$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft File: HtdycKSBilV07-7Kyvt0g812iCE.mft (raw, json) Hash identifier: aM8dB4dzF9UeVKv4bGcLr671rs9nX3Gx6lXt2xliczU= Subject key identifier: 9A:FB:2C:71:4E:CA:D5:44:FB:1C:98:28:80:64:FE:AE:8C:96:7F:19 Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 Certificate issuer: /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Certificate serial: 0A7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft Manifest number: 0A76 Signing time: Fri 08 Aug 2025 19:55:40 +0000 Manifest this update: Fri 08 Aug 2025 19:55:40 +0000 Manifest next update: Fri 15 Aug 2025 19:55:40 +0000 Files and hashes: 1: HtdycKSBilV07-7Kyvt0g812iCE.crl (hash: S5a0z1c1voFeXZXyK953NyEHej0xkidGbwEm2q60s10=) 2: 7C29A45A669A11EA9A11434FC4F9AE02.roa (hash: zKN4F2avq+xJ9yq6Og5mmKvaFyZB2rEl8x2OZ87RL7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2685 (0xa7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Validity Not Before: Aug 8 19:55:40 2025 GMT Not After : Aug 15 19:55:40 2025 GMT Subject: CN=6896563c-3212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:80:f2:10:00:c3:e7:db:8e:05:fd:74:fe: 51:fd:87:9d:78:75:79:73:8f:56:df:c2:16:1e:35: c4:3e:1f:d9:3b:51:5c:80:7a:77:20:2e:20:a5:c7: 5e:58:7b:c4:cf:ae:e6:3d:6d:8b:c0:19:6e:6b:79: 6e:ee:d1:f8:eb:d9:68:61:e7:24:ff:2e:f9:39:5d: 7f:4f:db:fa:2a:4f:96:df:52:d6:44:1d:57:d5:a6: 66:ad:9b:41:a2:04:7f:82:c8:12:12:6a:c7:04:3e: 77:d8:a6:37:02:18:f3:32:a6:a2:e9:c2:5f:98:3a: 11:40:0e:d0:da:56:ea:64:5c:1f:f9:d6:7f:16:20: 27:81:4c:f3:ff:49:4e:ba:94:88:4a:b6:a5:74:85: 0f:2e:cf:90:ce:07:5d:d1:2c:09:e9:4a:4c:59:3b: fa:df:73:91:de:3c:c1:6a:68:ff:4d:5c:b5:56:0c: 79:48:fe:dc:ea:b0:90:7b:2d:76:3c:58:6e:92:28: 1a:a0:5c:c2:e0:07:58:c7:c9:c2:73:da:bb:1d:b8: df:a8:03:b5:f8:a1:f1:da:fe:6b:2d:eb:60:31:7a: d8:ae:87:a2:c7:6b:c5:e7:c2:a8:1a:e7:ca:85:c8: 0b:99:ac:f3:4f:63:16:2a:7a:0f:b8:67:a5:60:13: 28:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FB:2C:71:4E:CA:D5:44:FB:1C:98:28:80:64:FE:AE:8C:96:7F:19 X509v3 Authority Key Identifier: keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:bc:90:2c:23:f9:f8:ae:2e:d5:13:66:a6:41:49:d5:a7:09: 25:29:43:6a:86:23:da:8b:1c:f3:5a:14:44:8b:74:0e:89:9b: e5:d4:44:94:7f:31:3d:52:61:a6:4f:94:9a:fe:65:88:37:1b: 13:35:c1:1d:3b:31:b4:48:b0:25:53:6e:5c:87:9f:db:54:d7: ce:48:cc:ac:8e:dc:20:ce:89:7e:cc:9a:24:79:74:ff:6e:4b: cb:fb:c3:f9:39:c8:d4:63:e9:7d:8c:ec:26:d5:14:00:8d:d6: 79:b7:9c:9b:c9:f0:2c:f1:03:de:36:32:9b:de:41:ba:a9:4d: fb:1a:8d:b5:e1:af:09:aa:35:78:4b:ae:be:8e:5d:92:8a:f4: 7c:db:88:70:1d:52:36:b8:01:f2:d2:f1:b3:50:f3:42:90:bf: c1:cf:87:25:2f:0f:22:6b:7e:75:74:ff:c9:c2:77:f4:01:79: 47:fd:c3:e9:16:20:49:fb:c7:ad:4f:57:45:55:4c:ce:36:0a: fd:5d:80:ea:5b:df:e0:b6:43:b2:fd:50:b0:ff:3b:92:01:44: 78:16:a9:24:ff:57:f8:ba:5e:83:56:af:2a:db:48:e0:57:dc: 60:9f:59:22:a7:42:b0:8a:8f:34:49:da:1e:54:30:06:5b:c6: b5:d4:3d:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFNTgxMTAvBgNVBAUTKDFFRDc3MjcwQTQ4MThBNTU3NEVGRUVDQUNBRkI3NDgz Q0Q3Njg4MjEwHhcNMjUwODA4MTk1NTQwWhcNMjUwODE1MTk1NTQwWjAYMRYwFAYD VQQDEw02ODk2NTYzYy0zMjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVSA8hAAw+fbjgX9dP5R/YedeHV5c49W38IWHjXEPh/ZO1FcgHp3IC4gpcde WHvEz67mPW2LwBlua3lu7tH469loYeck/y75OV1/T9v6Kk+W31LWRB1X1aZmrZtB ogR/gsgSEmrHBD532KY3AhjzMqai6cJfmDoRQA7Q2lbqZFwf+dZ/FiAngUzz/0lO upSISraldIUPLs+Qzgdd0SwJ6UpMWTv633OR3jzBamj/TVy1Vgx5SP7c6rCQey12 PFhukigaoFzC4AdYx8nCc9q7HbjfqAO1+KHx2v5rLetgMXrYroeix2vF58KoGufK hcgLmazzT2MWKnoPuGelYBMozQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJr7LHFO ytVE+xyYKIBk/q6Mln8ZMB8GA1UdIwQYMBaAFB7XcnCkgYpVdO/uysr7dIPNdogh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkU1OC82MDMzQ0Y2QTY2 OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmlsVjA3LTdLeXZ0MGc4MTJp Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZHljS1NCaWxWMDctN0t5dnQwZzgxMmlDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkU1OC82MDMzQ0Y2QTY2OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmls VjA3LTdLeXZ0MGc4MTJpQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlvJAsI/n4ri7VE2amQUnVpwklKUNqhiPaixzzWhREi3QOiZvl1ESU fzE9UmGmT5Sa/mWINxsTNcEdOzG0SLAlU25ch5/bVNfOSMysjtwgzol+zJokeXT/ bkvL+8P5OcjUY+l9jOwm1RQAjdZ5t5ybyfAs8QPeNjKb3kG6qU37Go214a8JqjV4 S66+jl2SivR824hwHVI2uAHy0vGzUPNCkL/Bz4clLw8ia351dP/Jwnf0AXlH/cPp FiBJ+8etT1dFVUzONgr9XYDqW9/gtkOy/VCw/zuSAUR4Fqkk/1f4ul6DVq8q20jg V9xgn1kip0Kwio80SdoeVDAGW8a11D1+ -----END CERTIFICATE-----Generated at Sat Aug 9 10:43:21 2025 by rpki-client