$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft File: eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json) Hash identifier: VrnAOTzw9RRWfW5XH15dAqXjJKyDVBELvHCwdHkzVAI= Subject key identifier: FB:A3:54:0D:A0:41:8B:84:1C:84:65:1C:07:69:CF:DF:8D:DA:F2:D0 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 116A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft Manifest number: 10E9 Signing time: Fri 08 Aug 2025 17:33:08 +0000 Manifest this update: Fri 08 Aug 2025 17:33:08 +0000 Manifest next update: Fri 15 Aug 2025 17:33:08 +0000 Files and hashes: 1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: USWcRM86h1/MCkOo9YAW6IXh3+Se7Wf+GdxBXwWGAYo=) 2: 7D670EA8F67A11EC92B5670FC4F9AE02.roa (hash: 9Odh9o3TlIW60dRdjsxDVQV+3vyhn2H48fPAT6vn3+M=) 3: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: UR2Z7oMUzbnedaI2LVS9uGRBFC7eB54GSgDAmYPW63Q=) 4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: W0JFS6tmn8XTuKql8AHkVwyZGDrJTsFtDN1V3+Sy2tA=) 5: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: +tn7Z6fq6avHjQp2bglrCkd8E2Sa27UKrn3GOMUj6b8=) 6: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: MLOX+4zM45smBurkZaVj3Oi8atSTyoZEzmqXwXoi1VA=) 7: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: KQfpgqTCm38R9/gLkZZKqv0IIflUZ1N/AO5E6KaW3hc=) 8: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: hyfl49PKKB2ONDtyk43wvbgkIsmowZKGDNVFA1XCOPA=) 9: CE0122802D4211EA907A566EC4F9AE02.roa (hash: Av4l0HsggCXslSxN1XLmPQb/NQp3V/CmXQCgKkE+IxE=) 10: 93F95BE673C711E98CD6D335C4F9AE02.roa (hash: 2+EzbP/f4S7Jeaq3EYQS0mWwY430dyRIPuynNaHcMvc=) 11: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: Za7LOD1x/AWq47LZxakqACtbC+NnfwEUEJeBoexu1ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4458 (0x116a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: Aug 8 17:33:08 2025 GMT Not After : Aug 15 17:33:08 2025 GMT Subject: CN=689634d4-6021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9f:4a:4e:fd:9b:78:00:cf:0f:7c:46:40:aa: 8b:b2:16:9f:d4:b8:eb:cb:8d:b2:5e:fa:7a:06:e4: 33:02:4b:7c:84:9e:f6:6b:04:7b:38:83:7f:8e:9d: d1:6a:2b:f3:c6:db:a6:2f:9a:1b:85:17:ff:cb:fe: d7:6d:19:9a:a7:b9:58:bf:87:4e:66:65:f9:dc:a7: e3:96:83:bc:12:e1:92:d2:af:66:71:1e:84:78:39: f2:44:1c:90:6e:c1:8e:92:6f:a7:5a:13:fd:be:15: fb:58:3a:33:f0:64:56:22:a3:93:45:43:b8:d9:a9: 9a:31:d4:88:a4:a5:23:89:bd:47:7f:63:6f:76:0e: 6f:66:b8:09:41:4a:9a:f5:c7:d3:50:f0:f3:21:82: 51:87:42:88:ff:3d:fb:88:d3:c1:25:93:ef:6d:36: 