$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json) Hash identifier: SRN+3BQ/ekfmIwUqxVifX/tfWqKNazjxsunV6+86ZkY= Subject key identifier: 06:88:8B:DE:18:80:BC:A7:FB:2E:A3:26:13:59:FA:70:02:EA:86:3E Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft Manifest number: 022F Signing time: Sun 19 Oct 2025 04:10:56 +0000 Manifest this update: Sun 19 Oct 2025 04:10:55 +0000 Manifest next update: Sun 26 Oct 2025 04:10:55 +0000 Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: vleXcujZPJ8fYddfhY1MYlbt2HVdihGulvRMkwu9lxk=) 2: FC589960568411EDAE93DA7FC4F9AE02.roa (hash: M3OQL+158orw0Ue/EcQvvn7VUfwHswtbs9jlmebyIsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Validity Not Before: Oct 19 04:10:55 2025 GMT Not After : Oct 26 04:10:55 2025 GMT Subject: CN=68f464d0-7a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ca:c0:a6:b9:8b:e2:e7:72:cc:88:c7:19:b9: e0:15:05:bc:fb:86:b9:d2:46:69:4a:fb:73:55:51: 57:8c:30:6e:cb:66:21:13:56:7e:2a:dc:4c:4b:26: 8e:41:17:eb:35:68:22:28:64:ee:97:e3:3d:26:7a: 79:d3:57:c8:b6:06:09:ea:76:70:71:33:9f:cc:bf: 74:bc:39:eb:34:73:b3:39:2a:6a:cd:00:9c:88:8b: 93:2c:af:b6:e8:91:93:7f:b9:8d:57:51:73:f0:3a: da:97:72:87:88:c6:fd:01:b3:00:ef:bf:20:58:52: 7a:bd:39:58:44:e2:52:f4:cb:c7:46:a0:4f:f8:0c: 51:a4:56:6c:87:69:a6:7c:43:81:b4:d3:42:d6:44: 13:91:8f:25:1b:f9:ab:40:f5:60:38:b1:8e:45:4e: 4b:f8:dd:ef:81:56:9c:78:e6:ef:65:dd:76:2d:0f: 1a:a1:b1:24:eb:8e:db:6e:9d:e0:c3:6a:c0:36:e5: 48:42:76:02:8b:37:00:f9:2b:77:4e:39:01:3f:61: 7b:2a:e9:d2:c9:fc:9f:e3:f8:5d:54:4d:47:dd:17: af:f0:77:c4:c1:cf:89:95:75:c7:bb:58:36:69:dd: a7:ae:66:2d:c2:80:1e:b8:72:7c:e3:46:c6:9f:44: a6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:88:8B:DE:18:80:BC:A7:FB:2E:A3:26:13:59:FA:70:02:EA:86:3E X509v3 Authority Key Identifier: keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:14:5c:a2:b6:7f:a0:99:b5:9a:d9:76:5a:7c:ce:dc:62:5a: 39:ed:c1:b7:f2:53:0f:e5:14:67:14:94:f6:19:24:19:94:d7: e1:5f:22:a6:cb:d2:61:38:a3:8f:2e:6e:e3:a9:e0:b7:30:30: 7c:19:ac:d9:d1:09:09:42:35:2c:18:3b:64:9f:c4:be:28:c6: 06:96:00:45:b6:ea:e8:9e:a2:e9:aa:0d:b9:f8:db:70:18:bd: 6e:a6:7a:ab:ae:be:77:c3:3f:50:4c:66:c5:9a:59:0e:55:9e: 57:bf:f5:77:44:a9:ab:f7:f1:42:d8:7b:4d:b7:98:3b:4e:19: d0:7f:11:e4:7a:cb:2e:2e:79:27:c0:5d:be:47:d6:a6:f9:b0: e7:b9:af:92:49:51:11:41:1c:e4:b1:fe:40:c6:a3:1a:b0:f8: c9:7b:1b:55:d6:4b:15:53:d2:5c:57:7f:7a:a1:42:84:1d:5a: b5:e4:f7:f6:c2:6d:4e:91:00:84:b7:a6:10:e7:91:93:b6:e9: 33:5d:73:49:cb:93:c2:21:cb:36:8d:2a:00:8e:0a:29:52:d4: 30:56:98:35:31:eb:73:c7:05:c3:1f:72:8d:75:71:18:1b:8a: 47:97:66:14:07:7b:e1:5d:ef:7c:c8:ff:2b:a2:ec:d2:3d:71: 78:71:56:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDRDcxMTAvBgNVBAUTKDhCN0ZERUU0NkE5ODBDMDQzMzk4RkI3QjIzOUIwNTRE Q0YyMzdDRDcwHhcNMjUxMDE5MDQxMDU1WhcNMjUxMDI2MDQxMDU1WjAYMRYwFAYD VQQDEw02OGY0NjRkMC03YTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8rAprmL4udyzIjHGbngFQW8+4a50kZpSvtzVVFXjDBuy2YhE1Z+KtxMSyaO QRfrNWgiKGTul+M9Jnp501fItgYJ6nZwcTOfzL90vDnrNHOzOSpqzQCciIuTLK+2 6JGTf7mNV1Fz8Dral3KHiMb9AbMA778gWFJ6vTlYROJS9MvHRqBP+AxRpFZsh2mm fEOBtNNC1kQTkY8lG/mrQPVgOLGORU5L+N3vgVaceObvZd12LQ8aobEk647bbp3g w2rANuVIQnYCizcA+St3TjkBP2F7KunSyfyf4/hdVE1H3Rev8HfEwc+JlXXHu1g2 ad2nrmYtwoAeuHJ840bGn0SmfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaIi94Y gLyn+y6jJhNZ+nAC6oY+MB8GA1UdIwQYMBaAFIt/3uRqmAwEM5j7eyObBU3PI3zX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNENy9GRDkxODU5MDU2 N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURBUXptUHQ3STVzRlRjOGpm TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kzX2U1R3FZREFRem1QdDdJNXNGVGM4amZOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNENy9GRDkxODU5MDU2N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURB UXptUHQ3STVzRlRjOGpmTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKFFyitn+gmbWa2XZafM7cYlo57cG38lMP5RRnFJT2GSQZlNfhXyKm y9JhOKOPLm7jqeC3MDB8GazZ0QkJQjUsGDtkn8S+KMYGlgBFturonqLpqg25+Ntw GL1upnqrrr53wz9QTGbFmlkOVZ5Xv/V3RKmr9/FC2HtNt5g7ThnQfxHkessuLnkn wF2+R9am+bDnua+SSVERQRzksf5AxqMasPjJextV1ksVU9JcV396oUKEHVq15Pf2 wm1OkQCEt6YQ55GTtukzXXNJy5PCIcs2jSoAjgopUtQwVpg1MetzxwXDH3KNdXEY G4pHl2YUB3vhXe98yP8rouzSPXF4cVb4 -----END CERTIFICATE-----Generated at Mon Oct 20 17:49:47 2025 by rpki-client