$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft File: eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json) Hash identifier: lx/mGmsWN6nDdzIDBWzubG0FygwV/ZzHsKI/5QZEjCo= Subject key identifier: 96:5A:4F:AF:2D:32:1B:EC:AB:E4:7F:D6:E7:F6:8C:7D:4E:6D:FA:E3 Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft Manifest number: 011E Signing time: Sat 23 Aug 2025 04:55:11 +0000 Manifest this update: Sat 23 Aug 2025 04:55:11 +0000 Manifest next update: Sat 30 Aug 2025 04:55:11 +0000 Files and hashes: 1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: LjTd+bPmE0k9kn6xPXsVDiK0MS/cghdmTEwwLh7vfT4=) 2: B9C587ACA61911EFAD319873C4F9AE02.roa (hash: UVNnVE482CTuury1gOUSOm7uwVR741BfWPntovKeG3A=) 3: BA8A5FBEA61911EFAD319873C4F9AE02.roa (hash: GxG7PljqaIsL4NG1p4pqVTS9JJNKWXLA96c3vNu2FFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Validity Not Before: Aug 23 04:55:11 2025 GMT Not After : Aug 30 04:55:11 2025 GMT Subject: CN=68a949af-a6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9a:83:1c:3a:d0:6c:96:55:b4:ef:b0:9f:ce: b3:92:b1:f6:23:8e:42:84:2c:dd:60:99:22:2b:99: 13:40:5a:6b:82:db:1f:33:63:c8:b2:7e:40:f6:9d: 6c:e7:bc:2a:75:6d:4c:d6:83:5e:8c:c1:1c:74:78: f1:07:1d:88:ae:7a:fe:d3:ee:53:9b:e0:0c:d9:7c: e8:0f:56:77:6b:68:d5:2c:27:72:05:58:07:20:d2: 24:1d:e4:59:6b:43:9d:8a:f3:b7:15:e8:6d:94:80: cb:34:87:bb:61:27:08:d9:21:fc:a9:3b:e2:51:9f: da:94:10:0e:5b:2d:7e:e3:19:e1:d4:22:e8:f5:22: 83:6c:33:04:f0:bf:3d:d5:cd:ff:fd:1f:4e:20:40: 8e:6b:49:4f:96:06:31:77:29:88:4a:72:af:8b:e9: 59:42:70:5c:e9:8d:07:03:7c:d6:de:ab:34:15:45: b5:d6:3c:57:7f:ac:f5:87:45:bd:16:95:50:99:f2: 1e:92:16:0b:4b:43:29:7e:7b:bd:e9:f6:63:64:22: 8b:17:ee:2c:99:64:7c:d3:ed:89:03:4f:e0:4b:ec: a0:52:79:02:69:1d:af:51:43:d7:3d:f5:e4:6d:a6: a7:24:ae:8e:0f:ae:33:fe:e5:0d:3e:d0:7e:3c:da: 02:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5A:4F:AF:2D:32:1B:EC:AB:E4:7F:D6:E7:F6:8C:7D:4E:6D:FA:E3 X509v3 Authority Key Identifier: keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9f:ee:ec:40:65:ae:8d:42:b9:c8:b2:8e:c0:8a:f4:cb:27: da:5e:fd:5d:9a:0e:3a:23:6c:a0:f1:a4:7f:7d:c6:c0:31:43: 21:49:d1:11:03:de:1b:fb:5a:f9:44:45:cb:6d:72:b9:7d:2e: 22:ce:a8:0c:2b:9c:ed:f8:f5:93:a9:ae:4d:b9:e7:a2:e5:98: 8e:85:7e:17:6d:d8:a7:22:b2:01:86:bf:f8:4c:a3:42:08:e1: 30:a7:4a:c2:1e:09:b2:29:c2:aa:df:18:5b:ac:bf:98:00:dc: be:76:8e:15:cc:de:14:11:74:4e:26:4a:ed:f3:3b:ea:a5:af: 8a:78:e0:c7:56:5a:8e:c8:08:29:f2:fa:74:39:bd:cb:df:89: 5a:d2:43:b2:4d:3c:e2:22:0e:bf:77:b9:13:9d:8e:49:dd:77: 58:eb:3a:23:e8:7e:5c:db:b4:83:9c:a2:0d:80:9e:15:48:e0: 5f:01:9d:10:2c:63:48:45:00:44:a2:af:76:5b:f6:ce:6a:fb: 23:e4:92:dd:4d:75:2e:cb:59:4b:67:c6:d2:16:44:9b:b1:fd: 9c:15:c5:a4:79:97:b0:4f:0d:bc:1a:68:2c:a3:5f:d4:07:ba: f6:59:6d:41:36:c7:92:db:0e:fd:42:27:05:7b:86:98:aa:da: fd:ba:09:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKDc4MzlBMUZDMDE3NDAyNEJDQkE4NEQwMTJEM0VDNENB NDY3OUFDNzEwHhcNMjUwODIzMDQ1NTExWhcNMjUwODMwMDQ1NTExWjAYMRYwFAYD VQQDEw02OGE5NDlhZi1hNmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pqDHDrQbJZVtO+wn86zkrH2I45ChCzdYJkiK5kTQFprgtsfM2PIsn5A9p1s 57wqdW1M1oNejMEcdHjxBx2Irnr+0+5Tm+AM2XzoD1Z3a2jVLCdyBVgHINIkHeRZ a0OdivO3FehtlIDLNIe7YScI2SH8qTviUZ/alBAOWy1+4xnh1CLo9SKDbDME8L89 1c3//R9OIECOa0lPlgYxdymISnKvi+lZQnBc6Y0HA3zW3qs0FUW11jxXf6z1h0W9 FpVQmfIekhYLS0Mpfnu96fZjZCKLF+4smWR80+2JA0/gS+ygUnkCaR2vUUPXPfXk baanJK6OD64z/uUNPtB+PNoCUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZaT68t Mhvsq+R/1uf2jH1ObfrjMB8GA1UdIwQYMBaAFHg5ofwBdAJLy6hNAS0+xMpGeaxx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS84ODJGMjMyMEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFrdkxxRTBCTFQ3RXlrWjVy SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VEbWhfQUYwQWt2THFFMEJMVDdFeWtaNXJIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVDOS84ODJGMjMyMEM5RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFr dkxxRTBCTFQ3RXlrWjVySEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMn+7sQGWujUK5yLKOwIr0yyfaXv1dmg46I2yg8aR/fcbAMUMhSdER A94b+1r5REXLbXK5fS4izqgMK5zt+PWTqa5Nueei5ZiOhX4XbdinIrIBhr/4TKNC COEwp0rCHgmyKcKq3xhbrL+YANy+do4VzN4UEXROJkrt8zvqpa+KeODHVlqOyAgp 8vp0Ob3L34la0kOyTTziIg6/d7kTnY5J3XdY6zoj6H5c27SDnKINgJ4VSOBfAZ0Q LGNIRQBEoq92W/bOavsj5JLdTXUuy1lLZ8bSFkSbsf2cFcWkeZewTw28Gmgso1/U B7r2WW1BNseS2w79QicFe4aYqtr9ugnk -----END CERTIFICATE-----Generated at Sat Aug 23 10:38:35 2025 by rpki-client