$ rpki-client -vvf rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft File: EDki63fZQHF8gZ4oyWZGKUgLvOU.mft (raw, json) Hash identifier: D3+uu1OH/kgrv3J+MKZDW9D7aMSh+VEnxD9QZchJzTI= Subject key identifier: 28:27:C5:39:6D:CF:BC:DC:88:C7:8A:62:78:BD:97:16:28:77:FE:D8 Authority key identifier: 10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5 Certificate issuer: /CN=A91A030C/serialNumber=103922EB77D940717C819E28C9664629480BBCE5 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft Manifest number: 66 Signing time: Fri 05 Sep 2025 07:31:36 +0000 Manifest this update: Fri 05 Sep 2025 07:31:35 +0000 Manifest next update: Fri 12 Sep 2025 07:31:35 +0000 Files and hashes: 1: EDki63fZQHF8gZ4oyWZGKUgLvOU.crl (hash: hsYvVjkS9lSZHHyV/hE1sLiyFvo8o0jzHlzm+K/kYs0=) 2: 17D98518FD6911EFA889E84DC4F9AE02.roa (hash: TAYiLVNUfBDudM++NA0KlcXDtTA+39+D4En0/M5r2I8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A030C, serialNumber=103922EB77D940717C819E28C9664629480BBCE5 Validity Not Before: Sep 5 07:31:35 2025 GMT Not After : Sep 12 07:31:35 2025 GMT Subject: CN=68ba91d8-548b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:63:35:03:3f:fd:03:86:d6:99:de:14:a2:4a: 96:02:56:ec:07:da:42:6f:e5:0c:ec:bf:f1:e4:1c: 3b:38:4f:41:9f:90:15:89:6d:88:81:b0:61:c7:b7: ae:33:c0:91:d6:3b:8f:5c:27:ce:68:e3:1d:05:67: a8:81:36:26:70:05:b1:c5:e2:f1:28:11:93:f7:73: 60:de:b1:64:44:02:e7:16:f5:bf:74:75:d7:c5:74: fb:6b:42:d2:80:a3:d7:65:60:ac:cf:b4:4b:d1:02: 06:23:00:fd:e0:01:7f:5c:f5:f0:38:b2:ef:04:46: e0:fc:76:1e:7d:4d:23:10:90:81:94:4e:79:c7:d2: bd:ae:dd:38:32:a1:bb:68:48:16:29:66:57:bc:90: 3a:29:6e:1f:4b:e0:57:8d:b6:6e:46:19:b3:12:a9: c1:34:e3:8e:84:af:5e:23:ac:e4:a4:10:e9:68:3e: e5:2c:95:88:2b:5d:00:1f:d2:6f:a7:96:04:0e:30: 48:e8:43:58:dc:55:a9:34:5b:1d:3f:7c:16:38:2a: ec:33:29:b5:ca:92:2a:6c:4e:f0:dc:a3:b7:a8:3f: e5:d5:bd:90:b1:ae:c8:97:09:1f:1a:ec:eb:89:e0: 97:e7:5b:4b:f9:ee:3d:ba:77:22:a2:23:17:c7:38: d4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:27:C5:39:6D:CF:BC:DC:88:C7:8A:62:78:BD:97:16:28:77:FE:D8 X509v3 Authority Key Identifier: keyid:10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:a2:c5:d4:b5:c7:01:1c:6f:38:ed:67:7b:92:49:28:93:5e: 5f:fa:3f:a4:7b:81:19:1e:5b:79:b2:87:ef:12:a9:76:79:1b: 