$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft File: e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft (raw, json) Hash identifier: qajCMqQ+su9ASL4ZNh1M213V2fAMHeNL5uySSBcGLqA= Subject key identifier: C6:18:2B:91:7F:28:1F:8A:11:01:E7:8F:91:7E:CB:F7:3F:D4:66:0D Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft Manifest number: 0180 Signing time: Tue 04 Nov 2025 16:34:42 +0000 Manifest this update: Tue 04 Nov 2025 16:34:41 +0000 Manifest next update: Tue 11 Nov 2025 16:34:41 +0000 Files and hashes: 1: e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl (hash: rSHa7ZJvOQLTcO+MGGp9rJsQORbcv33G4qi/TUpG5qc=) 2: 21A970BC737211EEB3112437C4F9AE02.roa (hash: XJ/1YrCaSDNyCh/d53BiCDPgdkZZW4dlXKK+XbVzcl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Validity Not Before: Nov 4 16:34:41 2025 GMT Not After : Nov 11 16:34:41 2025 GMT Subject: CN=690a2b21-df13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:05:78:a5:28:e6:16:9a:61:ec:fb:e0:1f: cc:5c:dc:5b:3f:14:17:55:b2:40:30:19:0e:76:66: 4b:42:81:66:f0:c2:7e:02:4b:0e:90:9a:03:a5:7d: 30:5f:11:fb:36:82:80:07:3f:53:1b:5b:bc:e7:e1: fa:27:8e:9a:4e:02:58:c3:a8:43:54:0a:6c:e3:a2: c7:ac:df:19:43:30:15:b9:0a:db:8f:3b:99:05:bd: fa:70:dd:50:10:6b:b8:49:02:5f:ad:0a:d5:2c:e4: 3d:76:1c:0c:b7:8c:60:d4:5c:29:4b:3c:8d:6f:ef: 19:0e:b7:31:17:d2:14:d7:4f:3a:46:fb:e3:31:b2: 21:ab:e1:57:11:28:ee:58:27:06:59:49:cd:fb:62: b1:c0:0b:cd:f7:08:79:c2:52:e7:df:24:e9:96:31: 12:7c:e9:bf:44:65:72:75:32:78:02:a5:20:8d:7f: 9e:93:d0:fe:08:83:6f:be:88:1c:f8:c5:f7:b0:9b: e4:c1:91:fd:7b:69:f2:b9:ba:cc:39:fa:44:2a:09: ef:79:e0:de:e4:d1:18:2b:05:32:d0:14:1f:88:cd: 8e:ba:17:7b:7d:69:3f:df:22:1a:c7:66:72:b1:a9: 74:c4:ea:e7:23:ae:2e:c1:49:cb:5f:d9:00:e8:31: 87:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:18:2B:91:7F:28:1F:8A:11:01:E7:8F:91:7E:CB:F7:3F:D4:66:0D X509v3 Authority Key Identifier: keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:a0:ee:5f:3a:04:39:3e:9b:63:46:ce:d2:5f:82:ad:06:1e: db:1d:a1:88:49:8d:05:b6:01:22:98:c5:47:43:10:4c:1b:a0: af:62:66:d5:76:f6:f8:5f:d4:87:df:4b:e3:3f:c7:a2:11:0a: 71:e5:02:ed:61:33:6a:23:f9:76:0b:8f:07:88:c5:42:13:85: 5b:ad:26:85:bc:71:56:52:4f:7e:fb:65:9d:d1:a0:9d:68:75: e1:eb:4f:4a:a6:5e:5b:e7:c0:14:da:37:38:65:7d:84:da:2f: 78:c0:51:d8:7b:eb:b5:b8:e5:e2:b9:0c:4a:bf:07:ab:d1:67: 3d:98:9d:5d:a1:8b:45:93:00:57:4f:37:80:49:a1:f0:c6:d9: b1:af:31:97:0a:5c:03:74:58:0c:33:a0:35:4c:53:b5:91:14: ff:17:fe:65:3d:5b:04:2e:87:87:9c:43:12:6b:10:7c:3d:f1: 2c:42:73:cc:e6:72:cf:cb:3b:02:b4:8c:d8:24:33:f2:74:91: 9a:3f:3d:ce:26:1f:f8:fa:02:ab:b1:53:e3:4b:fe:dd:00:c9: d7:ad:b1:90:31:d0:a0:ed:de:80:a8:8f:ba:9a:28:56:02:a8: d8:18:6e:0e:3d:f0:1f:a4:cf:d5:69:9c:09:1c:57:05:8a:7a: 5a:56:0a:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKDdCOUNFREM4MzI4MDI4QTc0NTZFOUM0MTRCQjc3REFG RUJDRTc2NUYwHhcNMjUxMTA0MTYzNDQxWhcNMjUxMTExMTYzNDQxWjAYMRYwFAYD VQQDEw02OTBhMmIyMS1kZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytUFeKUo5haaYez74B/MXNxbPxQXVbJAMBkOdmZLQoFm8MJ+AksOkJoDpX0w XxH7NoKABz9TG1u85+H6J46aTgJYw6hDVAps46LHrN8ZQzAVuQrbjzuZBb36cN1Q EGu4SQJfrQrVLOQ9dhwMt4xg1FwpSzyNb+8ZDrcxF9IU1086RvvjMbIhq+FXESju WCcGWUnN+2KxwAvN9wh5wlLn3yTpljESfOm/RGVydTJ4AqUgjX+ek9D+CINvvogc +MX3sJvkwZH9e2nyubrMOfpEKgnveeDe5NEYKwUy0BQfiM2Ouhd7fWk/3yIax2Zy sal0xOrnI64uwUnLX9kA6DGH3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYYK5F/ KB+KEQHnj5F+y/c/1GYNMB8GA1UdIwQYMBaAFHuc7cgygCinRW6cQUu3fa/rznZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS9DNkRENTFCNDcz NkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtLZEZicHhCUzdkOXItdk9k bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2U1enR5REtBS0tkRmJweEJTN2Q5ci12T2RsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDM2QS9DNkRENTFCNDczNkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtL ZEZicHhCUzdkOXItdk9kbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChoO5fOgQ5PptjRs7SX4KtBh7bHaGISY0FtgEimMVHQxBMG6CvYmbV dvb4X9SH30vjP8eiEQpx5QLtYTNqI/l2C48HiMVCE4VbrSaFvHFWUk9++2Wd0aCd aHXh609Kpl5b58AU2jc4ZX2E2i94wFHYe+u1uOXiuQxKvwer0Wc9mJ1doYtFkwBX TzeASaHwxtmxrzGXClwDdFgMM6A1TFO1kRT/F/5lPVsELoeHnEMSaxB8PfEsQnPM 5nLPyzsCtIzYJDPydJGaPz3OJh/4+gKrsVPjS/7dAMnXrbGQMdCg7d6AqI+6mihW AqjYGG4OPfAfpM/VaZwJHFcFinpaVgrb -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:29 2025 by rpki-client