$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft File: Epbn674wET_h0_KXMDOkyzEUSB0.mft (raw, json) Hash identifier: RFGiOSe4XdszuqDX5mE4UhhnvxGN1F1nn9t3Co9n7e8= Subject key identifier: 20:3A:EE:FC:90:47:64:60:49:F1:39:E3:B4:3E:D6:63:31:BD:76:34 Authority key identifier: 12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D Certificate issuer: /CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft Manifest number: 0165 Signing time: Wed 17 Sep 2025 04:31:37 +0000 Manifest this update: Wed 17 Sep 2025 04:31:37 +0000 Manifest next update: Wed 24 Sep 2025 04:31:37 +0000 Files and hashes: 1: Epbn674wET_h0_KXMDOkyzEUSB0.crl (hash: 6T1S8DZzY9UbAabzMb35U44zEVBCT4eERXqIqS3L5Sk=) 2: F0E06498748B11EE92D55F6AC4F9AE02.roa (hash: NDSD+KkV1yB3rzPC/NhFv9JI1zaXTY8fuhw8gPA8DhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DEB, serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D Validity Not Before: Sep 17 04:31:37 2025 GMT Not After : Sep 24 04:31:37 2025 GMT Subject: CN=68ca39a9-d425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c8:65:22:61:9c:24:fe:d5:61:b4:d1:ec:b4: 61:cb:75:9d:75:7b:ed:f0:19:4a:49:aa:d5:01:0e: 04:5d:10:50:75:93:9f:9f:02:4b:c2:3a:1a:cb:c0: 85:af:79:5e:97:fc:5a:a2:a7:10:bd:2d:9d:16:bb: 25:79:d7:2a:4a:42:ca:ca:b1:f6:38:ab:f3:5e:3e: 23:85:14:8f:ae:9f:7f:d0:09:04:b5:71:3f:b9:db: ab:d9:50:50:e9:fb:b1:34:12:89:a4:52:48:12:2e: 79:07:5b:46:eb:6b:8a:ad:31:ad:3b:22:aa:d5:98: 3a:b4:d7:6a:b3:0a:94:0a:b4:64:e8:3b:fe:79:f6: be:bd:d6:65:3e:9b:23:cc:67:96:d0:15:37:cd:a9: 5d:a5:ad:9d:20:87:c3:42:31:d7:67:ca:8b:06:09: c9:ff:a1:0a:4e:d5:0c:39:1e:6c:0f:e3:ec:9d:c0: 65:09:3d:96:e3:b9:ea:06:27:56:69:28:ac:be:0c: fc:0a:70:33:cc:fa:b4:a3:ba:ee:17:99:2c:d1:1c: ca:60:15:f0:86:ab:50:b8:ce:44:b8:8b:e2:b8:2e: aa:0f:35:a5:99:9c:f1:21:e2:1e:42:41:f5:af:46: f7:55:73:eb:8d:6e:3e:d2:30:d0:30:b1:84:f1:ff: b1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3A:EE:FC:90:47:64:60:49:F1:39:E3:B4:3E:D6:63:31:BD:76:34 X509v3 Authority Key Identifier: keyid:12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:13:e1:a0:ea:c5:a8:ee:69:04:3c:7f:e9:7c:fd:6e:5b:c1: b0:4d:76:9b:84:d4:3c:e0:04:13:30:e8:85:13:d6:08:32:01: 75:95:b7:5c:10:55:c4:5e:e4:5f:86:e1:f3:ed:b7:53:a4:9c: 20:5c:b9:de:d5:49:a4:58:fd:6b:58:ab:ca:d4:43:ee:2e:e7: 6f:94:11:c7:82:a5:f9:45:01:4b:6f:2f:05:37:39:13:c9:4b: 3e:6c:06:d3:f9:07:77:9c:07:6f:ea:62:27:80:54:2f:7c:73: 58:05:c3:6d:74:18:48:30:e2:39:be:ca:a2:62:9a:7c:b8:5e: 1b:b3:5b:2e:08:a4:d6:3c:2c:49:be:63:fa:43:71:5d:64:68: 92:44:ce:9a:55:3a:d7:08:1e:cc:0e:a1:dc:e8:c4:38:a5:2a: 84:be:e5:7a:2c:8d:1b:72:6d:b4:5e:25:b1:bc:2d:e5:cb:53: 35:1a:66:ee:37:b8:71:bb:17:9f:e9:20:60:f4:c7:6c:fe:9d: 08:6f:de:2e:ed:7f:86:7f:fb:7d:78:f1:02:0d:4b:c9:1a:36: 8c:e2:4f:3a:8e:ec:12:38:a8:64:9e:9d:19:96:27:00:fc:d2: 90:35:cf:81:59:dd:4b:81:1d:63:eb:47:00:53:94:3e:6a:15: 18:ce:a6:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBERUIxMTAvBgNVBAUTKDEyOTZFN0VCQkUzMDExM0ZFMUQzRjI5NzMwMzNBNENC MzExNDQ4MUQwHhcNMjUwOTE3MDQzMTM3WhcNMjUwOTI0MDQzMTM3WjAYMRYwFAYD VQQDEw02OGNhMzlhOS1kNDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAychlImGcJP7VYbTR7LRhy3WddXvt8BlKSarVAQ4EXRBQdZOfnwJLwjoay8CF r3lel/xaoqcQvS2dFrsledcqSkLKyrH2OKvzXj4jhRSPrp9/0AkEtXE/udur2VBQ 6fuxNBKJpFJIEi55B1tG62uKrTGtOyKq1Zg6tNdqswqUCrRk6Dv+efa+vdZlPpsj zGeW0BU3zaldpa2dIIfDQjHXZ8qLBgnJ/6EKTtUMOR5sD+PsncBlCT2W47nqBidW aSisvgz8CnAzzPq0o7ruF5ks0RzKYBXwhqtQuM5EuIviuC6qDzWlmZzxIeIeQkH1 r0b3VXPrjW4+0jDQMLGE8f+xXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCA67vyQ R2RgSfE547Q+1mMxvXY0MB8GA1UdIwQYMBaAFBKW5+u+MBE/4dPylzAzpMsxFEgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERFQi9BMzMxRjQ3NDcy NjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9FcGJuNjc0d0VUX2gwX0tYTURPa3l6RVVT QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VwYm42NzR3RVRfaDBfS1hNRE9reXpFVVNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERFQi9BMzMxRjQ3NDcyNjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9FcGJuNjc0d0VU X2gwX0tYTURPa3l6RVVTQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXE+Gg6sWo7mkEPH/pfP1uW8GwTXabhNQ84AQTMOiFE9YIMgF1lbdc EFXEXuRfhuHz7bdTpJwgXLne1UmkWP1rWKvK1EPuLudvlBHHgqX5RQFLby8FNzkT yUs+bAbT+Qd3nAdv6mIngFQvfHNYBcNtdBhIMOI5vsqiYpp8uF4bs1suCKTWPCxJ vmP6Q3FdZGiSRM6aVTrXCB7MDqHc6MQ4pSqEvuV6LI0bcm20XiWxvC3ly1M1Gmbu N7hxuxef6SBg9Mds/p0Ib94u7X+Gf/t9ePECDUvJGjaM4k86juwSOKhknp0ZlicA /NKQNc+BWd1LgR1j60cAU5Q+ahUYzqbR -----END CERTIFICATE-----Generated at Thu Sep 18 23:29:54 2025 by rpki-client