$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft File: e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft (raw, json) Hash identifier: uRviFFkf78oCqWlS44X7jUU0aIxkDz1OFEBK9mPenSQ= Subject key identifier: 3B:DD:E7:01:4C:C6:F9:18:AB:83:E8:02:8C:B9:ED:F9:7A:71:65:F5 Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft Manifest number: 0177 Signing time: Sat 18 Oct 2025 16:52:13 +0000 Manifest this update: Sat 18 Oct 2025 16:52:12 +0000 Manifest next update: Sat 25 Oct 2025 16:52:12 +0000 Files and hashes: 1: e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl (hash: 2R4A/PkvHQDVvsk4VfyYd6WHYKXJZF+p0QjKuWnOdnQ=) 2: 21A970BC737211EEB3112437C4F9AE02.roa (hash: XJ/1YrCaSDNyCh/d53BiCDPgdkZZW4dlXKK+XbVzcl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Validity Not Before: Oct 18 16:52:12 2025 GMT Not After : Oct 25 16:52:12 2025 GMT Subject: CN=68f3c5bd-aeb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ec:e1:86:75:a1:9f:1b:e9:c0:6f:d4:1d:df: 5e:a8:71:39:1b:a3:85:1b:c8:b6:f6:6a:ce:d0:b6: 6c:5f:aa:5f:48:0d:56:3a:4d:75:ce:ed:8d:ac:7c: 7c:15:32:cd:60:38:14:68:2c:ff:54:45:b2:0d:4c: 2a:d8:b3:44:f8:40:c5:ed:1e:d1:49:e3:33:21:7b: 09:54:ae:1d:87:96:37:80:f0:35:30:b3:1c:2e:89: d1:14:08:5d:76:a7:d2:62:e1:40:d7:05:0d:55:04: de:e4:91:43:a3:0c:46:10:65:78:0c:7d:cd:73:22: d0:9b:7f:10:96:86:29:67:fb:80:bb:35:f3:64:19: f3:69:1b:4a:53:a2:9a:6b:00:29:d0:5f:3f:ee:d7: e4:29:8f:bd:97:86:6d:2f:05:5c:29:b6:f5:ac:1a: d4:d9:a0:e8:85:65:99:bd:4e:e7:a1:f8:19:3d:65: ae:b5:39:f9:88:62:ea:1b:44:de:ee:c7:74:8d:e9: ff:a9:04:36:24:41:5e:e3:d3:40:98:6b:73:0a:1e: fe:27:c3:10:a7:70:70:2d:c5:69:75:16:47:cf:3f: 02:bb:e3:b8:d7:4f:f0:48:3a:cd:7c:c5:c7:18:b1: bb:eb:b1:01:90:5d:bd:dc:b3:07:70:16:6a:89:11: 80:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DD:E7:01:4C:C6:F9:18:AB:83:E8:02:8C:B9:ED:F9:7A:71:65:F5 X509v3 Authority Key Identifier: keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:2a:bd:96:37:bc:97:66:af:da:af:a5:68:99:6f:52:97:6c: 36:3d:77:27:34:64:58:a4:86:11:71:1b:17:0a:b3:74:1b:c5: e6:c7:c0:9e:8e:7a:3b:93:8a:53:eb:34:0a:70:39:f2:c3:dd: a6:c8:3f:97:c1:95:55:b7:06:46:b1:1f:b8:db:ef:aa:37:93: 41:7f:75:4e:b7:4a:ef:18:bf:33:be:18:e3:b2:c7:7b:11:6a: 5d:23:f3:b9:9e:66:2b:dc:71:3a:e8:e3:48:72:cf:58:f5:d0: eb:6e:73:01:ee:a2:09:f9:4f:75:c0:08:74:da:51:02:4d:24: a3:a7:71:f0:31:03:4f:ea:1c:be:c6:ce:41:81:c3:00:e9:1a: 1d:20:c0:bd:e1:01:4e:29:d0:6a:65:9b:8f:84:f4:10:22:3b: d4:15:f1:8d:4c:98:a1:5b:7d:ff:f8:44:f7:22:bb:bb:cd:c2: d9:9a:49:dc:41:4d:c8:2f:d3:6e:74:f6:b6:87:48:e0:b4:29: 82:c9:12:ef:66:25:1d:aa:5b:e3:c7:be:96:17:be:9f:94:57: 36:bd:a9:6b:a7:0c:94:df:b8:62:3f:8d:7f:da:01:85:39:cd: f8:01:72:60:4c:ae:32:7b:4c:14:8f:3c:71:3d:67:a1:c3:b4: 56:c2:cc:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKDdCOUNFREM4MzI4MDI4QTc0NTZFOUM0MTRCQjc3REFG RUJDRTc2NUYwHhcNMjUxMDE4MTY1MjEyWhcNMjUxMDI1MTY1MjEyWjAYMRYwFAYD VQQDEw02OGYzYzViZC1hZWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3OzhhnWhnxvpwG/UHd9eqHE5G6OFG8i29mrO0LZsX6pfSA1WOk11zu2NrHx8 FTLNYDgUaCz/VEWyDUwq2LNE+EDF7R7RSeMzIXsJVK4dh5Y3gPA1MLMcLonRFAhd dqfSYuFA1wUNVQTe5JFDowxGEGV4DH3NcyLQm38QloYpZ/uAuzXzZBnzaRtKU6Ka awAp0F8/7tfkKY+9l4ZtLwVcKbb1rBrU2aDohWWZvU7nofgZPWWutTn5iGLqG0Te 7sd0jen/qQQ2JEFe49NAmGtzCh7+J8MQp3BwLcVpdRZHzz8Cu+O410/wSDrNfMXH GLG767EBkF293LMHcBZqiRGA0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvd5wFM xvkYq4PoAoy57fl6cWX1MB8GA1UdIwQYMBaAFHuc7cgygCinRW6cQUu3fa/rznZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS9DNkRENTFCNDcz NkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtLZEZicHhCUzdkOXItdk9k bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2U1enR5REtBS0tkRmJweEJTN2Q5ci12T2RsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDM2QS9DNkRENTFCNDczNkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtL ZEZicHhCUzdkOXItdk9kbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAKr2WN7yXZq/ar6VomW9Sl2w2PXcnNGRYpIYRcRsXCrN0G8Xmx8Ce jno7k4pT6zQKcDnyw92myD+XwZVVtwZGsR+42++qN5NBf3VOt0rvGL8zvhjjssd7 EWpdI/O5nmYr3HE66ONIcs9Y9dDrbnMB7qIJ+U91wAh02lECTSSjp3HwMQNP6hy+ xs5BgcMA6RodIMC94QFOKdBqZZuPhPQQIjvUFfGNTJihW33/+ET3Iru7zcLZmknc QU3IL9NudPa2h0jgtCmCyRLvZiUdqlvjx76WF76flFc2valrpwyU37hiP41/2gGF Oc34AXJgTK4ye0wUjzxxPWehw7RWwsyi -----END CERTIFICATE-----Generated at Mon Oct 20 15:41:42 2025 by rpki-client