$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft File: eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json) Hash identifier: 4DR7BBSmUYHnd5qWwpdvL3DXI34So7eD37qLQ5gU3pU= Subject key identifier: 79:86:64:10:B5:50:3F:EA:4C:23:65:1E:78:33:48:E3:A2:1D:D7:B1 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 1178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft Manifest number: 10F7 Signing time: Thu 04 Sep 2025 17:29:42 +0000 Manifest this update: Thu 04 Sep 2025 17:29:41 +0000 Manifest next update: Thu 11 Sep 2025 17:29:41 +0000 Files and hashes: 1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: mBcIBLuOziy99wWqs6oZi76Ro7eneVj+efRDRKTApG0=) 2: 7D670EA8F67A11EC92B5670FC4F9AE02.roa (hash: 9Odh9o3TlIW60dRdjsxDVQV+3vyhn2H48fPAT6vn3+M=) 3: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: UR2Z7oMUzbnedaI2LVS9uGRBFC7eB54GSgDAmYPW63Q=) 4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: W0JFS6tmn8XTuKql8AHkVwyZGDrJTsFtDN1V3+Sy2tA=) 5: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: +tn7Z6fq6avHjQp2bglrCkd8E2Sa27UKrn3GOMUj6b8=) 6: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: MLOX+4zM45smBurkZaVj3Oi8atSTyoZEzmqXwXoi1VA=) 7: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: KQfpgqTCm38R9/gLkZZKqv0IIflUZ1N/AO5E6KaW3hc=) 8: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: hyfl49PKKB2ONDtyk43wvbgkIsmowZKGDNVFA1XCOPA=) 9: CE0122802D4211EA907A566EC4F9AE02.roa (hash: Av4l0HsggCXslSxN1XLmPQb/NQp3V/CmXQCgKkE+IxE=) 10: 93F95BE673C711E98CD6D335C4F9AE02.roa (hash: 2+EzbP/f4S7Jeaq3EYQS0mWwY430dyRIPuynNaHcMvc=) 11: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: Za7LOD1x/AWq47LZxakqACtbC+NnfwEUEJeBoexu1ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 17:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4472 (0x1178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: Sep 4 17:29:41 2025 GMT Not After : Sep 11 17:29:41 2025 GMT Subject: CN=68b9cc86-73e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:63:28:5a:c4:6f:e3:dd:67:54:76:ec:6b: 1f:c1:74:ce:ca:0a:05:9d:1e:ba:2a:b5:50:64:09: 04:5e:09:a5:a7:f8:a7:da:b3:10:d7:d9:1e:12:cc: ee:dc:6b:8e:a9:a3:4b:ca:93:74:63:32:49:01:5a: db:1c:55:14:37:a3:e3:5a:18:d9:b5:e4:6b:61:c3: 86:67:8c:fe:73:4e:54:73:7b:0d:2a:57:9c:24:bd: 07:41:ef:ac:83:ec:e4:cd:ad:0e:12:dd:9e:ee:b0: 4d:e9:d6:0b:40:d7:77:16:86:7f:4f:6d:9d:ba:37: 24:6b:7c:83:1b:07:48:9c:f0:80:c0:a5:a7:0c:eb: 88:2a:ff:1f:3e:ea:36:e2:1a:eb:23:05:dd:3a:67: 86:61:d4:ac:1b:43:ac:25:f4:a4:96:31:2d:ab:3b: 