$ rpki-client -vvf rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft File: e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft (raw, json) Hash identifier: a3+FLA47EBSyrMpzcCkpjrh8cEpEnHebM1foDEceeEM= Subject key identifier: AF:A0:A7:85:8D:94:6B:71:29:4A:BF:A9:A8:D3:57:CE:B9:4A:D3:E0 Authority key identifier: 7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 Certificate issuer: /CN=A9115964/serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Certificate serial: 07AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft Manifest number: 0798 Signing time: Wed 20 Aug 2025 21:36:07 +0000 Manifest this update: Wed 20 Aug 2025 21:36:06 +0000 Manifest next update: Wed 27 Aug 2025 21:36:06 +0000 Files and hashes: 1: e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl (hash: Xr0jM+jTEtJ3Np2C1WdcAFuaf7cNXgvAxkZOTaR4Bmk=) 2: FAFC712C485611EDB713C522C4F9AE02.roa (hash: fq5HCtnKfkn7/JuyPv2TRFDGy6fu3YXaJZP30LJYt74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 21:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1963 (0x7ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115964, serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Validity Not Before: Aug 20 21:36:06 2025 GMT Not After : Aug 27 21:36:06 2025 GMT Subject: CN=68a63fc7-aefb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:74:3b:a1:79:63:cb:5d:33:e7:63:fa:5c: ad:b2:d9:d8:ce:d8:a0:27:31:bf:f2:2a:0d:a3:72: a6:62:ba:f7:58:61:de:84:53:9d:5b:88:3a:e9:34: 90:96:05:1b:64:e8:f2:de:d5:54:df:6c:dc:87:e9: 14:c6:52:2b:db:c3:fa:25:2a:12:55:2d:17:32:59: 7e:31:cb:18:be:72:29:d7:8e:f9:cc:72:cb:dc:fa: 7f:37:fc:d1:b9:bd:9e:25:16:43:c4:45:6d:46:7b: db:7d:3a:87:15:47:23:a1:e9:d5:2e:33:90:37:f8: 81:d4:19:be:49:9f:bb:5b:12:00:c7:08:ec:f4:14: 75:0e:0d:24:99:a0:c6:47:03:2f:dc:0f:cc:b2:73: 24:b9:f8:ea:ff:e0:62:30:e5:9c:e7:36:95:8c:06: 51:c9:f6:e7:e8:eb:02:38:92:f6:be:91:9d:e7:20: c5:ad:cc:bf:0f:87:2c:0c:41:cd:85:6d:fa:ab:aa: 64:43:1d:03:11:0f:f3:7d:12:2f:77:ba:b3:32:b0: 33:28:1b:ea:70:45:02:9b:a4:1e:9e:46:08:5f:86: dd:a0:d6:af:f1:34:93:96:11:d8:ec:17:86:44:43: 89:28:9d:56:7b:d9:99:e0:df:b4:3f:8b:f4:b2:0b: db:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A0:A7:85:8D:94:6B:71:29:4A:BF:A9:A8:D3:57:CE:B9:4A:D3:E0 X509v3 Authority Key Identifier: keyid:7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2f:21:34:d1:a5:75:4b:0f:b5:5e:74:5e:51:c5:53:21:90: f0:44:5f:da:7e:4e:78:79:0b:60:80:88:10:f3:c8:67:22:18: 17:4b:ee:73:0d:9c:70:2e:ff:26:90:e3:64:98:e8:91:f4:b1: 36:b9:7d:ad:ac:5c:bd:26:cc:23:76:00:9f:1e:18:68:0d:68: f1:6f:d9:11:d5:3f:94:64:d1:79:04:4e:88:34:25:7c:79:31: 74:28:8e:c2:a9:8c:a8:b9:bd:f4:d2:9b:60:2b:ba:06:38:17: 06:cd:64:f8:06:bc:60:a9:73:ba:23:ce:ee:60:0b:a4:82:ca: d3:57:ea:71:ab:bc:a8:98:64:f8:8a:b0:99:6f:ce:b9:c3:0d: 8b:b0:0f:f0:19:b6:43:0d:65:2b:5d:fd:5e:5f:42:2c:a2:59: 88:5f:bf:2d:77:c0:1d:57:a7:2b:57:01:4c:9f:63:fe:50:0b: 4a:d9:d1:bf:5a:8a:e7:ea:b5:6f:d1:04:e1:18:21:fd:cc:1a: bf:a4:81:cd:33:40:b2:c1:9e:63:2a:a0:9d:e5:65:95:47:72: 2f:71:a0:e6:ee:a6:13:e9:6d:be:04:24:1a:9a:a9:f9:e2:61: 5d:72:00:34:e8:02:61:e7:81:a1:f3:1d:72:68:9c:ca:67:41: 08:8b:31:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5NjQxMTAvBgNVBAUTKDdCNzIxMzg4RkQxM0U4QUU0M0M5N0YwMzAxOTgxRDIy OTJDODg4OTcwHhcNMjUwODIwMjEzNjA2WhcNMjUwODI3MjEzNjA2WjAYMRYwFAYD VQQDEw02OGE2M2ZjNy1hZWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRd0O6F5Y8tdM+dj+lytstnYztigJzG/8ioNo3KmYrr3WGHehFOdW4g66TSQ lgUbZOjy3tVU32zch+kUxlIr28P6JSoSVS0XMll+McsYvnIp1475zHLL3Pp/N/zR ub2eJRZDxEVtRnvbfTqHFUcjoenVLjOQN/iB1Bm+SZ+7WxIAxwjs9BR1Dg0kmaDG RwMv3A/MsnMkufjq/+BiMOWc5zaVjAZRyfbn6OsCOJL2vpGd5yDFrcy/D4csDEHN hW36q6pkQx0DEQ/zfRIvd7qzMrAzKBvqcEUCm6QenkYIX4bdoNav8TSTlhHY7BeG REOJKJ1We9mZ4N+0P4v0sgvbpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+gp4WN lGtxKUq/qajTV865StPgMB8GA1UdIwQYMBaAFHtyE4j9E+iuQ8l/AwGYHSKSyIiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTk2NC9FRkMyQ0NCQzI3 MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZLNUR5WDhEQVpnZElwTElp SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UzSVRpUDBUNks1RHlYOERBWmdkSXBMSWlKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTk2NC9FRkMyQ0NCQzI3MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZL NUR5WDhEQVpnZElwTElpSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOLyE00aV1Sw+1XnReUcVTIZDwRF/afk54eQtggIgQ88hnIhgXS+5z DZxwLv8mkONkmOiR9LE2uX2trFy9JswjdgCfHhhoDWjxb9kR1T+UZNF5BE6INCV8 eTF0KI7CqYyoub300ptgK7oGOBcGzWT4BrxgqXO6I87uYAukgsrTV+pxq7yomGT4 irCZb865ww2LsA/wGbZDDWUrXf1eX0IsolmIX78td8AdV6crVwFMn2P+UAtK2dG/ Worn6rVv0QThGCH9zBq/pIHNM0CywZ5jKqCd5WWVR3IvcaDm7qYT6W2+BCQamqn5 4mFdcgA06AJh54Gh8x1yaJzKZ0EIizHk -----END CERTIFICATE-----Generated at Fri Aug 22 16:25:11 2025 by rpki-client