$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft File: eDj_-XHbpCvN2NjzdFXwsoSbedc.mft (raw, json) Hash identifier: mP3jHPWb0FXJaPi+8+bOi/P3hjDwsJE/IeBdJuxGWTc= Subject key identifier: 2A:85:9E:AF:23:68:F7:6C:9A:C9:49:5C:79:66:86:C0:E6:20:77:7B Authority key identifier: 78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7 Certificate issuer: /CN=A919A9C8/serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft Manifest number: 013E Signing time: Sat 23 Aug 2025 04:34:20 +0000 Manifest this update: Sat 23 Aug 2025 04:34:19 +0000 Manifest next update: Sat 30 Aug 2025 04:34:19 +0000 Files and hashes: 1: eDj_-XHbpCvN2NjzdFXwsoSbedc.crl (hash: eg9CD07c/L1x0q3hx+vn4f/yi/4/Oh9QoZ6zX3V7FH0=) 2: 0D0118A89A4C11EEB7AE8812C4F9AE02.roa (hash: dKUIWl8erdDyFZKjf2ms5iCtc7nOGksh5tTJx3endFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A9C8, serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7 Validity Not Before: Aug 23 04:34:19 2025 GMT Not After : Aug 30 04:34:19 2025 GMT Subject: CN=68a944cc-2e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:32:f3:99:ce:70:7f:ae:99:45:c9:ae:9e:fc: 96:20:9b:1c:78:c6:04:c1:61:78:30:ec:da:97:d6: a2:90:bc:2f:32:26:01:6a:ee:ba:c1:28:db:c8:e6: ad:83:97:47:58:05:29:7f:47:3c:4a:0a:6d:ae:43: 5a:8f:3e:fe:98:75:c9:48:d8:58:4c:72:2f:6a:3f: b5:f5:7e:84:6e:9d:3e:86:58:ec:aa:2b:19:8a:83: 88:d0:d6:10:3f:37:5c:eb:50:69:56:98:21:db:a8: 16:d2:02:cd:59:e1:e3:4c:f0:cd:fb:c5:b2:3b:24: 3a:42:8b:69:06:ac:3c:38:f3:d4:61:13:1c:be:2a: f2:16:15:c6:e2:31:83:82:59:83:9b:fd:db:1d:cb: 1d:7f:28:15:8e:0b:b6:16:dc:cd:ff:4d:da:3f:ae: 5c:dc:86:99:2c:42:6c:c6:2c:d8:da:b2:d0:36:c4: e5:0a:bc:52:73:a8:5c:e9:fd:eb:00:39:60:99:f8: 49:ef:78:34:e9:d5:f5:44:4d:97:8a:09:7c:16:80: d6:cd:da:28:9c:7f:5c:3e:97:69:9b:ab:02:4b:e7: 87:85:ad:11:ee:85:05:e7:0c:8c:5a:8a:4e:f0:7a: 91:65:bb:28:33:01:61:59:b9:d9:7c:0c:2f:ec:19: d6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:85:9E:AF:23:68:F7:6C:9A:C9:49:5C:79:66:86:C0:E6:20:77:7B X509v3 Authority Key Identifier: keyid:78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:17:a0:24:7a:4e:1e:d6:7c:64:54:4d:c6:fa:2b:ce:d8:64: 1a:b3:5b:ce:c5:48:e1:bc:94:fe:89:05:0c:1b:23:11:51:83: bf:81:db:a2:1e:f9:9a:f1:3a:f2:24:d9:e5:d0:22:28:18:61: 68:f0:16:b9:dc:ec:22:1a:12:29:be:e7:44:09:7b:ae:52:79: 5e:fd:70:cc:05:e9:52:cc:ad:11:75:4b:f6:9e:a5:11:18:85: 87:3f:da:d9:3f:62:d7:98:c8:b7:3b:b9:a6:aa:c5:fd:5a:d2: c2:b8:54:f9:72:d1:6a:96:96:f9:da:69:0f:17:20:23:1d:7d: 28:a6:5f:10:b8:ac:92:a6:0b:1f:c8:23:ea:67:69:1c:a1:a4: 0c:5a:8b:bf:8b:36:b0:a2:ca:c4:a0:a2:01:bf:d7:84:d0:2f: 62:3e:f6:f1:9c:95:a6:4c:d7:5d:fb:ca:1f:26:c0:81:6f:e7: 58:56:32:fe:84:31:ab:93:30:5e:c9:eb:54:0d:00:df:98:e0: be:9f:76:39:8e:19:dd:b9:02:2e:e9:b1:04:6b:eb:b8:f5:f5: f4:e6:d6:db:c8:d7:fa:07:01:98:aa:6f:59:45:e9:87:40:84: b3:1a:a8:b9:e5:cf:e8:2e:6f:e8:32:bc:66:dc:0a:5f:10:50: 26:75:2f:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5QzgxMTAvBgNVBAUTKDc4MzhGRkY5NzFEQkE0MkJDREQ4RDhGMzc0NTVGMEIy ODQ5Qjc5RDcwHhcNMjUwODIzMDQzNDE5WhcNMjUwODMwMDQzNDE5WjAYMRYwFAYD VQQDEw02OGE5NDRjYy0yZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjLzmc5wf66ZRcmunvyWIJsceMYEwWF4MOzal9aikLwvMiYBau66wSjbyOat g5dHWAUpf0c8SgptrkNajz7+mHXJSNhYTHIvaj+19X6Ebp0+hljsqisZioOI0NYQ Pzdc61BpVpgh26gW0gLNWeHjTPDN+8WyOyQ6QotpBqw8OPPUYRMcviryFhXG4jGD glmDm/3bHcsdfygVjgu2FtzN/03aP65c3IaZLEJsxizY2rLQNsTlCrxSc6hc6f3r ADlgmfhJ73g06dX1RE2Xigl8FoDWzdoonH9cPpdpm6sCS+eHha0R7oUF5wyMWopO 8HqRZbsoMwFhWbnZfAwv7BnWNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqFnq8j aPdsmslJXHlmhsDmIHd7MB8GA1UdIwQYMBaAFHg4//lx26QrzdjY83RV8LKEm3nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTlDOC9EQkJCMDlGRTlB M0ExMUVFQTY3NTg5N0NDNEY5QUUwMi9lRGpfLVhIYnBDdk4yTmp6ZEZYd3NvU2Jl ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VEal8tWEhicEN2TjJOanpkRlh3c29TYmVkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTlDOC9EQkJCMDlGRTlBM0ExMUVFQTY3NTg5N0NDNEY5QUUwMi9lRGpfLVhIYnBD dk4yTmp6ZEZYd3NvU2JlZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzF6Akek4e1nxkVE3G+ivO2GQas1vOxUjhvJT+iQUMGyMRUYO/gdui Hvma8TryJNnl0CIoGGFo8Ba53OwiGhIpvudECXuuUnle/XDMBelSzK0RdUv2nqUR GIWHP9rZP2LXmMi3O7mmqsX9WtLCuFT5ctFqlpb52mkPFyAjHX0opl8QuKySpgsf yCPqZ2kcoaQMWou/izawosrEoKIBv9eE0C9iPvbxnJWmTNdd+8ofJsCBb+dYVjL+ hDGrkzBeyetUDQDfmOC+n3Y5jhnduQIu6bEEa+u49fX05tbbyNf6BwGYqm9ZRemH QISzGqi55c/oLm/oMrxm3ApfEFAmdS9p -----END CERTIFICATE-----Generated at Sat Aug 23 16:17:39 2025 by rpki-client