$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft File: HteCvmLXEBdmiyijJonkcO2iAfg.mft (raw, json) Hash identifier: TiF1yMJ85KF4+VlTw3VihD3hDeDisalRgedcqe5UgnY= Subject key identifier: 54:F1:BA:39:4A:B0:35:8D:00:C4:E5:5E:F6:9C:9E:34:58:FE:9A:C2 Authority key identifier: 1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 Certificate issuer: /CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8 Certificate serial: 075D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft Manifest number: 0754 Signing time: Sun 02 Nov 2025 21:40:49 +0000 Manifest this update: Sun 02 Nov 2025 21:40:49 +0000 Manifest next update: Sun 09 Nov 2025 21:40:49 +0000 Files and hashes: 1: HteCvmLXEBdmiyijJonkcO2iAfg.crl (hash: +BuiitzFr0Qh26sKrGouhIA/m37ePe/3aPwI6DaWQqw=) 2: D41A1814442211EBBF7D9D65C4F9AE02.roa (hash: tB96Uz17EX40eZdARikwxQwcb8AmCNS9rm6xwYx8La0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1885 (0x75d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1257, serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8 Validity Not Before: Nov 2 21:40:49 2025 GMT Not After : Nov 9 21:40:49 2025 GMT Subject: CN=6907cfe1-377b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:57:ac:65:cf:d4:40:23:be:47:6b:74:70: 17:55:b2:13:56:6c:92:c1:27:dd:59:7b:e5:fd:23: 78:c5:bd:84:3e:28:24:cc:c3:b3:ac:d9:d1:72:bc: e3:fc:f1:27:5f:76:cb:af:9e:20:cc:f3:44:c0:bc: 60:c4:79:69:b3:9c:ea:98:3b:19:a1:33:4e:2f:ee: 5e:25:16:64:46:2a:02:52:83:fe:19:f1:37:11:43: 0c:43:e0:39:d6:bd:f2:92:b2:af:09:e3:d4:e6:17: 9d:8e:53:40:80:be:d1:d2:84:25:09:14:d5:8e:d2: d5:c0:8f:2c:8a:7b:41:44:5b:77:89:42:55:75:12: 76:32:f0:7c:50:52:e2:d0:4e:6d:b4:c1:2e:cb:62: cb:cc:17:63:7f:59:40:b3:96:73:37:63:0c:da:12: 68:6e:9f:6b:46:59:22:ac:8f:09:f7:2e:a2:4f:c5: e2:47:ec:d1:18:80:14:e4:d6:de:f2:15:cc:94:4a: 1e:95:d9:1e:fa:6d:73:3a:ad:15:4d:fc:1b:46:ed: 62:d8:1d:86:5f:32:15:e4:88:7b:4b:7e:01:b9:5d: f7:23:e1:e1:10:42:14:7a:87:b3:be:b3:a0:73:d1: 7f:a2:74:a5:de:7e:cd:86:f0:14:17:16:bb:a6:e4: 5f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F1:BA:39:4A:B0:35:8D:00:C4:E5:5E:F6:9C:9E:34:58:FE:9A:C2 X509v3 Authority Key Identifier: keyid:1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:70:3c:5f:32:09:b6:c3:f4:e1:73:62:23:5b:6c:88:1f:75: 4e:a2:6a:44:81:3c:d4:32:93:61:ef:ee:7e:aa:24:b4:00:fc: 57:35:b3:e6:82:c8:f2:75:36:b8:2c:7b:8c:20:67:db:ee:65: 3f:b6:8e:0b:fb:23:64:49:1e:dd:52:af:c1:e6:e1:73:20:00: 19:9b:0f:fd:68:e6:de:22:59:0a:2a:68:cd:d4:83:8a:43:e0: eb:b3:cb:2e:9b:f7:74:6d:61:5e:0b:f4:12:92:53:fc:cd:6b: e4:8f:ed:db:a8:6b:7e:b2:fe:e3:fe:a3:4a:21:1d:5d:df:dc: 53:34:98:a4:ae:f2:98:56:96:83:3e:f0:69:bb:d3:6f:f0:d7: 78:42:5b:a7:0f:d9:58:3d:a9:4a:26:6d:42:82:2b:da:14:84: 30:e5:6d:0b:4b:ae:89:d0:26:06:c5:9a:1b:02:2d:38:2c:77: 0f:1a:fb:30:6f:0f:de:ee:3f:4f:04:56:fa:84:7b:e2:fa:09: 93:11:67:4f:51:2f:1e:a1:58:04:ba:d7:b7:b8:e0:57:3a:e8: 00:b5:85:71:39:99:a5:0c:87:26:7c:85:e6:dc:e2:65:c2:03: d8:ab:16:a7:4c:b3:c5:b8:a1:52:f8:0d:0e:42:49:56:a9:f4: 8f:43:ea:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEyNTcxMTAvBgNVBAUTKDFFRDc4MkJFNjJENzEwMTc2NjhCMjhBMzI2ODlFNDcw RURBMjAxRjgwHhcNMjUxMTAyMjE0MDQ5WhcNMjUxMTA5MjE0MDQ5WjAYMRYwFAYD VQQDEw02OTA3Y2ZlMS0zNzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDZXrGXP1EAjvkdrdHAXVbITVmySwSfdWXvl/SN4xb2EPigkzMOzrNnRcrzj /PEnX3bLr54gzPNEwLxgxHlps5zqmDsZoTNOL+5eJRZkRioCUoP+GfE3EUMMQ+A5 1r3ykrKvCePU5hedjlNAgL7R0oQlCRTVjtLVwI8sintBRFt3iUJVdRJ2MvB8UFLi 0E5ttMEuy2LLzBdjf1lAs5ZzN2MM2hJobp9rRlkirI8J9y6iT8XiR+zRGIAU5Nbe 8hXMlEoeldke+m1zOq0VTfwbRu1i2B2GXzIV5Ih7S34BuV33I+HhEEIUeoezvrOg c9F/onSl3n7NhvAUFxa7puRfewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTxujlK sDWNAMTlXvacnjRY/prCMB8GA1UdIwQYMBaAFB7Xgr5i1xAXZosooyaJ5HDtogH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTI1Ny9BOTBGMUVFNjQ0 MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVCZG1peWlqSm9ua2NPMmlB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZUN2bUxYRUJkbWl5aWpKb25rY08yaUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTI1Ny9BOTBGMUVFNjQ0MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVC ZG1peWlqSm9ua2NPMmlBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbcDxfMgm2w/Thc2IjW2yIH3VOompEgTzUMpNh7+5+qiS0APxXNbPm gsjydTa4LHuMIGfb7mU/to4L+yNkSR7dUq/B5uFzIAAZmw/9aObeIlkKKmjN1IOK Q+Drs8sum/d0bWFeC/QSklP8zWvkj+3bqGt+sv7j/qNKIR1d39xTNJikrvKYVpaD PvBpu9Nv8Nd4QlunD9lYPalKJm1CgivaFIQw5W0LS66J0CYGxZobAi04LHcPGvsw bw/e7j9PBFb6hHvi+gmTEWdPUS8eoVgEute3uOBXOugAtYVxOZmlDIcmfIXm3OJl wgPYqxanTLPFuKFS+A0OQklWqfSPQ+oS -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:42 2025 by rpki-client