2d:a2:46:80:c4:74:70:e6:7c:60:f4:3d:58:d7:68:22:f4:db: e8:0e:63:36:3c:06:ed:0c:e2:a3:60:fd:39:e8:a7:10:c4:53: fa:da:0b:b7:b2:04:4a:be:21:de:c2:10:6e:27:67:81:50:ae: e9:b9:b9:e0:8e:a1:6f:2c:43:29:bb:76:07:63:ec:1b:32:0c: c3:b4:64:78:24:70:c4:a9:12:e2:ce:c2:35:1c:1f:5b:aa:fe: bb:65:cf:fb:7d:4c:80:f3:dc:dd:8a:7d:67:19:44:2d:0a:90: c5:f3:f7:44:f0:66:ad:2d:06:d2:bb:86:27:f7:fd:d0:9d:82: 6f:16:ba:2f:83:b0:bc:08:43:b4:4e:92:c2:3a:ed:70:80:bb: 50:a1:95:40:85:c9:4f:c0:2c:26:9f:9d:7d:8b:b5:ec:a2:36: a0:08:46:70:1e:84:05:f7:88:a4:8c:2f:86:63:65:51:11:ce: 93:ce:3b:07:18:d9:1b:a4:5e:74:d6:5b:df:29:8a:68:d0:bf: 8b:74:16:0c:56:5e:cc:bf:5a:d7:41:b8:67:3f:e2:2f:dd:02: dc:87:dd:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDMwQzExMC8GA1UEBRMoMTAzOTIyRUI3N0Q5NDA3MTdDODE5RTI4Qzk2NjQ2Mjk0 ODBCQkNFNTAeFw0yNTA5MDUwNzMxMzVaFw0yNTA5MTIwNzMxMzVaMBgxFjAUBgNV BAMTDTY4YmE5MWQ4LTU0OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBYzUDP/0DhtaZ3hSiSpYCVuwH2kJv5Qzsv/HkHDs4T0GfkBWJbYiBsGHHt64z wJHWO49cJ85o4x0FZ6iBNiZwBbHF4vEoEZP3c2DesWREAucW9b90ddfFdPtrQtKA o9dlYKzPtEvRAgYjAP3gAX9c9fA4su8ERuD8dh59TSMQkIGUTnnH0r2u3Tgyobto SBYpZle8kDopbh9L4FeNtm5GGbMSqcE0446Er14jrOSkEOloPuUslYgrXQAf0m+n lgQOMEjoQ1jcVak0Wx0/fBY4KuwzKbXKkipsTvDco7eoP+XVvZCxrsiXCR8a7OuJ 4JfnW0v57j26dyKiIxfHONT/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKCfFOW3P vNyIx4pieL2XFih3/tgwHwYDVR0jBBgwFoAUEDki63fZQHF8gZ4oyWZGKUgLvOUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwMzBDL0E3MDM2NzAwRjQ3 NjExRUZCRTQ2NkQ3RkM0RjlBRTAyL0VEa2k2M2ZaUUhGOGdaNG95V1pHS1VnTHZP VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRURraTYzZlpRSEY4Z1o0b3lXWkdLVWdMdk9VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw MzBDL0E3MDM2NzAwRjQ3NjExRUZCRTQ2NkQ3RkM0RjlBRTAyL0VEa2k2M2ZaUUhG OGdaNG95V1pHS1VnTHZPVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL2ixdS1xwEcbzjtZ3uSSSiTXl/6P6R7gRkeW3myh+8SqXZ5Gy2iRoDE dHDmfGD0PVjXaCL02+gOYzY8Bu0M4qNg/TnopxDEU/raC7eyBEq+Id7CEG4nZ4FQ rum5ueCOoW8sQym7dgdj7BsyDMO0ZHgkcMSpEuLOwjUcH1uq/rtlz/t9TIDz3N2K fWcZRC0KkMXz90TwZq0tBtK7hif3/dCdgm8Wui+DsLwIQ7ROksI67XCAu1ChlUCF yU/ALCafnX2LteyiNqAIRnAehAX3iKSML4ZjZVERzpPOOwcY2RukXnTWW98pimjQ v4t0FgxWXsy/WtdBuGc/4i/dAtyH3TM= -----END CERTIFICATE-----Generated at Sat Sep 6 16:25:53 2025 by rpki-client