$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft File: _eDYrIjb_GreZ9__WjrC7yZsXNw.mft (raw, json) Hash identifier: FILVj8Kj9y24epS7JUF28aWnyWcJz34Pf1imbMAcB4s= Subject key identifier: D2:7A:B7:2F:29:91:FE:FA:50:1B:E2:DB:82:C7:2D:AE:60:BF:3A:A8 Authority key identifier: FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC Certificate issuer: /CN=A91E7FA1/serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft Manifest number: 3E Signing time: Fri 05 Sep 2025 08:00:25 +0000 Manifest this update: Fri 05 Sep 2025 08:00:25 +0000 Manifest next update: Fri 12 Sep 2025 08:00:25 +0000 Files and hashes: 1: _eDYrIjb_GreZ9__WjrC7yZsXNw.crl (hash: QnilpuiD6cREko0/f2gGmuKEFz5BRBQT7zL4f8HAupw=) 2: 292A3CF0376511F0A9D2D035C4F9AE02.roa (hash: qQ/o26aFQ3fCsqKdZcgYj7qgKbMCzj8e65hKr1gdKM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7FA1, serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC Validity Not Before: Sep 5 08:00:25 2025 GMT Not After : Sep 12 08:00:25 2025 GMT Subject: CN=68ba9899-c281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:e4:64:01:c2:8a:2f:f7:6c:a1:ca:e7:ea: 99:1e:5d:b5:46:33:44:73:20:01:8d:27:77:fe:db: 5c:1a:68:5f:24:2e:e4:23:f2:27:e6:03:88:f6:72: 47:01:c5:f9:99:fa:50:9b:cc:91:e2:c3:b0:a1:6b: 05:e8:af:38:16:99:ec:93:89:59:a2:06:5c:de:ef: 04:ac:0e:a3:d4:dd:32:5a:b5:88:a2:d7:d0:5d:46: e5:2e:94:11:41:c8:03:64:a8:d5:41:0f:32:13:16: b7:24:9a:61:75:e4:53:07:48:ca:70:48:6c:6c:c0: b0:37:a8:6d:82:70:56:eb:ae:4f:1e:9c:fe:bf:78: eb:ae:8b:bb:b9:58:9e:76:35:1f:ed:43:80:28:12: be:5d:0d:45:39:80:26:07:d5:ea:84:ca:5d:2e:ac: 3b:e5:e2:0c:49:59:07:3b:be:ee:83:d3:57:74:89: 34:5f:ea:90:de:98:b5:95:b7:45:e6:b9:12:95:1f: c2:d7:39:32:0b:c7:39:4e:70:1b:8f:4c:c7:6c:c7: f2:c9:cc:40:6a:b9:36:69:f6:c1:ad:f4:52:c7:aa: 4a:4e:c6:80:b5:2e:ec:ae:3d:48:b2:69:54:81:1a: 46:83:ae:74:fc:67:c3:36:b4:02:ef:46:ba:b7:b1: a9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7A:B7:2F:29:91:FE:FA:50:1B:E2:DB:82:C7:2D:AE:60:BF:3A:A8 X509v3 Authority Key Identifier: keyid:FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:52:f2:39:8b:fd:01:02:d7:dc:89:28:73:1d:e7:f0:5b:74: f0:9f:9c:e1:3a:a5:c3:9b:a3:e0:06:bb:5d:21:50:f7:b5:4e: 8b:80:ea:e0:b3:0e:a4:b9:be:0b:d1:ce:e9:d2:e9:b2:d3:ca: 7b:62:54:85:ca:3b:e5:c0:2c:a6:57:79:59:69:ec:4a:89:a8: dc:08:bb:4c:8a:33:13:4c:08:23:72:c6:6b:f1:d6:32:df:14: 7d:8b:e4:5f:0e:36:11:21:50:dc:a0:ba:4d:31:94:33:83:76: f0:19:aa:79:01:0f:2b:04:f9:8a:29:aa:0d:b3:45:3b:0f:4e: 01:09:05:23:93:75:bf:8a:0f:ba:fc:eb:66:e8:e2:b6:ef:18: ff:bd:b5:b9:ef:5b:60:8a:84:20:1d:24:9a:78:0b:50:48:16: 62:c3:a2:74:37:62:df:0b:c1:50:c4:c9:92:01:7f:5f:6f:91: aa:67:60:7e:4e:9c:a6:25:7c:ca:88:3b:41:1e:90:b6:7f:47: 5c:81:6c:47:af:8c:0b:35:7f:10:4c:73:49:1c:6e:04:aa:6e: 01:9c:b0:ef:4a:b7:40:bc:92:de:97:9b:f0:16:7d:aa:75:5c: 0a:c0:08:a1:86:61:5b:d6:82:d6:f6:98:7b:4e:97:88:23:31: 7b:98:b3:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0ZBMTExMC8GA1UEBRMoRkRFMEQ4QUM4OERCRkM2QURFNjdERkZGNUEzQUMyRUYy NjZDNUNEQzAeFw0yNTA5MDUwODAwMjVaFw0yNTA5MTIwODAwMjVaMBgxFjAUBgNV BAMTDTY4YmE5ODk5LWMyODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxsuRkAcKKL/dsocrn6pkeXbVGM0RzIAGNJ3f+21waaF8kLuQj8ifmA4j2ckcB xfmZ+lCbzJHiw7ChawXorzgWmeyTiVmiBlze7wSsDqPU3TJatYii19BdRuUulBFB yANkqNVBDzITFrckmmF15FMHSMpwSGxswLA3qG2CcFbrrk8enP6/eOuui7u5WJ52 NR/tQ4AoEr5dDUU5gCYH1eqEyl0urDvl4gxJWQc7vu6D01d0iTRf6pDemLWVt0Xm uRKVH8LXOTILxzlOcBuPTMdsx/LJzEBquTZp9sGt9FLHqkpOxoC1LuyuPUiyaVSB GkaDrnT8Z8M2tALvRrq3saktAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0nq3LymR /vpQG+LbgsctrmC/OqgwHwYDVR0jBBgwFoAU/eDYrIjb/GreZ9//WjrC7yZsXNww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3RkExL0JGOTA3NEUyMkZB MDExRjA4QTA2QzA1N0M0RjlBRTAyL19lRFlySWpiX0dyZVo5X19XanJDN3lac1hO dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX2VEWXJJamJfR3JlWjlfX1dqckM3eVpzWE53LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 RkExL0JGOTA3NEUyMkZBMDExRjA4QTA2QzA1N0M0RjlBRTAyL19lRFlySWpiX0dy ZVo5X19XanJDN3lac1hOdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAdS8jmL/QEC19yJKHMd5/BbdPCfnOE6pcObo+AGu10hUPe1TouA6uCz DqS5vgvRzunS6bLTyntiVIXKO+XALKZXeVlp7EqJqNwIu0yKMxNMCCNyxmvx1jLf FH2L5F8ONhEhUNyguk0xlDODdvAZqnkBDysE+Yopqg2zRTsPTgEJBSOTdb+KD7r8 62bo4rbvGP+9tbnvW2CKhCAdJJp4C1BIFmLDonQ3Yt8LwVDEyZIBf19vkapnYH5O nKYlfMqIO0EekLZ/R1yBbEevjAs1fxBMc0kcbgSqbgGcsO9Kt0C8kt6Xm/AWfap1 XArACKGGYVvWgtb2mHtOl4gjMXuYs8M= -----END CERTIFICATE-----Generated at Sat Sep 6 13:13:34 2025 by rpki-client