$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft File: u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json) Hash identifier: JNBe4vdyNEWajtlLYc++AERcYOh1lwiWi9o4b9NQHtw= Subject key identifier: E5:AD:7D:D8:2C:91:37:E8:46:FE:47:10:26:11:5D:5E:5C:28:46:56 Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE Certificate issuer: /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Certificate serial: 0681 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft Manifest number: 0669 Signing time: Sun 20 Jul 2025 22:19:42 +0000 Manifest this update: Sun 20 Jul 2025 22:19:41 +0000 Manifest next update: Sun 27 Jul 2025 22:19:41 +0000 Files and hashes: 1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: 7ITkw5ZAW9sFSes7Ggv4bMPNB6nFkdcoQRB/hwr04ek=) 2: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: MXG2UaX3e+u+Jgkl2hW9VaZ5bWI3Hg2FUtWl1xPKFxI=) 3: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: A5KK9SQwb+EDWJ4jMnTUQq3SJ0SvbTU26Y/s1pM+n+I=) 4: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: myGu3py2MJoX+9pcsdAEfeXFlVuZbTSedA0MlFyQwmI=) 5: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: IRx8YlQZD3iZNO8ZkV5fm0YkjEB3fazq27IMfHjcxDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1665 (0x681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Validity Not Before: Jul 20 22:19:41 2025 GMT Not After : Jul 27 22:19:41 2025 GMT Subject: CN=687d6b7e-4980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:13:7a:4c:b8:94:2b:35:e8:e7:99:bd:43:b7: cf:38:a3:d5:34:4d:8e:88:3f:77:fd:79:96:84:ed: e3:50:07:41:d9:9e:5b:67:bc:ae:58:c1:23:30:4d: c3:b5:20:77:cb:97:b8:d9:6d:f8:73:fe:20:57:68: e1:5c:85:ad:d2:55:d7:b9:99:0d:9d:2e:15:9b:37: 0d:eb:cf:7e:bc:c6:5d:71:95:cd:8c:b2:8f:c2:3e: 50:e4:78:a2:c3:bb:bf:b8:51:f3:84:55:3b:46:74: 09:5b:4d:93:63:2a:e0:2c:d9:4d:ed:a0:8a:dd:e8: 15:5f:14:fd:e3:56:3f:84:02:9e:31:4e:37:59:bd: ce:8d:44:7d:c3:8b:3d:d6:8c:a6:b9:61:23:ec:50: cf:0b:5c:76:93:39:ce:ac:4e:67:25:23:25:68:ab: 0d:78:dd:ce:37:cd:63:79:a5:0d:53:89:cf:c7:53: b8:97:34:e2:23:2b:0f:d1:b5:2c:fc:86:85:62:0e: cc:2f:79:cd:06:b4:e4:c4:00:ec:9b:21:f6:ff:c2: ed:51:63:75:20:38:46:9e:b8:73:54:5f:e2:01:4b: ad:8f:2b:ee:c7:99:87:76:06:54:15:87:67:60:24: a9:2d:ab:15:68:00:62:28:91:5a:a8:b0:e6:11:21: b7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AD:7D:D8:2C:91:37:E8:46:FE:47:10:26:11:5D:5E:5C:28:46:56 X509v3 Authority Key Identifier: keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:31:bd:91:2f:73:cf:8c:6d:1e:6b:f4:be:43:28:3e:4d:e7: 98:93:77:e9:8c:97:aa:91:b8:6b:8e:6c:4a:b8:20:9d:f2:b9: 7a:a6:34:85:d8:64:ed:a5:dc:9c:5a:49:a3:3e:29:4d:92:f8: 2e:d3:2f:10:33:c0:13:2e:aa:c9:dd:61:fa:62:f9:d9:ad:41: 7f:70:2b:19:81:63:58:4c:20:ef:e7:2b:5f:27:a6:c3:99:e0: 2d:be:ab:be:29:97:6e:e5:28:68:88:dd:79:9c:88:50:73:10: 88:ef:8c:9b:96:fb:d8:c7:c2:44:42:25:e0:f7:85:07:40:1d: 95:63:42:dd:41:49:fe:c7:bd:62:74:b4:24:8b:f1:0a:0b:7b: 25:86:2e:fd:ab:5a:70:53:2e:bf:55:55:e9:5d:cd:78:e7:e5: d3:d4:56:a6:f2:a4:18:1e:46:55:95:33:69:df:c5:fc:4c:1d: 07:6c:e9:d9:ed:35:c0:a2:28:86:e0:66:40:60:62:d8:55:4c: e5:86:47:cd:93:e1:79:7a:2d:0e:44:21:05:99:61:11:0c:ab: 04:e1:c1:6d:70:a3:25:d1:1c:98:80:bb:d7:90:0d:54:39:40: 8f:f8:c5:02:53:7a:37:09:be:3a:04:7c:89:8e:d7:b4:d3:73: 55:86:26:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEJCQzEwMzU2MUFGRDdBOTMwMzZEMUM3MkRENEMwQTdD MkE0RTI5Q0UwHhcNMjUwNzIwMjIxOTQxWhcNMjUwNzI3MjIxOTQxWjAYMRYwFAYD VQQDEw02ODdkNmI3ZS00OTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RN6TLiUKzXo55m9Q7fPOKPVNE2OiD93/XmWhO3jUAdB2Z5bZ7yuWMEjME3D tSB3y5e42W34c/4gV2jhXIWt0lXXuZkNnS4VmzcN689+vMZdcZXNjLKPwj5Q5Hii w7u/uFHzhFU7RnQJW02TYyrgLNlN7aCK3egVXxT941Y/hAKeMU43Wb3OjUR9w4s9 1oymuWEj7FDPC1x2kznOrE5nJSMlaKsNeN3ON81jeaUNU4nPx1O4lzTiIysP0bUs /IaFYg7ML3nNBrTkxADsmyH2/8LtUWN1IDhGnrhzVF/iAUutjyvux5mHdgZUFYdn YCSpLasVaABiKJFaqLDmESG3aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWtfdgs kTfoRv5HECYRXV5cKEZWMB8GA1UdIwQYMBaAFLvBA1Ya/XqTA20cct1MCnwqTinO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC83OEExRDA4RThE NkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVwTURiUnh5M1V3S2ZDcE9L YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U4RURWaHI5ZXBNRGJSeHkzVXdLZkNwT0tjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC83OEExRDA4RThENkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVw TURiUnh5M1V3S2ZDcE9LYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEMb2RL3PPjG0ea/S+Qyg+TeeYk3fpjJeqkbhrjmxKuCCd8rl6pjSF 2GTtpdycWkmjPilNkvgu0y8QM8ATLqrJ3WH6YvnZrUF/cCsZgWNYTCDv5ytfJ6bD meAtvqu+KZdu5ShoiN15nIhQcxCI74yblvvYx8JEQiXg94UHQB2VY0LdQUn+x71i dLQki/EKC3slhi79q1pwUy6/VVXpXc145+XT1Fam8qQYHkZVlTNp38X8TB0HbOnZ 7TXAoiiG4GZAYGLYVUzlhkfNk+F5ei0ORCEFmWERDKsE4cFtcKMl0RyYgLvXkA1U OUCP+MUCU3o3Cb46BHyJjte003NVhiZl -----END CERTIFICATE-----Generated at Tue Jul 22 12:26:40 2025 by rpki-client