3f:46:8e:d2:a5:3c:67:d2:d6:89:12:c7:fb:e8:c0: 55:ca:c3:b8:a3:5a:d6:e4:7d:bb:2b:65:a2:f0:5b: 23:2d:65:4f:3f:0c:bf:12:a8:d0:7f:02:a6:1d:21: da:c9:17:2a:55:61:50:19:79:b3:50:72:53:44:b0: 77:41:85:8f:66:0c:81:4f:a0:09:fb:09:55:94:a4: 93:fc:a0:d0:e5:88:95:fc:10:a4:c0:ff:f7:36:42: a7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:86:64:10:B5:50:3F:EA:4C:23:65:1E:78:33:48:E3:A2:1D:D7:B1 X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:69:ac:83:19:66:d5:aa:ca:ff:3b:56:8e:7d:73:58:03:9a: 27:8d:00:5a:22:32:86:a4:85:de:50:6a:4d:2d:39:d5:61:aa: 94:f7:67:3d:bb:c0:8d:0f:d3:dc:ec:9b:5c:3a:55:47:98:c2: 99:2e:29:49:ea:ff:f8:2b:45:c1:77:f2:c0:80:fe:14:1a:d6: f4:d5:28:53:5e:9e:36:b8:52:8e:8f:24:6f:15:46:87:82:55: f7:32:01:a3:12:3c:43:b8:38:3b:54:3d:b4:ce:88:d4:0d:d2: e0:d4:d3:ed:ba:fe:ff:ba:ed:2f:5f:e1:df:52:24:c9:d9:eb: 94:4c:fb:1f:69:b7:b0:b9:52:c3:e5:df:b0:20:42:38:35:49: 48:90:05:cc:51:39:6c:a5:ae:24:f9:f1:ce:94:0f:55:78:d5: df:e5:50:d9:d8:f8:68:34:64:80:94:d5:05:cc:a8:a9:d1:6a: 6b:c7:d2:65:02:04:b5:7b:1c:7e:a6:44:c7:31:b2:81:6b:f8: a5:7d:57:e0:33:1e:20:0c:7f:cd:8c:79:d4:6f:65:34:69:76: 36:b4:e1:1b:a1:bd:53:b3:a8:dc:d5:f8:b5:87:9a:7f:6b:c7: ce:7a:4e:64:9d:53:65:51:a3:1b:95:e7:c4:40:5f:29:b4:4a: c2:23:0c:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjUwOTA0MTcyOTQxWhcNMjUwOTExMTcyOTQxWjAYMRYwFAYD VQQDEw02OGI5Y2M4Ni03M2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtJjKFrEb+PdZ1R27GsfwXTOygoFnR66KrVQZAkEXgmlp/in2rMQ19keEszu 3GuOqaNLypN0YzJJAVrbHFUUN6PjWhjZteRrYcOGZ4z+c05Uc3sNKlecJL0HQe+s g+zkza0OEt2e7rBN6dYLQNd3FoZ/T22dujcka3yDGwdInPCAwKWnDOuIKv8fPuo2 4hrrIwXdOmeGYdSsG0OsJfSkljEtqzs/Ro7SpTxn0taJEsf76MBVysO4o1rW5H27 K2Wi8FsjLWVPPwy/EqjQfwKmHSHayRcqVWFQGXmzUHJTRLB3QYWPZgyBT6AJ+wlV lKST/KDQ5YiV/BCkwP/3NkKnCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmGZBC1 UD/qTCNlHngzSOOiHdexMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTZBMy83NzI3Q0U1QzM4QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJp VUdVUEQ5eWR2RlU4RE95akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcaayDGWbVqsr/O1aOfXNYA5onjQBaIjKGpIXeUGpNLTnVYaqU92c9 u8CND9Pc7JtcOlVHmMKZLilJ6v/4K0XBd/LAgP4UGtb01ShTXp42uFKOjyRvFUaH glX3MgGjEjxDuDg7VD20zojUDdLg1NPtuv7/uu0vX+HfUiTJ2euUTPsfabewuVLD 5d+wIEI4NUlIkAXMUTlspa4k+fHOlA9VeNXf5VDZ2PhoNGSAlNUFzKip0Wprx9Jl AgS1exx+pkTHMbKBa/ilfVfgMx4gDH/NjHnUb2U0aXY2tOEbob1Ts6jc1fi1h5p/ a8fOek5knVNlUaMblefEQF8ptErCIwwD -----END CERTIFICATE-----Generated at Sat Sep 6 11:49:02 2025 by rpki-client