$ rpki-client -vvf rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft File: e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft (raw, json) Hash identifier: 75yuiuBhuLkXsjxxTFjrrIGORTEVMiz9CzgODQSKHD4= Subject key identifier: 0B:80:FC:39:53:30:86:2D:E7:73:AD:07:C0:76:E3:12:FC:9B:FC:7E Authority key identifier: 7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 Certificate issuer: /CN=A9115964/serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Certificate serial: 07AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft Manifest number: 0799 Signing time: Fri 22 Aug 2025 21:40:46 +0000 Manifest this update: Fri 22 Aug 2025 21:40:45 +0000 Manifest next update: Fri 29 Aug 2025 21:40:45 +0000 Files and hashes: 1: e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl (hash: e/lVv1lH+eF0cZResoBQ6fh+q5X6yzGwYn2D2jLMlJw=) 2: FAFC712C485611EDB713C522C4F9AE02.roa (hash: fq5HCtnKfkn7/JuyPv2TRFDGy6fu3YXaJZP30LJYt74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1964 (0x7ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115964, serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Validity Not Before: Aug 22 21:40:45 2025 GMT Not After : Aug 29 21:40:45 2025 GMT Subject: CN=68a8e3dd-97ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:75:42:3c:ee:d6:b4:ba:e8:7d:72:0c:d1:0b: 65:78:6c:7a:b6:39:f7:6c:5a:b0:f9:32:8c:f6:38: 26:c4:95:23:9a:51:93:3c:92:59:20:19:96:63:f9: 6e:1a:42:7b:8b:cf:3b:0e:97:8a:4e:30:37:93:ff: 76:18:fb:37:4c:e7:81:da:fc:67:f6:8a:df:a6:c3: 7d:62:c8:46:47:7f:be:fd:9a:82:cf:b0:46:66:6e: 0e:67:e9:75:db:d7:4a:0e:ac:86:67:41:6b:c1:21: 30:98:9f:8f:98:8b:1a:69:be:bb:b6:62:6b:7b:2c: f5:b1:00:f4:a6:ff:55:30:a2:c3:cb:ec:5a:5d:f9: f8:bc:06:83:c3:ca:1f:ed:7a:ee:75:56:5d:21:38: c3:c5:59:71:ef:68:ec:d6:a6:52:68:00:78:2e:02: fc:e8:38:0f:a3:85:4e:c5:af:46:d3:79:22:8f:d3: f0:7b:f9:e9:ec:76:e0:cc:07:96:21:fe:03:7b:15: ad:a8:c4:e0:22:3a:1d:56:96:50:60:bb:82:8a:8f: 25:df:71:1d:26:e6:fc:bf:dc:a2:94:91:6c:36:f0: 12:18:6f:73:9e:cc:4e:ee:f9:6c:22:99:f1:e0:d3: 06:e8:d7:4f:8a:f3:46:6d:6d:19:7c:2d:77:07:78: aa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:80:FC:39:53:30:86:2D:E7:73:AD:07:C0:76:E3:12:FC:9B:FC:7E X509v3 Authority Key Identifier: keyid:7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:1c:70:29:85:fe:ab:be:dd:9e:0a:8d:10:95:64:3d:fe:aa: 6c:6c:f3:b0:c4:22:10:28:2a:7e:f3:d5:b7:62:e5:6a:e6:1f: f3:13:2c:aa:0a:e1:7e:31:12:30:43:b0:b0:ee:d7:f7:4a:4f: d3:ef:97:ed:19:07:5c:85:ef:12:c5:f0:c2:d5:03:e1:03:73: 45:a9:4e:80:1f:3f:7b:20:ee:74:93:15:f9:67:96:e3:a4:61: e5:ac:d2:e4:6a:03:59:fc:e2:7c:c4:03:c8:b5:74:1a:f6:a3: 2e:3b:28:35:3b:c2:1e:11:0f:f3:74:39:3c:43:14:e0:69:b7: 6f:b2:04:5a:cc:b5:c4:2d:5b:75:9f:68:0f:24:e6:71:0a:79: 7d:e3:0d:81:76:3a:06:c6:f0:f0:2f:f4:23:6e:a7:a2:26:3b: 97:25:af:84:9c:cf:9e:d5:9a:2d:ff:d5:1d:d8:72:89:00:53: ce:5b:ae:5e:56:1d:cc:aa:e3:86:5a:00:07:e2:eb:10:bb:53: f3:f4:44:36:d6:0e:81:5d:f4:71:ec:61:32:16:29:f5:22:7e: 50:ca:57:90:93:ec:21:a2:a8:f9:7a:44:2f:93:37:36:08:28: 03:85:4e:3d:4a:c4:2b:92:5f:03:8d:7d:2c:6f:01:2f:47:39: 58:58:38:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5NjQxMTAvBgNVBAUTKDdCNzIxMzg4RkQxM0U4QUU0M0M5N0YwMzAxOTgxRDIy OTJDODg4OTcwHhcNMjUwODIyMjE0MDQ1WhcNMjUwODI5MjE0MDQ1WjAYMRYwFAYD VQQDEw02OGE4ZTNkZC05N2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnVCPO7WtLrofXIM0QtleGx6tjn3bFqw+TKM9jgmxJUjmlGTPJJZIBmWY/lu GkJ7i887DpeKTjA3k/92GPs3TOeB2vxn9orfpsN9YshGR3++/ZqCz7BGZm4OZ+l1 29dKDqyGZ0FrwSEwmJ+PmIsaab67tmJreyz1sQD0pv9VMKLDy+xaXfn4vAaDw8of 7XrudVZdITjDxVlx72js1qZSaAB4LgL86DgPo4VOxa9G03kij9Pwe/np7HbgzAeW If4DexWtqMTgIjodVpZQYLuCio8l33EdJub8v9yilJFsNvASGG9znsxO7vlsIpnx 4NMG6NdPivNGbW0ZfC13B3iqvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuA/DlT MIYt53OtB8B24xL8m/x+MB8GA1UdIwQYMBaAFHtyE4j9E+iuQ8l/AwGYHSKSyIiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTk2NC9FRkMyQ0NCQzI3 MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZLNUR5WDhEQVpnZElwTElp SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UzSVRpUDBUNks1RHlYOERBWmdkSXBMSWlKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTk2NC9FRkMyQ0NCQzI3MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZL NUR5WDhEQVpnZElwTElpSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmHHAphf6rvt2eCo0QlWQ9/qpsbPOwxCIQKCp+89W3YuVq5h/zEyyq CuF+MRIwQ7Cw7tf3Sk/T75ftGQdche8SxfDC1QPhA3NFqU6AHz97IO50kxX5Z5bj pGHlrNLkagNZ/OJ8xAPItXQa9qMuOyg1O8IeEQ/zdDk8QxTgabdvsgRazLXELVt1 n2gPJOZxCnl94w2BdjoGxvDwL/QjbqeiJjuXJa+EnM+e1Zot/9Ud2HKJAFPOW65e Vh3MquOGWgAH4usQu1Pz9EQ21g6BXfRx7GEyFin1In5QyleQk+whoqj5ekQvkzc2 CCgDhU49SsQrkl8DjX0sbwEvRzlYWDjD -----END CERTIFICATE-----Generated at Sat Aug 23 17:53:27 2025 by rpki-client