$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft File: eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json) Hash identifier: MInXDsh07ba4Uza/gLr+6lziqP59/awmBnFm6vLgN08= Subject key identifier: 10:92:DC:B3:54:1A:52:FC:97:42:7B:5D:95:23:F2:2B:E9:99:32:60 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 1171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft Manifest number: 10F0 Signing time: Fri 22 Aug 2025 17:28:49 +0000 Manifest this update: Fri 22 Aug 2025 17:28:48 +0000 Manifest next update: Fri 29 Aug 2025 17:28:48 +0000 Files and hashes: 1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: ASs42ISDcT2TMBaV5tUg1tzrTgDk/dI6OAhQ/H6OVc0=) 2: 7D670EA8F67A11EC92B5670FC4F9AE02.roa (hash: 9Odh9o3TlIW60dRdjsxDVQV+3vyhn2H48fPAT6vn3+M=) 3: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: UR2Z7oMUzbnedaI2LVS9uGRBFC7eB54GSgDAmYPW63Q=) 4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: W0JFS6tmn8XTuKql8AHkVwyZGDrJTsFtDN1V3+Sy2tA=) 5: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: +tn7Z6fq6avHjQp2bglrCkd8E2Sa27UKrn3GOMUj6b8=) 6: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: MLOX+4zM45smBurkZaVj3Oi8atSTyoZEzmqXwXoi1VA=) 7: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: KQfpgqTCm38R9/gLkZZKqv0IIflUZ1N/AO5E6KaW3hc=) 8: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: hyfl49PKKB2ONDtyk43wvbgkIsmowZKGDNVFA1XCOPA=) 9: CE0122802D4211EA907A566EC4F9AE02.roa (hash: Av4l0HsggCXslSxN1XLmPQb/NQp3V/CmXQCgKkE+IxE=) 10: 93F95BE673C711E98CD6D335C4F9AE02.roa (hash: 2+EzbP/f4S7Jeaq3EYQS0mWwY430dyRIPuynNaHcMvc=) 11: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: Za7LOD1x/AWq47LZxakqACtbC+NnfwEUEJeBoexu1ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4465 (0x1171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: Aug 22 17:28:48 2025 GMT Not After : Aug 29 17:28:48 2025 GMT Subject: CN=68a8a8d0-b492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:50:40:74:ee:de:98:be:01:78:4a:66:b1: 41:db:c2:1b:4d:4f:33:76:c4:18:78:96:b6:90:16: 8c:ab:3a:54:cb:58:8c:65:a1:90:7b:e5:0d:09:8a: 32:59:26:66:6b:94:2f:fb:97:73:1f:89:7d:d8:27: 3d:f9:92:d0:66:a3:84:ab:56:71:02:01:db:a9:f5: e3:b3:07:db:9f:47:9c:cb:0a:45:06:b6:b4:9d:55: 08:55:f7:87:b7:2f:8a:d8:e3:51:1c:3a:ea:e5:36: 9a:4a:81:68:16:78:40:cb:4b:2d:62:93:8c:9a:a0: 68:0e:92:2b:24:36:8a:35:c8:c3:50:b3:f1:56:87: 08:9f:ae:74:14:27:92:b5:c4:4a:e9:63:52:73:1c: 96:62:49:c2:2f:eb:47:89:1c:1e:0d:42:9f:28:29: