$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json) Hash identifier: PxuGVyo4yXrI/p6b2h5jWmub7d30cPqgedGZUBcBLSE= Subject key identifier: 72:1D:6A:88:74:EC:DC:48:55:8B:1D:04:74:00:B5:99:A4:01:DC:9F Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 143D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft Manifest number: 13E0 Signing time: Sat 18 Oct 2025 17:25:43 +0000 Manifest this update: Sat 18 Oct 2025 17:25:42 +0000 Manifest next update: Sat 25 Oct 2025 17:25:42 +0000 Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: JlVrdXIA7n7/Vcs44YH1ScmmoQ6TGj3rGQHeFhVNsfM=) 2: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: nHJYnVN764I+a01wg+TzZ5hfwKIk6KrVw4NGUGzTSaE=) 3: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: HUiyLswpuxKdbNSVPaGfLSYEn6DWoC29PelmwIAjJ5Y=) 4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: OqEEQNcYyBCDgQL1llF0AYlCqLNvN3uXPMeNJtc0cyI=) 5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: faPX+RT4u0aFWk0BQoLYurHE34SqXeH6Z33EAVEOUo0=) 6: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: PEQx20rXW3wWd56B/SVjtbMpJcwzQ8D6MiDi0J0Jbek=) 7: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: lBRDtES/HZOfboWNM5sziaPImTLADmv7HDwM0/uuCvk=) 8: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: Flu+OB6NSXTr2/DICAFpHEHutk0iqrBQ5kD9GJPbb90=) 9: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: V1iSNQB8ve6x07QbL++7FcG93VsgUWiOli7wIFWtTZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5181 (0x143d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: Oct 18 17:25:42 2025 GMT Not After : Oct 25 17:25:42 2025 GMT Subject: CN=68f3cd97-77ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d3:04:fa:0f:b2:bc:1f:67:cf:a8:57:ca:5e: 05:a2:77:c8:65:bd:a8:2e:88:04:28:ed:b7:6d:39: f7:99:50:82:2c:20:73:ca:69:87:61:67:9f:66:ef: ce:fe:c7:d2:cc:ef:dc:0c:95:b4:0c:d2:10:61:c7: aa:79:9a:52:3e:0b:a6:8f:67:f3:c9:e6:a7:14:9c: 5b:2d:ee:0f:d2:c3:63:61:7f:9b:69:03:a9:8d:d0: 05:35:9c:2e:21:2a:8a:ad:9d:58:b6:fd:d3:24:bc: 6d:b2:d2:8f:46:1c:4c:e7:20:2f:b2:bc:2d:b7:66: 3a:47:a5:76:58:8b:d0:bb:48:69:aa:98:fc:5c:c4: c2:0b:96:d1:48:87:5c:ab:26:a8:38:06:a1:c4:d4: 3e:c3:d0:d0:38:fc:4c:81:63:65:ab:03:0f:9a:b6: bb:77:cb:3e:cc:62:81:00:ba:c2:02:21:d0:8e:20: f4:c6:27:f5:f6:9c:a2:ed:63:40:57:01:0e:ae:10: 28:7c:42:2b:5a:c0:35:e3:6f:af:0a:de:e3:cb:62: c4:c2:e6:25:0c:10:b8:4c:36:8f:7b:74:0a:a1:21: 5c:7b:a2:3d:9f:0c:bf:e4:eb:c1:44:21:01:19:66: 03:bd:61:a3:4d:d7:1c:96:5c:95:73:36:bb:aa:d0: a4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1D:6A:88:74:EC:DC:48:55:8B:1D:04:74:00:B5:99:A4:01:DC:9F X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:6d:c6:4f:e9:da:06:9b:77:28:e9:4d:98:61:33:79:2f:82: 50:b9:e2:de:67:a9:4b:fc:b4:e1:91:e6:47:36:25:e3:c5:59: dc:e3:3e:54:f0:61:98:80:7a:9a:67:ea:f4:22:05:ee:12:c4: e6:bb:70:a1:70:99:f7:4e:40:f8:9e:11:db:cf:98:27:4d:d8: 13:96:9d:4f:64:0a:29:b1:60:45:a2:43:88:c2:08:ae:a7:93: 03:f2:95:fe:2f:4c:e5:8a:a2:c2:52:b8:50:49:c5:df:11:05: f8:a0:a2:54:6d:3c:63:46:2d:84:70:6e:23:53:6e:13:c1:6b: d9:3d:71:1a:b3:15:78:9e:25:c6:93:ec:da:a8:c2:2e:b8:d0: 0c:53:71:5e:54:2b:b6:6e:71:0b:38:33:30:88:51:f0:22:54: 9a:c2:ce:b2:a3:db:ca:09:1d:e7:26:fb:85:1d:eb:ac:6a:03: a8:ec:67:2b:4f:a9:fd:3a:5c:83:f3:84:1e:02:19:f8:cb:79: c1:d8:9a:fc:bb:98:9d:48:77:d3:32:9d:26:f4:8e:3e:1c:0a: f5:a2:ee:4c:f7:90:a9:2d:b9:76:dc:63:34:30:73:27:db:07: e6:67:23:04:c4:7a:4e:92:45:ab:f2:6f:d5:88:7b:82:60:aa: a9:52:59:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjUxMDE4MTcyNTQyWhcNMjUxMDI1MTcyNTQyWjAYMRYwFAYD VQQDEw02OGYzY2Q5Ny03N2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtME+g+yvB9nz6hXyl4FonfIZb2oLogEKO23bTn3mVCCLCBzymmHYWefZu/O /sfSzO/cDJW0DNIQYceqeZpSPgumj2fzyeanFJxbLe4P0sNjYX+baQOpjdAFNZwu ISqKrZ1Ytv3TJLxtstKPRhxM5yAvsrwtt2Y6R6V2WIvQu0hpqpj8XMTCC5bRSIdc qyaoOAahxNQ+w9DQOPxMgWNlqwMPmra7d8s+zGKBALrCAiHQjiD0xif19pyi7WNA VwEOrhAofEIrWsA142+vCt7jy2LEwuYlDBC4TDaPe3QKoSFce6I9nwy/5OvBRCEB GWYDvWGjTdccllyVcza7qtCk9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIdaoh0 7NxIVYsdBHQAtZmkAdyfMB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDbcZP6doGm3co6U2YYTN5L4JQueLeZ6lL/LThkeZHNiXjxVnc4z5U 8GGYgHqaZ+r0IgXuEsTmu3ChcJn3TkD4nhHbz5gnTdgTlp1PZAopsWBFokOIwgiu p5MD8pX+L0zliqLCUrhQScXfEQX4oKJUbTxjRi2EcG4jU24TwWvZPXEasxV4niXG k+zaqMIuuNAMU3FeVCu2bnELODMwiFHwIlSaws6yo9vKCR3nJvuFHeusagOo7Gcr T6n9OlyD84QeAhn4y3nB2Jr8u5idSHfTMp0m9I4+HAr1ou5M95CpLbl23GM0MHMn 2wfmZyMExHpOkkWr8m/ViHuCYKqpUlld -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:43 2025 by rpki-client