$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft File: eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json) Hash identifier: 31BqLbvYpsALOTrx2SNnNuzYqQSl/23CNXQbgEV2Phk= Subject key identifier: 3C:08:ED:F0:20:5B:93:B3:D7:E5:FF:B2:9F:25:CF:B2:8C:38:06:2B Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 Certificate issuer: /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft Manifest number: BD Signing time: Fri 07 Nov 2025 01:24:23 +0000 Manifest this update: Fri 07 Nov 2025 01:24:22 +0000 Manifest next update: Fri 14 Nov 2025 01:24:22 +0000 Files and hashes: 1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: lcklbpcbPVGywhxlb+Gh+rXxfWI/rZ/SKPXNBjJORvg=) 2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: OlXBby3DJZy8rl/8+NH1zeLmOWVMUXLA2k9gi34qwsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Nov 2025 01:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Validity Not Before: Nov 7 01:24:22 2025 GMT Not After : Nov 14 01:24:22 2025 GMT Subject: CN=690d4a47-2f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:d7:68:6c:b8:2e:a1:0a:09:f3:6b:8a:b5: a4:32:1d:39:3b:5c:03:8b:b3:fe:32:59:cd:36:2a: f2:2e:38:46:34:70:23:fb:1d:17:3a:0c:7e:90:ed: 57:6c:17:ab:41:00:62:3c:9c:6d:ad:e4:af:47:2e: 08:68:4e:79:12:5c:b1:02:ee:0f:a9:56:55:3a:c8: e3:c0:d0:fb:8c:e2:89:ab:d1:b3:95:b4:07:9d:a1: cd:4b:d4:b8:1b:7a:1a:cb:3b:d3:8c:d2:ff:84:42: 5b:a6:9c:43:6b:82:4d:e2:59:fd:86:64:8e:e0:bc: ca:89:bc:3a:d3:99:33:2c:9b:47:95:07:c2:f4:93: 98:44:02:29:54:48:63:46:56:13:89:4e:25:f4:2a: d7:64:ff:b8:45:7f:23:d1:bf:15:b1:62:f6:12:a5: da:d5:c8:ec:5c:17:b1:b4:bf:0d:ab:7c:85:94:7e: 18:58:2b:f9:5c:65:26:4c:3f:90:4a:f2:0d:b2:11: c6:3b:d1:6c:d1:af:38:20:2e:b6:c5:3e:55:f8:4a: c1:77:ba:a7:a1:62:2e:10:68:05:57:0a:25:f8:7e: bc:f2:4e:6f:e6:c3:b5:ea:24:60:83:6c:ca:7f:c3: 1c:93:4a:72:42:7d:77:12:df:de:95:5b:5c:e5:65: 5c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:08:ED:F0:20:5B:93:B3:D7:E5:FF:B2:9F:25:CF:B2:8C:38:06:2B X509v3 Authority Key Identifier: keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:83:a2:85:42:db:ae:7f:68:39:4f:af:3f:c7:24:4c:fe:e1: 66:3a:06:d2:ae:0c:35:1a:ff:ea:8b:f5:f3:e6:e2:4e:62:fd: a9:28:5c:e8:b0:13:a6:73:c4:45:b9:ae:a7:db:4a:b1:6d:8c: f7:cb:5c:0f:9c:d4:4c:b0:42:5c:d4:8c:4a:fc:a0:27:d1:d2: 98:48:8b:48:ba:f7:6a:0a:2b:b2:e0:0f:a5:21:1d:aa:92:3e: 94:9b:6e:f6:80:00:8a:17:0b:6e:77:d6:45:20:ae:56:24:be: 27:00:b5:5f:26:54:bb:22:09:3e:40:e3:44:88:20:ad:73:0f: 7c:4a:18:3d:f9:69:3b:a1:74:98:3d:f0:58:a2:0a:06:b1:d0: 0e:32:ce:99:19:e3:f2:34:3b:e4:83:a7:eb:f5:7e:62:2f:81: 9e:6f:59:41:b2:19:dc:c3:18:e0:9a:a1:3b:c0:0c:09:8f:ff: b3:a0:fa:61:16:c6:c2:fe:8c:06:e1:32:2a:fd:a3:1e:2d:93: 2d:47:5e:c9:14:b7:75:b6:94:29:b9:99:06:c6:84:cd:01:1c: 37:27:d3:ad:61:db:2e:ec:c3:e0:7e:d9:12:46:de:b8:e0:5c: 5d:57:30:ba:80:74:06:c8:be:c0:0c:c4:dc:4c:7b:1a:63:8a: c5:85:a9:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0ODkxMTAvBgNVBAUTKDdBRUE3NzdDNkIxOTE1MTM1MzNCMEUyRURGMEYwRDg0 Q0I3MEJBMTEwHhcNMjUxMTA3MDEyNDIyWhcNMjUxMTE0MDEyNDIyWjAYMRYwFAYD VQQDEw02OTBkNGE0Ny0yZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBvXaGy4LqEKCfNrirWkMh05O1wDi7P+MlnNNiryLjhGNHAj+x0XOgx+kO1X bBerQQBiPJxtreSvRy4IaE55ElyxAu4PqVZVOsjjwND7jOKJq9GzlbQHnaHNS9S4 G3oayzvTjNL/hEJbppxDa4JN4ln9hmSO4LzKibw605kzLJtHlQfC9JOYRAIpVEhj RlYTiU4l9CrXZP+4RX8j0b8VsWL2EqXa1cjsXBextL8Nq3yFlH4YWCv5XGUmTD+Q SvINshHGO9Fs0a84IC62xT5V+ErBd7qnoWIuEGgFVwol+H688k5v5sO16iRgg2zK f8Mck0pyQn13Et/elVtc5WVcKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwI7fAg W5Oz1+X/sp8lz7KMOAYrMB8GA1UdIwQYMBaAFHrqd3xrGRUTUzsOLt8PDYTLcLoR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ4OS8zMjg5QTkwRTlC RkExMUVGQkVCOTg0NkVDNEY5QUUwMi9ldXAzZkdzWkZSTlRPdzR1M3c4TmhNdHd1 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2V1cDNmR3NaRlJOVE93NHUzdzhOaE10d3VoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ4OS8zMjg5QTkwRTlCRkExMUVGQkVCOTg0NkVDNEY5QUUwMi9ldXAzZkdzWkZS TlRPdzR1M3c4TmhNdHd1aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6g6KFQtuuf2g5T68/xyRM/uFmOgbSrgw1Gv/qi/Xz5uJOYv2pKFzo sBOmc8RFua6n20qxbYz3y1wPnNRMsEJc1IxK/KAn0dKYSItIuvdqCiuy4A+lIR2q kj6Um272gACKFwtud9ZFIK5WJL4nALVfJlS7Igk+QONEiCCtcw98Shg9+Wk7oXSY PfBYogoGsdAOMs6ZGePyNDvkg6fr9X5iL4Geb1lBshncwxjgmqE7wAwJj/+zoPph FsbC/owG4TIq/aMeLZMtR17JFLd1tpQpuZkGxoTNARw3J9OtYdsu7MPgftkSRt64 4FxdVzC6gHQGyL7ADMTcTHsaY4rFhalZ -----END CERTIFICATE-----Generated at Sun Nov 9 00:14:51 2025 by rpki-client