$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft File: eDYu-f45SW72Wzb4O2aYr5MI36s.mft (raw, json) Hash identifier: SamwZd0aAVqloeLlqR9yk5Kq3hkhSASFF8TF8MrPm0s= Subject key identifier: DE:FA:53:FF:AD:4E:60:46:F9:5A:BB:1F:D0:1F:F0:BA:A7:53:B6:BA Authority key identifier: 78:36:2E:F9:FE:39:49:6E:F6:5B:36:F8:3B:66:98:AF:93:08:DF:AB Certificate issuer: /CN=A91CE7A4/serialNumber=78362EF9FE39496EF65B36F83B6698AF9308DFAB Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft Manifest number: 66 Signing time: Mon 21 Jul 2025 07:11:11 +0000 Manifest this update: Mon 21 Jul 2025 07:11:10 +0000 Manifest next update: Mon 28 Jul 2025 07:11:10 +0000 Files and hashes: 1: eDYu-f45SW72Wzb4O2aYr5MI36s.crl (hash: 9Klr+VpDvB/ogY6u+TGXjbVxH4xdHIyDPd5OUtbez4g=) 2: 44B43AAECC1011EFA5596A50C4F9AE02.roa (hash: uRW4bqoOWcKD9JjoYymAbjdIYpBJL8ZXTg4SH6smXUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.crl rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7A4, serialNumber=78362EF9FE39496EF65B36F83B6698AF9308DFAB Validity Not Before: Jul 21 07:11:10 2025 GMT Not After : Jul 28 07:11:10 2025 GMT Subject: CN=687de80e-3b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b4:a0:2c:d6:55:72:a0:0c:82:89:1e:2c:27: 6d:ee:83:e7:4c:04:79:3e:cb:77:a2:d8:31:72:3d: 44:0f:a0:b8:01:66:00:8b:ae:01:7b:1f:19:5a:26: 8a:44:44:67:5c:00:d9:78:94:4b:56:1f:d7:b9:44: db:7a:d2:cb:64:9c:ae:69:66:97:ec:38:5b:96:1c: ad:6c:94:28:25:96:77:8b:2f:6c:3d:79:d0:61:4a: 72:70:8c:64:3f:91:b0:93:25:93:c6:c5:4a:e4:50: d7:3f:bf:69:65:20:b4:51:ae:63:78:49:11:c7:83: fa:b6:bf:15:b7:91:10:51:82:a1:f7:99:ff:84:74: 16:05:0d:08:cf:91:99:68:db:b0:43:0b:3c:77:46: 57:1c:0e:d3:90:c4:46:dd:de:3b:4a:15:e0:a8:c2: fd:39:18:c4:eb:6f:6d:44:94:ea:91:4d:61:4c:7b: e6:fc:03:be:56:ef:9c:1d:08:d7:03:49:91:7d:79: 05:7b:53:7d:3c:ab:f8:85:63:86:47:b8:1c:03:04: 92:b8:e7:8b:3a:da:79:cf:f5:1a:58:7c:80:20:9e: 39:4c:7c:9d:55:89:63:e3:22:0e:36:de:06:3f:76: 48:a7:e2:a5:56:9f:bb:d6:19:73:21:ca:2e:7a:23: 46:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FA:53:FF:AD:4E:60:46:F9:5A:BB:1F:D0:1F:F0:BA:A7:53:B6:BA X509v3 Authority Key Identifier: keyid:78:36:2E:F9:FE:39:49:6E:F6:5B:36:F8:3B:66:98:AF:93:08:DF:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:42:fd:1a:55:66:75:c6:2e:25:2e:0e:92:6e:9f:4b:44:c3: 