$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json) Hash identifier: cSUBTEBlO6xxLOVQ2LsNTVL767NL1CZhRG2XPHGh/EI= Subject key identifier: 14:7D:AF:29:7C:AC:8F:7A:ED:CE:56:0B:4E:6C:3E:88:AB:3D:39:DA Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 1416 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft Manifest number: 13C1 Signing time: Fri 22 Aug 2025 17:05:17 +0000 Manifest this update: Fri 22 Aug 2025 17:05:17 +0000 Manifest next update: Fri 29 Aug 2025 17:05:17 +0000 Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: xkQV7C+QYbs7r69p5b/mUqdVVfDd8zPIQVqSDa/x/oI=) 2: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: bxKpA/oFCU6TUM9crxLIgO78TFK6gY7b8jSCF6lkl2Q=) 3: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: Ie+fFLUk+hkh8iPsi0JIDwR97rjtnpIzqO2/djh9dOA=) 4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: HMDXcvVMEGAxoOC++6wcObudAAOApyw/6bDY30a1r+o=) 5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: bwsT9LHkujI+JrOu04/8rGiF6KuhSDYaJy2PKrf04nk=) 6: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: vIOfq2VGA/o5BqEJqyV+v1G5m5lQGi2kmLP/YtnJAmE=) 7: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: l4uHSTMAHvz3K39iQ1N6BJocMGP4W2EFJHrCsRCiw/k=) 8: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: 0Wf6MrY856EXSgNTseMSxFkk6LBzj+vW0CkBQhFM5Vo=) 9: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wsYRvalqXpbWZCIqLrO6x3uxF4QcGxGmLPv4fG6+ndk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5142 (0x1416) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: Aug 22 17:05:17 2025 GMT Not After : Aug 29 17:05:17 2025 GMT Subject: CN=68a8a34d-9225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5d:44:63:0c:55:8f:58:7e:8a:1a:e9:c4:13: cf:56:71:09:36:87:a3:b0:22:65:dd:55:cd:9b:68: 72:68:93:f0:2b:00:ab:28:76:73:19:4f:c7:df:28: 3e:2c:08:8b:4c:cb:bb:e1:2f:8b:a6:6f:b9:8d:3c: 54:d0:75:71:e5:54:0d:b9:50:c4:28:78:c3:f1:41: 8a:36:fa:c2:8a:c6:7f:9b:e8:ea:44:fd:62:14:91: a9:05:aa:c0:bf:78:37:a4:a1:c8:c3:e9:ff:dc:67: b6:02:99:13:56:8d:0e:64:49:15:36:6e:6e:69:2e: 98:96:33:b7:a0:a2:d1:00:b5:b1:e9:32:52:4f:85: 04:4c:fc:d4:59:45:aa:20:e3:f3:ce:f9:60:c2:37: 6c:01:e5:dc:7e:90:3f:e3:1a:0c:9c:85:fe:79:28: 63:34:36:0f:01:5c:2b:d4:e1:23:3f:8a:2f:da:fe: b4:af:ec:f6:91:f5:f7:d9:c8:ac:00:48:1b:a1:ba: 53:44:44:37:5a:ca:f8:9b:b4:4d:b8:7f:54:87:b9: b8:60:84:7d:68:af:e9:59:f0:80:ea:d2:6c:eb:b4: c9:a2:2f:bf:af:d7:7f:9c:59:d9:02:82:36:2a:e6: 54:ea:f0:2d:96:84:db:b0:2f:13:db:08:67:c5:cd: 0b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7D:AF:29:7C:AC:8F:7A:ED:CE:56:0B:4E:6C:3E:88:AB:3D:39:DA X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:a3:af:18:d7:47:7b:9c:a3:10:03:22:50:d2:40:80:d7:0a: f0:2b:2c:44:27:de:02:e2:d2:34:14:3c:59:db:dc:cd:a8:e2: 7b:09:18:e0:eb:b9:19:27:78:d0:f9:cc:ef:65:b8:50:99:aa: 55:78:e3:af:e4:32:18:6f:13:17:9d:e7:2e:98:9c:60:48:4e: 5c:5a:fc:45:42:f1:ba:88:18:4b:4b:06:88:1c:a0:e9:96:a3: e0:8c:96:58:d0:d6:7d:69:ac:85:81:ae:14:20:0f:c5:c4:bf: cd:c9:b9:c0:2a:b5:67:25:ed:97:ac:b4:f3:56:81:0e:49:41: 69:16:60:4c:d2:b9:b2:95:66:2e:16:9f:b5:82:dd:ca:a4:6c: 05:34:71:d6:ea:58:96:79:72:ad:70:b2:b5:c9:d6:c8:3a:bd: 0f:6d:e7:d0:62:f3:d3:55:7b:1e:b4:0c:84:f0:bc:00:ea:0c: c2:1e:f5:0a:79:bb:ac:da:80:f2:01:e2:16:8e:b6:30:a4:a0: 02:6b:df:1c:85:a0:fa:b9:cb:d4:a9:d5:ae:fc:a3:13:9f:46: a1:dc:a5:6c:1f:3e:a5:32:ca:69:69:72:4e:56:11:f0:3b:7f: 39:7b:cb:2b:74:e7:80:31:4f:10:88:64:3b:9d:fa:09:de:00: d6:a3:ba:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjUwODIyMTcwNTE3WhcNMjUwODI5MTcwNTE3WjAYMRYwFAYD VQQDEw02OGE4YTM0ZC05MjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5V1EYwxVj1h+ihrpxBPPVnEJNoejsCJl3VXNm2hyaJPwKwCrKHZzGU/H3yg+ LAiLTMu74S+Lpm+5jTxU0HVx5VQNuVDEKHjD8UGKNvrCisZ/m+jqRP1iFJGpBarA v3g3pKHIw+n/3Ge2ApkTVo0OZEkVNm5uaS6YljO3oKLRALWx6TJST4UETPzUWUWq IOPzzvlgwjdsAeXcfpA/4xoMnIX+eShjNDYPAVwr1OEjP4ov2v60r+z2kfX32cis AEgbobpTREQ3Wsr4m7RNuH9Uh7m4YIR9aK/pWfCA6tJs67TJoi+/r9d/nFnZAoI2 KuZU6vAtloTbsC8T2whnxc0LkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBR9ryl8 rI967c5WC05sPoirPTnaMB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFo68Y10d7nKMQAyJQ0kCA1wrwKyxEJ94C4tI0FDxZ29zNqOJ7CRjg 67kZJ3jQ+czvZbhQmapVeOOv5DIYbxMXnecumJxgSE5cWvxFQvG6iBhLSwaIHKDp lqPgjJZY0NZ9aayFga4UIA/FxL/NybnAKrVnJe2XrLTzVoEOSUFpFmBM0rmylWYu Fp+1gt3KpGwFNHHW6liWeXKtcLK1ydbIOr0PbefQYvPTVXsetAyE8LwA6gzCHvUK ebus2oDyAeIWjrYwpKACa98chaD6ucvUqdWu/KMTn0ah3KVsHz6lMsppaXJOVhHw O385e8srdOeAMU8QiGQ7nfoJ3gDWo7pr -----END CERTIFICATE-----Generated at Sun Aug 24 00:31:35 2025 by rpki-client