d0:b8:f9:97:eb:68:ce:b1:6a:87:1a:00:fc:72:c1: 05:be:74:e9:09:7c:bb:5c:1f:2d:71:f3:af:ea:89: 0d:79:fc:fa:b3:0a:96:7f:a9:fe:6b:4e:ac:76:22: ec:61:96:32:19:8c:be:ad:be:cf:65:bf:cc:7e:8e: 45:f4:3a:69:45:17:a2:5c:47:42:26:de:18:b4:1e: 93:aa:88:5f:18:4d:3c:5e:35:d2:e6:db:cf:8b:94: e6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:92:DC:B3:54:1A:52:FC:97:42:7B:5D:95:23:F2:2B:E9:99:32:60 X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:f6:d6:49:6e:12:a9:c2:a4:9c:65:19:dc:b2:06:4c:7e:9d: 93:6c:65:d7:55:20:51:69:e5:b6:76:d8:6b:0d:cc:90:6a:8f: 74:63:1e:69:39:c2:01:93:5e:e6:e2:25:20:13:81:61:60:76: 1f:6c:b9:de:16:8c:2e:3d:d1:71:84:b3:74:a6:5c:a9:45:2e: 32:ec:98:bd:e1:8f:29:8c:04:e5:5d:44:01:08:63:a0:c7:e2: 27:94:7c:96:f7:31:9c:62:2b:14:a9:85:d3:a3:32:13:ec:22: 7e:98:1f:8b:57:46:99:88:b4:59:3a:5c:7f:90:14:b5:b2:74: db:0f:0b:ee:31:4b:c9:2a:d3:51:12:10:99:2b:fa:d2:56:aa: 0b:c8:e4:f2:17:e4:06:88:d5:62:ed:c0:9f:d1:81:5d:f6:7d: e0:a2:6e:80:96:e5:a4:01:52:a6:d9:07:e0:28:3e:b7:e0:f1: e2:51:68:e1:28:14:9e:89:94:6a:99:c8:92:76:1c:ac:56:bd: d0:e8:a2:43:94:cc:57:df:6d:ae:78:c7:bf:35:35:93:48:63: 69:67:5e:6a:62:30:fe:0a:39:18:44:34:77:60:25:d2:04:d7: cb:08:c6:f8:e0:3a:1f:40:72:8b:20:27:22:52:fa:55:4b:33: e2:40:a3:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjUwODIyMTcyODQ4WhcNMjUwODI5MTcyODQ4WjAYMRYwFAYD VQQDEw02OGE4YThkMC1iNDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArk1QQHTu3pi+AXhKZrFB28IbTU8zdsQYeJa2kBaMqzpUy1iMZaGQe+UNCYoy WSZma5Qv+5dzH4l92Cc9+ZLQZqOEq1ZxAgHbqfXjswfbn0ecywpFBra0nVUIVfeH ty+K2ONRHDrq5TaaSoFoFnhAy0stYpOMmqBoDpIrJDaKNcjDULPxVocIn650FCeS tcRK6WNScxyWYknCL+tHiRweDUKfKCnQuPmX62jOsWqHGgD8csEFvnTpCXy7XB8t cfOv6okNefz6swqWf6n+a06sdiLsYZYyGYy+rb7PZb/Mfo5F9DppRReiXEdCJt4Y tB6TqohfGE08XjXS5tvPi5Tm4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCS3LNU GlL8l0J7XZUj8ivpmTJgMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTZBMy83NzI3Q0U1QzM4QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJp VUdVUEQ5eWR2RlU4RE95akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk9tZJbhKpwqScZRncsgZMfp2TbGXXVSBRaeW2dthrDcyQao90Yx5p OcIBk17m4iUgE4FhYHYfbLneFowuPdFxhLN0plypRS4y7Ji94Y8pjATlXUQBCGOg x+InlHyW9zGcYisUqYXTozIT7CJ+mB+LV0aZiLRZOlx/kBS1snTbDwvuMUvJKtNR EhCZK/rSVqoLyOTyF+QGiNVi7cCf0YFd9n3gom6AluWkAVKm2QfgKD634PHiUWjh KBSeiZRqmciSdhysVr3Q6KJDlMxX322ueMe/NTWTSGNpZ15qYjD+CjkYRDR3YCXS BNfLCMb44DofQHKLICciUvpVSzPiQKOJ -----END CERTIFICATE-----Generated at Sat Aug 23 12:34:07 2025 by rpki-client