62:79:a0:b9:0c:b8:06:c0:08:c4:36:d4:b0:02:c2:53:64:51: cb:3c:37:95:d4:1b:16:b4:d7:15:d2:53:10:03:b8:6d:a2:8d: 0f:b7:15:41:1b:39:3e:79:0d:e3:93:f5:c7:d9:b3:bb:41:7b: 6b:1e:4c:1e:00:ca:e5:14:38:b3:06:6a:0e:c3:0d:cf:2e:9a: 35:a5:a1:7e:b0:e2:47:1f:e4:44:4f:70:a3:9c:51:4b:41:3d: 9c:55:67:63:1b:c7:de:c3:0d:67:a5:63:7f:bf:5e:06:c1:8d: 98:37:9d:f2:92:db:5b:80:fc:b8:e6:65:81:02:6e:2a:54:ee: d4:4f:75:54:c9:2e:4f:86:9e:88:4e:aa:ab:47:dc:91:48:9b: a0:ac:6e:1f:8a:15:c3:12:6c:ba:61:a6:14:04:f0:94:8a:a0: 1a:0a:28:96:72:c8:87:cd:cb:b6:0e:b7:ed:fe:8e:c3:c8:15: cd:75:a6:cd:c1:2c:91:78:6b:1c:27:69:27:5a:9d:f9:f0:74: 41:f7:f2:39:c4:da:44:da:4e:40:99:5a:42:c4:90:93:4f:5a: 25:d7:0f:7c:fc:6f:13:e8:46:71:74:e3:18:6a:16:fa:f2:a9: 23:3f:8b:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTdBNDExMC8GA1UEBRMoNzgzNjJFRjlGRTM5NDk2RUY2NUIzNkY4M0I2Njk4QUY5 MzA4REZBQjAeFw0yNTA3MjEwNzExMTBaFw0yNTA3MjgwNzExMTBaMBgxFjAUBgNV BAMTDTY4N2RlODBlLTNiNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjtKAs1lVyoAyCiR4sJ23ug+dMBHk+y3ei2DFyPUQPoLgBZgCLrgF7HxlaJopE RGdcANl4lEtWH9e5RNt60stknK5pZpfsOFuWHK1slCgllneLL2w9edBhSnJwjGQ/ kbCTJZPGxUrkUNc/v2llILRRrmN4SRHHg/q2vxW3kRBRgqH3mf+EdBYFDQjPkZlo 27BDCzx3RlccDtOQxEbd3jtKFeCowv05GMTrb21ElOqRTWFMe+b8A75W75wdCNcD SZF9eQV7U308q/iFY4ZHuBwDBJK454s62nnP9RpYfIAgnjlMfJ1ViWPjIg423gY/ dkin4qVWn7vWGXMhyi56I0aZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3vpT/61O YEb5Wrsf0B/wuqdTtrowHwYDVR0jBBgwFoAUeDYu+f45SW72Wzb4O2aYr5MI36sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFN0E0L0MwQ0FFNzQyQ0Mw RjExRUZBMjc4RkQ0Q0M0RjlBRTAyL2VEWXUtZjQ1U1c3Mld6YjRPMmFZcjVNSTM2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZURZdS1mNDVTVzcyV3piNE8yYVlyNU1JMzZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF N0E0L0MwQ0FFNzQyQ0MwRjExRUZBMjc4RkQ0Q0M0RjlBRTAyL2VEWXUtZjQ1U1c3 Mld6YjRPMmFZcjVNSTM2cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKpC/RpVZnXGLiUuDpJun0tEw2J5oLkMuAbACMQ21LACwlNkUcs8N5XU Gxa01xXSUxADuG2ijQ+3FUEbOT55DeOT9cfZs7tBe2seTB4AyuUUOLMGag7DDc8u mjWloX6w4kcf5ERPcKOcUUtBPZxVZ2Mbx97DDWelY3+/XgbBjZg3nfKS21uA/Ljm ZYECbipU7tRPdVTJLk+GnohOqqtH3JFIm6Csbh+KFcMSbLphphQE8JSKoBoKKJZy yIfNy7YOt+3+jsPIFc11ps3BLJF4axwnaSdanfnwdEH38jnE2kTaTkCZWkLEkJNP WiXXD3z8bxPoRnF04xhqFvryqSM/iww= -----END CERTIFICATE-----Generated at Wed Jul 23 05:26:49 2025 by rpki-client