$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft File: eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json) Hash identifier: hFB0wJwi36xEnSwW/CuczquTbAUmQscLsOKfDY1jT7I= Subject key identifier: 03:CE:3A:EA:55:67:A2:DC:A7:8D:02:4E:1F:6B:EC:43:40:66:CD:BD Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft Manifest number: 0143 Signing time: Wed 05 Nov 2025 04:30:55 +0000 Manifest this update: Wed 05 Nov 2025 04:30:55 +0000 Manifest next update: Wed 12 Nov 2025 04:30:55 +0000 Files and hashes: 1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: awiCSRInV1O/Vz0Q9tzqoOfuL9a7En2pbxlqNYlHmos=) 2: B9C587ACA61911EFAD319873C4F9AE02.roa (hash: UVNnVE482CTuury1gOUSOm7uwVR741BfWPntovKeG3A=) 3: BA8A5FBEA61911EFAD319873C4F9AE02.roa (hash: GxG7PljqaIsL4NG1p4pqVTS9JJNKWXLA96c3vNu2FFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Validity Not Before: Nov 5 04:30:55 2025 GMT Not After : Nov 12 04:30:55 2025 GMT Subject: CN=690ad2ff-a946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:2b:93:a7:bd:14:6c:72:22:27:c4:10:40: 70:46:dc:6d:75:41:e4:99:a8:b4:8b:72:d5:12:2e: 6b:aa:24:7f:de:59:f3:ed:b0:14:5e:bd:f8:0a:76: 7c:0f:9c:85:e7:2a:cb:bb:7b:ad:42:45:1d:c5:be: 90:24:12:b3:f9:8c:9e:9e:0c:c0:f9:78:3a:ba:64: a8:de:c4:78:33:32:c7:b4:79:8b:fa:4c:e7:d4:ff: b9:76:99:b2:1a:db:f7:c8:35:f6:a1:7a:ec:94:6e: 6a:6f:61:08:b8:e5:3d:cb:fc:d1:bc:2e:47:45:23: 41:29:50:30:2c:49:b7:77:a6:9a:78:81:92:4c:53: 35:7b:88:68:fa:bf:db:62:02:d6:c4:bb:f0:04:5b: 0f:73:be:47:aa:97:e3:fd:11:e7:f1:4d:78:92:be: 47:da:ab:76:d0:57:1b:29:65:20:f9:22:93:04:7d: a7:33:31:6d:9a:1a:91:3f:58:90:08:2d:9a:ce:17: 7d:3e:2d:b6:e5:ab:1e:2e:b1:da:1a:3e:33:52:d5: 54:96:7f:50:7e:a2:65:39:f5:71:50:98:00:a9:79: 92:bd:2a:67:7a:ad:ee:a9:8e:ea:04:8a:7b:62:74: 80:5a:4a:e1:7a:46:d0:ff:b4:28:8e:a3:58:63:3d: 2c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CE:3A:EA:55:67:A2:DC:A7:8D:02:4E:1F:6B:EC:43:40:66:CD:BD X509v3 Authority Key Identifier: keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b1:3d:54:9b:8f:64:48:dd:3f:c2:fd:a8:51:7e:06:93:60: 3f:02:b1:1c:d4:98:64:c6:fb:c8:a3:5a:a8:1a:d2:56:c5:88: 34:6b:7f:4d:ba:e1:0e:4c:13:49:63:a4:75:ec:cb:f5:fc:e7: 2b:d4:16:fc:f6:de:26:5d:f4:e8:bc:66:e8:0d:f6:fa:fb:03: 13:d8:ff:45:a4:70:17:e5:bc:26:78:aa:89:c4:e0:ac:1b:a0: 2b:35:3d:94:d1:24:be:80:19:77:89:df:a0:2c:25:2b:68:32: 58:8c:f8:57:7a:dc:b7:a5:26:57:a3:a1:9b:44:47:bb:6a:9d: 12:18:5b:b7:ec:1c:74:19:07:d0:fc:fb:6f:83:49:77:4c:61: 7b:f7:30:bd:46:93:3f:27:a1:7d:d1:bc:1e:73:ac:27:4e:3b: 5e:1d:7b:bf:e0:c0:54:6f:e3:35:b9:cb:d9:dc:6b:06:68:95: 79:fd:de:f0:5c:42:b3:5e:b7:6a:1e:a5:10:d3:36:98:75:fb: b6:a3:07:e7:e2:60:67:b2:a5:a2:bb:45:20:75:7c:e5:91:ba: 9c:89:f2:75:46:e4:a5:0a:1b:66:81:1d:b7:b2:04:59:54:d8: 7b:99:1e:82:2a:bf:7c:aa:a1:13:d1:2f:a7:1f:d8:92:ab:13: 2a:86:bd:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKDc4MzlBMUZDMDE3NDAyNEJDQkE4NEQwMTJEM0VDNENB NDY3OUFDNzEwHhcNMjUxMTA1MDQzMDU1WhcNMjUxMTEyMDQzMDU1WjAYMRYwFAYD VQQDEw02OTBhZDJmZi1hOTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMArk6e9FGxyIifEEEBwRtxtdUHkmai0i3LVEi5rqiR/3lnz7bAUXr34CnZ8 D5yF5yrLu3utQkUdxb6QJBKz+YyengzA+Xg6umSo3sR4MzLHtHmL+kzn1P+5dpmy Gtv3yDX2oXrslG5qb2EIuOU9y/zRvC5HRSNBKVAwLEm3d6aaeIGSTFM1e4ho+r/b YgLWxLvwBFsPc75Hqpfj/RHn8U14kr5H2qt20FcbKWUg+SKTBH2nMzFtmhqRP1iQ CC2azhd9Pi225aseLrHaGj4zUtVUln9QfqJlOfVxUJgAqXmSvSpneq3uqY7qBIp7 YnSAWkrhekbQ/7QojqNYYz0snQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPOOupV Z6Lcp40CTh9r7ENAZs29MB8GA1UdIwQYMBaAFHg5ofwBdAJLy6hNAS0+xMpGeaxx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS84ODJGMjMyMEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFrdkxxRTBCTFQ3RXlrWjVy SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VEbWhfQUYwQWt2THFFMEJMVDdFeWtaNXJIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVDOS84ODJGMjMyMEM5RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFr dkxxRTBCTFQ3RXlrWjVySEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbsT1Um49kSN0/wv2oUX4Gk2A/ArEc1JhkxvvIo1qoGtJWxYg0a39N uuEOTBNJY6R17Mv1/Ocr1Bb89t4mXfTovGboDfb6+wMT2P9FpHAX5bwmeKqJxOCs G6ArNT2U0SS+gBl3id+gLCUraDJYjPhXety3pSZXo6GbREe7ap0SGFu37Bx0GQfQ /Ptvg0l3TGF79zC9RpM/J6F90bwec6wnTjteHXu/4MBUb+M1ucvZ3GsGaJV5/d7w XEKzXrdqHqUQ0zaYdfu2owfn4mBnsqWiu0UgdXzlkbqcifJ1RuSlChtmgR23sgRZ VNh7mR6CKr98qqET0S+nH9iSqxMqhr0B -----END CERTIFICATE-----Generated at Wed Nov 5 11:57:50 2025 by rpki-client