$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft File: eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json) Hash identifier: EUtPF418cduy9o0iPV8QdT+gR+yWqIaURPStj1p9kxc= Subject key identifier: AC:B8:C0:D8:88:52:15:9E:0A:02:4F:F8:4A:A8:B6:E9:5D:3B:B1:78 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 1197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft Manifest number: 1116 Signing time: Tue 04 Nov 2025 17:25:06 +0000 Manifest this update: Tue 04 Nov 2025 17:25:05 +0000 Manifest next update: Tue 11 Nov 2025 17:25:05 +0000 Files and hashes: 1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: kb4GkO3TuNJPKxsS9jZoIpeWj78lsTlaB7DssYqVHEY=) 2: 7D670EA8F67A11EC92B5670FC4F9AE02.roa (hash: 9Odh9o3TlIW60dRdjsxDVQV+3vyhn2H48fPAT6vn3+M=) 3: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: UR2Z7oMUzbnedaI2LVS9uGRBFC7eB54GSgDAmYPW63Q=) 4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: W0JFS6tmn8XTuKql8AHkVwyZGDrJTsFtDN1V3+Sy2tA=) 5: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: +tn7Z6fq6avHjQp2bglrCkd8E2Sa27UKrn3GOMUj6b8=) 6: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: MLOX+4zM45smBurkZaVj3Oi8atSTyoZEzmqXwXoi1VA=) 7: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: KQfpgqTCm38R9/gLkZZKqv0IIflUZ1N/AO5E6KaW3hc=) 8: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: hyfl49PKKB2ONDtyk43wvbgkIsmowZKGDNVFA1XCOPA=) 9: CE0122802D4211EA907A566EC4F9AE02.roa (hash: Av4l0HsggCXslSxN1XLmPQb/NQp3V/CmXQCgKkE+IxE=) 10: 93F95BE673C711E98CD6D335C4F9AE02.roa (hash: 2+EzbP/f4S7Jeaq3EYQS0mWwY430dyRIPuynNaHcMvc=) 11: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: Za7LOD1x/AWq47LZxakqACtbC+NnfwEUEJeBoexu1ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4503 (0x1197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: Nov 4 17:25:05 2025 GMT Not After : Nov 11 17:25:05 2025 GMT Subject: CN=690a36f1-7df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c9:37:30:ac:8f:6d:4c:d9:0c:0b:fa:c9:3e: 42:8c:8f:e0:c7:61:02:95:2e:3d:61:09:ca:ba:90: 1b:aa:06:bb:e0:34:12:aa:e2:9e:b3:cb:be:c5:a3: 71:65:5e:38:d8:af:0a:80:14:9c:29:60:5c:56:98: 5c:89:56:e2:56:3c:e8:e0:f7:b4:ce:96:16:29:32: 67:f9:43:32:b9:08:8d:bb:95:d1:06:5d:f7:d1:7c: 01:cf:01:aa:a2:f7:88:fb:57:53:20:7a:f6:57:26: f2:bb:3e:72:85:b8:df:34:3f:71:9a:cb:be:12:88: 27:d6:92:d2:43:d1:7d:80:46:11:46:81:13:d1:b9: b5:04:ab:96:6a:29:9e:17:de:de:84:d0:cb:eb:3f: bf:8b:2b:f7:61:cb:a8:e7:60:f6:ca:bc:8d:f5:02: 