$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft File: HteCvmLXEBdmiyijJonkcO2iAfg.mft (raw, json) Hash identifier: FWlLZLPJHuZqN3UNvtjc6mo3Iu7c97tJbpeU+Pu0qDM= Subject key identifier: 8C:C2:81:95:3D:B0:A0:10:21:18:86:FC:06:91:4D:A7:94:C9:A4:D5 Authority key identifier: 1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 Certificate issuer: /CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8 Certificate serial: 072F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft Manifest number: 0727 Signing time: Fri 08 Aug 2025 22:13:21 +0000 Manifest this update: Fri 08 Aug 2025 22:13:20 +0000 Manifest next update: Fri 15 Aug 2025 22:13:20 +0000 Files and hashes: 1: HteCvmLXEBdmiyijJonkcO2iAfg.crl (hash: NHfrLNa8wkLGrilJz9QTSsm1AwERCx7+iHZNSwGdCSs=) 2: D41A1814442211EBBF7D9D65C4F9AE02.roa (hash: hsjXTWdh2kRzdeWF4Q+QGn60PDeZ8kmbCtOiIhRsRRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1839 (0x72f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1257, serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8 Validity Not Before: Aug 8 22:13:20 2025 GMT Not After : Aug 15 22:13:20 2025 GMT Subject: CN=68967681-1092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:20:59:83:3d:fd:73:7d:c3:e7:06:dd:02:fe: 4f:0e:bd:e2:d5:92:2f:16:07:d4:fe:a9:2e:86:6e: 7d:48:d2:8d:51:60:18:b0:ef:af:5d:b1:c3:49:0d: 0f:ca:4b:ad:b2:bd:19:93:00:ea:4f:ba:73:5d:6e: 70:8e:66:6c:87:a2:72:5d:62:7b:8d:01:61:c4:2a: 01:d1:37:aa:6b:94:d9:7a:79:04:9b:f5:e4:11:17: 4f:52:75:91:4a:59:27:5f:ed:17:9e:88:7a:2d:4d: bd:95:c0:6a:66:c3:f8:c9:03:36:1f:40:30:39:c0: 39:91:14:50:03:c9:28:f6:39:8c:3b:99:8e:c5:a6: f8:b9:63:87:be:85:7e:49:a8:d8:66:40:e9:b6:cf: 90:47:84:a0:e4:d0:12:95:c5:ea:92:55:a0:a3:6f: c8:24:59:5b:06:13:3d:ad:ff:58:05:3e:5c:c8:0c: a4:77:0c:26:39:cc:d5:ab:ac:25:b7:85:7e:3b:44: 3e:b2:8c:f0:ca:dd:62:22:13:44:9e:a9:28:6e:5b: c7:c1:0c:e1:a0:cb:40:a9:20:73:62:ca:6c:36:39: 15:07:48:72:d3:ab:33:b0:d1:ce:8d:de:3c:c6:f3: 4b:e6:99:07:77:a3:e2:8e:fe:21:3c:00:53:e1:17: 45:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C2:81:95:3D:B0:A0:10:21:18:86:FC:06:91:4D:A7:94:C9:A4:D5 X509v3 Authority Key Identifier: keyid:1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ed:bd:a6:1e:85:ab:be:8a:b4:81:e0:79:2c:5f:eb:92:0c: 99:35:43:56:50:f0:37:9e:bb:23:da:7e:72:94:93:55:10:bb: b2:20:eb:10:1d:86:75:a4:72:72:bd:50:d8:30:73:ef:69:b7: 0f:ac:a5:7a:d0:43:99:89:5d:da:55:88:fb:0f:3a:c1:82:d4: 3b:1e:fb:43:e7:cf:38:ea:33:25:7e:48:34:6c:d5:99:5e:5a: b6:c4:88:e0:ab:57:7d:dc:64:45:d9:af:44:78:7a:42:57:45: fb:9d:24:8a:8c:f3:47:ad:ba:9c:1b:44:54:ba:93:ac:5a:66: 83:f2:c3:81:d2:d6:88:5e:6c:cb:87:3b:2b:f0:2c:1c:38:99: c8:14:4c:bd:9e:e4:77:ce:0c:ba:bd:ae:bd:c3:ec:15:5c:2f: 0e:c3:1f:9f:97:a2:d9:aa:da:85:87:62:41:6f:32:4a:8b:19: a5:c8:c6:6c:32:c5:73:f7:6f:61:ad:43:09:24:a4:1f:5d:da: 75:10:5b:26:c4:04:de:ab:70:2c:71:55:ae:0e:fa:8f:d8:2c: 14:ee:7b:7c:a5:ea:ed:fd:03:84:ed:3d:8d:c0:8d:66:6a:cb: 5b:13:92:da:41:ed:d1:8c:2f:5e:f5:25:5d:51:59:72:a5:64: 9a:0e:ee:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEyNTcxMTAvBgNVBAUTKDFFRDc4MkJFNjJENzEwMTc2NjhCMjhBMzI2ODlFNDcw RURBMjAxRjgwHhcNMjUwODA4MjIxMzIwWhcNMjUwODE1MjIxMzIwWjAYMRYwFAYD VQQDEw02ODk2NzY4MS0xMDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSBZgz39c33D5wbdAv5PDr3i1ZIvFgfU/qkuhm59SNKNUWAYsO+vXbHDSQ0P ykutsr0ZkwDqT7pzXW5wjmZsh6JyXWJ7jQFhxCoB0Teqa5TZenkEm/XkERdPUnWR SlknX+0Xnoh6LU29lcBqZsP4yQM2H0AwOcA5kRRQA8ko9jmMO5mOxab4uWOHvoV+ SajYZkDpts+QR4Sg5NASlcXqklWgo2/IJFlbBhM9rf9YBT5cyAykdwwmOczVq6wl t4V+O0Q+sozwyt1iIhNEnqkoblvHwQzhoMtAqSBzYspsNjkVB0hy06szsNHOjd48 xvNL5pkHd6Pijv4hPABT4RdFRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzCgZU9 sKAQIRiG/AaRTaeUyaTVMB8GA1UdIwQYMBaAFB7Xgr5i1xAXZosooyaJ5HDtogH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTI1Ny9BOTBGMUVFNjQ0 MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVCZG1peWlqSm9ua2NPMmlB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZUN2bUxYRUJkbWl5aWpKb25rY08yaUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTI1Ny9BOTBGMUVFNjQ0MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVC ZG1peWlqSm9ua2NPMmlBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe7b2mHoWrvoq0geB5LF/rkgyZNUNWUPA3nrsj2n5ylJNVELuyIOsQ HYZ1pHJyvVDYMHPvabcPrKV60EOZiV3aVYj7DzrBgtQ7HvtD58846jMlfkg0bNWZ Xlq2xIjgq1d93GRF2a9EeHpCV0X7nSSKjPNHrbqcG0RUupOsWmaD8sOB0taIXmzL hzsr8CwcOJnIFEy9nuR3zgy6va69w+wVXC8Owx+fl6LZqtqFh2JBbzJKixmlyMZs MsVz929hrUMJJKQfXdp1EFsmxATeq3AscVWuDvqP2CwU7nt8pert/QOE7T2NwI1m astbE5LaQe3RjC9e9SVdUVlypWSaDu4e -----END CERTIFICATE-----Generated at Sun Aug 10 16:11:36 2025 by rpki-client