$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft File: e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft (raw, json) Hash identifier: Ns2qjTq8ay0MTZhn63MrfcFOvpqOJsrlC2aolSz18dM= Subject key identifier: 8E:20:9C:E4:81:41:BF:52:65:15:E1:49:24:A8:BC:E9:FD:6E:58:F8 Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft Manifest number: 0158 Signing time: Fri 22 Aug 2025 16:35:58 +0000 Manifest this update: Fri 22 Aug 2025 16:35:57 +0000 Manifest next update: Fri 29 Aug 2025 16:35:57 +0000 Files and hashes: 1: e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl (hash: wXl8i8ZE5ecYIE47xSl5YvKtQps9tC67CJpRGlsVEv0=) 2: 21A970BC737211EEB3112437C4F9AE02.roa (hash: aUIyfh4rOAFfQ6V1QGk9Ci9jD2H4crp4Ilb6Y+4J9lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Validity Not Before: Aug 22 16:35:57 2025 GMT Not After : Aug 29 16:35:57 2025 GMT Subject: CN=68a89c6d-5a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d5:16:f9:71:30:b2:7c:40:21:8a:a4:a4:18: 4e:d4:61:38:ed:2b:73:72:e7:b5:d4:2e:ab:b4:b3: d0:cd:c9:f3:c3:45:91:d5:17:6f:00:46:13:fd:89: 61:2d:a6:f1:87:34:1a:df:f4:df:05:81:bb:88:30: 0f:c8:ca:57:2c:b4:e3:a4:86:42:7e:f0:6c:44:38: a5:fd:43:cd:65:67:3d:4e:e5:cb:2b:21:6d:a9:50: 2a:53:98:c2:21:4a:f2:f7:cc:7a:61:e5:cc:9d:63: 33:9e:a4:39:f2:a5:d1:b4:12:1d:a3:fb:47:8b:0f: 68:d0:bc:fd:84:d8:cd:a7:4c:d3:3b:92:d2:50:f6: c1:95:7d:ea:8d:0d:de:5c:56:68:35:63:0e:98:97: 76:88:62:11:d4:d8:68:7c:a2:11:99:ef:ac:e8:df: 51:1a:09:0e:48:e6:c5:1d:26:de:d2:61:7a:4a:a5: 50:56:74:fb:be:85:26:9a:6b:7e:9c:fb:0a:8b:31: e2:7b:ab:98:b8:45:1e:ef:8f:22:bf:56:5c:7f:db: 1b:87:8d:c7:a2:88:bb:1b:d3:64:b5:25:07:51:c9: f1:7c:da:fe:ac:87:67:2a:11:56:94:00:15:12:42: af:31:12:27:dd:d8:9c:e5:50:fc:28:69:94:e5:31: 65:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:20:9C:E4:81:41:BF:52:65:15:E1:49:24:A8:BC:E9:FD:6E:58:F8 X509v3 Authority Key Identifier: keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:57:bf:37:b0:d7:39:b2:32:8a:e2:a8:30:c1:dd:6b:17:56: ac:fb:ec:29:92:4e:fd:6a:9f:d1:6e:d3:4e:c1:eb:c8:e7:87: 39:4b:cf:97:4d:da:45:bf:06:97:f8:da:8b:f2:32:ce:54:51: 74:7b:4f:1f:e1:56:39:b3:33:b9:08:e4:80:b5:61:a7:44:3b: 56:a8:51:12:5b:8a:9f:ee:93:70:1d:98:56:7c:64:f6:ab:d0: 02:4a:3d:b7:cd:3f:d9:b9:cc:96:11:5c:09:e3:89:f2:2f:b2: 54:c3:a1:9c:2a:6b:e2:06:c7:9a:c2:43:f6:2c:8f:ab:a6:78: 4e:39:82:89:3d:2c:46:79:78:ea:6a:e0:b6:c4:ed:f6:2c:34: 45:1c:92:1c:e6:fc:99:27:08:2e:bf:30:0b:27:a7:5a:01:b9: 00:bc:56:2d:8d:17:87:13:34:32:7e:3f:8d:c1:7d:18:51:21: 23:e7:6d:ea:85:6c:db:df:71:73:82:ba:9c:f8:9f:fe:17:63: b8:b7:e6:24:96:00:d8:98:fb:bf:f3:c1:92:14:e4:03:eb:6e: ed:8e:f0:4c:a5:36:52:16:8c:b8:26:73:28:c8:3b:1d:84:37: cd:fa:b5:b0:fc:2c:ad:1e:f6:43:b2:72:bf:c8:97:53:99:84: 52:9a:fc:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKDdCOUNFREM4MzI4MDI4QTc0NTZFOUM0MTRCQjc3REFG RUJDRTc2NUYwHhcNMjUwODIyMTYzNTU3WhcNMjUwODI5MTYzNTU3WjAYMRYwFAYD VQQDEw02OGE4OWM2ZC01YTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9UW+XEwsnxAIYqkpBhO1GE47Stzcue11C6rtLPQzcnzw0WR1RdvAEYT/Ylh LabxhzQa3/TfBYG7iDAPyMpXLLTjpIZCfvBsRDil/UPNZWc9TuXLKyFtqVAqU5jC IUry98x6YeXMnWMznqQ58qXRtBIdo/tHiw9o0Lz9hNjNp0zTO5LSUPbBlX3qjQ3e XFZoNWMOmJd2iGIR1NhofKIRme+s6N9RGgkOSObFHSbe0mF6SqVQVnT7voUmmmt+ nPsKizHie6uYuEUe748iv1Zcf9sbh43Hooi7G9NktSUHUcnxfNr+rIdnKhFWlAAV EkKvMRIn3dic5VD8KGmU5TFl/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4gnOSB Qb9SZRXhSSSovOn9blj4MB8GA1UdIwQYMBaAFHuc7cgygCinRW6cQUu3fa/rznZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS9DNkRENTFCNDcz NkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtLZEZicHhCUzdkOXItdk9k bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2U1enR5REtBS0tkRmJweEJTN2Q5ci12T2RsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDM2QS9DNkRENTFCNDczNkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtL ZEZicHhCUzdkOXItdk9kbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTV783sNc5sjKK4qgwwd1rF1as++wpkk79ap/RbtNOwevI54c5S8+X TdpFvwaX+NqL8jLOVFF0e08f4VY5szO5COSAtWGnRDtWqFESW4qf7pNwHZhWfGT2 q9ACSj23zT/ZucyWEVwJ44nyL7JUw6GcKmviBseawkP2LI+rpnhOOYKJPSxGeXjq auC2xO32LDRFHJIc5vyZJwguvzALJ6daAbkAvFYtjReHEzQyfj+NwX0YUSEj523q hWzb33Fzgrqc+J/+F2O4t+YklgDYmPu/88GSFOQD627tjvBMpTZSFoy4JnMoyDsd hDfN+rWw/CytHvZDsnK/yJdTmYRSmvwx -----END CERTIFICATE-----Generated at Sat Aug 23 17:02:43 2025 by rpki-client