$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft File: eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json) Hash identifier: oANunJmCDSoq0vo5ccxsFNqf3q6/XRx9B215HWyHGBg= Subject key identifier: 70:17:3C:B7:38:3A:19:09:F5:FD:A8:C2:E0:E3:35:86:00:E1:63:AD Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft Manifest number: FC Signing time: Tue 17 Jun 2025 04:10:11 +0000 Manifest this update: Tue 17 Jun 2025 04:10:11 +0000 Manifest next update: Tue 24 Jun 2025 04:10:11 +0000 Files and hashes: 1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: U+/rL8Iz8XH2WYwDYq5lGd0tMjdHb3bciCU+OgZN8ss=) 2: B9C587ACA61911EFAD319873C4F9AE02.roa (hash: UVNnVE482CTuury1gOUSOm7uwVR741BfWPntovKeG3A=) 3: BA8A5FBEA61911EFAD319873C4F9AE02.roa (hash: GxG7PljqaIsL4NG1p4pqVTS9JJNKWXLA96c3vNu2FFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Validity Not Before: Jun 17 04:10:11 2025 GMT Not After : Jun 24 04:10:11 2025 GMT Subject: CN=6850eaa3-9bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3c:69:71:6c:a5:38:32:ca:8e:22:2c:87:8a: e8:1f:74:ef:44:46:46:6a:93:8a:95:79:a9:f4:3d: a0:6c:32:e2:f3:0a:7b:87:db:b0:de:fc:28:fa:1c: 83:75:2c:e6:d5:07:28:83:08:59:c8:c6:3e:ae:a2: 58:75:24:61:6d:af:5a:1c:ef:0f:d1:e2:fb:71:b5: 77:15:27:dd:ec:78:14:e7:db:cf:e9:39:19:9e:c6: b6:78:b8:00:be:74:fb:7d:97:04:e0:76:da:f7:ac: 03:68:fe:de:37:64:22:09:bb:62:7a:b2:75:d8:98: ec:26:33:f7:fa:c9:f7:f5:20:f6:cb:2c:20:e6:12: 47:5c:96:48:5f:6a:f9:49:83:0a:da:8d:94:fe:b3: 04:de:d3:a8:95:8e:09:18:17:ed:e0:4e:8f:98:8a: 0d:bc:f0:da:94:e6:28:45:e1:5f:e7:b0:1b:0b:ed: 6f:3f:85:e5:45:07:5b:89:40:55:d0:e7:90:b7:04: 71:31:eb:ca:a6:a0:32:34:53:01:fa:a1:a9:77:99: ec:48:78:df:9e:e9:e7:66:42:2b:9e:e9:f2:a9:c5: d9:dd:05:44:11:96:cd:85:94:fa:57:47:4a:95:37: d8:57:81:7c:42:be:18:ce:0d:66:c9:4c:58:92:b6: 16:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:17:3C:B7:38:3A:19:09:F5:FD:A8:C2:E0:E3:35:86:00:E1:63:AD X509v3 Authority Key Identifier: keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:05:31:df:8c:57:16:9f:7a:ea:e2:4e:38:a0:ef:d3:6d:24: f8:fe:eb:5e:02:18:39:b2:bb:90:c7:a2:bd:7d:b2:3e:25:08: b8:ac:8c:65:3e:31:8d:ee:78:b1:d4:c6:ed:16:24:5f:45:fe: 71:8d:f4:c1:72:ed:4e:2a:a7:f7:2b:ce:fc:86:21:01:62:9e: 24:1a:02:d4:a9:6c:d2:7e:26:19:df:b5:c2:90:0e:17:05:1d: 10:95:30:c4:56:f0:c3:67:ef:9f:78:4d:ea:a8:8d:04:13:c8: 97:0a:c7:07:d0:d1:dc:4a:8f:2c:20:30:8b:98:bc:6e:5f:39: a6:81:d2:50:57:94:4e:6b:8b:f2:43:f6:1c:04:f3:85:81:1f: 26:d0:08:e5:6e:6b:95:51:de:c5:ce:c0:fc:44:99:b9:9f:27: 97:13:42:dc:ff:c8:57:c4:e7:18:61:a9:fb:92:75:0e:0e:16: 56:74:41:18:5e:9b:4f:85:6e:91:8c:e1:19:18:22:af:db:56: 51:ee:47:a2:ea:66:95:1b:57:86:eb:36:f2:a2:2c:e1:c6:f1: 0f:e2:ef:44:26:44:27:b7:4b:2f:8a:2a:49:95:17:89:11:b9: d8:f2:37:d0:76:20:39:c5:42:e6:a0:fb:d6:be:c6:93:71:64: 42:3d:b0:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKDc4MzlBMUZDMDE3NDAyNEJDQkE4NEQwMTJEM0VDNENB NDY3OUFDNzEwHhcNMjUwNjE3MDQxMDExWhcNMjUwNjI0MDQxMDExWjAYMRYwFAYD VQQDEw02ODUwZWFhMy05YmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTxpcWylODLKjiIsh4roH3TvREZGapOKlXmp9D2gbDLi8wp7h9uw3vwo+hyD dSzm1QcogwhZyMY+rqJYdSRhba9aHO8P0eL7cbV3FSfd7HgU59vP6TkZnsa2eLgA vnT7fZcE4Hba96wDaP7eN2QiCbtierJ12JjsJjP3+sn39SD2yywg5hJHXJZIX2r5 SYMK2o2U/rME3tOolY4JGBft4E6PmIoNvPDalOYoReFf57AbC+1vP4XlRQdbiUBV 0OeQtwRxMevKpqAyNFMB+qGpd5nsSHjfnunnZkIrnunyqcXZ3QVEEZbNhZT6V0dK lTfYV4F8Qr4Yzg1myUxYkrYWLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAXPLc4 OhkJ9f2owuDjNYYA4WOtMB8GA1UdIwQYMBaAFHg5ofwBdAJLy6hNAS0+xMpGeaxx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS84ODJGMjMyMEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFrdkxxRTBCTFQ3RXlrWjVy SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VEbWhfQUYwQWt2THFFMEJMVDdFeWtaNXJIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVDOS84ODJGMjMyMEM5RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFr dkxxRTBCTFQ3RXlrWjVySEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIBTHfjFcWn3rq4k44oO/TbST4/uteAhg5sruQx6K9fbI+JQi4rIxl PjGN7nix1MbtFiRfRf5xjfTBcu1OKqf3K878hiEBYp4kGgLUqWzSfiYZ37XCkA4X BR0QlTDEVvDDZ++feE3qqI0EE8iXCscH0NHcSo8sIDCLmLxuXzmmgdJQV5ROa4vy Q/YcBPOFgR8m0AjlbmuVUd7FzsD8RJm5nyeXE0Lc/8hXxOcYYan7knUODhZWdEEY XptPhW6RjOEZGCKv21ZR7kei6maVG1eG6zbyoizhxvEP4u9EJkQnt0sviipJlReJ EbnY8jfQdiA5xULmoPvWvsaTcWRCPbCS -----END CERTIFICATE-----Generated at Thu Jun 19 03:00:40 2025 by rpki-client