$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft File: _eDYrIjb_GreZ9__WjrC7yZsXNw.mft (raw, json) Hash identifier: FhjDzpZUurb2i5RlwVdLmQuLnQJ+JvUnfFCd+tTO38M= Subject key identifier: 10:1B:65:E7:6F:2C:8B:60:DC:2B:21:CF:B0:CF:18:B3:BB:DF:50:17 Authority key identifier: FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC Certificate issuer: /CN=A91E7FA1/serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft Manifest number: 37 Signing time: Sat 23 Aug 2025 07:49:29 +0000 Manifest this update: Sat 23 Aug 2025 07:49:29 +0000 Manifest next update: Sat 30 Aug 2025 07:49:28 +0000 Files and hashes: 1: _eDYrIjb_GreZ9__WjrC7yZsXNw.crl (hash: bUytOqGzd8CF/AtmhS1j46a+eKAjPY9jb1D2iJazvNo=) 2: 292A3CF0376511F0A9D2D035C4F9AE02.roa (hash: qQ/o26aFQ3fCsqKdZcgYj7qgKbMCzj8e65hKr1gdKM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7FA1, serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC Validity Not Before: Aug 23 07:49:29 2025 GMT Not After : Aug 30 07:49:28 2025 GMT Subject: CN=68a97289-50e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f4:37:60:40:f4:3c:de:d1:09:1e:bb:0a:7c: 9b:1d:d7:3f:cd:0c:ef:99:e5:40:9a:d9:e4:66:e9: 34:60:84:d8:84:7a:82:63:c0:f2:03:9c:66:40:f5: 70:53:e5:ca:a9:2f:7f:77:d1:14:ff:77:e6:d7:18: 03:c5:14:75:d4:91:01:02:5c:db:4d:a3:c9:9f:d3: 05:de:31:2d:5b:96:d3:08:d6:48:65:a2:54:59:c9: df:2d:88:c4:60:33:fc:06:03:73:ff:76:39:b2:18: ed:b7:16:39:1b:b8:07:4c:f4:97:8c:02:c7:16:a5: fe:d7:6c:47:b0:ef:3d:34:6f:40:8c:4b:1c:d9:1d: 63:e3:ce:20:d3:c8:65:b1:f6:7f:c2:a3:47:c0:04: 77:51:4f:e6:7a:02:92:17:65:83:26:3a:fe:39:8c: 4b:05:f1:8b:aa:62:64:95:53:4e:d7:1f:ab:9f:3d: f9:d2:19:89:2e:46:5c:a2:4a:b2:b9:1d:75:6a:52: b7:f0:ad:43:8f:40:88:33:8d:4f:e2:ba:aa:b8:e9: d3:04:ca:14:d1:cf:15:74:ed:7a:98:73:76:a4:fd: 4f:fb:af:c6:ad:db:4e:41:ff:4c:2e:d3:74:dc:b8: 3b:31:6a:79:31:12:6c:e5:6f:e2:86:01:21:c2:0b: 2d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1B:65:E7:6F:2C:8B:60:DC:2B:21:CF:B0:CF:18:B3:BB:DF:50:17 X509v3 Authority Key Identifier: keyid:FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:43:03:31:87:2c:6b:32:fe:a6:28:7a:68:db:0a:68:36:e9: be:f2:69:63:2c:98:19:9c:8e:5c:bc:5c:a2:79:73:0b:8e:42: cf:09:f7:92:d7:97:ab:53:8b:cf:78:84:f6:7c:72:74:e2:3e: 22:d3:70:26:34:69:3e:95:8c:f5:20:8f:c8:9c:f9:02:a7:55: 40:e0:aa:68:8a:96:53:ed:99:37:db:db:72:06:9e:e2:9e:a5: a6:e0:b3:17:1b:f2:e9:be:81:a3:82:64:60:17:ac:1d:9d:be: 52:e0:4e:c7:b7:99:05:38:1d:d2:79:33:c5:bb:02:bc:12:04: 4e:1e:d6:0b:6b:a5:96:c6:4d:15:07:6a:fd:fc:c6:c4:55:4c: db:8e:b3:1f:bd:ea:b8:7a:01:db:01:a9:c6:28:72:57:e5:1c: 1d:12:65:83:c0:81:ac:c9:e2:a3:ec:db:68:fb:d9:f5:87:9f: d6:82:ae:9d:3c:42:16:0d:8d:04:b5:03:ff:88:4b:f2:0d:30: 0a:22:b2:73:23:56:18:f7:f6:5a:73:63:11:79:31:51:62:7b: 14:8e:7f:90:cf:18:4a:25:92:e6:4b:29:ce:6a:a5:78:13:36: 1a:ae:a0:ea:7d:d7:aa:a0:45:e4:e6:95:2e:6e:9c:9c:7d:90: af:51:a9:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0ZBMTExMC8GA1UEBRMoRkRFMEQ4QUM4OERCRkM2QURFNjdERkZGNUEzQUMyRUYy NjZDNUNEQzAeFw0yNTA4MjMwNzQ5MjlaFw0yNTA4MzAwNzQ5MjhaMBgxFjAUBgNV BAMTDTY4YTk3Mjg5LTUwZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDO9DdgQPQ83tEJHrsKfJsd1z/NDO+Z5UCa2eRm6TRghNiEeoJjwPIDnGZA9XBT 5cqpL3930RT/d+bXGAPFFHXUkQECXNtNo8mf0wXeMS1bltMI1khlolRZyd8tiMRg M/wGA3P/djmyGO23FjkbuAdM9JeMAscWpf7XbEew7z00b0CMSxzZHWPjziDTyGWx 9n/Co0fABHdRT+Z6ApIXZYMmOv45jEsF8YuqYmSVU07XH6ufPfnSGYkuRlyiSrK5 HXVqUrfwrUOPQIgzjU/iuqq46dMEyhTRzxV07XqYc3ak/U/7r8at205B/0wu03Tc uDsxankxEmzlb+KGASHCCy3fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEBtl528s i2DcKyHPsM8Ys7vfUBcwHwYDVR0jBBgwFoAU/eDYrIjb/GreZ9//WjrC7yZsXNww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3RkExL0JGOTA3NEUyMkZB MDExRjA4QTA2QzA1N0M0RjlBRTAyL19lRFlySWpiX0dyZVo5X19XanJDN3lac1hO dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX2VEWXJJamJfR3JlWjlfX1dqckM3eVpzWE53LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 RkExL0JGOTA3NEUyMkZBMDExRjA4QTA2QzA1N0M0RjlBRTAyL19lRFlySWpiX0dy ZVo5X19XanJDN3lac1hOdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD1DAzGHLGsy/qYoemjbCmg26b7yaWMsmBmcjly8XKJ5cwuOQs8J95LX l6tTi894hPZ8cnTiPiLTcCY0aT6VjPUgj8ic+QKnVUDgqmiKllPtmTfb23IGnuKe pabgsxcb8um+gaOCZGAXrB2dvlLgTse3mQU4HdJ5M8W7ArwSBE4e1gtrpZbGTRUH av38xsRVTNuOsx+96rh6AdsBqcYoclflHB0SZYPAgazJ4qPs22j72fWHn9aCrp08 QhYNjQS1A/+IS/INMAoisnMjVhj39lpzYxF5MVFiexSOf5DPGEolkuZLKc5qpXgT NhquoOp916qgReTmlS5unJx9kK9RqZc= -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:28 2025 by rpki-client