$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json) Hash identifier: GOIrae2l0RROr0x/uBSuDurOoDdjDrdptEeUVNpxWV8= Subject key identifier: AB:62:8E:8F:4B:2D:3B:6C:98:B7:97:D9:F6:98:A6:30:E1:A6:4F:39 Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft Manifest number: 0237 Signing time: Mon 03 Nov 2025 01:50:12 +0000 Manifest this update: Mon 03 Nov 2025 01:50:11 +0000 Manifest next update: Mon 10 Nov 2025 01:50:11 +0000 Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: CGGrSR3mH8Be7k1GnW/bsUCzjB1OrKfceqsz9njZ8gg=) 2: FC589960568411EDAE93DA7FC4F9AE02.roa (hash: M3OQL+158orw0Ue/EcQvvn7VUfwHswtbs9jlmebyIsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Validity Not Before: Nov 3 01:50:11 2025 GMT Not After : Nov 10 01:50:11 2025 GMT Subject: CN=69080a54-62e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:ef:4f:11:55:78:d6:a6:2b:30:29:ff:19: 23:74:bf:68:c7:09:a3:a2:cd:f3:da:c4:b7:d8:79: d6:7a:5a:59:06:f3:8a:c3:ed:87:05:96:b7:6e:cc: 5e:fb:3f:b1:95:40:f8:2a:d9:f0:94:68:ce:84:b6: c3:ac:2c:14:69:e8:15:42:01:06:0e:e7:7e:71:6d: 54:eb:39:63:2b:4c:0c:bf:67:ce:4d:46:2c:ba:df: 99:ca:73:98:65:f3:ba:10:54:3c:cb:6d:6a:31:65: 1c:f5:01:93:cb:02:6d:61:9a:93:6f:ec:30:a1:cf: 12:3e:58:35:40:63:a5:c5:7b:39:94:fe:29:cf:d1: 19:d1:44:1b:60:61:fc:58:0c:b1:bb:88:9f:3d:f3: 24:b8:c4:2d:80:d2:8c:0d:07:84:57:50:ba:fa:0e: 90:59:60:11:1a:a6:d2:d3:1f:77:8f:34:f2:c5:af: 48:6b:76:16:f2:3e:ba:ef:25:50:e6:cd:12:d7:0c: 22:c2:3b:24:61:ca:48:2d:0a:d6:b9:e1:52:5d:e5: 01:2a:ee:b5:a6:cf:fe:4f:03:f7:a8:8d:24:75:94: a1:4b:ee:4e:7c:59:7a:42:1e:f2:ee:cc:a5:9a:55: ce:94:68:1d:09:d5:5a:86:8b:5c:a8:8c:0c:8b:88: fc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:62:8E:8F:4B:2D:3B:6C:98:B7:97:D9:F6:98:A6:30:E1:A6:4F:39 X509v3 Authority Key Identifier: keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:1a:54:5a:d5:83:7c:60:f9:d7:ea:ce:95:09:ab:fb:51:32: 79:c2:51:00:15:08:e2:9c:0e:be:63:93:84:2d:35:9b:e0:14: b9:f4:6c:dc:1a:be:9d:ca:9e:f1:9f:70:d3:71:09:17:68:7f: 13:40:58:25:cf:e2:b8:d6:10:78:c0:50:9b:6b:1f:31:b1:ad: ee:20:06:91:c3:bf:62:4b:b2:d9:48:b2:0b:b8:38:ae:aa:eb: e9:65:ec:46:46:02:d4:71:2d:fa:43:8b:11:a9:39:40:9c:bd: 38:f5:bd:12:35:ca:63:ff:23:69:7c:15:9d:ab:87:cd:2e:6a: a7:2e:d7:43:ec:c2:13:4e:b4:df:8b:18:2f:e0:64:c6:56:a1: 14:9e:f0:c9:92:39:db:71:0f:8a:0f:11:50:c9:9a:39:1a:6d: 81:f1:4b:a2:4f:08:1d:9d:c5:5b:a8:36:fd:26:5c:d6:47:4c: b1:d5:ef:0f:b0:be:be:2b:18:83:9b:ca:03:80:83:01:55:eb: e1:de:78:63:95:3d:89:87:79:c4:5b:e9:d4:35:91:38:2c:a8: 0b:3e:ff:19:c3:82:f8:4e:7a:f8:c9:0a:d5:0d:08:8c:79:a3: 62:b5:3f:cc:e8:10:2f:ad:06:14:24:d9:ec:90:a9:c4:e6:bb: 36:db:72:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDRDcxMTAvBgNVBAUTKDhCN0ZERUU0NkE5ODBDMDQzMzk4RkI3QjIzOUIwNTRE Q0YyMzdDRDcwHhcNMjUxMTAzMDE1MDExWhcNMjUxMTEwMDE1MDExWjAYMRYwFAYD VQQDEw02OTA4MGE1NC02MmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp17vTxFVeNamKzAp/xkjdL9oxwmjos3z2sS32HnWelpZBvOKw+2HBZa3bsxe +z+xlUD4KtnwlGjOhLbDrCwUaegVQgEGDud+cW1U6zljK0wMv2fOTUYsut+ZynOY ZfO6EFQ8y21qMWUc9QGTywJtYZqTb+wwoc8SPlg1QGOlxXs5lP4pz9EZ0UQbYGH8 WAyxu4ifPfMkuMQtgNKMDQeEV1C6+g6QWWARGqbS0x93jzTyxa9Ia3YW8j667yVQ 5s0S1wwiwjskYcpILQrWueFSXeUBKu61ps/+TwP3qI0kdZShS+5OfFl6Qh7y7syl mlXOlGgdCdVahotcqIwMi4j81wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtijo9L LTtsmLeX2faYpjDhpk85MB8GA1UdIwQYMBaAFIt/3uRqmAwEM5j7eyObBU3PI3zX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNENy9GRDkxODU5MDU2 N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURBUXptUHQ3STVzRlRjOGpm TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kzX2U1R3FZREFRem1QdDdJNXNGVGM4amZOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNENy9GRDkxODU5MDU2N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURB UXptUHQ3STVzRlRjOGpmTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXGlRa1YN8YPnX6s6VCav7UTJ5wlEAFQjinA6+Y5OELTWb4BS59Gzc Gr6dyp7xn3DTcQkXaH8TQFglz+K41hB4wFCbax8xsa3uIAaRw79iS7LZSLILuDiu quvpZexGRgLUcS36Q4sRqTlAnL049b0SNcpj/yNpfBWdq4fNLmqnLtdD7MITTrTf ixgv4GTGVqEUnvDJkjnbcQ+KDxFQyZo5Gm2B8UuiTwgdncVbqDb9JlzWR0yx1e8P sL6+KxiDm8oDgIMBVevh3nhjlT2Jh3nEW+nUNZE4LKgLPv8Zw4L4Tnr4yQrVDQiM eaNitT/M6BAvrQYUJNnskKnE5rs223Ly -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:35 2025 by rpki-client