$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft File: _edM0WVtTsrysOa7wxNdTrhAeCs.mft (raw, json) Hash identifier: vc4n52qAYNQEpmlLO6FX86rtMwA4HdOEJUgZVS3mhys= Subject key identifier: C1:D9:84:3A:92:9A:A0:66:12:8C:F2:2F:E4:B2:45:5E:1F:99:86:91 Authority key identifier: FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B Certificate issuer: /CN=A91DA898/serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft Manifest number: 79 Signing time: Sat 06 Sep 2025 14:36:36 +0000 Manifest this update: Sat 06 Sep 2025 14:36:35 +0000 Manifest next update: Sat 13 Sep 2025 14:36:35 +0000 Files and hashes: 1: _edM0WVtTsrysOa7wxNdTrhAeCs.crl (hash: ocFuP4/mEcZyb08XRtIlqEcALr55/RaJUQC3Qmnb13w=) 2: 22B4D1705AF911F09FF3D30BC4F9AE02.roa (hash: HitZiMXiwNMvF13mhcDQf6XM4HwHI8hyTa9V9MVcrDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Validity Not Before: Sep 6 14:36:35 2025 GMT Not After : Sep 13 14:36:35 2025 GMT Subject: CN=68bc46f3-6ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:25:e8:a0:c9:20:5d:58:48:84:de:13:c7:0e: 5d:55:66:f9:d9:42:80:37:ad:c6:8e:83:38:64:a5: 9b:b6:37:ad:76:2e:c2:f3:f6:77:a2:79:77:00:e9: 42:1c:31:4e:76:8c:a0:26:33:c2:fd:b6:b0:e9:19: fc:64:85:30:d4:49:31:a1:cf:c6:7b:49:b7:84:59: 0f:c8:59:38:76:51:50:6d:7d:90:15:0d:96:f9:df: 88:08:bb:fb:c8:19:53:63:3b:8b:2f:68:00:9d:ab: 70:de:17:85:89:50:c5:ca:bd:b5:4f:c0:d0:56:47: 95:de:a9:8e:9b:4f:0f:cc:61:29:1b:fd:65:eb:81: 17:1c:b8:2c:8e:50:4c:64:c0:31:55:57:11:cc:c6: 03:f9:f0:f9:58:4d:64:51:cd:b4:8b:66:a4:67:b3: 81:b2:5b:12:60:9c:58:f7:47:a9:a8:47:c7:c2:89: 01:0a:d9:b1:e5:3d:f3:eb:44:a6:03:4c:31:72:71: 06:5c:0a:e8:c9:a7:e5:13:86:53:e2:1f:ab:ea:40: e1:75:68:28:8a:e6:02:dc:be:9b:45:41:6e:89:b3: cf:c4:25:40:ee:04:4d:8a:ae:a0:a0:65:bb:da:3b: 06:14:11:77:7b:ab:5b:c5:6c:99:e4:b1:c4:8b:0f: 50:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D9:84:3A:92:9A:A0:66:12:8C:F2:2F:E4:B2:45:5E:1F:99:86:91 X509v3 Authority Key Identifier: keyid:FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:93:0a:80:95:1f:38:c9:ec:a3:31:be:0c:c9:cd:34:6a:3b: 74:c4:cc:5c:21:55:4f:1f:31:89:54:34:71:44:c3:48:df:55: aa:38:ca:af:63:b5:02:83:8e:00:f8:03:a3:5a:8a:1f:58:8c: 6b:13:4a:b9:cb:15:ba:a2:6a:66:39:2a:91:90:b9:c4:4b:5e: 31:b3:d5:74:5f:61:bb:85:9b:69:5a:c2:f6:02:7c:38:0b:b7: 2a:4b:14:25:cc:ae:cd:3d:88:6d:f0:0d:80:0f:c9:1d:da:50: e3:78:d6:24:0c:69:d8:ed:1e:a7:76:9e:a1:da:ea:94:8f:05: fc:92:5b:26:ff:e1:9c:4a:f8:b2:e3:e1:02:4e:87:d4:89:49: c9:80:42:56:88:c6:08:90:98:66:eb:2d:cc:05:b5:0c:34:d5: bf:05:f0:01:5f:1a:dd:e3:7b:aa:9d:58:2f:f1:4d:29:74:f1: 5a:bb:e1:17:06:6c:11:75:30:f3:1f:2a:7e:a8:43:9c:03:26: 31:60:ca:63:f6:ff:2d:6b:72:87:29:fc:d8:a0:a9:bb:2c:b6: 8b:8d:83:d6:27:da:a1:05:40:54:4d:ae:8a:2f:50:17:e3:46: 21:5e:12:97:7a:ad:bb:c2:bc:ad:60:72:db:e0:3f:c0:13:89: 5d:b4:c7:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTg5ODExMC8GA1UEBRMoRkRFNzRDRDE2NTZENEVDQUYyQjBFNkJCQzMxMzVENEVC ODQwNzgyQjAeFw0yNTA5MDYxNDM2MzVaFw0yNTA5MTMxNDM2MzVaMBgxFjAUBgNV BAMTDTY4YmM0NmYzLTZlZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnJeigySBdWEiE3hPHDl1VZvnZQoA3rcaOgzhkpZu2N612LsLz9neieXcA6UIc MU52jKAmM8L9trDpGfxkhTDUSTGhz8Z7SbeEWQ/IWTh2UVBtfZAVDZb534gIu/vI GVNjO4svaACdq3DeF4WJUMXKvbVPwNBWR5XeqY6bTw/MYSkb/WXrgRccuCyOUExk wDFVVxHMxgP58PlYTWRRzbSLZqRns4GyWxJgnFj3R6moR8fCiQEK2bHlPfPrRKYD TDFycQZcCujJp+UThlPiH6vqQOF1aCiK5gLcvptFQW6Js8/EJUDuBE2KrqCgZbva OwYUEXd7q1vFbJnkscSLD1CbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwdmEOpKa oGYSjPIv5LJFXh+ZhpEwHwYDVR0jBBgwFoAU/edM0WVtTsrysOa7wxNdTrhAeCsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBODk4LzQwN0EyNUVBRDg3 RjExRUY5MUNDNTM0NkM0RjlBRTAyL19lZE0wV1Z0VHNyeXNPYTd3eE5kVHJoQWVD cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX2VkTTBXVnRUc3J5c09hN3d4TmRUcmhBZUNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB ODk4LzQwN0EyNUVBRDg3RjExRUY5MUNDNTM0NkM0RjlBRTAyL19lZE0wV1Z0VHNy eXNPYTd3eE5kVHJoQWVDcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALSTCoCVHzjJ7KMxvgzJzTRqO3TEzFwhVU8fMYlUNHFEw0jfVao4yq9j tQKDjgD4A6Naih9YjGsTSrnLFbqiamY5KpGQucRLXjGz1XRfYbuFm2lawvYCfDgL typLFCXMrs09iG3wDYAPyR3aUON41iQMadjtHqd2nqHa6pSPBfySWyb/4ZxK+LLj 4QJOh9SJScmAQlaIxgiQmGbrLcwFtQw01b8F8AFfGt3je6qdWC/xTSl08Vq74RcG bBF1MPMfKn6oQ5wDJjFgymP2/y1rcocp/NigqbsstouNg9Yn2qEFQFRNroovUBfj RiFeEpd6rbvCvK1gctvgP8ATiV20x2c= -----END CERTIFICATE-----Generated at Sat Sep 6 21:13:20 2025 by rpki-client