$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft File: HtdycKSBilV07-7Kyvt0g812iCE.mft (raw, json) Hash identifier: SIkExEY+XTYjCff6Kxv90L4YUSBzdf+I5LclIWveVxM= Subject key identifier: 13:8D:CD:F8:FF:7D:23:72:29:3D:9A:B1:14:7A:9D:A6:3B:C5:B7:74 Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 Certificate issuer: /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Certificate serial: 0A92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft Manifest number: 0A8B Signing time: Thu 18 Sep 2025 19:48:15 +0000 Manifest this update: Thu 18 Sep 2025 19:48:14 +0000 Manifest next update: Thu 25 Sep 2025 19:48:14 +0000 Files and hashes: 1: HtdycKSBilV07-7Kyvt0g812iCE.crl (hash: t2U9zVidVFpuxu4S8p9N6r3O6BPk4tLH126bBW7AhZA=) 2: 7C29A45A669A11EA9A11434FC4F9AE02.roa (hash: zKN4F2avq+xJ9yq6Og5mmKvaFyZB2rEl8x2OZ87RL7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2706 (0xa92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Validity Not Before: Sep 18 19:48:14 2025 GMT Not After : Sep 25 19:48:14 2025 GMT Subject: CN=68cc61ff-0af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:88:27:3d:89:e3:b5:06:d0:e9:f9:26:fa:2a: 00:01:42:df:68:66:f7:8b:98:77:51:1f:24:b7:d3: 24:d8:2e:37:82:a4:97:32:fb:45:c6:d2:a1:42:54: cb:a6:5a:95:1d:bd:a6:86:c6:e7:a6:52:4b:9a:f7: 1d:4f:2e:0f:e2:e9:cb:9a:73:7b:64:26:4b:53:d1: 6c:a7:4d:1b:0e:d0:02:49:59:f1:85:26:bd:ba:81: 18:34:12:83:77:18:2d:f7:00:a2:09:18:f1:33:0c: 45:40:d1:ec:e6:b5:44:ee:b7:e7:f2:de:9d:12:44: 3c:67:33:00:4c:24:1e:f3:7d:90:8f:c2:2b:e9:c7: 1c:f6:33:50:31:35:9e:4b:96:df:9a:e2:a1:e9:3c: 95:00:b8:f9:c9:01:7d:03:ad:bd:da:6b:d7:2b:e0: 61:67:ea:85:da:d0:96:0e:f3:44:6f:db:a1:7e:09: 6d:bc:c1:07:91:ee:d3:5b:fd:4b:5c:66:38:01:81: 3f:83:0a:c2:15:67:a9:71:f6:00:e7:a0:82:93:10: 56:09:4a:a7:cb:26:64:62:3e:65:4b:e9:87:0d:28: 00:10:d5:c9:57:67:cc:85:b3:3e:61:d5:4d:1f:7b: 06:48:01:c6:18:f0:a6:28:b1:98:1f:6e:fb:10:92: bf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8D:CD:F8:FF:7D:23:72:29:3D:9A:B1:14:7A:9D:A6:3B:C5:B7:74 X509v3 Authority Key Identifier: keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e9:7e:39:b5:96:72:d9:f9:db:a1:d4:47:9e:f9:35:d3:68: b7:59:4b:a2:96:28:13:7d:5d:3c:91:d2:1b:8a:b9:29:7c:f6: d1:75:82:a8:11:80:97:4c:1e:56:df:1f:80:ec:e8:83:36:cf: 8e:0f:97:49:1e:ae:1b:ac:df:35:db:2d:8a:5b:61:d4:d5:7f: f2:b0:61:53:b2:4f:9a:e6:ee:f4:22:4e:52:56:07:66:28:60: 50:ab:b6:4d:4b:03:b4:99:d9:e0:47:87:a4:53:3e:a5:12:50: 93:c3:22:0b:5f:20:5b:e3:14:37:26:b3:40:df:d9:85:73:c6: 72:be:2f:05:e2:e7:84:ec:6a:cd:0c:5d:cf:39:ff:a7:1b:aa: 29:be:e9:bc:7d:df:84:58:6b:98:ab:02:da:e5:a4:a4:e8:56: c8:85:15:60:17:a7:50:64:e2:f6:02:8f:71:9c:f9:71:f1:65: 4d:89:b7:a4:ca:6e:b8:38:67:47:98:e5:e8:c3:30:19:53:49: b1:83:71:71:fe:e0:cb:d8:69:7c:06:7d:22:33:bb:3d:6c:44: 3b:08:f8:12:91:92:b2:bc:cc:39:8b:94:8d:6d:82:30:bf:d1: e7:82:b7:d6:86:98:d2:73:6b:d6:e5:3b:0d:22:54:31:3e:f4: 3c:4d:6f:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFNTgxMTAvBgNVBAUTKDFFRDc3MjcwQTQ4MThBNTU3NEVGRUVDQUNBRkI3NDgz Q0Q3Njg4MjEwHhcNMjUwOTE4MTk0ODE0WhcNMjUwOTI1MTk0ODE0WjAYMRYwFAYD VQQDEw02OGNjNjFmZi0wYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqognPYnjtQbQ6fkm+ioAAULfaGb3i5h3UR8kt9Mk2C43gqSXMvtFxtKhQlTL plqVHb2mhsbnplJLmvcdTy4P4unLmnN7ZCZLU9Fsp00bDtACSVnxhSa9uoEYNBKD dxgt9wCiCRjxMwxFQNHs5rVE7rfn8t6dEkQ8ZzMATCQe832Qj8Ir6ccc9jNQMTWe S5bfmuKh6TyVALj5yQF9A6292mvXK+BhZ+qF2tCWDvNEb9uhfgltvMEHke7TW/1L XGY4AYE/gwrCFWepcfYA56CCkxBWCUqnyyZkYj5lS+mHDSgAENXJV2fMhbM+YdVN H3sGSAHGGPCmKLGYH277EJK/cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBONzfj/ fSNyKT2asRR6naY7xbd0MB8GA1UdIwQYMBaAFB7XcnCkgYpVdO/uysr7dIPNdogh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkU1OC82MDMzQ0Y2QTY2 OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmlsVjA3LTdLeXZ0MGc4MTJp Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZHljS1NCaWxWMDctN0t5dnQwZzgxMmlDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkU1OC82MDMzQ0Y2QTY2OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmls VjA3LTdLeXZ0MGc4MTJpQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB86X45tZZy2fnbodRHnvk102i3WUuiligTfV08kdIbirkpfPbRdYKo EYCXTB5W3x+A7OiDNs+OD5dJHq4brN812y2KW2HU1X/ysGFTsk+a5u70Ik5SVgdm KGBQq7ZNSwO0mdngR4ekUz6lElCTwyILXyBb4xQ3JrNA39mFc8Zyvi8F4ueE7GrN DF3POf+nG6opvum8fd+EWGuYqwLa5aSk6FbIhRVgF6dQZOL2Ao9xnPlx8WVNibek ym64OGdHmOXowzAZU0mxg3Fx/uDL2Gl8Bn0iM7s9bEQ7CPgSkZKyvMw5i5SNbYIw v9HngrfWhpjSc2vW5TsNIlQxPvQ8TW+F -----END CERTIFICATE-----Generated at Fri Sep 19 06:50:07 2025 by rpki-client