$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft File: eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json) Hash identifier: vrkC/UtzMsZNj1KA/ygMG0vpFvlePZub2WVR1zvXwyU= Subject key identifier: 14:C4:6B:5B:04:69:20:EF:29:31:E5:2B:C6:19:CA:D3:15:28:32:B8 Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft Manifest number: 0149 Signing time: Mon 17 Nov 2025 02:15:12 +0000 Manifest this update: Mon 17 Nov 2025 02:15:11 +0000 Manifest next update: Mon 24 Nov 2025 02:15:11 +0000 Files and hashes: 1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: ONC/FrULGLvwD528ICVMX/hPhplTk888JWJJENLJ6To=) 2: B9C587ACA61911EFAD319873C4F9AE02.roa (hash: UVNnVE482CTuury1gOUSOm7uwVR741BfWPntovKeG3A=) 3: BA8A5FBEA61911EFAD319873C4F9AE02.roa (hash: GxG7PljqaIsL4NG1p4pqVTS9JJNKWXLA96c3vNu2FFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Nov 2025 02:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Validity Not Before: Nov 17 02:15:11 2025 GMT Not After : Nov 24 02:15:11 2025 GMT Subject: CN=691a8530-1b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e7:57:e3:a8:19:7a:da:fd:d8:2b:70:9a:3c: 91:82:91:b9:4b:51:cd:9e:5a:ca:16:13:f3:16:e3: 2c:df:11:d5:15:f4:55:a3:ca:bb:ed:18:7a:ba:59: 4c:81:63:5a:6e:3c:e2:46:76:3e:db:6a:8a:59:ad: ef:df:29:77:46:3a:e0:1c:89:29:07:ea:52:69:79: 3f:b5:d6:c7:63:2a:24:61:68:01:0a:f8:c5:1a:4f: f3:38:02:0d:f7:ac:89:8f:c7:eb:38:9e:3f:44:98: f2:1f:ab:94:ec:2c:77:e4:3d:df:72:c0:72:e4:4d: 65:b7:81:4f:9c:78:74:94:d2:aa:b1:57:69:e1:c2: 5f:a9:e3:e0:58:7f:5e:a4:5b:74:9e:f6:7c:08:97: a3:e8:1f:9b:38:89:57:b1:f7:f0:62:f4:78:95:4a: 5a:b9:a4:84:f9:63:7d:e6:ca:26:89:f3:a2:a5:5e: 43:98:b0:05:ef:a8:bf:b8:dc:2d:a2:ef:47:8d:b9: c9:6e:81:52:01:48:97:84:b5:c9:64:a3:89:02:2b: fb:0f:69:5c:67:cf:18:fa:08:06:a5:41:a6:a2:88: 26:86:4d:67:b2:3c:b4:a7:02:a5:6a:e8:84:27:1a: c4:f7:1e:80:c3:fc:89:d6:30:05:9c:d6:29:5a:43: b9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C4:6B:5B:04:69:20:EF:29:31:E5:2B:C6:19:CA:D3:15:28:32:B8 X509v3 Authority Key Identifier: keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:2b:48:9d:f8:09:5d:b4:2d:b2:89:4f:50:c3:03:b0:aa:5c: 30:ca:ad:af:d3:60:d2:3d:c9:d4:56:9d:f9:75:2e:65:a3:3b: fe:41:0c:d0:a1:46:46:ab:3e:ad:2a:1a:7b:9f:67:0f:6a:77: 01:70:3a:6d:8d:c6:ce:7f:73:f3:4f:27:37:1c:7e:5d:23:af: 69:a8:39:20:17:7a:4a:a2:91:90:a1:6d:fa:1a:b8:0c:7b:b0: 37:4f:cf:23:12:60:85:f6:db:4b:bf:dc:31:ab:48:f1:e6:3d: a4:b5:ca:93:75:46:38:4c:a8:d3:33:57:9e:da:81:23:e7:f7: 74:23:f8:a7:61:f5:a9:44:f7:88:50:bd:aa:7c:52:5a:c2:7f: 47:9a:fa:06:93:2f:08:b1:cd:a9:42:fa:34:3b:a2:ca:44:3d: 7e:a4:10:cb:dd:af:73:b6:78:bd:9b:7e:9a:60:d6:e9:e4:97: 3c:64:ce:3b:41:c4:ef:84:1b:0b:8c:c9:59:9c:e2:81:25:63: 52:6e:bd:26:1a:06:43:48:a8:7c:0c:25:a6:00:31:97:30:51: 6e:d5:f2:4f:4f:2c:05:f0:8b:19:f8:69:97:d7:a1:f5:e1:88: 0b:29:05:9f:af:f8:6f:39:e8:64:4c:28:29:1f:5f:b7:22:9f: 6b:27:a5:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKDc4MzlBMUZDMDE3NDAyNEJDQkE4NEQwMTJEM0VDNENB NDY3OUFDNzEwHhcNMjUxMTE3MDIxNTExWhcNMjUxMTI0MDIxNTExWjAYMRYwFAYD VQQDEw02OTFhODUzMC0xYjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOdX46gZetr92CtwmjyRgpG5S1HNnlrKFhPzFuMs3xHVFfRVo8q77Rh6ullM gWNabjziRnY+22qKWa3v3yl3RjrgHIkpB+pSaXk/tdbHYyokYWgBCvjFGk/zOAIN 96yJj8frOJ4/RJjyH6uU7Cx35D3fcsBy5E1lt4FPnHh0lNKqsVdp4cJfqePgWH9e pFt0nvZ8CJej6B+bOIlXsffwYvR4lUpauaSE+WN95somifOipV5DmLAF76i/uNwt ou9HjbnJboFSAUiXhLXJZKOJAiv7D2lcZ88Y+ggGpUGmoogmhk1nsjy0pwKlauiE JxrE9x6Aw/yJ1jAFnNYpWkO5NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTEa1sE aSDvKTHlK8YZytMVKDK4MB8GA1UdIwQYMBaAFHg5ofwBdAJLy6hNAS0+xMpGeaxx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS84ODJGMjMyMEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFrdkxxRTBCTFQ3RXlrWjVy SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VEbWhfQUYwQWt2THFFMEJMVDdFeWtaNXJIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVDOS84ODJGMjMyMEM5RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFr dkxxRTBCTFQ3RXlrWjVySEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0K0id+AldtC2yiU9QwwOwqlwwyq2v02DSPcnUVp35dS5lozv+QQzQ oUZGqz6tKhp7n2cPancBcDptjcbOf3PzTyc3HH5dI69pqDkgF3pKopGQoW36GrgM e7A3T88jEmCF9ttLv9wxq0jx5j2ktcqTdUY4TKjTM1ee2oEj5/d0I/inYfWpRPeI UL2qfFJawn9HmvoGky8Isc2pQvo0O6LKRD1+pBDL3a9ztni9m36aYNbp5Jc8ZM47 QcTvhBsLjMlZnOKBJWNSbr0mGgZDSKh8DCWmADGXMFFu1fJPTywF8IsZ+GmX16H1 4YgLKQWfr/hvOehkTCgpH1+3Ip9rJ6UI -----END CERTIFICATE-----Generated at Tue Nov 18 07:03:07 2025 by rpki-client