$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft File: eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json) Hash identifier: lE4mFB2OyymvjVDW6R/CQ6I7op341bDAlj0OKPR2pmg= Subject key identifier: 86:85:FE:01:B0:DC:A0:36:BE:12:7F:63:24:0C:6D:0D:61:93:8B:F6 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 118F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft Manifest number: 110E Signing time: Mon 20 Oct 2025 17:47:40 +0000 Manifest this update: Mon 20 Oct 2025 17:47:40 +0000 Manifest next update: Mon 27 Oct 2025 17:47:40 +0000 Files and hashes: 1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: dHKsrUSRlPuuyWTNbFNs5izcZNUkGC1KNVscEwiVbbw=) 2: 7D670EA8F67A11EC92B5670FC4F9AE02.roa (hash: 9Odh9o3TlIW60dRdjsxDVQV+3vyhn2H48fPAT6vn3+M=) 3: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: UR2Z7oMUzbnedaI2LVS9uGRBFC7eB54GSgDAmYPW63Q=) 4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: W0JFS6tmn8XTuKql8AHkVwyZGDrJTsFtDN1V3+Sy2tA=) 5: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: +tn7Z6fq6avHjQp2bglrCkd8E2Sa27UKrn3GOMUj6b8=) 6: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: MLOX+4zM45smBurkZaVj3Oi8atSTyoZEzmqXwXoi1VA=) 7: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: KQfpgqTCm38R9/gLkZZKqv0IIflUZ1N/AO5E6KaW3hc=) 8: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: hyfl49PKKB2ONDtyk43wvbgkIsmowZKGDNVFA1XCOPA=) 9: CE0122802D4211EA907A566EC4F9AE02.roa (hash: Av4l0HsggCXslSxN1XLmPQb/NQp3V/CmXQCgKkE+IxE=) 10: 93F95BE673C711E98CD6D335C4F9AE02.roa (hash: 2+EzbP/f4S7Jeaq3EYQS0mWwY430dyRIPuynNaHcMvc=) 11: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: Za7LOD1x/AWq47LZxakqACtbC+NnfwEUEJeBoexu1ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4495 (0x118f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: Oct 20 17:47:40 2025 GMT Not After : Oct 27 17:47:40 2025 GMT Subject: CN=68f675bc-66e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5f:c1:2b:ec:98:1f:8a:ae:8f:6c:cc:a1:cb: ae:a8:31:00:b8:b4:bb:e1:3b:66:71:49:0b:a4:48: d7:4c:e0:24:af:0d:d1:8a:8c:fa:7d:11:d0:bb:e8: c0:fc:be:82:93:bb:c4:20:ab:fe:4c:aa:b9:75:5e: 93:4b:d7:d8:4f:90:d5:77:05:a5:0f:bb:79:a0:28: 61:a7:84:8e:6e:f3:d0:53:b6:b1:b6:31:96:f1:fa: 45:3d:d8:2a:6c:70:24:30:7e:d3:25:47:bc:14:9c: 41:84:c3:f0:d4:57:ee:f5:e4:b5:14:77:ae:8f:ac: 67:28:09:86:7f:57:62:90:92:27:f1:19:91:a9:ea: b3:72:4f:1c:cc:80:82:8c:55:fd:30:4d:21:1d:43: 49:49:53:03:ca:79:00:e5:13:a3:2a:39:a6:b1:84: