$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft File: eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json) Hash identifier: /EY/Nic0s69fnRd4AFgyo8UcrwmQqm6gZDQg7UE9EBo= Subject key identifier: E2:7A:84:49:8C:CA:34:77:EA:DC:F5:5F:E5:94:5A:C4:E0:AC:50:83 Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 Certificate issuer: /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft Manifest number: 9E Signing time: Fri 05 Sep 2025 06:45:39 +0000 Manifest this update: Fri 05 Sep 2025 06:45:38 +0000 Manifest next update: Fri 12 Sep 2025 06:45:38 +0000 Files and hashes: 1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: hrdZY0bYKnNcOAxCJ8nNuKaYNnovKVrY21aWq8ICLI0=) 2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: OlXBby3DJZy8rl/8+NH1zeLmOWVMUXLA2k9gi34qwsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Validity Not Before: Sep 5 06:45:38 2025 GMT Not After : Sep 12 06:45:38 2025 GMT Subject: CN=68ba8712-1fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d5:2e:f7:96:5f:ca:a2:7d:08:da:9e:46:2b: ff:38:0e:15:1c:61:6d:36:90:d3:1a:ab:4a:0c:f7: ad:dd:38:8d:82:72:c5:ef:91:c7:04:35:19:37:48: 24:10:de:79:b5:73:0c:77:cf:54:64:be:ca:27:bf: 77:89:f9:a6:09:f0:b7:ef:77:0b:83:3c:47:ea:c5: 2c:84:a8:7b:08:e6:7d:d9:97:c4:3b:92:fd:97:c1: 51:54:b1:16:2a:36:2c:0b:8c:0b:fd:35:38:28:3a: 4c:cc:19:a6:57:90:12:16:d2:53:33:99:20:82:9e: aa:65:5a:bb:89:ea:a0:06:cf:58:f7:e9:30:9a:b3: 16:66:ff:a8:df:4b:cc:06:ac:b4:82:c2:19:f6:d0: b7:5e:cc:e4:69:f1:09:9a:ed:8a:3b:17:2e:0e:a6: 10:ed:c1:b8:f8:01:3b:98:17:d5:43:1d:a9:b5:26: 19:b4:eb:21:16:ed:f1:93:4e:ca:66:e1:51:a7:6d: ea:39:0a:72:9a:f4:2d:23:bd:02:28:ba:d4:3c:3c: 82:4d:f1:a5:7e:48:97:e3:ef:20:7e:74:59:ff:d2: 64:3f:37:9b:ef:5a:c9:cd:06:2f:6c:ce:42:8b:05: 56:1f:85:f7:5d:28:4e:10:3f:0b:ba:18:3a:dc:40: 6b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7A:84:49:8C:CA:34:77:EA:DC:F5:5F:E5:94:5A:C4:E0:AC:50:83 X509v3 Authority Key Identifier: keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:dd:03:2b:9f:c0:14:01:fd:1d:fd:8d:30:eb:b1:6f:9b:6c: 02:44:fe:90:8a:57:af:ab:8d:cd:d9:e2:76:04:ac:56:5a:b7: dc:9a:57:b0:64:40:e0:32:3b:ce:3e:db:aa:5c:1d:81:1b:48: 8f:a3:b5:52:31:91:ea:0e:c2:4f:16:22:f4:72:3e:f2:a3:f1: f0:8b:1e:e8:bd:0b:d9:05:5c:3d:77:18:47:27:a2:e2:2e:73: 1b:3b:7b:0f:dd:34:8e:d0:11:47:6f:f6:8a:e9:57:af:0a:3e: 19:60:5d:04:81:1e:89:15:1d:32:89:ef:39:de:d7:dc:d4:ec: 66:af:4d:88:cd:6f:7d:dd:3d:a9:b8:28:28:f5:8f:b8:95:bc: 04:1d:be:f0:bb:ea:12:b0:60:c8:c4:41:7b:e8:fb:08:0b:46: 63:c6:22:cb:ac:54:94:13:2e:d9:05:07:81:9b:fd:f9:d1:1f: 6f:a8:d0:84:12:d2:9c:c5:76:04:3e:03:92:6e:1c:f8:5a:32: 0b:f7:2e:a6:ef:9a:59:3c:3f:19:aa:49:43:aa:e2:49:23:67: f5:f9:95:d5:87:40:b9:d9:ec:44:1b:58:be:f2:06:34:2a:e2: 95:31:c8:a0:2b:0d:71:7e:9e:fa:ee:2d:5a:9f:76:d7:5a:f4: 7f:72:01:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0ODkxMTAvBgNVBAUTKDdBRUE3NzdDNkIxOTE1MTM1MzNCMEUyRURGMEYwRDg0 Q0I3MEJBMTEwHhcNMjUwOTA1MDY0NTM4WhcNMjUwOTEyMDY0NTM4WjAYMRYwFAYD VQQDEw02OGJhODcxMi0xZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdUu95ZfyqJ9CNqeRiv/OA4VHGFtNpDTGqtKDPet3TiNgnLF75HHBDUZN0gk EN55tXMMd89UZL7KJ793ifmmCfC373cLgzxH6sUshKh7COZ92ZfEO5L9l8FRVLEW KjYsC4wL/TU4KDpMzBmmV5ASFtJTM5kggp6qZVq7ieqgBs9Y9+kwmrMWZv+o30vM Bqy0gsIZ9tC3XszkafEJmu2KOxcuDqYQ7cG4+AE7mBfVQx2ptSYZtOshFu3xk07K ZuFRp23qOQpymvQtI70CKLrUPDyCTfGlfkiX4+8gfnRZ/9JkPzeb71rJzQYvbM5C iwVWH4X3XShOED8Luhg63EBr0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJ6hEmM yjR36tz1X+WUWsTgrFCDMB8GA1UdIwQYMBaAFHrqd3xrGRUTUzsOLt8PDYTLcLoR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ4OS8zMjg5QTkwRTlC RkExMUVGQkVCOTg0NkVDNEY5QUUwMi9ldXAzZkdzWkZSTlRPdzR1M3c4TmhNdHd1 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2V1cDNmR3NaRlJOVE93NHUzdzhOaE10d3VoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ4OS8zMjg5QTkwRTlCRkExMUVGQkVCOTg0NkVDNEY5QUUwMi9ldXAzZkdzWkZS TlRPdzR1M3c4TmhNdHd1aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL3QMrn8AUAf0d/Y0w67Fvm2wCRP6Qilevq43N2eJ2BKxWWrfcmlew ZEDgMjvOPtuqXB2BG0iPo7VSMZHqDsJPFiL0cj7yo/Hwix7ovQvZBVw9dxhHJ6Li LnMbO3sP3TSO0BFHb/aK6VevCj4ZYF0EgR6JFR0yie853tfc1Oxmr02IzW993T2p uCgo9Y+4lbwEHb7wu+oSsGDIxEF76PsIC0ZjxiLLrFSUEy7ZBQeBm/350R9vqNCE EtKcxXYEPgOSbhz4WjIL9y6m75pZPD8ZqklDquJJI2f1+ZXVh0C52exEG1i+8gY0 KuKVMcigKw1xfp767i1an3bXWvR/cgHD -----END CERTIFICATE-----Generated at Sat Sep 6 21:09:08 2025 by rpki-client