$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft File: _edM0WVtTsrysOa7wxNdTrhAeCs.mft (raw, json) Hash identifier: YrPOJKNlyyjKldQE3FmZU/uMTe/MlNcDNbV7EE7NBd8= Subject key identifier: 62:5C:19:9D:31:88:27:8A:21:30:E7:35:B5:5C:00:78:7D:D3:D3:15 Authority key identifier: FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B Certificate issuer: /CN=A91DA898/serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft Manifest number: 68 Signing time: Mon 04 Aug 2025 14:37:01 +0000 Manifest this update: Mon 04 Aug 2025 14:37:01 +0000 Manifest next update: Mon 11 Aug 2025 14:37:01 +0000 Files and hashes: 1: _edM0WVtTsrysOa7wxNdTrhAeCs.crl (hash: gXM46t6ojSeSFqO0kfjWc37wYLyctOMxC9SUKRZnO/4=) 2: 22B4D1705AF911F09FF3D30BC4F9AE02.roa (hash: HitZiMXiwNMvF13mhcDQf6XM4HwHI8hyTa9V9MVcrDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Validity Not Before: Aug 4 14:37:01 2025 GMT Not After : Aug 11 14:37:01 2025 GMT Subject: CN=6890c58d-dc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:54:4e:c9:43:0a:9d:8c:a8:5b:08:97:e5:b2: d4:79:04:88:59:49:33:ab:86:a1:14:de:ee:d0:8d: 9e:65:98:a3:c4:1f:03:29:9b:77:96:28:06:80:51: 33:03:48:11:5d:5b:83:2e:2e:87:83:65:f7:3f:d3: 8c:be:de:25:3d:f7:e5:05:54:0e:9b:88:1b:06:77: d2:aa:f2:ab:ae:d7:d0:53:b4:41:17:08:df:2e:5d: ad:45:cc:3e:7d:9c:11:c2:8d:bc:3f:8d:2d:ee:b4: 6f:44:9a:2b:09:d4:78:bc:07:9e:bc:38:14:d3:b9: 8c:f7:08:fb:7f:70:8d:bf:d0:cf:8a:88:17:85:7a: f6:97:14:c1:1c:eb:51:af:00:2b:91:55:25:f9:a5: b1:22:17:f8:de:3b:29:22:f3:0c:d1:db:fd:39:31: 89:4d:54:82:50:fc:fa:94:1e:32:bf:c9:39:a0:7c: 4b:f5:25:6c:bd:40:9d:c0:47:2f:23:33:dd:c2:44: 9a:9c:81:0a:da:05:e4:34:60:8d:91:65:85:d1:57: 19:3f:77:9f:13:0e:fa:9c:3d:45:c1:60:fe:29:bd: b6:9c:15:48:bf:c6:20:90:84:c5:79:42:ca:f4:b9: 1e:ce:8e:6f:3c:1a:c1:4f:58:04:c0:38:67:aa:3f: 09:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5C:19:9D:31:88:27:8A:21:30:E7:35:B5:5C:00:78:7D:D3:D3:15 X509v3 Authority Key Identifier: keyid:FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d7:03:9e:7b:bd:2d:d6:5b:aa:a5:d7:ce:bc:48:05:f3:91: 74:f1:87:45:bf:09:c7:4a:dc:64:e7:e7:f1:6e:6f:eb:46:03: 66:46:7b:f2:a4:c9:0d:6f:3b:87:2f:49:bf:8b:79:98:d5:93: 55:ac:66:80:24:bc:ac:36:ed:76:cd:b9:cc:a2:b0:8a:07:b8: 06:43:ae:42:e6:41:b2:1a:cf:0e:eb:0d:a9:2e:df:07:7c:52: 0f:4c:f0:66:20:31:f7:1e:42:0e:37:5a:c1:d3:ea:70:2f:2a: 83:53:09:88:74:55:1c:5b:45:fc:ed:c5:fe:48:79:e6:37:76: c7:a0:74:09:0b:11:5b:03:ee:42:a9:b9:ed:a2:22:4b:dd:f0: 2e:38:01:ec:ab:80:82:64:1e:56:89:55:9e:8c:f1:ed:89:81: b9:5b:d9:d9:76:70:bf:25:d5:7d:4c:f7:a4:aa:d3:06:b4:9a: 9d:25:54:fb:37:7d:c6:4f:96:6e:ce:04:4e:93:cd:5d:a3:79: 79:b8:3f:1f:13:68:89:83:67:d2:81:d9:30:b3:2d:83:16:e8: ee:d3:2e:16:ee:bb:2f:af:12:4c:0f:cb:ec:ff:b1:55:43:97: d2:b8:c8:21:a9:20:a8:a5:4e:27:b8:23:41:d8:2c:42:01:74: 68:7c:a6:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTg5ODExMC8GA1UEBRMoRkRFNzRDRDE2NTZENEVDQUYyQjBFNkJCQzMxMzVENEVC ODQwNzgyQjAeFw0yNTA4MDQxNDM3MDFaFw0yNTA4MTExNDM3MDFaMBgxFjAUBgNV BAMTDTY4OTBjNThkLWRjNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvVE7JQwqdjKhbCJflstR5BIhZSTOrhqEU3u7QjZ5lmKPEHwMpm3eWKAaAUTMD SBFdW4MuLoeDZfc/04y+3iU99+UFVA6biBsGd9Kq8quu19BTtEEXCN8uXa1FzD59 nBHCjbw/jS3utG9EmisJ1Hi8B568OBTTuYz3CPt/cI2/0M+KiBeFevaXFMEc61Gv ACuRVSX5pbEiF/jeOyki8wzR2/05MYlNVIJQ/PqUHjK/yTmgfEv1JWy9QJ3ARy8j M93CRJqcgQraBeQ0YI2RZYXRVxk/d58TDvqcPUXBYP4pvbacFUi/xiCQhMV5Qsr0 uR7Ojm88GsFPWATAOGeqPwmnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYlwZnTGI J4ohMOc1tVwAeH3T0xUwHwYDVR0jBBgwFoAU/edM0WVtTsrysOa7wxNdTrhAeCsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBODk4LzQwN0EyNUVBRDg3 RjExRUY5MUNDNTM0NkM0RjlBRTAyL19lZE0wV1Z0VHNyeXNPYTd3eE5kVHJoQWVD cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX2VkTTBXVnRUc3J5c09hN3d4TmRUcmhBZUNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB ODk4LzQwN0EyNUVBRDg3RjExRUY5MUNDNTM0NkM0RjlBRTAyL19lZE0wV1Z0VHNy eXNPYTd3eE5kVHJoQWVDcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI3XA557vS3WW6ql1868SAXzkXTxh0W/CcdK3GTn5/Fub+tGA2ZGe/Kk yQ1vO4cvSb+LeZjVk1WsZoAkvKw27XbNucyisIoHuAZDrkLmQbIazw7rDaku3wd8 Ug9M8GYgMfceQg43WsHT6nAvKoNTCYh0VRxbRfztxf5IeeY3dsegdAkLEVsD7kKp ue2iIkvd8C44AeyrgIJkHlaJVZ6M8e2Jgblb2dl2cL8l1X1M96Sq0wa0mp0lVPs3 fcZPlm7OBE6TzV2jeXm4Px8TaImDZ9KB2TCzLYMW6O7TLhbuuy+vEkwPy+z/sVVD l9K4yCGpIKilTie4I0HYLEIBdGh8ptY= -----END CERTIFICATE-----Generated at Wed Aug 6 13:11:46 2025 by rpki-client