$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft File: Epbn674wET_h0_KXMDOkyzEUSB0.mft (raw, json) Hash identifier: P/PRHa5GwWqfihAncRV/CVnYZRuE3YOnlJYVjW27HbQ= Subject key identifier: 47:0F:F8:D3:19:31:9D:A0:95:1A:20:E7:85:C1:23:62:37:4B:80:BE Authority key identifier: 12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D Certificate issuer: /CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft Manifest number: 017C Signing time: Mon 03 Nov 2025 03:42:33 +0000 Manifest this update: Mon 03 Nov 2025 03:42:32 +0000 Manifest next update: Mon 10 Nov 2025 03:42:32 +0000 Files and hashes: 1: Epbn674wET_h0_KXMDOkyzEUSB0.crl (hash: XStgmqZloRbJSf9hJAVUNGV/1iBYZdZ5yvHuWr2Xu5I=) 2: F0E06498748B11EE92D55F6AC4F9AE02.roa (hash: NDSD+KkV1yB3rzPC/NhFv9JI1zaXTY8fuhw8gPA8DhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DEB, serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D Validity Not Before: Nov 3 03:42:32 2025 GMT Not After : Nov 10 03:42:32 2025 GMT Subject: CN=690824a8-7ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:93:c1:f9:7e:4f:32:c1:c8:bc:eb:26:6e:61: 09:a8:1b:c7:43:1b:b2:df:6c:85:65:49:d8:53:98: 71:0b:68:1e:6d:b4:e7:8a:16:bc:fa:6b:bd:3a:f3: 98:60:b4:12:52:45:2b:a4:67:94:91:50:85:34:27: 83:d3:0e:f4:4e:e2:62:78:15:13:8c:59:bb:c1:c1: 82:8a:10:fd:f5:ef:11:2a:bc:92:e5:61:0d:f7:55: 07:4f:f5:59:f3:a5:4c:2f:3a:01:5a:91:c2:2c:ea: 94:aa:99:4e:cf:9a:8f:5f:10:d8:e4:c9:32:ff:6f: ea:d4:f3:30:b1:37:eb:7c:2c:85:2d:b5:ab:1b:e7: 54:59:c1:0d:e6:46:f8:3d:e9:3b:bf:10:b0:a2:0e: 91:8d:64:0c:f6:89:3c:08:eb:4e:9e:cc:05:be:a0: 2c:2d:b6:5c:35:db:99:40:c9:2a:b6:29:5f:5e:99: 27:59:f5:e7:54:9a:31:e3:e6:66:6a:82:6e:e6:11: 4c:63:ea:b4:87:6c:86:ca:57:d8:35:88:cc:ca:4c: f8:b8:98:52:48:4f:f3:af:b9:83:fe:07:4c:e9:24: 8e:ab:5b:3c:4b:36:e3:09:0f:63:7e:2f:b3:be:34: fb:37:e2:7b:81:cc:fd:9e:d5:76:97:00:39:b6:7b: bb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0F:F8:D3:19:31:9D:A0:95:1A:20:E7:85:C1:23:62:37:4B:80:BE X509v3 Authority Key Identifier: keyid:12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:c9:75:78:bb:0c:5d:bf:02:06:0b:b6:30:ee:df:7e:13:59: 79:f8:88:f2:a8:50:dd:d3:62:b6:c7:11:26:f9:08:b1:86:9f: 36:e9:4a:d1:31:40:df:a3:05:29:02:42:1d:68:e9:20:54:26: 6a:2a:a1:ac:52:24:2b:39:05:d3:05:63:23:56:b6:28:8a:fd: 3e:fe:37:3c:6c:c7:b8:71:0f:0c:fa:f1:b0:1a:d5:c1:1b:65: c1:60:29:cf:08:a6:51:a5:4c:5b:e2:b3:9c:34:63:07:c9:5e: c7:dd:6b:35:e2:66:e8:68:a1:fd:04:7e:f0:7d:af:15:36:e7: ec:2c:c8:f8:e4:81:71:c3:a2:7f:fc:40:c5:03:be:54:dd:35: 1d:6b:4b:0e:3a:a5:54:d6:0a:bc:b8:17:80:58:02:fe:20:38: 14:b6:ca:f2:5c:0f:df:44:44:07:cb:9c:d0:ec:b3:9d:66:53: 5b:7c:f4:48:b7:d3:5e:bc:8b:e9:c9:0a:55:12:be:5d:b7:9e: df:cc:da:f1:07:26:a9:8e:26:a3:88:e7:6b:64:21:af:a7:74: a7:ee:57:07:62:b1:d2:4c:e1:91:dc:0c:2e:c3:bb:97:77:08: de:db:7d:89:cf:f3:93:68:78:8f:f6:9d:80:1e:b7:92:eb:fb: 31:44:21:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBERUIxMTAvBgNVBAUTKDEyOTZFN0VCQkUzMDExM0ZFMUQzRjI5NzMwMzNBNENC MzExNDQ4MUQwHhcNMjUxMTAzMDM0MjMyWhcNMjUxMTEwMDM0MjMyWjAYMRYwFAYD VQQDEw02OTA4MjRhOC03YWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/JPB+X5PMsHIvOsmbmEJqBvHQxuy32yFZUnYU5hxC2gebbTniha8+mu9OvOY YLQSUkUrpGeUkVCFNCeD0w70TuJieBUTjFm7wcGCihD99e8RKryS5WEN91UHT/VZ 86VMLzoBWpHCLOqUqplOz5qPXxDY5Mky/2/q1PMwsTfrfCyFLbWrG+dUWcEN5kb4 Pek7vxCwog6RjWQM9ok8COtOnswFvqAsLbZcNduZQMkqtilfXpknWfXnVJox4+Zm aoJu5hFMY+q0h2yGylfYNYjMykz4uJhSSE/zr7mD/gdM6SSOq1s8SzbjCQ9jfi+z vjT7N+J7gcz9ntV2lwA5tnu7QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcP+NMZ MZ2glRog54XBI2I3S4C+MB8GA1UdIwQYMBaAFBKW5+u+MBE/4dPylzAzpMsxFEgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERFQi9BMzMxRjQ3NDcy NjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9FcGJuNjc0d0VUX2gwX0tYTURPa3l6RVVT QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VwYm42NzR3RVRfaDBfS1hNRE9reXpFVVNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERFQi9BMzMxRjQ3NDcyNjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9FcGJuNjc0d0VU X2gwX0tYTURPa3l6RVVTQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATyXV4uwxdvwIGC7Yw7t9+E1l5+IjyqFDd02K2xxEm+Qixhp826UrR MUDfowUpAkIdaOkgVCZqKqGsUiQrOQXTBWMjVrYoiv0+/jc8bMe4cQ8M+vGwGtXB G2XBYCnPCKZRpUxb4rOcNGMHyV7H3Ws14mboaKH9BH7wfa8VNufsLMj45IFxw6J/ /EDFA75U3TUda0sOOqVU1gq8uBeAWAL+IDgUtsryXA/fREQHy5zQ7LOdZlNbfPRI t9NevIvpyQpVEr5dt57fzNrxByapjiajiOdrZCGvp3Sn7lcHYrHSTOGR3Awuw7uX dwje232Jz/OTaHiP9p2AHreS6/sxRCEU -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:06 2025 by rpki-client