:9F:18:C3:5F:D0:35:CC:28:29:FE:48:0F X509v3 Authority Key Identifier: keyid:1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:67:18:e6:99:38:8f:6c:2e:9b:04:d3:1a:73:99:10:c7:6c: 6f:ff:ea:05:75:20:ba:14:12:34:b9:46:f0:1b:ff:b7:4a:b4: 03:fb:f1:9e:35:9d:0a:4d:64:03:65:01:30:cc:7c:dd:10:e6: 13:6d:41:56:f2:38:68:ca:a0:8d:4d:00:cd:25:38:c9:7d:38: 20:21:e4:8c:be:de:e5:3d:c0:82:1c:f0:fc:5d:06:fa:07:9d: 19:44:00:87:55:90:b8:fd:4b:4a:cd:f3:e6:ff:79:7c:af:e0: a6:ab:0f:10:c6:39:5f:9e:93:44:6e:66:26:3d:be:d3:48:e0: 2c:8c:02:1c:73:ae:ff:c0:1e:4a:6a:b9:4d:40:df:87:1e:dc: 52:af:ca:1f:e7:dc:48:32:73:19:d2:c7:b9:82:29:e0:45:59: c5:74:14:d5:28:dd:51:e9:39:1c:7e:0c:c8:a9:0f:19:02:9c: d0:4e:1f:3b:40:2f:e6:9d:f4:05:78:25:15:b5:e9:9f:99:95: cb:95:6a:db:73:19:83:11:9c:23:8b:5f:d1:dd:56:a0:53:a4: 8d:4e:7b:6a:75:c6:30:50:46:80:1f:c9:53:e3:7e:d5:cb:af: de:43:a2:ce:8a:0c:d7:7e:da:41:3b:3f:b5:ac:34:c7:63:fc: bb:12:4f:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEyNTcxMTAvBgNVBAUTKDFFRDc4MkJFNjJENzEwMTc2NjhCMjhBMzI2ODlFNDcw RURBMjAxRjgwHhcNMjUwNTEyMjE0NDM1WhcNMjUwNTE5MjE0NDM1WjAYMRYwFAYD VQQDEw02ODIyNmJjMy0zMzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwM6lQnLy29CFpZIUG5rO9+NWEsynJ2XaCbVNBmcWibmK6yZ2ouLE5pyLdZeG IJ1ceXYtFxMKxaoUCFrVNs2FSSjLIlAdyC+hHPPYLE1KkADU7MSIyPz8cfReJCRm pFdFZSXG9e2QLCK1GeDizvmBk2rG5w1HMmE/p9ycabNyMEx9kOKosX01Zx1MN0Od igNIvapcbUnosV4AMH9lhDleMdrNR4QpM7TRHZtk3YhOZSfazCjZPI+Rdfgsb/9e +hliMm9iq+JiQ9fJvQIsX6OcbXonllLShP5EjNlLkrFzlOkDEs7L1n4gCs/7DWsG gBF3YwB286CS2DWOjrK8Y1R24wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYtZqkw 9M4CnxjDX9A1zCgp/kgPMB8GA1UdIwQYMBaAFB7Xgr5i1xAXZosooyaJ5HDtogH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTI1Ny9BOTBGMUVFNjQ0 MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVCZG1peWlqSm9ua2NPMmlB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZUN2bUxYRUJkbWl5aWpKb25rY08yaUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTI1Ny9BOTBGMUVFNjQ0MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVC ZG1peWlqSm9ua2NPMmlBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZZxjmmTiPbC6bBNMac5kQx2xv/+oFdSC6FBI0uUbwG/+3SrQD+/Ge NZ0KTWQDZQEwzHzdEOYTbUFW8jhoyqCNTQDNJTjJfTggIeSMvt7lPcCCHPD8XQb6 B50ZRACHVZC4/UtKzfPm/3l8r+Cmqw8QxjlfnpNEbmYmPb7TSOAsjAIcc67/wB5K arlNQN+HHtxSr8of59xIMnMZ0se5gingRVnFdBTVKN1R6TkcfgzIqQ8ZApzQTh87 QC/mnfQFeCUVtemfmZXLlWrbcxmDEZwji1/R3VagU6SNTntqdcYwUEaAH8lT437V y6/eQ6LOigzXftpBOz+1rDTHY/y7Ek9T -----END CERTIFICATE-----Generated at Wed May 14 21:07:47 2025 by rpki-client