$ rpki-client -vvf rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft File: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft (raw, json) Hash identifier: ef1fvVIi/GlNUnVsAUkvU9+59nSRFDvd5fSEIHaH0Uc= Subject key identifier: E9:2F:36:66:BA:B5:CA:C1:EA:03:9F:B3:9A:37:85:B5:1C:01:C9:E2 Authority key identifier: 78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6 Certificate issuer: /CN=A914CF73/serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6 Certificate serial: 3482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft Manifest number: 347A Signing time: Sun 24 Aug 2025 15:19:35 +0000 Manifest this update: Sun 24 Aug 2025 15:19:34 +0000 Manifest next update: Sun 31 Aug 2025 15:19:34 +0000 Files and hashes: 1: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl (hash: j3TI8mmTrJS6T4XQDSBB2vQjqcwXNSQxU2mLIQCVuiY=) 2: 5007D8DECAB411E889484D32C4F9AE02.roa (hash: d/14FJHyt97NnvQezwZgszS2h7OqJIW+bhi4rgk0UNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13442 (0x3482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CF73, serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6 Validity Not Before: Aug 24 15:19:34 2025 GMT Not After : Aug 31 15:19:34 2025 GMT Subject: CN=68ab2d86-fe1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:54:c4:16:8c:9b:75:c7:2f:23:44:56:07:10: a0:c7:74:8c:c3:46:b6:98:43:d3:78:ce:99:8a:ac: 74:83:ec:8d:c9:41:ba:1d:98:1e:4d:f9:c7:1a:5e: 39:81:8f:da:07:ea:78:b9:fe:26:24:a3:f1:46:6b: 50:d2:83:9d:86:43:d6:bd:a4:04:3c:08:15:ea:e3: 4e:7b:70:df:14:e7:bd:97:c0:72:8a:85:c0:d4:f2: e6:1c:b4:1d:f3:74:50:d2:16:f8:7a:7f:53:8f:41: 75:44:cf:b9:18:e7:a6:78:37:0a:a1:a6:21:d3:40: 67:1b:4d:64:c9:54:4e:99:8f:42:36:a6:b6:10:3c: d2:16:d9:0b:f8:ce:df:55:cd:81:20:f6:4e:20:9a: 86:f8:b4:0c:a2:36:87:95:80:81:8c:ea:06:35:0a: 6f:b9:34:8c:c3:64:cd:a5:e0:58:0d:9e:3e:e7:ff: 77:9b:63:cd:da:f5:6e:d3:a5:ec:f9:50:63:ce:d1: a7:7d:6d:8e:66:3b:11:90:30:09:77:49:f1:1e:22: fe:c8:ac:69:05:9a:3a:0e:10:4b:63:45:85:50:3a: 8e:46:ef:29:90:aa:21:bb:4f:b3:4a:66:fd:89:f0: 17:f9:c2:c0:b0:9e:2b:6e:b9:9d:cd:02:00:bb:0b: 1a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2F:36:66:BA:B5:CA:C1:EA:03:9F:B3:9A:37:85:B5:1C:01:C9:E2 X509v3 Authority Key Identifier: keyid:78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:43:e6:3a:0c:cf:82:5d:27:98:f1:bf:99:aa:ba:9c:e8:77: c0:32:4d:43:3e:d8:5d:d4:14:80:78:69:5c:d8:2a:e8:cd:82: 1f:11:35:35:79:f1:c5:51:81:52:a6:32:46:61:6d:9f:25:89: de:ba:6a:af:46:37:4a:80:a2:e2:7c:ce:4c:8a:b1:19:1f:6f: 74:13:8e:36:20:14:b6:bd:19:a7:36:f9:61:21:97:9a:eb:4e: d0:89:fc:f5:a3:85:a9:52:69:11:bd:88:c1:d8:5f:30:9f:d2: e1:c5:f8:48:64:38:ae:cc:15:66:b6:2a:11:6d:ab:0d:2b:10: b7:08:26:10:4b:c0:49:bc:a9:29:0e:2e:59:a6:ac:17:4a:f5: 2b:47:f6:ed:36:46:c9:1a:4d:30:cd:5b:02:00:8a:43:84:27: 0b:7b:de:bc:8b:b8:77:b8:fa:58:05:ad:ed:73:79:5e:62:0e: eb:b8:ba:cb:2d:b1:b8:e2:71:38:9f:5f:ec:4a:a8:d4:b7:9e: a1:ae:f3:0b:16:1c:1a:b0:23:ed:d3:4c:77:05:56:e3:23:bd: 12:9a:0d:0a:22:96:33:ee:1e:7d:19:76:08:25:3f:2f:46:cf: 9e:34:33:df:5a:6e:8c:2b:eb:eb:4b:be:f7:df:a9:c3:8f:bc: d5:b9:df:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENGNzMxMTAvBgNVBAUTKDc4OUY4Qjc4N0VEM0REMzUyMDMzMzJDRUIzQjUzMkUx RkFGMEI2QzYwHhcNMjUwODI0MTUxOTM0WhcNMjUwODMxMTUxOTM0WjAYMRYwFAYD VQQDEw02OGFiMmQ4Ni1mZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlTEFoybdccvI0RWBxCgx3SMw0a2mEPTeM6Ziqx0g+yNyUG6HZgeTfnHGl45 gY/aB+p4uf4mJKPxRmtQ0oOdhkPWvaQEPAgV6uNOe3DfFOe9l8ByioXA1PLmHLQd 83RQ0hb4en9Tj0F1RM+5GOemeDcKoaYh00BnG01kyVROmY9CNqa2EDzSFtkL+M7f Vc2BIPZOIJqG+LQMojaHlYCBjOoGNQpvuTSMw2TNpeBYDZ4+5/93m2PN2vVu06Xs +VBjztGnfW2OZjsRkDAJd0nxHiL+yKxpBZo6DhBLY0WFUDqORu8pkKohu0+zSmb9 ifAX+cLAsJ4rbrmdzQIAuwsanwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkvNma6 tcrB6gOfs5o3hbUcAcniMB8GA1UdIwQYMBaAFHifi3h+0901IDMyzrO1MuH68LbG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0Y3My9BNjg0NzU1MDJB MDExMUUyODE3MjNDQTYwOEIwMkNEMi9lSi1MZUg3VDNUVWdNekxPczdVeTRmcnd0 c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VKLUxlSDdUM1RVZ016TE9zN1V5NGZyd3RzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0Y3My9BNjg0NzU1MDJBMDExMUUyODE3MjNDQTYwOEIwMkNEMi9lSi1MZUg3VDNU VWdNekxPczdVeTRmcnd0c1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOQ+Y6DM+CXSeY8b+Zqrqc6HfAMk1DPthd1BSAeGlc2CrozYIfETU1 efHFUYFSpjJGYW2fJYneumqvRjdKgKLifM5MirEZH290E442IBS2vRmnNvlhIZea 607Qifz1o4WpUmkRvYjB2F8wn9LhxfhIZDiuzBVmtioRbasNKxC3CCYQS8BJvKkp Di5ZpqwXSvUrR/btNkbJGk0wzVsCAIpDhCcLe968i7h3uPpYBa3tc3leYg7ruLrL LbG44nE4n1/sSqjUt56hrvMLFhwasCPt00x3BVbjI70Smg0KIpYz7h59GXYIJT8v Rs+eNDPfWm6MK+vrS77336nDj7zVud85 -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:06 2025 by rpki-client