$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json) Hash identifier: Q9hcQ2kgOldCv/kbxgAMwXQFPxWUW7Vpc1KQP3y/hvI= Subject key identifier: A1:A7:ED:A8:E9:AE:D7:D3:67:74:E4:6F:36:25:79:6B:12:3B:F1:5A Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 140F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft Manifest number: 13BA Signing time: Fri 08 Aug 2025 17:08:14 +0000 Manifest this update: Fri 08 Aug 2025 17:08:14 +0000 Manifest next update: Fri 15 Aug 2025 17:08:14 +0000 Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: rs/wnYTcThAoUOWid9fLRINgInWLJpzhN5sLcxuT0z8=) 2: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: bxKpA/oFCU6TUM9crxLIgO78TFK6gY7b8jSCF6lkl2Q=) 3: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: Ie+fFLUk+hkh8iPsi0JIDwR97rjtnpIzqO2/djh9dOA=) 4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: HMDXcvVMEGAxoOC++6wcObudAAOApyw/6bDY30a1r+o=) 5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: bwsT9LHkujI+JrOu04/8rGiF6KuhSDYaJy2PKrf04nk=) 6: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: vIOfq2VGA/o5BqEJqyV+v1G5m5lQGi2kmLP/YtnJAmE=) 7: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: l4uHSTMAHvz3K39iQ1N6BJocMGP4W2EFJHrCsRCiw/k=) 8: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: 0Wf6MrY856EXSgNTseMSxFkk6LBzj+vW0CkBQhFM5Vo=) 9: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wsYRvalqXpbWZCIqLrO6x3uxF4QcGxGmLPv4fG6+ndk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5135 (0x140f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: Aug 8 17:08:14 2025 GMT Not After : Aug 15 17:08:14 2025 GMT Subject: CN=68962efe-5898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1b:ce:f6:32:3a:89:b4:6a:ef:c8:06:86:37: bc:22:3e:95:d3:86:c1:fc:37:8e:e6:89:e4:b0:3a: 2e:76:8a:ec:51:7a:66:10:9d:f4:c4:df:c3:cd:eb: ce:a2:99:d7:23:40:f2:d3:39:64:14:e1:73:a3:12: 57:38:ff:ee:62:5b:f3:a7:09:58:57:a5:d1:ab:fd: 59:53:90:34:dd:e2:a2:85:78:8c:d0:db:2c:cd:7d: a8:10:24:82:cc:2f:aa:db:77:7c:15:73:6c:c8:ce: d9:38:19:4a:03:48:8e:2b:f8:e2:ea:90:07:21:79: 52:43:11:f4:9a:41:7d:b4:a7:19:e9:b0:e5:99:8a: e7:63:88:79:1d:1d:56:54:8e:f5:e3:a7:42:87:85: b1:31:24:fe:7d:fd:d2:83:ab:07:36:dc:da:46:4e: 00:f9:f8:1f:3a:9c:70:a2:7f:d8:f6:ab:b9:f1:30: 71:09:07:08:e3:c4:96:da:a3:a4:21:8e:d7:83:68: 29:cc:03:5f:90:1a:61:8e:55:27:09:97:8d:49:9d: aa:ce:6b:b1:a0:d6:96:87:92:65:de:ee:4f:ac:c9: 16:7b:99:e8:0f:bd:f1:90:de:fb:ef:e3:33:d2:d3: 78:7d:da:f9:17:e3:d7:b6:24:09:83:7e:21:bd:bb: 6c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A7:ED:A8:E9:AE:D7:D3:67:74:E4:6F:36:25:79:6B:12:3B:F1:5A X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:3e:59:f2:e2:aa:d2:2f:b9:2d:2b:97:5c:70:0b:79:52:e2: 30:85:58:70:63:f3:88:a0:da:5a:f6:78:80:d7:d3:b1:0e:d7: 30:96:f0:30:7e:b3:9b:d3:ac:af:ff:e9:ab:4c:36:01:23:37: ff:5f:98:3f:ee:22:5f:3d:b4:c4:6c:46:7f:91:c9:3b:f8:3c: d1:5e:9d:8b:cb:0b:05:5a:b2:80:33:05:92:2d:99:f0:39:4c: a2:59:76:4c:20:c9:87:d9:80:1d:41:aa:d0:4e:ae:91:8e:66: b2:93:c6:6a:db:c3:83:5f:2b:4f:cc:fb:7c:59:2d:b7:f0:8e: 09:22:a3:63:e8:77:97:7f:dd:f7:46:2b:41:7c:d3:52:36:ff: 42:09:e6:47:c8:95:74:44:0a:5c:20:b6:05:a9:cd:0c:1f:5b: 89:8a:52:c4:e4:81:38:cd:09:1e:44:d0:7a:78:9c:ed:32:69: ad:1b:75:5e:ca:42:98:7b:0b:21:ef:58:d8:d7:be:18:0c:0a: e9:8c:f3:37:1c:67:6a:e5:d4:84:57:93:9a:76:b0:fe:e7:75: 2e:96:51:c8:49:c2:36:db:80:cc:ed:85:06:9d:e1:8c:9b:eb: 3f:e7:ad:e4:3d:f0:fc:cc:35:30:21:3a:47:ea:5a:26:cf:22: fd:1b:c9:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjUwODA4MTcwODE0WhcNMjUwODE1MTcwODE0WjAYMRYwFAYD VQQDEw02ODk2MmVmZS01ODk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RvO9jI6ibRq78gGhje8Ij6V04bB/DeO5onksDoudorsUXpmEJ30xN/DzevO opnXI0Dy0zlkFOFzoxJXOP/uYlvzpwlYV6XRq/1ZU5A03eKihXiM0NsszX2oECSC zC+q23d8FXNsyM7ZOBlKA0iOK/ji6pAHIXlSQxH0mkF9tKcZ6bDlmYrnY4h5HR1W VI7146dCh4WxMST+ff3Sg6sHNtzaRk4A+fgfOpxwon/Y9qu58TBxCQcI48SW2qOk IY7Xg2gpzANfkBphjlUnCZeNSZ2qzmuxoNaWh5Jl3u5PrMkWe5noD73xkN777+Mz 0tN4fdr5F+PXtiQJg34hvbtsowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGn7ajp rtfTZ3TkbzYleWsSO/FaMB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2Plny4qrSL7ktK5dccAt5UuIwhVhwY/OIoNpa9niA19OxDtcwlvAw frOb06yv/+mrTDYBIzf/X5g/7iJfPbTEbEZ/kck7+DzRXp2LywsFWrKAMwWSLZnw OUyiWXZMIMmH2YAdQarQTq6Rjmayk8Zq28ODXytPzPt8WS238I4JIqNj6HeXf933 RitBfNNSNv9CCeZHyJV0RApcILYFqc0MH1uJilLE5IE4zQkeRNB6eJztMmmtG3Ve ykKYewsh71jY174YDArpjPM3HGdq5dSEV5OadrD+53UullHIScI224DM7YUGneGM m+s/563kPfD8zDUwITpH6lomzyL9G8kL -----END CERTIFICATE-----Generated at Sat Aug 9 14:24:10 2025 by rpki-client