$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft File: Ed9s5Nq5aE7fbPXgPf3shvFc174.mft (raw, json) Hash identifier: L1UoUmuK4s4kq5GrgAI+MukZ1ka2FV4O41G9B/vIqBc= Subject key identifier: 29:1A:C0:DC:A7:BD:8B:FF:53:47:5B:93:4A:3B:CF:4D:1D:EF:45:DE Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE Certificate issuer: /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Certificate serial: 0AFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft Manifest number: 0AF3 Signing time: Tue 22 Jul 2025 19:37:41 +0000 Manifest this update: Tue 22 Jul 2025 19:37:41 +0000 Manifest next update: Tue 29 Jul 2025 19:37:41 +0000 Files and hashes: 1: Ed9s5Nq5aE7fbPXgPf3shvFc174.crl (hash: Aen6/g+vIqzXh6VMt8IXOdV1Zy6XQksLzqr+eV9cvV8=) 2: C66770F24B9111EA9A72503CC4F9AE02.roa (hash: 8QV3Z7HQrXKgQcgsCkmTuSXwKLorUwTjpR6lcWwX/xQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 19:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2812 (0xafc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DEE, serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Validity Not Before: Jul 22 19:37:41 2025 GMT Not After : Jul 29 19:37:41 2025 GMT Subject: CN=687fe885-5f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:af:9a:33:3d:82:13:5c:f5:83:71:27:1c:f1: 7d:09:b4:5a:48:08:1f:17:f8:ea:da:b5:64:ec:29: c7:78:5f:99:f1:5d:f6:0b:1a:33:ce:88:4a:9b:52: ee:7b:7e:6f:ce:35:d0:ae:a2:72:e6:27:6e:f7:49: fe:07:c8:5a:e8:16:ac:b6:b0:54:3f:2f:01:62:bf: 83:b6:53:41:ce:39:ed:af:5c:b1:cd:dc:74:86:6b: 5a:d7:b5:5e:ad:af:27:8b:63:0e:ee:8f:e3:07:c1: 60:17:bc:77:9b:97:6b:87:0f:31:bb:bb:80:44:3b: b7:e2:8e:d6:13:15:8a:7a:39:34:51:63:a3:6e:9f: 4f:ba:99:b0:6f:57:bf:ab:de:f3:6a:3a:08:0b:31: 52:d7:fd:37:04:6c:0b:dd:88:32:79:80:7c:b4:4f: 2b:35:7d:a0:20:1b:4c:68:7c:da:7f:75:1c:f1:be: 5a:95:90:9c:2e:e2:39:2c:1a:d0:0a:00:81:e2:c5: 2d:40:a8:c7:1b:f3:78:12:71:84:43:26:ca:6e:ce: 89:cb:20:66:37:77:85:0b:0d:71:d7:52:89:3c:e0: e4:40:1b:db:eb:cd:03:4e:b9:90:01:dd:57:cf:2f: de:58:42:49:8e:61:27:60:c7:b1:6a:34:fb:00:5a: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1A:C0:DC:A7:BD:8B:FF:53:47:5B:93:4A:3B:CF:4D:1D:EF:45:DE X509v3 Authority Key Identifier: keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:40:47:92:13:93:30:e8:4e:60:ea:70:4f:f1:4f:9d:23:a0: 3c:72:d8:49:a6:1a:00:19:6f:81:98:fa:9e:45:7e:49:c8:14: e5:5b:a6:80:90:2b:ed:cc:fb:14:b7:f9:50:0e:c3:bc:7f:a1: 9f:c8:cb:6a:4a:ed:1a:39:4d:30:be:a1:e2:21:06:dc:a3:c6: 64:16:d3:bf:4a:91:6f:f3:3b:4b:82:15:8a:04:c2:ba:7d:71: 20:99:b9:b7:07:e5:51:51:51:51:e1:f3:c3:42:98:0a:48:11: ea:ff:21:5e:21:87:c3:4d:c7:33:e8:c6:f2:aa:9c:35:4c:66: 46:b7:24:24:eb:ab:cd:dd:cf:dc:1b:e1:a5:82:df:af:89:93: 63:9c:2e:25:44:d6:f2:5d:74:93:68:0c:74:b5:40:7e:41:d6: 7b:54:00:ff:fb:b9:1b:fe:37:4a:38:a1:5d:12:bc:78:9b:be: fb:90:0b:fa:63:c2:fd:23:50:2d:1e:19:ce:3e:34:45:7d:c1: b6:f9:3d:eb:c1:63:ca:4d:31:79:af:a0:d5:b1:21:58:21:12: 6e:7d:a4:ee:57:c2:a5:ad:f6:02:cf:f5:df:ec:21:c9:37:28: c4:f0:ff:6b:bc:0e:21:ec:ad:20:81:5a:94:f8:49:cd:91:b9: 1b:4c:e7:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVERUUxMTAvBgNVBAUTKDExREY2Q0U0REFCOTY4NEVERjZDRjVFMDNERkRFQzg2 RjE1Q0Q3QkUwHhcNMjUwNzIyMTkzNzQxWhcNMjUwNzI5MTkzNzQxWjAYMRYwFAYD VQQDEw02ODdmZTg4NS01Zjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6+aMz2CE1z1g3EnHPF9CbRaSAgfF/jq2rVk7CnHeF+Z8V32CxozzohKm1Lu e35vzjXQrqJy5idu90n+B8ha6BastrBUPy8BYr+DtlNBzjntr1yxzdx0hmta17Ve ra8ni2MO7o/jB8FgF7x3m5drhw8xu7uARDu34o7WExWKejk0UWOjbp9Pupmwb1e/ q97zajoICzFS1/03BGwL3YgyeYB8tE8rNX2gIBtMaHzaf3Uc8b5alZCcLuI5LBrQ CgCB4sUtQKjHG/N4EnGEQybKbs6JyyBmN3eFCw1x11KJPODkQBvb680DTrmQAd1X zy/eWEJJjmEnYMexajT7AFon+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkawNyn vYv/U0dbk0o7z00d70XeMB8GA1UdIwQYMBaAFBHfbOTauWhO32z14D397IbxXNe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURFRS9BREQ2NUUyODRC OTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFFN2ZiUFhnUGYzc2h2RmMx NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkOXM1TnE1YUU3ZmJQWGdQZjNzaHZGYzE3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURFRS9BREQ2NUUyODRCOTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFF N2ZiUFhnUGYzc2h2RmMxNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTQEeSE5Mw6E5g6nBP8U+dI6A8cthJphoAGW+BmPqeRX5JyBTlW6aA kCvtzPsUt/lQDsO8f6GfyMtqSu0aOU0wvqHiIQbco8ZkFtO/SpFv8ztLghWKBMK6 fXEgmbm3B+VRUVFR4fPDQpgKSBHq/yFeIYfDTccz6Mbyqpw1TGZGtyQk66vN3c/c G+Glgt+viZNjnC4lRNbyXXSTaAx0tUB+QdZ7VAD/+7kb/jdKOKFdErx4m777kAv6 Y8L9I1AtHhnOPjRFfcG2+T3rwWPKTTF5r6DVsSFYIRJufaTuV8KlrfYCz/Xf7CHJ NyjE8P9rvA4h7K0ggVqU+EnNkbkbTOdc -----END CERTIFICATE-----Generated at Wed Jul 23 12:51:37 2025 by rpki-client