$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft File: eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json) Hash identifier: A/Mk259ao6uV910AHmJ1GObghgfjh1qiqqHELtCLRrM= Subject key identifier: 3E:E3:37:A1:D1:2E:D7:3F:E1:B8:B3:5E:22:CB:7F:B9:99:7B:1C:45 Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft Manifest number: 012C Signing time: Fri 19 Sep 2025 05:11:57 +0000 Manifest this update: Fri 19 Sep 2025 05:11:56 +0000 Manifest next update: Fri 26 Sep 2025 05:11:56 +0000 Files and hashes: 1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: J5FaLDy06ndo3hWF1GEBVBDoNeKSXHam9k9K/ChzrV4=) 2: B9C587ACA61911EFAD319873C4F9AE02.roa (hash: UVNnVE482CTuury1gOUSOm7uwVR741BfWPntovKeG3A=) 3: BA8A5FBEA61911EFAD319873C4F9AE02.roa (hash: GxG7PljqaIsL4NG1p4pqVTS9JJNKWXLA96c3vNu2FFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Validity Not Before: Sep 19 05:11:56 2025 GMT Not After : Sep 26 05:11:56 2025 GMT Subject: CN=68cce61d-064d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a5:56:a7:22:83:a6:f8:86:4e:73:da:d5:ce: 8c:34:c1:05:6f:13:0e:78:ec:e1:b0:4d:bd:d5:16: 78:c6:49:62:81:b7:20:f6:0d:ed:09:92:0e:84:8b: b1:14:cf:37:f9:7e:2e:a6:8f:24:c1:cf:6d:d6:e5: ae:95:53:45:4d:e5:3c:f0:07:23:ab:a7:15:8b:46: 91:46:a7:fd:70:0f:40:50:94:cd:fc:d4:b9:89:af: 84:4a:2a:52:ab:a3:2f:b7:8a:5a:29:70:d9:bb:5e: 59:25:6a:76:11:3e:8e:0f:9b:1c:b3:ba:e7:12:8a: 60:2c:f8:84:8d:d1:fe:b6:6f:13:97:96:7f:64:0c: 29:d8:47:bc:34:85:12:da:b2:94:0c:3d:f7:d8:14: bc:81:78:90:36:2b:61:93:ad:f1:5a:46:da:2b:67: 2a:48:3d:00:0e:4b:c6:1c:b1:10:f4:6c:61:af:20: f1:c4:4f:0c:9d:ff:da:35:1a:85:d6:24:0a:21:db: bd:4f:6d:e4:73:e3:c1:30:c1:c1:89:e2:98:5f:35: f7:9d:73:81:f8:7b:a5:74:f2:a3:66:e8:bf:5f:2b: d7:79:b1:1c:a0:8e:70:3a:ce:86:ff:f1:07:e0:88: a1:d0:bb:b9:9d:0b:1e:63:ba:43:50:21:79:e2:c0: c6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E3:37:A1:D1:2E:D7:3F:E1:B8:B3:5E:22:CB:7F:B9:99:7B:1C:45 X509v3 Authority Key Identifier: keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:43:ce:11:55:3c:39:60:cf:ef:44:db:25:9e:2c:9f:68:8e: f0:c2:12:04:82:6c:ec:4a:31:f5:a2:d6:27:ab:06:d9:53:da: a1:de:45:19:84:c6:c9:d3:a1:49:35:cb:7b:2a:dd:32:b9:c2: 6f:a0:09:03:12:17:cf:c4:7e:7b:e0:dc:f4:12:01:6e:43:b2: 85:1e:f0:30:2a:f8:63:7e:2e:dc:d5:bb:6d:43:48:74:27:eb: 57:0e:51:b6:cc:83:df:9a:9f:1d:2d:77:32:1f:d5:92:a3:d9: c5:a5:cd:df:65:f7:c1:1d:49:0d:0c:84:2f:46:76:f7:4b:ca: b5:85:81:4a:1b:4a:2c:38:8e:27:48:54:b8:79:5f:10:0a:7e: b3:6c:a4:cd:b9:8f:6f:0c:10:66:5b:61:25:1f:78:50:b8:35: 77:d0:4e:26:d2:e2:a1:58:a0:99:82:ad:23:59:70:7e:ba:59: ce:ed:4f:39:53:bb:c2:b6:0d:31:61:5d:aa:b8:66:ef:ec:dd: e7:7b:7f:d5:12:52:45:6a:d9:e5:9a:da:a5:79:41:ca:1e:d0: 7f:67:21:4b:9f:ad:1b:a3:35:1a:76:31:e9:55:dd:fe:e0:98: b4:8e:9d:f0:24:25:e3:c8:a1:c4:5e:a3:25:30:79:b1:00:91: 9c:03:0f:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKDc4MzlBMUZDMDE3NDAyNEJDQkE4NEQwMTJEM0VDNENB NDY3OUFDNzEwHhcNMjUwOTE5MDUxMTU2WhcNMjUwOTI2MDUxMTU2WjAYMRYwFAYD VQQDEw02OGNjZTYxZC0wNjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KVWpyKDpviGTnPa1c6MNMEFbxMOeOzhsE291RZ4xkligbcg9g3tCZIOhIux FM83+X4upo8kwc9t1uWulVNFTeU88Acjq6cVi0aRRqf9cA9AUJTN/NS5ia+ESipS q6Mvt4paKXDZu15ZJWp2ET6OD5scs7rnEopgLPiEjdH+tm8Tl5Z/ZAwp2Ee8NIUS 2rKUDD332BS8gXiQNithk63xWkbaK2cqSD0ADkvGHLEQ9GxhryDxxE8Mnf/aNRqF 1iQKIdu9T23kc+PBMMHBieKYXzX3nXOB+HuldPKjZui/XyvXebEcoI5wOs6G//EH 4Iih0Lu5nQseY7pDUCF54sDGQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7jN6HR Ltc/4bizXiLLf7mZexxFMB8GA1UdIwQYMBaAFHg5ofwBdAJLy6hNAS0+xMpGeaxx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS84ODJGMjMyMEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFrdkxxRTBCTFQ3RXlrWjVy SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VEbWhfQUYwQWt2THFFMEJMVDdFeWtaNXJIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVDOS84ODJGMjMyMEM5RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFr dkxxRTBCTFQ3RXlrWjVySEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzQ84RVTw5YM/vRNslniyfaI7wwhIEgmzsSjH1otYnqwbZU9qh3kUZ hMbJ06FJNct7Kt0yucJvoAkDEhfPxH574Nz0EgFuQ7KFHvAwKvhjfi7c1bttQ0h0 J+tXDlG2zIPfmp8dLXcyH9WSo9nFpc3fZffBHUkNDIQvRnb3S8q1hYFKG0osOI4n SFS4eV8QCn6zbKTNuY9vDBBmW2ElH3hQuDV30E4m0uKhWKCZgq0jWXB+ulnO7U85 U7vCtg0xYV2quGbv7N3ne3/VElJFatnlmtqleUHKHtB/ZyFLn60bozUadjHpVd3+ 4Ji0jp3wJCXjyKHEXqMlMHmxAJGcAw8n -----END CERTIFICATE-----Generated at Fri Sep 19 07:30:47 2025 by rpki-client