$ rpki-client -vvf rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft File: EdV6dX7VZXXQSeQpyOxzelYFC3k.mft (raw, json) Hash identifier: /s08Aw7ZaRmldh+AIkj4CaUl/oqW3b+Ao8mwbchmWQk= Subject key identifier: 14:E0:19:36:D9:E2:93:2C:8B:DE:A7:AA:43:5E:3F:F0:78:9D:7C:49 Authority key identifier: 11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79 Certificate issuer: /CN=A91672F2/serialNumber=11D57A757ED56575D049E429C8EC737A56050B79 Certificate serial: 0F12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft Manifest number: 0F0B Signing time: Fri 22 Aug 2025 17:44:44 +0000 Manifest this update: Fri 22 Aug 2025 17:44:43 +0000 Manifest next update: Fri 29 Aug 2025 17:44:43 +0000 Files and hashes: 1: EdV6dX7VZXXQSeQpyOxzelYFC3k.crl (hash: PSLzdcPHV789el745y8ICDtQ2gHWQH1pG6Nm/o1isrs=) 2: 6F89ECBE80D611E99C76DF63C4F9AE02.roa (hash: aXwfGlxqPqu7b393NAPdLMtIQdRhwXxgAFjX3VEBtag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3858 (0xf12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91672F2, serialNumber=11D57A757ED56575D049E429C8EC737A56050B79 Validity Not Before: Aug 22 17:44:43 2025 GMT Not After : Aug 29 17:44:43 2025 GMT Subject: CN=68a8ac8c-e5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:ae:15:b6:68:46:f5:26:4c:cd:af:80:aa: b5:66:8b:1d:50:46:0d:86:21:9f:fd:25:a3:33:9a: d8:ed:3c:7e:dd:9e:cc:f7:51:e2:d1:53:cc:10:3e: 03:a5:07:c7:91:e9:fd:99:05:6b:b8:f1:f1:7f:79: b9:ad:02:7e:67:f7:2c:04:92:c4:21:6a:9f:b1:82: 57:c6:b5:f9:8f:7c:90:71:8f:5f:54:16:d8:83:d6: 02:7b:42:1e:c2:ef:50:71:c2:80:2c:31:8f:4e:22: 8f:3c:f1:81:cd:62:e2:2d:19:17:d0:c6:20:d2:a5: e5:86:e8:e8:18:26:91:de:2e:5d:60:fd:07:c3:44: 49:91:88:dc:53:86:97:27:91:f1:a1:41:df:48:61: 7d:61:47:98:78:23:8c:71:de:f6:61:bf:f6:27:f4: 56:c5:67:28:54:e1:29:6d:35:9c:0d:09:5e:0c:3e: 6a:26:01:33:44:9e:37:33:c3:94:03:d5:a2:ca:98: a2:a2:97:39:3f:e0:75:ce:f0:a4:9e:85:53:66:e5: c7:28:4e:35:c9:a0:87:78:8f:e7:25:7c:3b:dd:85: e1:69:04:65:07:8a:25:1d:93:a7:99:7c:19:7d:f4: f1:c1:ff:fc:b3:80:a3:15:a9:c0:99:5c:cf:95:f0: 8b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E0:19:36:D9:E2:93:2C:8B:DE:A7:AA:43:5E:3F:F0:78:9D:7C:49 X509v3 Authority Key Identifier: keyid:11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:65:a2:3e:df:d9:04:44:25:5d:e5:dc:0d:a3:fc:93:a6:39: