$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json) Hash identifier: CLdtMU8HrRhsBA9mqRXX5zrRd1XNdHnWBClTwZzHsVY= Subject key identifier: 6A:45:55:35:E1:66:E5:95:D6:A3:2E:CC:83:82:33:F8:D2:09:F6:C0 Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 141F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft Manifest number: 13CA Signing time: Mon 08 Sep 2025 16:58:41 +0000 Manifest this update: Mon 08 Sep 2025 16:58:41 +0000 Manifest next update: Mon 15 Sep 2025 16:58:41 +0000 Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: Ybam84VLpC8rgQvZPtgoe7H2YCQu2V5KDxKtlRuK05A=) 2: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: bxKpA/oFCU6TUM9crxLIgO78TFK6gY7b8jSCF6lkl2Q=) 3: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: Ie+fFLUk+hkh8iPsi0JIDwR97rjtnpIzqO2/djh9dOA=) 4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: HMDXcvVMEGAxoOC++6wcObudAAOApyw/6bDY30a1r+o=) 5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: bwsT9LHkujI+JrOu04/8rGiF6KuhSDYaJy2PKrf04nk=) 6: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: vIOfq2VGA/o5BqEJqyV+v1G5m5lQGi2kmLP/YtnJAmE=) 7: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: l4uHSTMAHvz3K39iQ1N6BJocMGP4W2EFJHrCsRCiw/k=) 8: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: 0Wf6MrY856EXSgNTseMSxFkk6LBzj+vW0CkBQhFM5Vo=) 9: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wsYRvalqXpbWZCIqLrO6x3uxF4QcGxGmLPv4fG6+ndk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5151 (0x141f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: Sep 8 16:58:41 2025 GMT Not After : Sep 15 16:58:41 2025 GMT Subject: CN=68bf0b41-ae9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:70:f3:f7:eb:f4:f5:3a:e3:e7:7f:ce:35:70: 2f:61:e8:99:53:7d:8f:0e:2c:95:2d:c9:92:71:07: 47:cb:83:40:5b:d5:58:57:c9:3b:bf:18:74:0c:e4: 37:8b:07:ad:5c:ca:cc:78:6d:8d:f8:c4:40:e8:c9: 89:26:30:a9:76:55:61:de:d3:78:7f:3b:72:68:77: 62:0b:ce:a0:ad:19:a9:11:01:26:2d:b3:fd:db:cd: 99:07:f2:d6:24:12:c1:36:7b:e2:c8:e8:0d:3f:c4: f0:6d:83:31:69:2d:9f:b4:89:04:c1:da:ee:58:d7: b0:66:37:e9:49:08:a2:30:13:8c:81:1e:9c:be:2b: e5:59:59:8e:22:f8:55:dc:e8:39:d9:98:d8:90:9b: 91:9d:65:97:b2:95:9c:19:36:a0:be:e1:b7:06:fd: 71:fe:c0:4f:c8:c7:76:9d:34:6e:85:2f:41:45:a6: 33:91:69:23:19:ad:9a:27:3c:64:9d:5f:b8:7e:78: 74:11:91:fb:7f:15:ba:df:45:66:39:6c:4d:d1:37: bb:86:0c:e0:d1:4d:38:26:0d:f5:7b:83:fb:a7:9d: ef:9a:e0:1d:2b:aa:b6:ee:6e:5b:c8:08:9d:a2:06: 4f:e2:f0:f6:32:66:7f:42:a7:d6:79:67:54:73:ca: cb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:45:55:35:E1:66:E5:95:D6:A3:2E:CC:83:82:33:F8:D2:09:F6:C0 X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:f9:10:fe:36:f5:2e:91:48:8e:b7:48:24:23:97:dc:22:30: b8:fd:14:5c:94:a8:20:4c:d5:71:33:61:ad:70:40:84:b7:bb: 47:53:e9:0c:5d:e4:19:17:fe:e6:64:9f:60:07:b1:0d:ee:e7: ac:43:3b:59:f2:ae:aa:54:43:c8:b1:bf:eb:8a:e1:90:2c:1b: 76:3d:f8:23:68:98:78:05:99:4f:71:25:b8:84:dd:72:6c:23: 58:2f:a2:3a:11:e9:3d:fd:a2:30:82:5d:07:88:f3:47:69:7c: 39:68:db:8a:aa:3f:4b:d7:c4:be:f7:2f:d2:80:32:de:ee:fc: 07:68:d9:be:54:0a:81:96:48:5c:44:1d:d4:11:e9:9e:19:20: df:f6:62:2a:6f:6d:11:1f:6a:c5:b7:63:ff:d9:ea:c4:cc:5c: 4c:23:43:0e:3d:5b:a3:d1:ac:74:9e:35:cc:1c:24:ea:51:2f: 4d:48:26:81:a0:d6:bf:ad:6d:a2:c5:9b:5e:d4:03:b6:4a:2a: 49:15:58:a3:d9:da:b1:6f:43:9d:91:3d:cd:ca:42:1f:a0:5a: 15:ac:b2:c1:af:a9:be:e0:e6:7f:e2:fb:b1:76:18:56:32:53: 47:c6:8d:97:7d:bc:5f:8a:4d:d9:a6:bc:4d:09:01:b1:f8:d7: 96:02:19:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjUwOTA4MTY1ODQxWhcNMjUwOTE1MTY1ODQxWjAYMRYwFAYD VQQDEw02OGJmMGI0MS1hZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7HDz9+v09Trj53/ONXAvYeiZU32PDiyVLcmScQdHy4NAW9VYV8k7vxh0DOQ3 iwetXMrMeG2N+MRA6MmJJjCpdlVh3tN4fztyaHdiC86grRmpEQEmLbP9282ZB/LW JBLBNnviyOgNP8TwbYMxaS2ftIkEwdruWNewZjfpSQiiMBOMgR6cvivlWVmOIvhV 3Og52ZjYkJuRnWWXspWcGTagvuG3Bv1x/sBPyMd2nTRuhS9BRaYzkWkjGa2aJzxk nV+4fnh0EZH7fxW630VmOWxN0Te7hgzg0U04Jg31e4P7p53vmuAdK6q27m5byAid ogZP4vD2MmZ/QqfWeWdUc8rLDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpFVTXh ZuWV1qMuzIOCM/jSCfbAMB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3+RD+NvUukUiOt0gkI5fcIjC4/RRclKggTNVxM2GtcECEt7tHU+kM XeQZF/7mZJ9gB7EN7uesQztZ8q6qVEPIsb/riuGQLBt2PfgjaJh4BZlPcSW4hN1y bCNYL6I6Eek9/aIwgl0HiPNHaXw5aNuKqj9L18S+9y/SgDLe7vwHaNm+VAqBlkhc RB3UEemeGSDf9mIqb20RH2rFt2P/2erEzFxMI0MOPVuj0ax0njXMHCTqUS9NSCaB oNa/rW2ixZte1AO2SipJFVij2dqxb0OdkT3NykIfoFoVrLLBr6m+4OZ/4vuxdhhW MlNHxo2Xfbxfik3ZprxNCQGx+NeWAhlu -----END CERTIFICATE-----Generated at Tue Sep 9 18:24:41 2025 by rpki-client