$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft File: HteCvmLXEBdmiyijJonkcO2iAfg.mft (raw, json) Hash identifier: GodeDaaHYAYSGom1jVxXHP6w+TAZXdHeF8r+YTGpRCY= Subject key identifier: 87:70:F0:22:01:5B:D6:66:84:2B:C2:9D:4A:24:2B:B2:27:C0:AC:61 Authority key identifier: 1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 Certificate issuer: /CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8 Certificate serial: 073E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft Manifest number: 0736 Signing time: Sat 06 Sep 2025 22:03:15 +0000 Manifest this update: Sat 06 Sep 2025 22:03:14 +0000 Manifest next update: Sat 13 Sep 2025 22:03:14 +0000 Files and hashes: 1: HteCvmLXEBdmiyijJonkcO2iAfg.crl (hash: oLCacRuXxkGZxzvvesmG1wZN68On0oMcELPYj04XH2c=) 2: D41A1814442211EBBF7D9D65C4F9AE02.roa (hash: hsjXTWdh2kRzdeWF4Q+QGn60PDeZ8kmbCtOiIhRsRRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1854 (0x73e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1257, serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8 Validity Not Before: Sep 6 22:03:14 2025 GMT Not After : Sep 13 22:03:14 2025 GMT Subject: CN=68bcafa3-e634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:94:14:24:d3:9f:a7:d5:a1:42:dd:5c:38:96: e5:9d:23:4c:9b:0c:14:1b:7f:b8:9f:b4:db:79:91: 82:0d:c7:8a:e9:6d:72:28:63:64:eb:28:d6:19:04: 25:8b:95:ca:6d:34:4f:a7:cc:96:79:60:0a:e4:54: f1:ab:f6:dc:f6:40:58:b4:da:7a:24:d3:ff:6f:ae: 7d:88:b6:42:97:10:81:6c:b9:78:f6:fd:70:4e:52: f7:ea:c6:f7:b0:3d:64:eb:74:da:a5:0a:63:18:6d: f6:2d:4d:8d:7e:6e:25:6c:c8:88:11:3e:30:f0:42: df:91:55:df:59:48:68:41:36:9f:43:86:33:9c:1f: 71:d5:bb:2e:79:bb:81:47:1e:86:70:2c:b7:5a:3b: 78:11:1c:81:f8:35:37:62:db:eb:2c:60:78:2b:e9: f2:ca:7a:a6:00:b1:be:38:d5:e5:e4:5f:89:d9:66: ff:94:ec:74:3b:98:7d:4d:b4:cc:ed:aa:f9:49:b6: 9b:16:15:7f:89:a6:a7:f3:70:fa:85:85:13:9b:9c: 58:6b:a2:fa:b4:d5:39:bd:36:87:73:25:51:90:48: 30:c7:57:69:e0:0c:11:6e:4b:af:20:a5:e2:0f:a3: 70:d7:fd:b2:1c:77:17:dd:08:77:b1:f1:7a:b7:ba: 2d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:70:F0:22:01:5B:D6:66:84:2B:C2:9D:4A:24:2B:B2:27:C0:AC:61 X509v3 Authority Key Identifier: keyid:1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:fc:b8:1d:87:67:64:c3:2e:5d:6a:72:c2:ac:cb:7e:b1:16: bf:06:28:85:bf:76:e7:0b:94:68:60:0f:3b:18:bc:d8:b7:57: 6f:e7:4c:f6:3e:3b:1b:b3:8a:b4:94:c8:b6:cf:ce:56:80:94: 14:be:f5:c3:cd:c8:95:e7:c3:b0:a1:9d:e8:da:03:4f:f6:97: 07:66:8e:c8:76:3c:9c:4c:75:1c:08:d4:3e:08:1c:eb:80:01: 18:f0:ba:ae:16:fe:07:bc:bf:e1:7e:84:5a:76:f4:1f:fd:34: 3d:62:16:50:97:97:b9:29:fe:a5:82:7d:4f:fb:80:93:e5:b7: 8f:9d:40:d2:af:0e:d4:a8:72:ca:fe:dc:be:29:c2:ba:1a:4f: a5:5c:15:ee:f5:f5:fd:ce:d2:26:f1:94:9b:2f:b2:a5:d6:67: f1:5e:78:ab:3f:af:9a:dc:69:81:29:41:d3:51:76:ab:56:5f: a5:ff:92:ff:20:e8:05:d1:80:c8:d2:fe:a1:39:b6:3c:a0:ca: d4:db:42:4d:c5:18:ae:46:1d:c2:07:43:ae:a2:8d:c8:97:83: af:2f:eb:14:36:30:4d:c7:d0:3c:b6:db:46:ab:9e:00:86:d2: a1:44:80:47:66:cb:b8:b0:da:cf:bd:9f:ef:db:9f:1b:49:4d: ee:66:5b:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEyNTcxMTAvBgNVBAUTKDFFRDc4MkJFNjJENzEwMTc2NjhCMjhBMzI2ODlFNDcw RURBMjAxRjgwHhcNMjUwOTA2MjIwMzE0WhcNMjUwOTEzMjIwMzE0WjAYMRYwFAYD VQQDEw02OGJjYWZhMy1lNjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZQUJNOfp9WhQt1cOJblnSNMmwwUG3+4n7TbeZGCDceK6W1yKGNk6yjWGQQl i5XKbTRPp8yWeWAK5FTxq/bc9kBYtNp6JNP/b659iLZClxCBbLl49v1wTlL36sb3 sD1k63TapQpjGG32LU2Nfm4lbMiIET4w8ELfkVXfWUhoQTafQ4YznB9x1bsuebuB Rx6GcCy3Wjt4ERyB+DU3YtvrLGB4K+nyynqmALG+ONXl5F+J2Wb/lOx0O5h9TbTM 7ar5SbabFhV/iaan83D6hYUTm5xYa6L6tNU5vTaHcyVRkEgwx1dp4AwRbkuvIKXi D6Nw1/2yHHcX3Qh3sfF6t7otqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdw8CIB W9ZmhCvCnUokK7InwKxhMB8GA1UdIwQYMBaAFB7Xgr5i1xAXZosooyaJ5HDtogH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTI1Ny9BOTBGMUVFNjQ0 MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVCZG1peWlqSm9ua2NPMmlB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZUN2bUxYRUJkbWl5aWpKb25rY08yaUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTI1Ny9BOTBGMUVFNjQ0MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVC ZG1peWlqSm9ua2NPMmlBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB/Lgdh2dkwy5danLCrMt+sRa/BiiFv3bnC5RoYA87GLzYt1dv50z2 Pjsbs4q0lMi2z85WgJQUvvXDzciV58OwoZ3o2gNP9pcHZo7IdjycTHUcCNQ+CBzr gAEY8LquFv4HvL/hfoRadvQf/TQ9YhZQl5e5Kf6lgn1P+4CT5bePnUDSrw7UqHLK /ty+KcK6Gk+lXBXu9fX9ztIm8ZSbL7Kl1mfxXnirP6+a3GmBKUHTUXarVl+l/5L/ IOgF0YDI0v6hObY8oMrU20JNxRiuRh3CB0Ouoo3Il4OvL+sUNjBNx9A8tttGq54A htKhRIBHZsu4sNrPvZ/v258bSU3uZls0 -----END CERTIFICATE-----Generated at Mon Sep 8 08:57:38 2025 by rpki-client