$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft File: NEp3XiRcztCAx5UhWW4yyPBtiMg.mft (raw, json) Hash identifier: lzUi0e9ZS9mti9ZPP0eN2avl929qo7ZLwi+hRrAVX2c= Subject key identifier: B7:E2:60:13:A0:53:21:39:04:FA:5A:25:B7:DE:67:3C:2F:08:1A:EE Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 Certificate issuer: /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Certificate serial: 17EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft Manifest number: 17D9 Signing time: Mon 20 Oct 2025 16:54:34 +0000 Manifest this update: Mon 20 Oct 2025 16:54:34 +0000 Manifest next update: Mon 27 Oct 2025 16:54:33 +0000 Files and hashes: 1: NEp3XiRcztCAx5UhWW4yyPBtiMg.crl (hash: I2P627YZXz+ybkqXBTeBEL8RuOnqMemORM3CEwNS2P0=) 2: 2F840DD2740911EDA7146F2DC4F9AE02.roa (hash: YPOOK5AIk3gBw37/F4hGfOPvVpq+0nympVjwZNkZ59I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6127 (0x17ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915517D, serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Validity Not Before: Oct 20 16:54:34 2025 GMT Not After : Oct 27 16:54:33 2025 GMT Subject: CN=68f6694a-6d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:ed:0e:24:a7:49:c3:b1:03:92:8d:ae:19: 57:d9:c5:d8:56:d3:b5:20:d3:b3:78:82:b5:c0:51: 85:ce:51:31:dc:a9:97:02:2e:a4:10:f5:56:84:62: b4:5c:23:30:a2:50:40:36:9b:7d:7b:fe:52:b0:50: ac:62:d4:8d:b7:56:a6:64:52:22:3f:0f:58:e3:48: 7f:0a:e5:c1:f9:24:3e:7c:2b:af:8d:16:47:ff:33: f6:02:b9:22:ef:46:09:9d:86:cd:47:af:45:d8:4b: ac:eb:2d:b5:37:7f:7d:41:eb:bb:d1:de:9c:43:a2: 27:31:f1:3c:e1:32:11:b0:f8:a4:a6:69:d8:d9:7c: 75:25:96:25:ba:11:b5:f9:5a:73:aa:87:48:ca:92: c8:7d:e9:87:7e:34:c5:23:6d:24:49:11:06:3d:32: da:da:c9:36:ee:a5:d5:4a:bc:37:d6:90:ee:27:61: 6b:56:a6:c9:7c:03:f6:3c:8d:55:7e:95:19:d8:40: 07:bd:e6:fa:78:76:68:2c:ec:ce:0e:df:a2:ce:09: 06:5f:0c:3b:a8:05:a0:e7:20:3e:6f:96:84:2c:f0: af:6d:b8:90:e3:79:2a:0f:c2:ed:2c:35:41:05:db: 55:5c:a2:90:8b:4e:13:5b:04:78:50:dc:33:b6:19: d0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E2:60:13:A0:53:21:39:04:FA:5A:25:B7:DE:67:3C:2F:08:1A:EE X509v3 Authority Key Identifier: keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:67:8f:90:9e:e0:20:14:11:c3:b7:c1:67:5a:5c:10:4d:b7: f7:de:08:8a:d2:e4:1b:db:81:16:2c:14:d4:ba:fe:c4:99:9f: fd:1d:67:3e:dd:a7:7e:36:71:5a:9b:8f:92:6c:76:4c:ff:c8: 49:8b:2c:a2:19:7b:84:52:06:cc:16:aa:77:1f:1c:7a:bd:a2: d5:47:a8:44:2b:13:f4:a6:1e:26:c3:7b:b6:99:1b:f8:89:2a: 33:4a:3f:0a:ad:78:a7:11:c4:c4:8e:7d:f6:ac:c7:ae:d0:cd: a0:cb:6e:fb:29:50:09:6b:51:1a:f5:8f:de:4b:a5:b5:2d:ef: b1:ff:16:ff:a9:18:59:09:b1:ed:53:cf:7b:56:91:79:08:d1: f5:ab:86:39:62:79:c0:e2:40:fe:6e:35:18:b4:12:8c:90:e9: e6:d1:79:50:ee:83:66:8f:2d:cb:0c:12:be:1c:25:34:37:10: a6:24:80:d4:c3:b4:9f:0a:3c:f6:56:12:43:f7:f3:49:72:52: a8:0a:66:3f:42:b7:cf:02:a8:0d:16:47:d7:ab:e0:d5:ba:fd: 98:dd:96:ae:45:58:c8:76:e9:c0:7c:c3:1d:bc:c6:29:1e:07: e8:7d:cd:5e:03:07:90:97:6a:20:af:16:4a:53:56:fc:91:25: 7d:e6:8b:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxN0QxMTAvBgNVBAUTKDM0NEE3NzVFMjQ1Q0NFRDA4MEM3OTUyMTU5NkUzMkM4 RjA2RDg4QzgwHhcNMjUxMDIwMTY1NDM0WhcNMjUxMDI3MTY1NDMzWjAYMRYwFAYD VQQDEw02OGY2Njk0YS02ZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm7tDiSnScOxA5KNrhlX2cXYVtO1INOzeIK1wFGFzlEx3KmXAi6kEPVWhGK0 XCMwolBANpt9e/5SsFCsYtSNt1amZFIiPw9Y40h/CuXB+SQ+fCuvjRZH/zP2Arki 70YJnYbNR69F2Eus6y21N399Qeu70d6cQ6InMfE84TIRsPikpmnY2Xx1JZYluhG1 +VpzqodIypLIfemHfjTFI20kSREGPTLa2sk27qXVSrw31pDuJ2FrVqbJfAP2PI1V fpUZ2EAHveb6eHZoLOzODt+izgkGXww7qAWg5yA+b5aELPCvbbiQ43kqD8LtLDVB BdtVXKKQi04TWwR4UNwzthnQ2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfiYBOg UyE5BPpaJbfeZzwvCBruMB8GA1UdIwQYMBaAFDRKd14kXM7QgMeVIVluMsjwbYjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE3RC8zRDdBNjI4NkNG NTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0Q0F4NVVoV1c0eXlQQnRp TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05FcDNYaVJjenRDQXg1VWhXVzR5eVBCdGlNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTE3RC8zRDdBNjI4NkNGNTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0 Q0F4NVVoV1c0eXlQQnRpTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7Z4+QnuAgFBHDt8FnWlwQTbf33giK0uQb24EWLBTUuv7EmZ/9HWc+ 3ad+NnFam4+SbHZM/8hJiyyiGXuEUgbMFqp3Hxx6vaLVR6hEKxP0ph4mw3u2mRv4 iSozSj8KrXinEcTEjn32rMeu0M2gy277KVAJa1Ea9Y/eS6W1Le+x/xb/qRhZCbHt U897VpF5CNH1q4Y5YnnA4kD+bjUYtBKMkOnm0XlQ7oNmjy3LDBK+HCU0NxCmJIDU w7SfCjz2VhJD9/NJclKoCmY/QrfPAqgNFkfXq+DVuv2Y3ZauRVjIdunAfMMdvMYp Hgfofc1eAweQl2ogrxZKU1b8kSV95otX -----END CERTIFICATE-----Generated at Mon Oct 20 23:11:43 2025 by rpki-client