$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft File: Epbn674wET_h0_KXMDOkyzEUSB0.mft (raw, json) Hash identifier: /H3P8KcFYHqxHNEDduUAru05JFhEZTIx72GBeEKHa+k= Subject key identifier: D2:EC:3F:CE:57:84:E2:96:F3:0A:9D:50:A3:34:00:A6:F0:5D:BB:DF Authority key identifier: 12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D Certificate issuer: /CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft Manifest number: 017D Signing time: Wed 05 Nov 2025 03:51:50 +0000 Manifest this update: Wed 05 Nov 2025 03:51:49 +0000 Manifest next update: Wed 12 Nov 2025 03:51:49 +0000 Files and hashes: 1: Epbn674wET_h0_KXMDOkyzEUSB0.crl (hash: +U32J9fcd2lQ9fbrDnL4YNjrpLnE9BR6C1n7sKkqaR8=) 2: F0E06498748B11EE92D55F6AC4F9AE02.roa (hash: NDSD+KkV1yB3rzPC/NhFv9JI1zaXTY8fuhw8gPA8DhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DEB, serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D Validity Not Before: Nov 5 03:51:49 2025 GMT Not After : Nov 12 03:51:49 2025 GMT Subject: CN=690ac9d5-4be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d6:9f:de:d9:69:24:08:64:da:6c:63:34:1e: 6e:b2:83:b9:46:82:15:69:13:5d:46:68:67:92:23: b9:19:72:fe:80:30:d1:81:b6:f8:64:f7:d0:9a:3d: cf:c7:72:b9:d1:05:7f:97:16:75:c3:83:ae:27:54: cf:3c:d3:5b:b5:a0:be:54:6a:ef:0d:2e:3f:b5:78: 22:a7:c9:7c:90:12:4e:70:a5:16:a1:2d:a0:45:e7: e1:85:28:c8:2c:4a:33:0a:37:21:c3:3f:a5:7a:cc: c8:34:10:10:50:ca:1f:91:fb:77:a9:10:41:ef:c2: 02:88:4f:88:64:68:75:13:f2:16:4c:79:96:44:4f: 1f:3d:de:ab:3a:e0:61:b2:9c:db:0e:6e:a5:ef:cb: 64:c8:f2:aa:ea:ca:c4:11:71:4e:28:84:9d:6a:b6: 5c:c5:18:e2:fa:95:79:8b:6b:c2:5d:dd:71:8f:7b: 44:d5:8e:f7:77:e4:2c:d1:dd:ae:f2:cd:d2:49:42: 1a:38:57:85:78:5c:b4:98:2e:c2:5b:2e:d5:8b:54: ab:22:4f:4c:9b:97:e9:a3:cd:8b:2c:bb:bf:c6:47: e3:c8:14:89:2b:34:b4:02:8c:a4:7d:d2:2e:39:d1: a0:84:5c:7c:30:63:8b:f2:3f:42:46:5c:cc:cd:8b: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EC:3F:CE:57:84:E2:96:F3:0A:9D:50:A3:34:00:A6:F0:5D:BB:DF X509v3 Authority Key Identifier: keyid:12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:e1:b5:44:5c:fb:fb:bf:38:d2:1a:e2:82:f9:04:60:ab:10: 91:ea:0f:62:c6:28:ec:64:ee:85:5c:c2:3c:c0:7d:95:8b:3e: 2b:d3:ae:d4:20:5a:88:a8:bd:3d:44:70:35:d5:96:fb:1d:84: c3:9b:a6:db:48:05:0c:9c:8a:ed:fa:50:48:a8:b0:11:66:d3: ab:bd:cf:65:18:4b:65:01:a1:92:28:da:16:e1:68:7b:8f:0d: 88:24:91:95:d8:55:b9:2b:0c:35:a1:b7:d3:2e:81:c1:d3:1a: 6b:81:02:83:50:be:14:23:33:ce:fe:cd:93:65:3d:95:c2:13: ab:84:12:f1:20:bd:c4:1a:5e:5c:f7:9c:79:c1:7b:04:22:2c: ae:f7:e7:68:4f:7c:69:f7:66:9a:31:de:48:3a:02:6d:d2:c8: 16:50:4c:23:28:de:d2:85:23:9e:ba:51:05:92:cf:c7:ea:a5: f7:7a:ff:6b:5f:f7:68:0d:e0:7e:9c:36:85:ca:7a:58:46:9e: 58:a8:97:18:15:38:19:02:be:3c:1d:86:3a:dc:69:7d:2f:2d: 47:b5:3c:e7:11:60:c2:c4:e6:d5:d6:17:4e:7e:d2:61:43:43: d1:e2:0e:d6:71:4f:21:ab:07:3f:41:51:e6:60:70:a9:21:10: 9d:a6:62:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBERUIxMTAvBgNVBAUTKDEyOTZFN0VCQkUzMDExM0ZFMUQzRjI5NzMwMzNBNENC MzExNDQ4MUQwHhcNMjUxMTA1MDM1MTQ5WhcNMjUxMTEyMDM1MTQ5WjAYMRYwFAYD VQQDEw02OTBhYzlkNS00YmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79af3tlpJAhk2mxjNB5usoO5RoIVaRNdRmhnkiO5GXL+gDDRgbb4ZPfQmj3P x3K50QV/lxZ1w4OuJ1TPPNNbtaC+VGrvDS4/tXgip8l8kBJOcKUWoS2gRefhhSjI LEozCjchwz+leszINBAQUMofkft3qRBB78ICiE+IZGh1E/IWTHmWRE8fPd6rOuBh spzbDm6l78tkyPKq6srEEXFOKISdarZcxRji+pV5i2vCXd1xj3tE1Y73d+Qs0d2u 8s3SSUIaOFeFeFy0mC7CWy7Vi1SrIk9Mm5fpo82LLLu/xkfjyBSJKzS0AoykfdIu OdGghFx8MGOL8j9CRlzMzYtLiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLsP85X hOKW8wqdUKM0AKbwXbvfMB8GA1UdIwQYMBaAFBKW5+u+MBE/4dPylzAzpMsxFEgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERFQi9BMzMxRjQ3NDcy NjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9FcGJuNjc0d0VUX2gwX0tYTURPa3l6RVVT QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VwYm42NzR3RVRfaDBfS1hNRE9reXpFVVNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERFQi9BMzMxRjQ3NDcyNjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9FcGJuNjc0d0VU X2gwX0tYTURPa3l6RVVTQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC54bVEXPv7vzjSGuKC+QRgqxCR6g9ixijsZO6FXMI8wH2Viz4r067U IFqIqL09RHA11Zb7HYTDm6bbSAUMnIrt+lBIqLARZtOrvc9lGEtlAaGSKNoW4Wh7 jw2IJJGV2FW5Kww1obfTLoHB0xprgQKDUL4UIzPO/s2TZT2VwhOrhBLxIL3EGl5c 95x5wXsEIiyu9+doT3xp92aaMd5IOgJt0sgWUEwjKN7ShSOeulEFks/H6qX3ev9r X/doDeB+nDaFynpYRp5YqJcYFTgZAr48HYY63Gl9Ly1HtTznEWDCxObV1hdOftJh Q0PR4g7WcU8hqwc/QVHmYHCpIRCdpmI1 -----END CERTIFICATE-----Generated at Wed Nov 5 21:19:28 2025 by rpki-client