$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft File: HteCvmLXEBdmiyijJonkcO2iAfg.mft (raw, json) Hash identifier: 4YHCyHAxp2Kn7SWp18lY3hJucLS46Zwjk0Xh+NmUKhs= Subject key identifier: 24:2E:AA:B6:1A:95:9A:3D:B0:C8:0E:88:82:47:28:59:25:1D:5E:0C Authority key identifier: 1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 Certificate issuer: /CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8 Certificate serial: 0736 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft Manifest number: 072E Signing time: Fri 22 Aug 2025 21:57:12 +0000 Manifest this update: Fri 22 Aug 2025 21:57:12 +0000 Manifest next update: Fri 29 Aug 2025 21:57:12 +0000 Files and hashes: 1: HteCvmLXEBdmiyijJonkcO2iAfg.crl (hash: pv/fuGhncniiu56ZUzgCD4d+VyuL96RuS1X+CoT657o=) 2: D41A1814442211EBBF7D9D65C4F9AE02.roa (hash: hsjXTWdh2kRzdeWF4Q+QGn60PDeZ8kmbCtOiIhRsRRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1846 (0x736) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1257, serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8 Validity Not Before: Aug 22 21:57:12 2025 GMT Not After : Aug 29 21:57:12 2025 GMT Subject: CN=68a8e7b8-49b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:66:bc:9d:9f:90:7f:21:78:0b:4e:7b:4c:84: 14:30:25:f5:66:8c:df:12:6f:b6:a5:14:e3:c7:46: 4d:2a:4f:17:96:f4:9b:26:9b:31:2e:dd:1a:2b:35: 2f:d5:a5:9d:3c:28:1e:72:e0:30:d3:4b:c1:4f:dc: 1d:9c:eb:c6:f7:b0:5a:25:37:7b:1f:96:29:15:35: 3d:fc:51:fe:ca:7f:9d:12:66:3d:75:1c:88:ab:8c: 2a:5e:a3:42:d6:64:35:5f:e4:f6:51:07:99:d7:6b: cb:a0:42:89:48:14:d9:80:20:bd:16:09:b7:c4:1e: 17:be:54:d8:2b:73:95:51:db:a5:3b:af:55:3c:d2: 1f:c4:8d:5a:6f:29:ba:40:80:f8:3c:42:78:e0:47: fb:8a:49:39:06:4c:6a:53:8b:86:a7:c3:9a:5c:92: b9:a8:a7:28:d9:56:e7:e0:0a:61:ca:9c:f6:58:42: c9:88:f9:1e:d3:78:5d:9e:db:1e:2b:cd:a7:7c:06: ed:ea:56:b5:7d:18:76:12:ed:2e:1f:e4:15:20:e8: 14:f2:30:56:98:31:e7:d3:9a:a1:36:d0:7a:61:ce: 9c:23:03:1e:c6:08:2a:d5:56:60:85:aa:fc:d7:d1: 93:ec:31:38:b7:75:af:04:cd:ec:05:af:d4:75:f5: c0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2E:AA:B6:1A:95:9A:3D:B0:C8:0E:88:82:47:28:59:25:1D:5E:0C X509v3 Authority Key Identifier: keyid:1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a5:e8:b3:c3:90:80:77:2d:f2:61:c9:0e:0d:f9:da:b3:99: 73:d0:a0:91:73:ab:03:58:4e:78:9b:6e:fb:04:b7:b7:79:11: c1:d2:78:31:30:0a:c9:00:34:cc:4d:ba:f7:52:04:15:71:cd: 6b:76:a8:e1:1f:45:ad:27:a9:08:76:d1:02:a5:84:0f:62:8c: ef:e6:43:9c:9b:b5:a8:78:17:5e:ca:43:c7:b9:c8:9c:02:9c: 95:d7:b6:e4:dd:9d:e3:18:3a:d0:d1:fe:0c:6c:cf:85:86:e7: bd:72:ba:13:1b:d9:b9:21:75:a0:a1:79:79:b0:42:df:c8:6d: fb:dd:1c:2f:fa:e1:33:df:ed:0c:e5:d1:a7:4b:2e:0b:0e:a6: 19:50:3c:cc:a1:da:d7:a0:02:38:ed:a0:e8:25:0f:77:cd:4c: d9:f4:70:52:f3:f2:55:a7:99:26:bf:47:30:89:37:37:e2:56: a6:70:ae:f7:53:6f:a5:6a:f5:bb:38:22:48:cc:49:a2:52:ba: f0:b6:e3:3d:47:be:fe:15:9a:74:0b:8b:99:37:4f:ef:3d:30: 7d:0c:d5:01:81:be:b5:2c:76:b5:62:fa:3b:dd:20:73:fd:c5: fc:fc:29:97:19:05:e4:09:b6:71:3a:8b:98:5b:76:6c:1b:d0: 63:94:96:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEyNTcxMTAvBgNVBAUTKDFFRDc4MkJFNjJENzEwMTc2NjhCMjhBMzI2ODlFNDcw RURBMjAxRjgwHhcNMjUwODIyMjE1NzEyWhcNMjUwODI5MjE1NzEyWjAYMRYwFAYD VQQDEw02OGE4ZTdiOC00OWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2a8nZ+QfyF4C057TIQUMCX1ZozfEm+2pRTjx0ZNKk8XlvSbJpsxLt0aKzUv 1aWdPCgecuAw00vBT9wdnOvG97BaJTd7H5YpFTU9/FH+yn+dEmY9dRyIq4wqXqNC 1mQ1X+T2UQeZ12vLoEKJSBTZgCC9Fgm3xB4XvlTYK3OVUdulO69VPNIfxI1abym6 QID4PEJ44Ef7ikk5BkxqU4uGp8OaXJK5qKco2Vbn4Aphypz2WELJiPke03hdntse K82nfAbt6la1fRh2Eu0uH+QVIOgU8jBWmDHn05qhNtB6Yc6cIwMexggq1VZghar8 19GT7DE4t3WvBM3sBa/UdfXAWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQuqrYa lZo9sMgOiIJHKFklHV4MMB8GA1UdIwQYMBaAFB7Xgr5i1xAXZosooyaJ5HDtogH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTI1Ny9BOTBGMUVFNjQ0 MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVCZG1peWlqSm9ua2NPMmlB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZUN2bUxYRUJkbWl5aWpKb25rY08yaUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTI1Ny9BOTBGMUVFNjQ0MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVC ZG1peWlqSm9ua2NPMmlBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRpeizw5CAdy3yYckODfnas5lz0KCRc6sDWE54m277BLe3eRHB0ngx MArJADTMTbr3UgQVcc1rdqjhH0WtJ6kIdtECpYQPYozv5kOcm7WoeBdeykPHucic ApyV17bk3Z3jGDrQ0f4MbM+Fhue9croTG9m5IXWgoXl5sELfyG373Rwv+uEz3+0M 5dGnSy4LDqYZUDzModrXoAI47aDoJQ93zUzZ9HBS8/JVp5kmv0cwiTc34lamcK73 U2+lavW7OCJIzEmiUrrwtuM9R77+FZp0C4uZN0/vPTB9DNUBgb61LHa1Yvo73SBz /cX8/CmXGQXkCbZxOouYW3ZsG9BjlJbY -----END CERTIFICATE-----Generated at Sat Aug 23 21:35:28 2025 by rpki-client