$ rpki-client -vvf rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft File: E5bqlAlF_CBf8uPRsr4bkNcsxek.mft (raw, json) Hash identifier: GB5SvYgo+DBogvbtPExsaTFe8EtBMJ8IQ0BZaIHAHWU= Subject key identifier: 80:9D:68:31:52:BC:BE:80:83:10:C8:41:CF:A8:77:D3:0B:C8:3F:C8 Authority key identifier: 13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9 Certificate issuer: /CN=A914DF56/serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9 Certificate serial: 054A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft Manifest number: 0542 Signing time: Sun 19 Oct 2025 01:14:09 +0000 Manifest this update: Sun 19 Oct 2025 01:14:08 +0000 Manifest next update: Sun 26 Oct 2025 01:14:08 +0000 Files and hashes: 1: E5bqlAlF_CBf8uPRsr4bkNcsxek.crl (hash: zXLUUDE7LeDdR0BHhLnnZEoJm9BIGJ9ezdOHBXLoGEA=) 2: EB17A8C2152511ECAD055780C4F9AE02.roa (hash: 3Who1qUDm6eD8QDguJD4EaJb2KgGViSYhJ9baOpktjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1354 (0x54a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DF56, serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9 Validity Not Before: Oct 19 01:14:08 2025 GMT Not After : Oct 26 01:14:08 2025 GMT Subject: CN=68f43b60-222b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ff:91:64:d4:11:45:b1:cd:6e:dc:f5:d0:81: e5:32:4d:8e:5d:20:d4:84:92:05:35:ce:d0:ab:a6: a4:21:a7:cd:4f:42:9d:3e:a6:d4:8c:4d:92:a4:fd: 27:38:48:3c:71:e8:39:12:cb:72:73:d6:8e:d7:8c: 60:dc:84:e5:0e:a6:f6:4f:63:1e:94:11:79:1d:9a: c0:ed:0b:bf:bb:40:df:0e:20:5d:17:d5:20:39:6d: 8e:e7:c5:6e:eb:c8:c8:5e:34:4d:91:d3:51:92:54: b4:ec:df:67:9d:b8:06:d8:e0:96:9e:38:a3:aa:f6: eb:90:51:56:d8:d9:93:29:e1:65:28:50:42:e0:37: 38:3d:3c:9a:76:43:02:90:5f:21:b0:43:1c:b8:64: 32:34:09:46:22:52:3d:ba:21:44:f7:94:34:62:d8: 83:56:9f:55:98:2c:86:77:b2:95:7b:bb:19:1a:de: d7:29:7a:76:87:49:0a:ab:e0:63:d0:ec:19:49:e6: 99:55:5c:cc:b2:f6:31:e2:1a:89:11:73:61:72:a9: 5a:95:34:dc:25:cc:36:34:3f:a1:c3:79:3b:72:1d: 09:5e:7a:f7:eb:91:7f:6f:b4:0e:33:31:7b:3f:85: da:a8:13:83:06:47:85:51:ef:80:ff:93:a7:8e:f5: 78:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9D:68:31:52:BC:BE:80:83:10:C8:41:CF:A8:77:D3:0B:C8:3F:C8 X509v3 Authority Key Identifier: keyid:13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:2e:67:10:1e:0b:c7:1f:e9:0c:c5:4f:ca:ad:ff:07:03:3b: 9b:77:f2:79:d7:6b:d6:06:aa:a5:02:7d:79:43:16:d0:82:9e: b6:0e:cf:5b:e0:57:e9:ff:06:91:0d:22:3f:45:2b:d3:56:fd: f4:4a:70:de:5f:a5:74:92:d7:5a:0a:5f:0e:37:e7:de:77:2f: 4a:24:cf:30:35:d8:76:89:e8:34:ed:cb:3c:ae:8d:84:b6:ac: d3:0f:27:39:1c:00:b1:fa:a2:1f:f8:b0:e8:da:bc:58:8f:1d: 8c:ef:f3:70:df:21:27:48:94:57:85:bd:8d:16:27:18:a1:31: cf:19:0a:6a:d3:71:d4:18:a6:b2:20:2a:c0:35:37:d5:be:2e: e0:43:bf:bf:98:f0:b5:ce:01:05:b3:1f:c6:12:3c:65:a7:6e: 7a:58:bf:09:25:d2:60:73:b0:99:74:4c:c2:ec:e7:0d:cd:c0: b1:b5:61:72:32:ac:3e:54:7c:94:53:64:53:96:7f:d5:7d:c1: fc:31:82:e3:22:4b:2f:86:92:47:33:79:1c:8e:9a:cf:bf:d6: 87:26:ec:23:3b:3b:1b:22:47:c5:1a:66:8b:fd:aa:e8:c4:92: 7a:6a:dc:32:3c:65:51:57:a8:18:63:3b:1c:7a:e6:de:f6:04: 53:bc:a9:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERGNTYxMTAvBgNVBAUTKDEzOTZFQTk0MDk0NUZDMjA1RkYyRTNEMUIyQkUxQjkw RDcyQ0M1RTkwHhcNMjUxMDE5MDExNDA4WhcNMjUxMDI2MDExNDA4WjAYMRYwFAYD VQQDEw02OGY0M2I2MC0yMjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/+RZNQRRbHNbtz10IHlMk2OXSDUhJIFNc7Qq6akIafNT0KdPqbUjE2SpP0n OEg8ceg5Estyc9aO14xg3ITlDqb2T2MelBF5HZrA7Qu/u0DfDiBdF9UgOW2O58Vu 68jIXjRNkdNRklS07N9nnbgG2OCWnjijqvbrkFFW2NmTKeFlKFBC4Dc4PTyadkMC kF8hsEMcuGQyNAlGIlI9uiFE95Q0YtiDVp9VmCyGd7KVe7sZGt7XKXp2h0kKq+Bj 0OwZSeaZVVzMsvYx4hqJEXNhcqlalTTcJcw2ND+hw3k7ch0JXnr365F/b7QOMzF7 P4XaqBODBkeFUe+A/5OnjvV4IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICdaDFS vL6AgxDIQc+od9MLyD/IMB8GA1UdIwQYMBaAFBOW6pQJRfwgX/Lj0bK+G5DXLMXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REY1Ni9CRDdGQTAzODE1 MjMxMUVDQjc0RjIwODBDNEY5QUUwMi9FNWJxbEFsRl9DQmY4dVBSc3I0YmtOY3N4 ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U1YnFsQWxGX0NCZjh1UFJzcjRia05jc3hlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REY1Ni9CRDdGQTAzODE1MjMxMUVDQjc0RjIwODBDNEY5QUUwMi9FNWJxbEFsRl9D QmY4dVBSc3I0YmtOY3N4ZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYLmcQHgvHH+kMxU/Krf8HAzubd/J512vWBqqlAn15QxbQgp62Ds9b 4Ffp/waRDSI/RSvTVv30SnDeX6V0ktdaCl8ON+fedy9KJM8wNdh2ieg07cs8ro2E tqzTDyc5HACx+qIf+LDo2rxYjx2M7/Nw3yEnSJRXhb2NFicYoTHPGQpq03HUGKay ICrANTfVvi7gQ7+/mPC1zgEFsx/GEjxlp256WL8JJdJgc7CZdEzC7OcNzcCxtWFy Mqw+VHyUU2RTln/VfcH8MYLjIksvhpJHM3kcjprPv9aHJuwjOzsbIkfFGmaL/aro xJJ6atwyPGVRV6gYYzsceube9gRTvKnb -----END CERTIFICATE-----Generated at Tue Oct 21 02:09:27 2025 by rpki-client