$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft File: HteCvmLXEBdmiyijJonkcO2iAfg.mft (raw, json) Hash identifier: KMTvkvfwtCN62h+jk9p35PEBaAfvUnTlpAwMvkZC4JQ= Subject key identifier: D5:87:20:1B:CA:80:F9:1E:BD:53:2A:96:5F:16:C1:79:7E:61:88:D1 Authority key identifier: 1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 Certificate issuer: /CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8 Certificate serial: 071C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft Manifest number: 0714 Signing time: Wed 02 Jul 2025 22:09:45 +0000 Manifest this update: Wed 02 Jul 2025 22:09:44 +0000 Manifest next update: Wed 09 Jul 2025 22:09:44 +0000 Files and hashes: 1: HteCvmLXEBdmiyijJonkcO2iAfg.crl (hash: lvG3dYaSXyUkqvCHlM0eK70nMsqvBJpawcxFbDSY7xo=) 2: D41A1814442211EBBF7D9D65C4F9AE02.roa (hash: hsjXTWdh2kRzdeWF4Q+QGn60PDeZ8kmbCtOiIhRsRRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1820 (0x71c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1257, serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8 Validity Not Before: Jul 2 22:09:44 2025 GMT Not After : Jul 9 22:09:44 2025 GMT Subject: CN=6865ae29-0337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c8:da:04:65:75:fe:87:7a:c2:5f:c4:11:d3: cb:42:a2:f0:e0:71:ba:b8:b3:77:a0:00:62:eb:78: cc:40:15:c8:ec:21:e3:a5:7e:de:a4:a3:1e:36:c3: 35:be:81:28:93:5f:3f:53:b8:1e:67:6c:da:ed:3f: b9:08:4e:ab:f0:5f:1d:09:fd:ed:b8:89:a7:8c:ed: a1:55:70:f3:fa:6f:5c:80:ae:57:9a:1f:12:37:c7: e9:7a:56:65:35:a8:47:48:2d:be:87:5a:93:41:68: 2a:85:f7:2c:1f:7b:6f:80:c0:c7:d0:ea:c1:cc:ec: 31:93:1e:ed:15:18:d3:81:96:58:f7:67:31:f5:2e: 65:08:f8:b7:55:65:52:b8:d8:41:5e:f6:17:be:b7: b4:93:cb:9c:b5:2b:07:96:fe:f8:31:aa:5c:b8:ba: 6d:ae:9a:50:d2:a1:63:1d:01:de:6a:6d:cc:01:da: 10:1c:16:2d:e8:79:9a:95:eb:9d:a1:1f:e7:6c:a6: 42:bc:a7:4b:fe:9f:27:fd:e9:46:d3:64:67:8a:45: 47:58:d4:65:e9:69:08:1c:18:06:38:8f:0d:07:e1: 2a:d4:9e:47:30:87:c5:e3:39:49:b0:76:72:49:42: 18:d6:20:52:b3:c6:94:0e:00:cb:0e:60:07:1e:a3: 92:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:87:20:1B:CA:80:F9:1E:BD:53:2A:96:5F:16:C1:79:7E:61:88:D1 X509v3 Authority Key Identifier: keyid:1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:8a:54:22:8f:25:07:2c:a4:ea:f7:c0:ba:89:d6:d7:80:b2: 2e:34:f7:b7:1b:9d:85:c1:cb:42:75:c2:2c:4c:d3:0f:0d:65: c7:a1:73:c1:38:9b:24:4a:37:0c:35:be:90:6d:9b:bd:93:bf: c8:d8:eb:e9:14:8f:bc:0d:ad:c0:7c:28:99:7e:e4:c7:56:ff: b5:3c:62:ca:04:25:32:97:ad:0c:1a:86:d5:eb:18:82:50:cc: 61:08:84:66:c5:34:dc:b5:82:ca:ad:76:de:34:ec:0a:25:a1: 36:a6:d4:ff:8b:6b:d3:dc:97:fc:b6:37:0e:56:f4:a2:4a:42: ad:99:b5:e7:bc:1f:7b:c0:f1:bd:d8:4a:e3:fc:6b:01:cc:f2: 4b:49:45:50:5a:42:61:48:3d:2b:ae:99:74:d8:c6:23:2d:54: e1:2d:d8:aa:7e:94:67:76:44:ee:49:df:10:6b:22:88:23:a1: f3:be:5c:8b:8e:33:3a:20:41:ae:d5:fb:0c:6f:96:78:dc:2d: e5:37:12:de:93:c5:19:75:ab:40:5d:d7:82:b4:2d:17:21:d6: 46:56:15:6c:b0:9c:15:9f:45:f8:f9:3d:20:78:4d:07:75:2e: ad:b7:ac:77:89:f3:eb:85:90:0f:91:6c:ac:87:0f:d2:8a:c1: 32:fd:17:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEyNTcxMTAvBgNVBAUTKDFFRDc4MkJFNjJENzEwMTc2NjhCMjhBMzI2ODlFNDcw RURBMjAxRjgwHhcNMjUwNzAyMjIwOTQ0WhcNMjUwNzA5MjIwOTQ0WjAYMRYwFAYD VQQDEw02ODY1YWUyOS0wMzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcjaBGV1/od6wl/EEdPLQqLw4HG6uLN3oABi63jMQBXI7CHjpX7epKMeNsM1 voEok18/U7geZ2za7T+5CE6r8F8dCf3tuImnjO2hVXDz+m9cgK5Xmh8SN8fpelZl NahHSC2+h1qTQWgqhfcsH3tvgMDH0OrBzOwxkx7tFRjTgZZY92cx9S5lCPi3VWVS uNhBXvYXvre0k8uctSsHlv74MapcuLptrppQ0qFjHQHeam3MAdoQHBYt6Hmaleud oR/nbKZCvKdL/p8n/elG02RnikVHWNRl6WkIHBgGOI8NB+Eq1J5HMIfF4zlJsHZy SUIY1iBSs8aUDgDLDmAHHqOSNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWHIBvK gPkevVMqll8WwXl+YYjRMB8GA1UdIwQYMBaAFB7Xgr5i1xAXZosooyaJ5HDtogH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTI1Ny9BOTBGMUVFNjQ0 MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVCZG1peWlqSm9ua2NPMmlB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZUN2bUxYRUJkbWl5aWpKb25rY08yaUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTI1Ny9BOTBGMUVFNjQ0MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVC ZG1peWlqSm9ua2NPMmlBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4ilQijyUHLKTq98C6idbXgLIuNPe3G52FwctCdcIsTNMPDWXHoXPB OJskSjcMNb6QbZu9k7/I2OvpFI+8Da3AfCiZfuTHVv+1PGLKBCUyl60MGobV6xiC UMxhCIRmxTTctYLKrXbeNOwKJaE2ptT/i2vT3Jf8tjcOVvSiSkKtmbXnvB97wPG9 2Erj/GsBzPJLSUVQWkJhSD0rrpl02MYjLVThLdiqfpRndkTuSd8QayKII6HzvlyL jjM6IEGu1fsMb5Z43C3lNxLek8UZdatAXdeCtC0XIdZGVhVssJwVn0X4+T0geE0H dS6tt6x3ifPrhZAPkWyshw/SisEy/Ren -----END CERTIFICATE-----Generated at Fri Jul 4 14:32:28 2025 by rpki-client