$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json) Hash identifier: x54jRNvlerdFW2gNENcz4QBrrwtxuUYgvWGetydNw2Y= Subject key identifier: 3C:77:31:90:02:DC:97:6D:4F:77:43:C3:EE:95:11:AD:A4:DA:97:E9 Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft Manifest number: 0238 Signing time: Wed 05 Nov 2025 01:59:31 +0000 Manifest this update: Wed 05 Nov 2025 01:59:31 +0000 Manifest next update: Wed 12 Nov 2025 01:59:31 +0000 Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: 4Mm8jBWb7RJVWERtcAj7XFEuhVW1NynHUSseLfC0Teo=) 2: FC589960568411EDAE93DA7FC4F9AE02.roa (hash: M3OQL+158orw0Ue/EcQvvn7VUfwHswtbs9jlmebyIsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Validity Not Before: Nov 5 01:59:31 2025 GMT Not After : Nov 12 01:59:31 2025 GMT Subject: CN=690aaf83-78fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:47:29:90:5e:df:53:fc:a0:c4:97:ad:3a:2a: dc:41:d1:cc:57:36:f4:db:67:e3:f8:95:16:b1:ae: 52:13:51:b5:99:4c:f1:a4:9d:32:aa:26:5a:a2:21: 6b:48:93:de:23:67:2f:8c:bd:59:da:60:23:7b:f8: 6a:58:ac:3d:79:3c:78:a4:bd:43:cf:cb:3c:58:bf: f5:e9:0e:a8:63:88:34:76:2e:27:e4:e8:cb:e9:eb: b9:61:51:f8:d1:47:f7:df:79:3d:57:78:fe:d6:ba: b3:95:c3:e0:95:6d:ca:f1:a9:90:4f:40:9a:2e:cb: 80:01:8f:fa:a4:df:aa:1b:46:5b:74:ae:eb:16:37: d7:27:b8:6d:9c:1b:77:97:96:54:f6:d0:f1:0f:83: b5:fa:d1:95:d8:4b:d9:30:12:50:ab:45:3d:61:27: 9a:9e:3f:54:be:4a:25:e8:2c:e3:e3:bf:fb:67:b5: 2e:50:5e:2e:f0:74:d0:07:2a:4d:6a:fc:d5:8e:7f: 9d:9d:c8:2c:39:81:52:9a:61:87:81:b3:15:77:8f: 7b:21:77:04:50:2e:62:a1:45:f1:6f:e4:00:91:d2: 6a:64:16:54:11:34:83:72:8f:44:ed:ac:25:9c:85: 9c:17:d2:68:1d:da:c3:48:41:8c:17:39:55:a5:6a: 0f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:77:31:90:02:DC:97:6D:4F:77:43:C3:EE:95:11:AD:A4:DA:97:E9 X509v3 Authority Key Identifier: keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:51:9d:75:69:a9:d5:11:2b:5e:91:a1:e1:bc:82:ea:f5:9b: c2:53:41:8e:aa:3f:c4:1f:cf:83:3a:38:ca:5b:0d:f3:8a:ce: 7b:cc:c1:13:de:93:3a:be:8e:48:87:06:b7:2e:93:e1:62:95: 13:c2:d7:59:5e:82:99:dc:53:46:51:92:71:24:32:81:a3:79: 57:bf:a7:22:e7:2c:13:e9:3f:d8:eb:e5:d9:10:4b:39:52:b8: 7a:4b:a5:7a:ab:38:83:e5:7c:60:d7:ef:e6:85:c1:d1:49:82: da:ff:48:41:16:f8:72:3a:cd:c7:32:b3:79:9d:d9:da:f4:c8: 34:89:08:cb:e1:de:82:d2:9c:4d:27:85:05:30:e3:9d:d5:83: 18:0f:47:e5:6d:05:a7:3e:72:ce:cb:61:f6:11:ad:69:a7:d9: 38:8a:3b:4e:db:2e:6d:8a:16:5f:f2:33:fa:63:c2:9d:b6:c9: a1:5c:28:a1:9d:45:7e:a7:1e:f6:6e:cb:4a:b1:5d:c8:58:3f: ee:fb:52:36:a2:28:3d:24:88:34:30:ab:5c:08:a4:67:61:36: 28:b6:10:4e:2e:70:19:5b:e7:68:72:98:88:0a:70:1b:d9:2c: 52:ae:ba:ef:c2:ef:a8:84:2f:1e:d9:83:57:ba:ea:09:ca:a7: 54:dc:22:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDRDcxMTAvBgNVBAUTKDhCN0ZERUU0NkE5ODBDMDQzMzk4RkI3QjIzOUIwNTRE Q0YyMzdDRDcwHhcNMjUxMTA1MDE1OTMxWhcNMjUxMTEyMDE1OTMxWjAYMRYwFAYD VQQDEw02OTBhYWY4My03OGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkcpkF7fU/ygxJetOircQdHMVzb022fj+JUWsa5SE1G1mUzxpJ0yqiZaoiFr SJPeI2cvjL1Z2mAje/hqWKw9eTx4pL1Dz8s8WL/16Q6oY4g0di4n5OjL6eu5YVH4 0Uf333k9V3j+1rqzlcPglW3K8amQT0CaLsuAAY/6pN+qG0ZbdK7rFjfXJ7htnBt3 l5ZU9tDxD4O1+tGV2EvZMBJQq0U9YSeanj9Uvkol6Czj47/7Z7UuUF4u8HTQBypN avzVjn+dncgsOYFSmmGHgbMVd497IXcEUC5ioUXxb+QAkdJqZBZUETSDco9E7awl nIWcF9JoHdrDSEGMFzlVpWoP0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDx3MZAC 3JdtT3dDw+6VEa2k2pfpMB8GA1UdIwQYMBaAFIt/3uRqmAwEM5j7eyObBU3PI3zX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNENy9GRDkxODU5MDU2 N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURBUXptUHQ3STVzRlRjOGpm TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kzX2U1R3FZREFRem1QdDdJNXNGVGM4amZOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNENy9GRDkxODU5MDU2N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURB UXptUHQ3STVzRlRjOGpmTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuUZ11aanVEStekaHhvILq9ZvCU0GOqj/EH8+DOjjKWw3zis57zMET 3pM6vo5Ihwa3LpPhYpUTwtdZXoKZ3FNGUZJxJDKBo3lXv6ci5ywT6T/Y6+XZEEs5 Urh6S6V6qziD5Xxg1+/mhcHRSYLa/0hBFvhyOs3HMrN5ndna9Mg0iQjL4d6C0pxN J4UFMOOd1YMYD0flbQWnPnLOy2H2Ea1pp9k4ijtO2y5tihZf8jP6Y8KdtsmhXCih nUV+px72bstKsV3IWD/u+1I2oig9JIg0MKtcCKRnYTYothBOLnAZW+docpiICnAb 2SxSrrrvwu+ohC8e2YNXuuoJyqdU3CL7 -----END CERTIFICATE-----Generated at Wed Nov 5 16:42:28 2025 by rpki-client