68:8d:56:60:d3:01:ca:95:73:29:98:99:04:2f:6a: da:70:95:5e:d8:e8:93:c9:f1:55:86:9b:a0:d8:5f: b7:8f:b6:4d:80:e3:c6:6a:4b:32:21:82:6a:74:60: 36:51:c3:e9:f3:fa:52:40:80:4f:e6:ab:b0:ac:dd: c2:ff:65:90:0e:02:85:41:ab:2e:a2:9a:ae:41:0b: 18:7a:4b:db:54:15:33:93:47:3e:2a:90:8b:e5:65: 03:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B8:C0:D8:88:52:15:9E:0A:02:4F:F8:4A:A8:B6:E9:5D:3B:B1:78 X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d1:34:b0:5b:ee:7b:07:28:80:82:74:f3:75:3a:26:7d:9e: 56:ac:b8:0d:f0:9a:f9:c7:00:59:a3:91:51:0d:1e:be:2f:be: d8:ec:a4:27:78:af:79:60:46:35:03:bd:2c:4c:eb:d7:8a:00: 55:9d:8f:db:0e:11:dd:9e:a0:be:3a:2f:d6:92:9a:c6:1e:1f: 1a:77:65:8e:43:e3:22:93:80:d9:e7:6b:ce:d3:df:9f:b0:1e: bc:e3:21:ca:f9:2c:ab:a8:c0:70:20:10:92:d0:66:f6:d2:a4: 32:c2:30:51:f0:3f:21:e6:37:d5:c0:c3:30:67:d7:69:42:6e: 53:f9:35:bd:40:e7:98:ea:9d:6a:c9:d8:f1:f7:76:67:17:94: 87:2c:46:6b:75:2a:a6:96:01:ff:d9:31:c5:f0:ce:d1:a0:69: f9:d4:5e:11:64:ee:8c:dc:c2:ad:5b:fc:ef:23:ef:2c:17:ab: a2:1d:3c:60:f1:1f:37:88:c5:1e:de:a6:fa:de:c0:b1:bc:9a: d2:3a:db:64:17:96:68:75:c6:85:86:3f:9f:0e:f5:e0:4b:ff: 3a:8f:2f:52:27:36:f0:5c:fe:6e:74:58:41:ad:eb:58:5f:be: a9:6a:97:17:48:97:bf:a2:d4:0a:61:3c:c1:63:62:50:b8:1a: 8c:27:66:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjUxMTA0MTcyNTA1WhcNMjUxMTExMTcyNTA1WjAYMRYwFAYD VQQDEw02OTBhMzZmMS03ZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sk3MKyPbUzZDAv6yT5CjI/gx2EClS49YQnKupAbqga74DQSquKes8u+xaNx ZV442K8KgBScKWBcVphciVbiVjzo4Pe0zpYWKTJn+UMyuQiNu5XRBl330XwBzwGq oveI+1dTIHr2Vybyuz5yhbjfND9xmsu+Eogn1pLSQ9F9gEYRRoET0bm1BKuWaime F97ehNDL6z+/iyv3Ycuo52D2yryN9QJojVZg0wHKlXMpmJkEL2racJVe2OiTyfFV hpug2F+3j7ZNgOPGaksyIYJqdGA2UcPp8/pSQIBP5quwrN3C/2WQDgKFQasuopqu QQsYekvbVBUzk0c+KpCL5WUD6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKy4wNiI UhWeCgJP+EqotuldO7F4MB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTZBMy83NzI3Q0U1QzM4QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJp VUdVUEQ5eWR2RlU4RE95akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO0TSwW+57ByiAgnTzdTomfZ5WrLgN8Jr5xwBZo5FRDR6+L77Y7KQn eK95YEY1A70sTOvXigBVnY/bDhHdnqC+Oi/WkprGHh8ad2WOQ+Mik4DZ52vO09+f sB684yHK+SyrqMBwIBCS0Gb20qQywjBR8D8h5jfVwMMwZ9dpQm5T+TW9QOeY6p1q ydjx93ZnF5SHLEZrdSqmlgH/2THF8M7RoGn51F4RZO6M3MKtW/zvI+8sF6uiHTxg 8R83iMUe3qb63sCxvJrSOttkF5ZodcaFhj+fDvXgS/86jy9SJzbwXP5udFhBretY X76papcXSJe/otQKYTzBY2JQuBqMJ2at -----END CERTIFICATE-----Generated at Wed Nov 5 11:35:11 2025 by rpki-client