$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft File: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft (raw, json) Hash identifier: +R9br/RTy64Sx3JAa3aaeBHd8XY13VM/QMojLHuFv+c= Subject key identifier: C5:CB:35:11:4D:75:40:93:2D:63:95:E9:31:4C:D7:B8:EC:04:EC:77 Authority key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D Certificate issuer: /CN=A9177C3F/serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft Manifest number: 2A Signing time: Sun 19 Oct 2025 11:16:04 +0000 Manifest this update: Sun 19 Oct 2025 11:16:04 +0000 Manifest next update: Sun 26 Oct 2025 11:16:04 +0000 Files and hashes: 1: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl (hash: 5k6OsJfLdM7DwJzBXATrgblSkZiLoerh0DgOEtH0vFI=) 2: 707ABBBE73F811F0B8A9582CC4F9AE02.roa (hash: J1DqxnoENL3lRHLKjDYZRI0kV9ABA98ydy0Zc/t3Fg8=) 3: 7013EE7A73F811F0B8A9582CC4F9AE02.roa (hash: ckP5BxcHxNFbdmi2/GsSqI6AzRvAVZrOdnnQHyfARKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D Validity Not Before: Oct 19 11:16:04 2025 GMT Not After : Oct 26 11:16:04 2025 GMT Subject: CN=68f4c874-5d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5e:b5:22:57:69:ab:09:1a:ab:8a:93:f7:e1: 90:c1:e2:84:13:6c:73:d4:bf:c4:12:45:0b:de:13: dc:6d:e7:a0:dc:d0:5c:a9:25:f6:b6:b2:96:16:7f: b2:01:1d:ac:1f:c2:65:89:ac:71:22:c8:3e:ef:94: 96:8b:fa:f3:fd:32:09:f0:0c:24:ae:77:42:e6:06: bc:83:f4:d6:23:1f:93:3a:5b:24:35:71:95:4d:20: 45:cb:e6:da:c9:60:fd:62:bf:06:c4:59:db:66:55: ea:18:97:a3:6a:03:b9:89:28:56:87:60:09:38:8d: d7:83:9f:ea:f8:c9:68:4a:82:c4:ca:6b:07:3c:96: 8f:85:04:52:b0:ae:bf:22:98:b1:6a:fb:cd:52:8f: 47:22:e0:de:75:d2:2a:dd:d8:60:52:63:06:7a:91: 17:32:c6:36:08:22:06:24:ae:9b:6b:1a:20:a4:aa: 41:38:80:ab:d0:ec:2e:c6:d2:7b:84:20:84:a4:e8: 06:8a:4f:92:92:6e:1c:29:87:e4:f1:f7:c6:67:c2: 55:6c:be:10:8d:e8:59:3d:10:6e:fa:2d:d3:51:bd: 8e:0e:ed:bf:db:87:7d:e6:34:a9:2f:ec:7a:66:c1: 3c:37:d0:ac:61:11:e6:cb:43:d6:77:90:3b:bd:89: ca:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CB:35:11:4D:75:40:93:2D:63:95:E9:31:4C:D7:B8:EC:04:EC:77 X509v3 Authority Key Identifier: keyid:E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:76:a5:79:42:ad:5d:cc:64:d4:ae:6e:87:57:22:39:26:5e: 64:dd:53:ba:35:06:33:6f:c2:6e:e7:ad:66:b4:83:a7:e3:13: 47:4f:ac:5b:64:de:46:cc:f2:ab:ea:66:77:c2:ec:e4:ab:55: 8a:21:4c:f2:2f:12:a7:5c:a6:fa:43:aa:29:69:29:f3:d8:af: 29:f4:8a:72:fa:8a:39:66:89:23:0a:8f:cb:54:f4:ed:37:fb: 9d:cd:9a:4f:2f:20:b8:90:c7:fe:5b:68:49:cc:63:fb:b0:24: fe:27:4a:bd:3f:5d:fd:b2:a7:1d:a7:b3:7f:60:c2:d8:fd:a1: 7e:da:d5:bd:5e:ee:45:76:c7:f1:dd:64:1a:31:63:21:cd:70: e2:cf:10:7d:c7:33:ec:a7:98:5c:85:bf:89:62:e5:a3:c4:ca: 2a:25:cd:fe:fb:82:0b:e4:c4:de:4c:af:e9:68:b6:36:cc:b8: 7b:67:22:7d:73:b7:81:98:8a:14:b6:35:9f:e6:40:eb:58:58: 78:5b:e8:75:3f:ba:fc:b4:07:f8:4d:73:12:a4:8a:f2:45:ed: 7a:c8:cd:a3:62:1f:83:2b:24:e0:a7:0b:eb:46:2f:05:f6:65: 7c:e2:7a:61:58:18:de:49:08:20:8c:5e:f9:c7:01:f4:13:d4: fc:15:ff:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 N0MzRjExMC8GA1UEBRMoRTUyMTA3RjRDMURFMDY0NTNFQkQ2RTY5QjRCRjgyNDQ3 MzE2QUExRDAeFw0yNTEwMTkxMTE2MDRaFw0yNTEwMjYxMTE2MDRaMBgxFjAUBgNV BAMTDTY4ZjRjODc0LTVkMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtXrUiV2mrCRqripP34ZDB4oQTbHPUv8QSRQveE9xt56Dc0FypJfa2spYWf7IB HawfwmWJrHEiyD7vlJaL+vP9MgnwDCSud0LmBryD9NYjH5M6WyQ1cZVNIEXL5trJ YP1ivwbEWdtmVeoYl6NqA7mJKFaHYAk4jdeDn+r4yWhKgsTKawc8lo+FBFKwrr8i mLFq+81Sj0ci4N510ird2GBSYwZ6kRcyxjYIIgYkrptrGiCkqkE4gKvQ7C7G0nuE IISk6AaKT5KSbhwph+Tx98ZnwlVsvhCN6Fk9EG76LdNRvY4O7b/bh33mNKkv7Hpm wTw30KxhEebLQ9Z3kDu9icqZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxcs1EU11 QJMtY5XpMUzXuOwE7HcwHwYDVR0jBBgwFoAU5SEH9MHeBkU+vW5ptL+CRHMWqh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3QzNGL0NEQjM2QTNBNzMz MzExRjA4MzlDREM4M0M0RjlBRTAyLzVTRUg5TUhlQmtVLXZXNXB0TC1DUkhNV3Fo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNVNFSDlNSGVCa1Utdlc1cHRMLUNSSE1XcWgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 QzNGL0NEQjM2QTNBNzMzMzExRjA4MzlDREM4M0M0RjlBRTAyLzVTRUg5TUhlQmtV LXZXNXB0TC1DUkhNV3FoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN92pXlCrV3MZNSubodXIjkmXmTdU7o1BjNvwm7nrWa0g6fjE0dPrFtk 3kbM8qvqZnfC7OSrVYohTPIvEqdcpvpDqilpKfPYryn0inL6ijlmiSMKj8tU9O03 +53Nmk8vILiQx/5baEnMY/uwJP4nSr0/Xf2ypx2ns39gwtj9oX7a1b1e7kV2x/Hd ZBoxYyHNcOLPEH3HM+ynmFyFv4li5aPEyiolzf77ggvkxN5Mr+lotjbMuHtnIn1z t4GYihS2NZ/mQOtYWHhb6HU/uvy0B/hNcxKkivJF7XrIzaNiH4MrJOCnC+tGLwX2 ZXziemFYGN5JCCCMXvnHAfQT1PwV/3w= -----END CERTIFICATE-----Generated at Mon Oct 20 19:27:15 2025 by rpki-client