$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft File: HtdycKSBilV07-7Kyvt0g812iCE.mft (raw, json) Hash identifier: u+6deG4fNkrcyLjgQJo4haIPBk1JzAoyYv2tRpPKp5U= Subject key identifier: 3D:B4:E0:D5:7A:BC:A4:14:37:12:4E:E0:BA:56:BF:42:7E:BE:83:6B Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 Certificate issuer: /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Certificate serial: 0AAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft Manifest number: 0AA3 Signing time: Tue 04 Nov 2025 19:37:38 +0000 Manifest this update: Tue 04 Nov 2025 19:37:37 +0000 Manifest next update: Tue 11 Nov 2025 19:37:37 +0000 Files and hashes: 1: HtdycKSBilV07-7Kyvt0g812iCE.crl (hash: ut90zbk/riC07iLtLeijTDkND8pAuvVGDhQH5Thw+/g=) 2: 7C29A45A669A11EA9A11434FC4F9AE02.roa (hash: zKN4F2avq+xJ9yq6Og5mmKvaFyZB2rEl8x2OZ87RL7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2730 (0xaaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Validity Not Before: Nov 4 19:37:37 2025 GMT Not After : Nov 11 19:37:37 2025 GMT Subject: CN=690a5602-f044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:34:75:37:7b:53:65:2a:77:09:cb:f5:07:2e: 84:64:38:1c:62:42:c3:2d:7e:a1:bc:f9:6a:1f:52: c9:a2:cf:9e:24:6d:56:38:e5:4c:23:9d:09:34:e6: af:2e:1c:b4:42:17:df:8c:58:7b:af:c2:b7:55:ac: a7:8d:1b:ea:94:fb:43:80:37:34:8e:5c:4a:84:cb: 07:13:4c:02:a9:69:69:0d:b5:63:d0:8a:35:ef:0e: 9b:36:54:52:47:c5:0b:3e:eb:71:9b:a7:8a:c9:8e: 71:58:84:4e:96:26:b2:b1:ad:93:83:0d:ee:b4:72: 9b:e8:38:49:c0:dd:0d:38:51:8f:15:ad:5a:97:b8: bd:45:6a:55:ad:2c:df:e4:55:0b:98:24:88:ad:50: af:bd:3d:3d:5a:f2:67:90:14:5a:f6:67:24:00:4d: f2:e3:0f:24:4f:21:25:09:ba:c4:dc:f7:57:e7:8c: 8c:28:b7:b3:6f:3a:82:a2:62:08:ae:df:48:7f:a0: bd:9d:32:c3:98:60:36:59:33:33:15:10:59:50:1c: bc:70:a0:4b:5c:92:8a:84:f4:01:94:d8:04:ca:08: 02:fd:ca:38:38:67:c4:b8:9b:66:12:8b:33:3e:93: 1b:2b:a0:85:e3:f8:b6:26:e8:30:46:35:f5:17:d9: 29:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B4:E0:D5:7A:BC:A4:14:37:12:4E:E0:BA:56:BF:42:7E:BE:83:6B X509v3 Authority Key Identifier: keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:e4:66:85:e0:9b:2e:7f:a6:48:97:0a:35:05:25:9f:50:6a: 9d:1e:70:e1:4f:1a:5c:56:b6:04:64:c9:b1:41:bf:11:73:21: 10:01:2b:a3:18:41:78:52:0c:6d:37:ee:17:2a:09:1b:ff:6a: 64:77:a0:d6:c1:f4:0a:72:9b:cf:fd:b1:94:3f:33:03:bc:93: 67:be:e8:9d:0c:f4:69:2a:e3:c4:ad:b5:30:a1:de:3c:3f:8c: a5:06:fb:48:cd:86:89:0c:57:35:97:ff:cf:e5:24:df:f4:d2: 6d:e3:15:d8:6a:bb:e0:0f:c2:27:b1:63:2a:b3:46:a5:ac:b4: 27:04:cf:03:50:84:fb:d0:d9:dc:3f:c5:7b:89:c9:f3:55:3a: a4:14:1f:3d:8e:c9:2b:1c:ce:9e:a9:bc:28:88:76:cc:0e:4b: 54:2e:94:08:1d:a8:e3:e4:2d:f1:12:6b:8b:b3:a3:0b:5c:82: fb:26:ee:08:a5:fb:c8:5f:a3:6b:83:65:69:3f:df:68:6f:50: e8:ae:65:bb:bb:c0:7a:25:12:19:5d:f1:9f:5e:f9:ee:78:cf: d1:12:e1:88:c1:6a:d0:d5:c2:63:be:9d:25:e8:b8:86:f9:fd: 57:e3:f7:1a:c5:b5:43:64:fe:d3:6c:16:0c:4c:18:9f:1d:9f: ee:40:87:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFNTgxMTAvBgNVBAUTKDFFRDc3MjcwQTQ4MThBNTU3NEVGRUVDQUNBRkI3NDgz Q0Q3Njg4MjEwHhcNMjUxMTA0MTkzNzM3WhcNMjUxMTExMTkzNzM3WjAYMRYwFAYD VQQDEw02OTBhNTYwMi1mMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjR1N3tTZSp3Ccv1By6EZDgcYkLDLX6hvPlqH1LJos+eJG1WOOVMI50JNOav Lhy0QhffjFh7r8K3VaynjRvqlPtDgDc0jlxKhMsHE0wCqWlpDbVj0Io17w6bNlRS R8ULPutxm6eKyY5xWIROliaysa2Tgw3utHKb6DhJwN0NOFGPFa1al7i9RWpVrSzf 5FULmCSIrVCvvT09WvJnkBRa9mckAE3y4w8kTyElCbrE3PdX54yMKLezbzqComII rt9If6C9nTLDmGA2WTMzFRBZUBy8cKBLXJKKhPQBlNgEyggC/co4OGfEuJtmEosz PpMbK6CF4/i2JugwRjX1F9kpwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD204NV6 vKQUNxJO4LpWv0J+voNrMB8GA1UdIwQYMBaAFB7XcnCkgYpVdO/uysr7dIPNdogh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkU1OC82MDMzQ0Y2QTY2 OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmlsVjA3LTdLeXZ0MGc4MTJp Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZHljS1NCaWxWMDctN0t5dnQwZzgxMmlDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkU1OC82MDMzQ0Y2QTY2OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmls VjA3LTdLeXZ0MGc4MTJpQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ5GaF4Jsuf6ZIlwo1BSWfUGqdHnDhTxpcVrYEZMmxQb8RcyEQASuj GEF4UgxtN+4XKgkb/2pkd6DWwfQKcpvP/bGUPzMDvJNnvuidDPRpKuPErbUwod48 P4ylBvtIzYaJDFc1l//P5STf9NJt4xXYarvgD8InsWMqs0alrLQnBM8DUIT70Nnc P8V7icnzVTqkFB89jskrHM6eqbwoiHbMDktULpQIHajj5C3xEmuLs6MLXIL7Ju4I pfvIX6Nrg2VpP99ob1DormW7u8B6JRIZXfGfXvnueM/REuGIwWrQ1cJjvp0l6LiG +f1X4/caxbVDZP7TbBYMTBifHZ/uQIeD -----END CERTIFICATE-----Generated at Wed Nov 5 10:27:52 2025 by rpki-client