$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft File: eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json) Hash identifier: HcRxaLhadBoRFgPGKHdrJPw+FkOvICyWDrjZtbLx9+Y= Subject key identifier: B0:20:18:C5:07:27:77:A9:C3:1D:BF:0C:92:D3:33:AC:53:69:B6:C3 Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 Certificate issuer: /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft Manifest number: 86 Signing time: Mon 21 Jul 2025 06:46:35 +0000 Manifest this update: Mon 21 Jul 2025 06:46:34 +0000 Manifest next update: Mon 28 Jul 2025 06:46:34 +0000 Files and hashes: 1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: XAqAgOUBqMZLFdgKGvYdNyqEyD36cpGZnlTiS9zDSdc=) 2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: OlXBby3DJZy8rl/8+NH1zeLmOWVMUXLA2k9gi34qwsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Validity Not Before: Jul 21 06:46:34 2025 GMT Not After : Jul 28 06:46:34 2025 GMT Subject: CN=687de24b-7e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c2:27:39:7d:35:83:e3:4b:70:34:00:1d:f0: 7f:7f:47:e0:23:04:5a:1d:94:7b:9f:b1:a1:37:df: 7b:34:41:15:69:63:3d:b2:f6:1c:f0:09:3b:4a:ed: 33:fc:6c:c2:e0:28:f1:22:8b:cc:cc:0c:bc:d1:10: a2:3f:f4:25:45:7c:8d:03:6e:d1:29:64:0a:1b:c3: e4:68:ae:df:18:73:b0:2f:31:e7:13:97:df:80:68: b4:35:ea:5b:61:cf:cb:b9:c6:8d:dc:c7:84:66:20: b4:fc:18:5b:5a:28:57:ab:73:05:7e:74:ad:07:05: 7f:cc:e0:ff:5b:ad:b8:83:39:2f:bb:0b:e0:25:db: 19:a2:6e:3c:87:71:09:6d:0e:13:3e:aa:b8:b5:81: 17:98:a2:01:c4:2b:43:9a:84:72:82:14:50:6d:bf: 85:35:e6:c1:e2:9d:1b:b4:72:b8:fa:48:a8:5a:59: 1f:53:7c:51:a6:81:1b:e3:55:0b:37:c0:7f:16:96: 4d:59:7d:92:dd:57:27:18:4c:4c:8a:d1:3f:f3:57: 03:c0:a7:b6:0b:06:fa:a5:64:51:e7:3a:0d:3d:75: f0:d7:2b:04:08:f6:b9:1b:23:9a:eb:61:a9:df:da: a7:ec:44:97:73:a5:bc:53:7f:95:f3:3f:fc:6b:6c: 08:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:20:18:C5:07:27:77:A9:C3:1D:BF:0C:92:D3:33:AC:53:69:B6:C3 X509v3 Authority Key Identifier: keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4e:fb:e8:17:1d:01:e7:50:fa:dd:97:dc:f4:11:f1:6d:39: 05:8b:3e:5d:3c:a9:c3:60:86:d6:4c:67:6f:47:e9:9a:bd:15: c4:3d:77:c0:71:34:46:9d:8a:93:f2:4b:d3:8b:6b:eb:67:74: 8e:01:6e:4b:8e:03:6f:e6:5c:0f:6a:c2:c1:e0:0e:61:b1:c2: e5:f3:51:39:0d:db:3b:8e:ce:f6:90:54:6f:57:9f:37:e1:ef: c4:cd:37:b8:56:6b:ce:5a:49:b0:20:92:ba:ce:9b:19:15:c2: bb:8b:5b:5e:ed:43:b4:e6:3a:bf:09:6d:cd:a0:a0:32:a8:b7: 14:9a:f2:c0:da:2f:46:96:50:b6:2c:74:70:4a:c4:49:ad:a6: ec:53:9f:ef:29:81:ac:61:37:76:11:a2:49:0d:60:ed:30:44: 8a:9a:70:14:f8:51:68:c8:ab:34:4a:95:f2:06:d2:10:84:39: ae:50:de:06:3c:99:9d:5a:c9:b1:a1:26:b6:d1:25:00:34:25: f5:d4:45:0b:05:ce:a2:db:ba:5a:50:9d:70:2e:c1:23:c1:d1: 01:e6:34:fd:81:0c:e0:74:46:d6:c6:79:5f:7a:9c:99:20:a2: 12:da:f7:5c:aa:d1:d1:6e:f4:89:f5:00:c4:fd:ee:a3:45:0b: 39:09:d9:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0ODkxMTAvBgNVBAUTKDdBRUE3NzdDNkIxOTE1MTM1MzNCMEUyRURGMEYwRDg0 Q0I3MEJBMTEwHhcNMjUwNzIxMDY0NjM0WhcNMjUwNzI4MDY0NjM0WjAYMRYwFAYD VQQDEw02ODdkZTI0Yi03ZTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmcInOX01g+NLcDQAHfB/f0fgIwRaHZR7n7GhN997NEEVaWM9svYc8Ak7Su0z /GzC4CjxIovMzAy80RCiP/QlRXyNA27RKWQKG8PkaK7fGHOwLzHnE5ffgGi0Nepb Yc/LucaN3MeEZiC0/BhbWihXq3MFfnStBwV/zOD/W624gzkvuwvgJdsZom48h3EJ bQ4TPqq4tYEXmKIBxCtDmoRyghRQbb+FNebB4p0btHK4+kioWlkfU3xRpoEb41UL N8B/FpZNWX2S3VcnGExMitE/81cDwKe2Cwb6pWRR5zoNPXXw1ysECPa5GyOa62Gp 39qn7ESXc6W8U3+V8z/8a2wINQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAgGMUH J3epwx2/DJLTM6xTabbDMB8GA1UdIwQYMBaAFHrqd3xrGRUTUzsOLt8PDYTLcLoR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ4OS8zMjg5QTkwRTlC RkExMUVGQkVCOTg0NkVDNEY5QUUwMi9ldXAzZkdzWkZSTlRPdzR1M3c4TmhNdHd1 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2V1cDNmR3NaRlJOVE93NHUzdzhOaE10d3VoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ4OS8zMjg5QTkwRTlCRkExMUVGQkVCOTg0NkVDNEY5QUUwMi9ldXAzZkdzWkZS TlRPdzR1M3c4TmhNdHd1aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLTvvoFx0B51D63Zfc9BHxbTkFiz5dPKnDYIbWTGdvR+mavRXEPXfA cTRGnYqT8kvTi2vrZ3SOAW5LjgNv5lwPasLB4A5hscLl81E5Dds7js72kFRvV583 4e/EzTe4VmvOWkmwIJK6zpsZFcK7i1te7UO05jq/CW3NoKAyqLcUmvLA2i9GllC2 LHRwSsRJrabsU5/vKYGsYTd2EaJJDWDtMESKmnAU+FFoyKs0SpXyBtIQhDmuUN4G PJmdWsmxoSa20SUANCX11EULBc6i27paUJ1wLsEjwdEB5jT9gQzgdEbWxnlfepyZ IKIS2vdcqtHRbvSJ9QDE/e6jRQs5CdkU -----END CERTIFICATE-----Generated at Mon Jul 21 18:29:26 2025 by rpki-client