1a:87:a9:bb:3f:61:ad:2e:94:6d:0e:d6:7e:27:73: ff:55:8f:f0:1c:da:98:21:5f:ef:0f:77:59:e3:36: ed:45:c0:f2:0e:e9:54:2a:5a:8a:fc:f0:23:9e:12: b8:74:af:b8:93:f1:db:34:78:06:80:16:ed:37:a1: 11:ae:6c:23:b7:58:e0:92:44:f6:b2:9c:db:61:1b: 4d:97:bd:48:ad:a2:95:f1:f0:74:59:dc:09:47:dd: 69:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A3:54:0D:A0:41:8B:84:1C:84:65:1C:07:69:CF:DF:8D:DA:F2:D0 X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:02:ed:d8:7e:6b:25:91:54:0d:04:1c:68:16:9b:9d:01:8a: 9d:f3:86:0f:aa:36:8a:d1:84:d6:33:40:ed:8f:36:04:97:08: f6:09:6b:56:d9:fe:93:a0:c8:42:55:b0:63:f0:70:66:e5:20: ae:20:6f:c9:1e:b9:e2:2d:3e:29:39:0d:f1:4d:27:89:d2:92: f9:d8:a1:75:39:54:ee:78:b5:84:fa:32:30:5d:3f:3e:8b:48: df:dc:d0:f7:74:dc:d7:9e:b5:2d:f9:57:15:17:d8:5f:8e:c6: 8b:ef:70:f9:7e:a4:43:82:a1:96:fa:1c:fb:41:fd:d2:42:f2: 01:79:ce:13:60:79:7f:50:d9:2e:13:07:50:47:f0:02:70:e9: e8:ad:19:82:02:d2:2e:67:96:5a:53:99:86:5d:3e:6c:a8:12: 64:34:52:9c:8c:0a:bd:8f:f3:8a:fa:cb:d3:3d:b6:e9:0c:74: de:01:c1:2f:3a:6e:c3:42:37:80:01:59:58:88:d4:42:e3:af: 65:2d:1e:ab:60:5a:ac:0d:2e:c9:d1:b2:93:4c:a1:46:5b:0a: de:cb:f7:54:1e:13:23:61:db:e7:8e:b3:77:a3:c5:6f:bd:94: 65:0b:14:1e:8f:0f:1e:1a:db:3c:fd:5a:98:88:ee:a8:3b:2e: c0:e1:e9:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjUwODA4MTczMzA4WhcNMjUwODE1MTczMzA4WjAYMRYwFAYD VQQDEw02ODk2MzRkNC02MDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5p9KTv2beADPD3xGQKqLshaf1Ljry42yXvp6BuQzAkt8hJ72awR7OIN/jp3R aivzxtumL5obhRf/y/7XbRmap7lYv4dOZmX53KfjloO8EuGS0q9mcR6EeDnyRByQ bsGOkm+nWhP9vhX7WDoz8GRWIqOTRUO42amaMdSIpKUjib1Hf2Nvdg5vZrgJQUqa 9cfTUPDzIYJRh0KI/z37iNPBJZPvbTYah6m7P2GtLpRtDtZ+J3P/VY/wHNqYIV/v D3dZ4zbtRcDyDulUKlqK/PAjnhK4dK+4k/HbNHgGgBbtN6ERrmwjt1jgkkT2spzb YRtNl71IraKV8fB0WdwJR91pCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPujVA2g QYuEHIRlHAdpz9+N2vLQMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTZBMy83NzI3Q0U1QzM4QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJp VUdVUEQ5eWR2RlU4RE95akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgAu3YfmslkVQNBBxoFpudAYqd84YPqjaK0YTWM0DtjzYElwj2CWtW 2f6ToMhCVbBj8HBm5SCuIG/JHrniLT4pOQ3xTSeJ0pL52KF1OVTueLWE+jIwXT8+ i0jf3ND3dNzXnrUt+VcVF9hfjsaL73D5fqRDgqGW+hz7Qf3SQvIBec4TYHl/UNku EwdQR/ACcOnorRmCAtIuZ5ZaU5mGXT5sqBJkNFKcjAq9j/OK+svTPbbpDHTeAcEv Om7DQjeAAVlYiNRC469lLR6rYFqsDS7J0bKTTKFGWwrey/dUHhMjYdvnjrN3o8Vv vZRlCxQejw8eGts8/VqYiO6oOy7A4emC -----END CERTIFICATE-----Generated at Fri Aug 8 19:29:29 2025 by rpki-client