cc:46:b7:5a:ea:e4:58:6e:b8:1c:cb:90:a7:c1:6c: 00:dc:61:d9:ec:27:5b:3e:1a:2e:47:a1:f4:e0:ae: 31:ec:49:03:16:d5:85:d0:0a:03:5c:63:fe:30:54: 02:01:fd:f9:dd:20:6d:2c:25:db:53:be:e3:ab:df: 26:d0:c2:67:10:33:76:52:af:ab:19:97:85:40:c7: c6:93:21:04:54:67:ec:76:eb:ec:7b:f7:41:39:0d: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:85:FE:01:B0:DC:A0:36:BE:12:7F:63:24:0C:6D:0D:61:93:8B:F6 X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:59:a5:df:10:a0:19:f3:12:21:10:c8:b7:f9:67:8d:35:ca: 55:8d:51:03:13:13:51:df:35:23:58:9c:38:08:90:06:4d:2b: dc:76:6f:cf:4a:38:d8:0f:2d:c7:2b:ba:73:ee:7b:9d:12:e1: 75:ec:2d:b1:66:f6:90:78:58:b7:08:59:0e:0a:2d:1a:57:27: d7:f4:89:6a:2c:4b:15:ea:99:44:78:f5:34:67:89:2b:0b:b1: f3:1b:e7:4c:8d:5b:2b:4e:46:35:d7:c0:24:57:1f:da:a9:22: 9a:81:59:ed:93:d9:47:48:a1:38:32:15:0c:2d:1c:e8:2d:b6: 87:b9:4d:3e:08:9c:27:c8:e5:35:79:a9:58:c6:3b:42:cf:42: 44:2b:20:ee:5a:23:2a:45:36:32:8c:22:67:3a:6a:5c:89:4c: aa:0a:46:1c:25:74:9d:a9:1f:85:e7:2a:7a:bc:1f:bb:bd:31: 43:d1:2a:87:b2:cf:99:b3:9d:16:47:85:7a:0c:a4:be:d3:fb: 27:27:25:2d:99:ca:91:33:93:c9:81:23:7f:f7:70:7f:c9:36: 4e:ec:51:0e:b4:c9:c4:5c:67:cb:2f:1a:e3:fe:71:eb:c4:5a: 34:32:fe:8f:bf:c2:47:a1:88:05:47:81:af:80:07:12:a2:3b: 30:5b:a5:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjUxMDIwMTc0NzQwWhcNMjUxMDI3MTc0NzQwWjAYMRYwFAYD VQQDEw02OGY2NzViYy02NmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3V/BK+yYH4quj2zMocuuqDEAuLS74TtmcUkLpEjXTOAkrw3Rioz6fRHQu+jA /L6Ck7vEIKv+TKq5dV6TS9fYT5DVdwWlD7t5oChhp4SObvPQU7axtjGW8fpFPdgq bHAkMH7TJUe8FJxBhMPw1Ffu9eS1FHeuj6xnKAmGf1dikJIn8RmRqeqzck8czICC jFX9ME0hHUNJSVMDynkA5ROjKjmmsYTMRrda6uRYbrgcy5CnwWwA3GHZ7CdbPhou R6H04K4x7EkDFtWF0AoDXGP+MFQCAf353SBtLCXbU77jq98m0MJnEDN2Uq+rGZeF QMfGkyEEVGfsduvse/dBOQ15YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIaF/gGw 3KA2vhJ/YyQMbQ1hk4v2MB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTZBMy83NzI3Q0U1QzM4QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJp VUdVUEQ5eWR2RlU4RE95akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChWaXfEKAZ8xIhEMi3+WeNNcpVjVEDExNR3zUjWJw4CJAGTSvcdm/P SjjYDy3HK7pz7nudEuF17C2xZvaQeFi3CFkOCi0aVyfX9IlqLEsV6plEePU0Z4kr C7HzG+dMjVsrTkY118AkVx/aqSKagVntk9lHSKE4MhUMLRzoLbaHuU0+CJwnyOU1 ealYxjtCz0JEKyDuWiMqRTYyjCJnOmpciUyqCkYcJXSdqR+F5yp6vB+7vTFD0SqH ss+Zs50WR4V6DKS+0/snJyUtmcqRM5PJgSN/93B/yTZO7FEOtMnEXGfLLxrj/nHr xFo0Mv6Pv8JHoYgFR4GvgAcSojswW6VX -----END CERTIFICATE-----Generated at Wed Oct 22 03:22:51 2025 by rpki-client