$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json) Hash identifier: ivXoRzV+R0xmu5wwURu2hE8EQh8SVfjn0CXgOlQxBXc= Subject key identifier: 68:AF:08:43:CF:DF:34:4A:8C:7F:CB:BB:DA:AB:25:0F:AA:F1:9B:29 Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 1405 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft Manifest number: 13B0 Signing time: Sun 20 Jul 2025 16:59:30 +0000 Manifest this update: Sun 20 Jul 2025 16:59:29 +0000 Manifest next update: Sun 27 Jul 2025 16:59:29 +0000 Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: H+Ox0pgkBp/PRV3cS7H/ceMIqUIoNPJHMpXT/ySrIVg=) 2: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: bxKpA/oFCU6TUM9crxLIgO78TFK6gY7b8jSCF6lkl2Q=) 3: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: Ie+fFLUk+hkh8iPsi0JIDwR97rjtnpIzqO2/djh9dOA=) 4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: HMDXcvVMEGAxoOC++6wcObudAAOApyw/6bDY30a1r+o=) 5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: bwsT9LHkujI+JrOu04/8rGiF6KuhSDYaJy2PKrf04nk=) 6: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: vIOfq2VGA/o5BqEJqyV+v1G5m5lQGi2kmLP/YtnJAmE=) 7: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: l4uHSTMAHvz3K39iQ1N6BJocMGP4W2EFJHrCsRCiw/k=) 8: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: 0Wf6MrY856EXSgNTseMSxFkk6LBzj+vW0CkBQhFM5Vo=) 9: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wsYRvalqXpbWZCIqLrO6x3uxF4QcGxGmLPv4fG6+ndk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5125 (0x1405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: Jul 20 16:59:29 2025 GMT Not After : Jul 27 16:59:29 2025 GMT Subject: CN=687d2072-22b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:76:4e:58:c1:da:12:1c:a5:8d:0f:bf:49:66: cd:b7:bb:07:aa:f4:0e:56:44:2b:1d:fd:4b:c4:a5: c2:ae:a8:09:b6:74:68:4c:24:67:cb:8b:76:11:b1: fd:ac:d5:a0:5e:f3:81:9c:00:df:f5:4c:4a:f3:b9: 15:95:02:99:f5:5e:f2:00:94:9e:7f:3a:a8:3e:ff: b1:28:70:cc:de:bd:65:4e:1e:2e:6e:86:55:b5:d6: 47:b7:30:90:a6:d7:29:a4:bc:b4:e9:1b:48:3c:ba: 60:91:55:24:72:a6:97:69:52:1a:80:ea:c0:eb:d3: 11:28:43:81:8f:b8:6d:bc:e2:8f:a4:c4:8a:3d:0e: 32:1f:2c:59:00:55:4e:b0:de:fc:6b:f7:e8:d9:40: 5c:da:0b:57:ef:01:0f:a8:74:86:de:8a:15:7b:c6: 2d:a2:54:80:ae:a3:fe:a3:a0:c6:f0:50:66:95:91: bd:12:59:9e:4c:66:5d:b9:94:62:bc:2e:5b:08:a5: 96:ff:69:05:8d:05:9e:58:32:33:f3:63:0c:61:34: ed:ab:16:12:e2:af:9b:43:41:28:36:96:21:ea:bc: e2:9a:9e:24:02:a5:45:f5:a7:92:2e:89:74:1e:83: d3:17:66:87:27:8d:8f:4b:ca:22:c1:40:81:d7:a0: 34:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AF:08:43:CF:DF:34:4A:8C:7F:CB:BB:DA:AB:25:0F:AA:F1:9B:29 X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:24:47:2f:08:67:f2:20:7b:9d:a9:58:5b:61:b4:57:74:8f: d6:07:e1:e2:b7:7d:99:76:67:d4:b6:17:7e:df:b7:bc:2b:fc: 2c:c0:10:ac:c4:ff:21:07:f9:28:0e:01:3d:15:50:94:c2:7f: af:d2:26:2b:04:47:43:a0:44:3f:f0:b1:1c:5f:87:52:bd:d0: 5b:c5:48:83:1b:8a:f6:de:ea:e7:eb:3c:95:12:ad:b3:7b:d6: fb:0c:ae:fa:db:d5:f9:50:9f:31:35:45:39:7e:1c:84:f6:f0: be:c9:1f:2c:39:e6:c2:2c:b1:b9:e6:a8:92:42:2a:58:8e:1d: 7b:0e:e4:b7:4f:87:52:84:9b:03:c8:0f:66:e9:ae:a4:6b:de: 8c:fa:35:19:65:d6:0c:d0:1a:7e:4a:4f:25:29:5c:c5:62:4c: 05:61:b4:ef:66:8f:66:0a:21:3d:62:69:af:12:4d:7d:85:9a: a2:03:1a:ac:e1:b1:11:65:6d:d7:9d:e6:ae:e7:7c:b7:18:34: bd:cd:fe:47:d6:61:2a:61:be:d1:c2:6b:69:f4:72:02:bb:f9: 1f:ae:34:4a:20:72:32:8c:ca:38:69:0e:85:6a:88:a8:fd:23: f2:83:ca:ef:62:3d:84:75:9a:67:79:e3:fd:2b:39:63:b4:96: bc:49:3e:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjUwNzIwMTY1OTI5WhcNMjUwNzI3MTY1OTI5WjAYMRYwFAYD VQQDEw02ODdkMjA3Mi0yMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXZOWMHaEhyljQ+/SWbNt7sHqvQOVkQrHf1LxKXCrqgJtnRoTCRny4t2EbH9 rNWgXvOBnADf9UxK87kVlQKZ9V7yAJSefzqoPv+xKHDM3r1lTh4uboZVtdZHtzCQ ptcppLy06RtIPLpgkVUkcqaXaVIagOrA69MRKEOBj7htvOKPpMSKPQ4yHyxZAFVO sN78a/fo2UBc2gtX7wEPqHSG3ooVe8YtolSArqP+o6DG8FBmlZG9ElmeTGZduZRi vC5bCKWW/2kFjQWeWDIz82MMYTTtqxYS4q+bQ0EoNpYh6rzimp4kAqVF9aeSLol0 HoPTF2aHJ42PS8oiwUCB16A0pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGivCEPP 3zRKjH/Lu9qrJQ+q8ZspMB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhJEcvCGfyIHudqVhbYbRXdI/WB+Hit32ZdmfUthd+37e8K/wswBCs xP8hB/koDgE9FVCUwn+v0iYrBEdDoEQ/8LEcX4dSvdBbxUiDG4r23urn6zyVEq2z e9b7DK7629X5UJ8xNUU5fhyE9vC+yR8sOebCLLG55qiSQipYjh17DuS3T4dShJsD yA9m6a6ka96M+jUZZdYM0Bp+Sk8lKVzFYkwFYbTvZo9mCiE9YmmvEk19hZqiAxqs 4bERZW3Xneau53y3GDS9zf5H1mEqYb7Rwmtp9HICu/kfrjRKIHIyjMo4aQ6Faoio /SPyg8rvYj2EdZpneeP9KzljtJa8ST4n -----END CERTIFICATE-----Generated at Tue Jul 22 12:00:51 2025 by rpki-client