$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft File: e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft (raw, json) Hash identifier: Flt3eLvQH7dzyplNzXB9/uF937n8jm2NgbplFiWYW4g= Subject key identifier: 65:CB:9C:E3:04:7F:6F:F9:C0:74:41:0D:44:FA:D2:48:5F:AE:03:4C Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft Manifest number: 0153 Signing time: Tue 12 Aug 2025 16:35:22 +0000 Manifest this update: Tue 12 Aug 2025 16:35:22 +0000 Manifest next update: Tue 19 Aug 2025 16:35:22 +0000 Files and hashes: 1: e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl (hash: kFN4tPNTU9WbXA+DJ1mdiSgyTEfB2Hr24pIQtOFhebQ=) 2: 21A970BC737211EEB3112437C4F9AE02.roa (hash: aUIyfh4rOAFfQ6V1QGk9Ci9jD2H4crp4Ilb6Y+4J9lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Validity Not Before: Aug 12 16:35:22 2025 GMT Not After : Aug 19 16:35:22 2025 GMT Subject: CN=689b6d4a-15fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:97:80:fc:12:7a:a0:04:ce:ae:d9:4c:f7:66: 77:75:83:10:82:47:45:cd:c9:6b:3b:32:6b:d2:5e: 2e:c3:64:4f:e5:5b:13:86:71:57:fb:a4:15:c6:d8: 61:47:14:11:ce:48:18:2c:73:4f:d0:00:aa:e2:d3: 8f:74:4e:95:f6:27:65:29:53:54:6b:1c:d0:a0:e4: 4b:36:ff:c0:7b:68:d5:4a:5f:3a:66:1d:15:ad:0d: 97:3f:db:be:20:17:66:96:e7:e8:43:e7:a3:e4:2a: 13:13:34:a9:d0:2f:80:ba:f3:dc:00:1e:47:9a:5e: 25:ea:1a:05:ec:d9:f2:49:90:ef:8c:31:5e:81:58: e6:25:fd:fd:b8:f9:37:96:1e:fc:fd:dd:19:de:63: 83:cc:ec:33:bb:e8:51:64:e8:12:7e:05:55:8f:70: cb:ff:d8:70:f1:ce:e9:30:eb:ed:0e:2d:5d:b0:9c: 6a:25:4c:f5:a1:dc:01:94:d1:88:37:52:a3:fa:65: fc:1b:16:9a:39:8e:62:47:dd:a6:3a:ae:94:d5:5f: 34:9e:bc:cc:76:7d:0f:29:d7:f0:38:cd:a2:ec:d2: 05:0d:60:7d:3a:44:0c:3a:fb:56:55:40:16:b6:0a: ed:f9:b0:69:4b:f5:b4:32:fe:e7:ae:14:5a:bb:bf: 56:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CB:9C:E3:04:7F:6F:F9:C0:74:41:0D:44:FA:D2:48:5F:AE:03:4C X509v3 Authority Key Identifier: keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ff:ab:08:6c:4b:fe:15:5d:d8:b3:68:23:69:bc:fa:8c:0c: 7e:47:b8:0d:7d:02:15:a7:9a:70:81:66:c6:04:17:79:61:e2: a7:5c:65:fe:40:0b:af:8b:b8:59:d0:1b:86:34:c7:f3:17:f6: 7c:84:86:19:bb:37:ce:2c:0d:53:5c:ae:42:cf:74:e1:d7:d7: 62:de:29:b9:6a:19:fc:62:34:fb:e0:92:67:e1:49:6a:43:89: ec:b2:2a:94:c0:61:f8:26:9a:61:33:d6:00:e7:26:b4:f3:61: 49:e5:a3:72:4b:e9:50:82:38:12:db:80:61:d1:e2:4d:eb:68: ae:b0:f3:8d:5d:9b:24:14:23:91:1f:50:9c:e8:6d:77:73:92: a7:64:28:61:41:c7:e6:52:a6:43:81:08:50:1a:76:5e:fe:0b: fc:1c:ff:e7:c0:25:92:b0:a8:20:4c:5c:02:9d:27:7c:a9:0b: a4:73:0a:f8:9d:de:0c:50:36:dd:49:06:b7:44:c5:3c:55:f6: 46:e2:f0:00:27:29:1c:6c:87:c9:c4:da:53:ea:32:60:a4:a0: c8:da:7b:3e:5a:50:46:a4:55:b3:16:f3:64:61:e2:b2:0e:c4: 08:33:b6:25:3b:63:a4:f6:cf:ff:72:73:43:18:41:85:9f:ee: dc:36:dc:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKDdCOUNFREM4MzI4MDI4QTc0NTZFOUM0MTRCQjc3REFG RUJDRTc2NUYwHhcNMjUwODEyMTYzNTIyWhcNMjUwODE5MTYzNTIyWjAYMRYwFAYD VQQDEw02ODliNmQ0YS0xNWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpeA/BJ6oATOrtlM92Z3dYMQgkdFzclrOzJr0l4uw2RP5VsThnFX+6QVxthh RxQRzkgYLHNP0ACq4tOPdE6V9idlKVNUaxzQoORLNv/Ae2jVSl86Zh0VrQ2XP9u+ IBdmlufoQ+ej5CoTEzSp0C+AuvPcAB5Hml4l6hoF7NnySZDvjDFegVjmJf39uPk3 lh78/d0Z3mODzOwzu+hRZOgSfgVVj3DL/9hw8c7pMOvtDi1dsJxqJUz1odwBlNGI N1Kj+mX8GxaaOY5iR92mOq6U1V80nrzMdn0PKdfwOM2i7NIFDWB9OkQMOvtWVUAW tgrt+bBpS/W0Mv7nrhRau79WiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXLnOME f2/5wHRBDUT60khfrgNMMB8GA1UdIwQYMBaAFHuc7cgygCinRW6cQUu3fa/rznZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS9DNkRENTFCNDcz NkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtLZEZicHhCUzdkOXItdk9k bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2U1enR5REtBS0tkRmJweEJTN2Q5ci12T2RsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDM2QS9DNkRENTFCNDczNkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtL ZEZicHhCUzdkOXItdk9kbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ/6sIbEv+FV3Ys2gjabz6jAx+R7gNfQIVp5pwgWbGBBd5YeKnXGX+ QAuvi7hZ0BuGNMfzF/Z8hIYZuzfOLA1TXK5Cz3Th19di3im5ahn8YjT74JJn4Ulq Q4nssiqUwGH4JpphM9YA5ya082FJ5aNyS+lQgjgS24Bh0eJN62iusPONXZskFCOR H1Cc6G13c5KnZChhQcfmUqZDgQhQGnZe/gv8HP/nwCWSsKggTFwCnSd8qQukcwr4 nd4MUDbdSQa3RMU8VfZG4vAAJykcbIfJxNpT6jJgpKDI2ns+WlBGpFWzFvNkYeKy DsQIM7YlO2Ok9s//cnNDGEGFn+7cNtxg -----END CERTIFICATE-----Generated at Thu Aug 14 11:05:57 2025 by rpki-client