$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft File: _edM0WVtTsrysOa7wxNdTrhAeCs.mft (raw, json) Hash identifier: noQsMHFbBSHhLCsAZhkohX3rEKclLtTudfO6sMnF7KE= Subject key identifier: 40:75:DD:A2:9E:D1:F5:5B:6E:78:94:D3:FA:09:2B:F7:8D:85:59:BF Authority key identifier: FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B Certificate issuer: /CN=A91DA898/serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft Manifest number: 60 Signing time: Sun 20 Jul 2025 14:37:51 +0000 Manifest this update: Sun 20 Jul 2025 14:37:51 +0000 Manifest next update: Sun 27 Jul 2025 14:37:51 +0000 Files and hashes: 1: _edM0WVtTsrysOa7wxNdTrhAeCs.crl (hash: P7MueA5DnAjIzD7RE53LqjLjGiOMcoRexpUKTn4Mrjo=) 2: 22B4D1705AF911F09FF3D30BC4F9AE02.roa (hash: HitZiMXiwNMvF13mhcDQf6XM4HwHI8hyTa9V9MVcrDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Validity Not Before: Jul 20 14:37:51 2025 GMT Not After : Jul 27 14:37:51 2025 GMT Subject: CN=687cff3f-7464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:23:f8:21:a8:df:03:7f:35:d2:85:d4:55:c3: 62:fa:19:df:b5:b1:a9:5d:b2:f6:be:a9:fb:28:e5: 3a:43:b4:64:3a:f8:91:de:05:16:81:5a:64:56:e9: 65:80:da:53:ad:f2:fd:d3:bf:ef:94:e0:c6:8d:55: a2:2a:b5:15:00:ae:93:3e:78:dc:75:f0:c1:d4:21: 63:d7:87:e4:31:55:71:5e:83:79:98:b2:63:4b:03: e9:7e:6a:e8:1f:53:76:7e:02:d6:db:3c:94:26:2f: a0:73:09:33:3f:bd:3c:f7:8e:4c:49:d5:64:a9:c5: 76:a9:f7:00:72:6d:73:d8:a4:63:f2:97:0e:0c:ce: e2:b1:9e:2f:24:22:4a:c4:41:66:bc:0b:92:63:71: 14:ee:97:73:2f:8e:b6:16:75:ec:14:97:89:d2:90: 86:f0:6c:b1:52:65:79:94:6d:b9:6e:5e:37:b3:b4: d9:5d:e2:8e:dc:2a:70:b5:84:a3:9b:8f:12:7a:24: 47:bd:d5:97:b1:9e:1b:ed:bb:1f:9e:7f:8d:0f:87: 34:4f:f8:d0:06:c0:17:07:a8:fe:2e:62:09:8d:74: 19:f9:f8:1e:32:21:b7:01:a2:3f:13:74:a3:ee:61: fb:0f:ea:e4:67:74:bc:0a:15:74:8b:5e:73:e1:82: 51:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:75:DD:A2:9E:D1:F5:5B:6E:78:94:D3:FA:09:2B:F7:8D:85:59:BF X509v3 Authority Key Identifier: keyid:FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:63:a7:f0:36:24:c0:cd:bd:e2:3f:10:2d:9d:fc:43:4c:13: 5c:f6:ec:3b:be:d6:30:a3:76:f3:46:de:50:7d:e8:46:7c:70: ff:59:53:23:5f:6c:bd:97:0c:e1:6e:87:d6:7c:87:c6:2c:3f: c8:40:b0:2b:29:55:6e:78:36:83:4c:e4:1a:8d:13:bc:10:30: 88:a5:91:02:38:2d:6a:fd:0a:38:55:e5:d4:be:d0:7c:b4:60: 6d:c3:1a:34:45:78:cb:56:ce:ce:cc:44:7f:4b:c9:f0:ba:e3: 73:bb:01:a2:d7:d5:a1:2d:4d:a4:12:9c:d0:13:2b:df:fb:9c: c1:b6:a0:54:7e:34:e0:c9:54:6c:33:c5:97:b5:19:ec:f1:1a: 4a:01:a6:f4:05:9d:fc:b3:b1:8c:98:a7:87:4d:d8:2b:1b:ba: 18:50:30:fd:b8:47:ed:3f:d1:7b:d4:20:b9:00:c7:2f:2e:85: 54:56:4a:33:13:19:e8:66:fa:50:2d:76:9e:61:4c:15:14:36: a9:1e:14:c3:76:a0:7c:1f:30:53:09:63:66:23:dc:e6:77:1e: f9:41:66:b8:55:79:05:7f:47:ee:57:64:5f:1e:f7:14:e2:d1: af:6e:48:c7:4d:28:f8:ca:be:39:4c:60:43:44:d0:3c:c5:28: 08:bd:24:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTg5ODExMC8GA1UEBRMoRkRFNzRDRDE2NTZENEVDQUYyQjBFNkJCQzMxMzVENEVC ODQwNzgyQjAeFw0yNTA3MjAxNDM3NTFaFw0yNTA3MjcxNDM3NTFaMBgxFjAUBgNV BAMTDTY4N2NmZjNmLTc0NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMI/ghqN8DfzXShdRVw2L6Gd+1saldsva+qfso5TpDtGQ6+JHeBRaBWmRW6WWA 2lOt8v3Tv++U4MaNVaIqtRUArpM+eNx18MHUIWPXh+QxVXFeg3mYsmNLA+l+augf U3Z+AtbbPJQmL6BzCTM/vTz3jkxJ1WSpxXap9wBybXPYpGPylw4MzuKxni8kIkrE QWa8C5JjcRTul3MvjrYWdewUl4nSkIbwbLFSZXmUbbluXjeztNld4o7cKnC1hKOb jxJ6JEe91Zexnhvtux+ef40PhzRP+NAGwBcHqP4uYgmNdBn5+B4yIbcBoj8TdKPu YfsP6uRndLwKFXSLXnPhglGRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQHXdop7R 9VtueJTT+gkr942FWb8wHwYDVR0jBBgwFoAU/edM0WVtTsrysOa7wxNdTrhAeCsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBODk4LzQwN0EyNUVBRDg3 RjExRUY5MUNDNTM0NkM0RjlBRTAyL19lZE0wV1Z0VHNyeXNPYTd3eE5kVHJoQWVD cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX2VkTTBXVnRUc3J5c09hN3d4TmRUcmhBZUNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB ODk4LzQwN0EyNUVBRDg3RjExRUY5MUNDNTM0NkM0RjlBRTAyL19lZE0wV1Z0VHNy eXNPYTd3eE5kVHJoQWVDcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABNjp/A2JMDNveI/EC2d/ENME1z27Du+1jCjdvNG3lB96EZ8cP9ZUyNf bL2XDOFuh9Z8h8YsP8hAsCspVW54NoNM5BqNE7wQMIilkQI4LWr9CjhV5dS+0Hy0 YG3DGjRFeMtWzs7MRH9LyfC643O7AaLX1aEtTaQSnNATK9/7nMG2oFR+NODJVGwz xZe1GezxGkoBpvQFnfyzsYyYp4dN2CsbuhhQMP24R+0/0XvUILkAxy8uhVRWSjMT Gehm+lAtdp5hTBUUNqkeFMN2oHwfMFMJY2Yj3OZ3HvlBZrhVeQV/R+5XZF8e9xTi 0a9uSMdNKPjKvjlMYENE0DzFKAi9JHo= -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:44 2025 by rpki-client