a0:59:48:5f:82:88:77:6c:cf:7f:7f:65:d4:ed:f9:6e:39:e5: 76:37:ae:05:35:8b:ae:0f:af:c6:f9:15:ac:f9:b2:3c:15:3c: f3:d2:08:cd:b5:f4:d0:93:09:24:02:9f:fc:01:26:91:7c:92: a4:4e:aa:0e:ca:cf:3c:75:be:40:19:cc:07:59:4b:e8:cf:3d: dc:ad:2d:5d:19:13:71:24:ef:1b:08:a5:d1:53:66:f9:cb:32: a4:4c:d7:36:15:5b:0d:74:2e:a1:83:d8:75:46:e5:0d:41:7e: 60:65:dc:f6:5d:eb:23:73:72:d3:58:fe:3f:3c:86:7d:a4:c1: 12:2c:31:e5:1f:cd:37:03:a5:3c:6c:e8:77:7b:88:aa:de:6e: 51:f2:8d:08:ed:ee:bd:32:a9:35:40:21:67:10:87:5c:e3:bc: 2a:ac:82:39:94:e8:a1:43:d9:7c:52:43:d2:c9:ca:74:0e:bc: ef:51:d6:79:e9:54:b8:b1:c6:0f:38:09:ec:30:1a:3d:a2:34: 2a:e4:2d:13:ca:ad:f4:7a:30:97:41:c0:e0:70:ed:0a:6c:8e: f9:7d:ff:94:5a:9e:d3:73:b5:f8:a7:87:bc:11:cf:3a:b4:96: e1:8a:e9:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyRjIxMTAvBgNVBAUTKDExRDU3QTc1N0VENTY1NzVEMDQ5RTQyOUM4RUM3MzdB NTYwNTBCNzkwHhcNMjUwODIyMTc0NDQzWhcNMjUwODI5MTc0NDQzWjAYMRYwFAYD VQQDEw02OGE4YWM4Yy1lNWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKOuFbZoRvUmTM2vgKq1ZosdUEYNhiGf/SWjM5rY7Tx+3Z7M91Hi0VPMED4D pQfHken9mQVruPHxf3m5rQJ+Z/csBJLEIWqfsYJXxrX5j3yQcY9fVBbYg9YCe0Ie wu9QccKALDGPTiKPPPGBzWLiLRkX0MYg0qXlhujoGCaR3i5dYP0Hw0RJkYjcU4aX J5HxoUHfSGF9YUeYeCOMcd72Yb/2J/RWxWcoVOEpbTWcDQleDD5qJgEzRJ43M8OU A9Wiypiiopc5P+B1zvCknoVTZuXHKE41yaCHeI/nJXw73YXhaQRlB4olHZOnmXwZ ffTxwf/8s4CjFanAmVzPlfCLfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTgGTbZ 4pMsi96nqkNeP/B4nXxJMB8GA1UdIwQYMBaAFBHVenV+1WV10EnkKcjsc3pWBQt5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJGMi9ERDhFQzFDODgw RDQxMUU5QTlDOUM3NUVDNEY5QUUwMi9FZFY2ZFg3VlpYWFFTZVFweU94emVsWUZD M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkVjZkWDdWWlhYUVNlUXB5T3h6ZWxZRkMzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzJGMi9ERDhFQzFDODgwRDQxMUU5QTlDOUM3NUVDNEY5QUUwMi9FZFY2ZFg3VlpY WFFTZVFweU94emVsWUZDM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4ZaI+39kERCVd5dwNo/yTpjmgWUhfgoh3bM9/f2XU7fluOeV2N64F NYuuD6/G+RWs+bI8FTzz0gjNtfTQkwkkAp/8ASaRfJKkTqoOys88db5AGcwHWUvo zz3crS1dGRNxJO8bCKXRU2b5yzKkTNc2FVsNdC6hg9h1RuUNQX5gZdz2Xesjc3LT WP4/PIZ9pMESLDHlH803A6U8bOh3e4iq3m5R8o0I7e69Mqk1QCFnEIdc47wqrII5 lOihQ9l8UkPSycp0DrzvUdZ56VS4scYPOAnsMBo9ojQq5C0Tyq30ejCXQcDgcO0K bI75ff+UWp7Tc7X4p4e8Ec86tJbhiul2 -----END CERTIFICATE-----Generated at Sun Aug 24 00:32:31 2025 by rpki-client