$ rpki-client -vvf rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft File: e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft (raw, json) Hash identifier: BC3GSqrGVnsYNPHU/QbdOATJuZXAg5bB5GgJeGzPQi0= Subject key identifier: 85:B9:D8:16:4E:AD:D1:C8:C9:F7:04:A8:BE:42:D8:92:78:44:5E:EB Authority key identifier: 7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 Certificate issuer: /CN=A9115964/serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Certificate serial: 07C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft Manifest number: 07B6 Signing time: Sat 18 Oct 2025 22:46:56 +0000 Manifest this update: Sat 18 Oct 2025 22:46:56 +0000 Manifest next update: Sat 25 Oct 2025 22:46:56 +0000 Files and hashes: 1: e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl (hash: k1B7u7zER4CCZIuvVBagKdluJzvCeJgNWHJ/oato0FQ=) 2: FAFC712C485611EDB713C522C4F9AE02.roa (hash: fq5HCtnKfkn7/JuyPv2TRFDGy6fu3YXaJZP30LJYt74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1993 (0x7c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115964, serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Validity Not Before: Oct 18 22:46:56 2025 GMT Not After : Oct 25 22:46:56 2025 GMT Subject: CN=68f418e0-a952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b9:de:04:99:d3:84:bb:5b:aa:ff:0d:87:03: 04:13:71:f0:b7:67:f7:b7:fb:5c:4b:db:3a:06:69: 6c:10:eb:26:be:ed:37:38:62:61:26:3a:82:83:25: 6d:74:cf:de:3e:24:7d:fe:1c:32:a3:ad:c0:10:a9: 7d:32:9d:6d:5c:36:c9:b3:ea:38:50:31:78:ef:d4: 6f:d4:98:6d:64:ff:c3:c0:b5:d1:18:bc:7a:ac:0f: e0:67:ae:4d:3a:d0:20:e4:41:17:48:da:e5:92:12: ff:fd:1d:e0:64:5f:75:66:83:d0:71:58:da:ea:56: 8e:76:03:1c:0e:cc:1d:25:39:d1:38:6e:92:a8:8b: 0c:a7:79:37:43:88:2d:1d:6e:03:98:00:e1:ca:90: 65:81:dc:4d:8a:ef:00:06:41:d0:0f:92:da:30:0b: 63:cc:a5:d5:24:83:19:ee:85:0b:06:b1:8c:5c:9e: 81:86:bf:1c:ce:38:2c:a3:4e:8f:54:f2:a4:e5:95: 66:12:aa:b3:90:ed:bf:f3:dd:4f:7f:db:56:1e:11: 67:93:8d:f5:ba:f6:9b:8a:62:00:5b:f6:26:6f:8a: 5c:51:8e:a1:72:d2:bb:e6:53:8f:2d:34:ef:a2:ae: df:58:40:72:28:a6:34:09:97:41:1f:3d:25:af:08: 11:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B9:D8:16:4E:AD:D1:C8:C9:F7:04:A8:BE:42:D8:92:78:44:5E:EB X509v3 Authority Key Identifier: keyid:7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:57:97:ee:b7:a4:21:4f:6f:1f:9e:c1:61:6b:ec:ec:eb:c6: 30:7c:95:eb:2c:a5:62:81:06:bc:60:a8:2d:c1:49:bb:e5:41: cf:28:96:ba:bb:83:0c:84:83:24:40:93:b1:7d:5e:a3:5e:79: dd:17:ef:1f:f9:75:0d:2e:cf:7f:1f:83:10:08:03:2a:3d:17: e8:ca:c2:5b:a6:5c:d2:ff:11:9e:c3:f6:09:66:89:ed:1d:d5: 0a:e0:9f:d0:09:fb:f1:76:6f:c5:80:74:d7:7e:52:95:4d:73: 66:cb:fd:fe:63:bc:61:0c:88:b9:4f:6b:08:5c:46:14:11:ef: f4:e9:0c:33:ef:c4:60:ff:d7:01:8b:10:40:d6:5f:75:83:cc: 25:43:14:0c:58:72:e2:83:99:12:2d:eb:e8:4a:53:e7:6d:3f: 5a:ac:67:cb:73:71:01:bc:55:bc:ea:b0:af:a4:15:d7:0a:0c: 2c:c9:2a:11:c2:d6:0d:15:cc:51:31:9e:ae:a7:12:12:c3:77: cc:29:9c:6c:d4:5e:4a:88:98:99:19:f5:58:c3:c5:f2:e5:f8: 08:d8:69:c1:49:6d:58:52:01:4a:f3:23:f6:59:7f:bf:6a:4b: a8:64:1b:4e:cb:bd:ac:8c:db:ef:92:04:dc:31:9f:7f:5b:54: c9:87:48:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5NjQxMTAvBgNVBAUTKDdCNzIxMzg4RkQxM0U4QUU0M0M5N0YwMzAxOTgxRDIy OTJDODg4OTcwHhcNMjUxMDE4MjI0NjU2WhcNMjUxMDI1MjI0NjU2WjAYMRYwFAYD VQQDEw02OGY0MThlMC1hOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLneBJnThLtbqv8NhwMEE3Hwt2f3t/tcS9s6BmlsEOsmvu03OGJhJjqCgyVt dM/ePiR9/hwyo63AEKl9Mp1tXDbJs+o4UDF479Rv1JhtZP/DwLXRGLx6rA/gZ65N OtAg5EEXSNrlkhL//R3gZF91ZoPQcVja6laOdgMcDswdJTnROG6SqIsMp3k3Q4gt HW4DmADhypBlgdxNiu8ABkHQD5LaMAtjzKXVJIMZ7oULBrGMXJ6Bhr8czjgso06P VPKk5ZVmEqqzkO2/891Pf9tWHhFnk431uvabimIAW/Ymb4pcUY6hctK75lOPLTTv oq7fWEByKKY0CZdBHz0lrwgRiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIW52BZO rdHIyfcEqL5C2JJ4RF7rMB8GA1UdIwQYMBaAFHtyE4j9E+iuQ8l/AwGYHSKSyIiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTk2NC9FRkMyQ0NCQzI3 MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZLNUR5WDhEQVpnZElwTElp SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UzSVRpUDBUNks1RHlYOERBWmdkSXBMSWlKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTk2NC9FRkMyQ0NCQzI3MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZL NUR5WDhEQVpnZElwTElpSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9V5fut6QhT28fnsFha+zs68YwfJXrLKVigQa8YKgtwUm75UHPKJa6 u4MMhIMkQJOxfV6jXnndF+8f+XUNLs9/H4MQCAMqPRfoysJbplzS/xGew/YJZont HdUK4J/QCfvxdm/FgHTXflKVTXNmy/3+Y7xhDIi5T2sIXEYUEe/06Qwz78Rg/9cB ixBA1l91g8wlQxQMWHLig5kSLevoSlPnbT9arGfLc3EBvFW86rCvpBXXCgwsySoR wtYNFcxRMZ6upxISw3fMKZxs1F5KiJiZGfVYw8Xy5fgI2GnBSW1YUgFK8yP2WX+/ akuoZBtOy72sjNvvkgTcMZ9/W1TJh0hT -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:02 2025 by rpki-client