$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft File: eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json) Hash identifier: QVBXjnRuyUL22OcKSx6ihx8yaip9ifhIGYIvgD5cdL4= Subject key identifier: 0E:2E:FD:11:CA:75:79:57:DF:35:BE:7C:C5:82:0B:ED:19:4A:96:5C Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 Certificate issuer: /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft Manifest number: B4 Signing time: Sun 19 Oct 2025 09:12:18 +0000 Manifest this update: Sun 19 Oct 2025 09:12:18 +0000 Manifest next update: Sun 26 Oct 2025 09:12:18 +0000 Files and hashes: 1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: 3n8S+A8RpQ8d04swikyU1Sf7Em2MofFmmzxRjtnYzWs=) 2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: OlXBby3DJZy8rl/8+NH1zeLmOWVMUXLA2k9gi34qwsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Validity Not Before: Oct 19 09:12:18 2025 GMT Not After : Oct 26 09:12:18 2025 GMT Subject: CN=68f4ab72-9098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:ca:69:e9:3a:e9:de:33:68:23:e9:b9:0f: 5c:c9:4e:87:0f:7c:3b:c9:4e:a3:11:ac:4b:62:d5: 17:be:9a:26:47:2b:51:7f:51:ce:68:09:c2:d6:88: f1:d7:96:ea:0d:b9:0b:8b:49:8d:2c:23:fb:bf:03: ce:94:7c:4e:ea:ba:8e:6c:fd:14:67:57:95:91:84: a2:50:82:37:d6:f1:2e:dc:be:b1:50:23:87:19:89: 61:7e:74:6c:27:5c:54:54:17:14:6c:1f:ee:32:56: 7f:bc:35:bf:e5:aa:58:e9:1b:30:90:24:2a:e2:d8: be:7d:dd:41:af:74:01:c2:77:8e:98:71:7a:a9:fd: 91:35:ce:c6:d4:11:e2:a9:f5:37:3e:76:ae:04:a0: 1d:59:2e:7e:ac:61:cb:20:9c:44:3b:a1:a1:2b:4c: cf:1a:6b:15:0f:b4:1f:af:c9:58:60:5d:ef:70:af: 6a:fd:41:51:43:24:ae:bb:2f:36:7d:af:0e:7b:12: ca:c8:f2:81:f4:71:b7:1d:ad:fb:84:38:0b:7e:db: bd:98:b5:6e:a1:0b:33:41:38:75:91:58:be:87:e9: b2:d4:16:d1:06:e8:2c:ef:a5:cc:ca:b9:70:17:66: ae:bf:65:a4:79:9f:a6:c5:f9:54:90:82:2c:99:f8: 34:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2E:FD:11:CA:75:79:57:DF:35:BE:7C:C5:82:0B:ED:19:4A:96:5C X509v3 Authority Key Identifier: keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:73:06:17:71:08:fa:f7:2e:0d:7b:14:3b:b9:79:1e:c6:88: de:b7:4e:e7:96:6b:b0:98:27:76:0d:c7:80:15:59:bd:4a:71: 4e:d3:06:38:26:47:ac:72:ca:86:81:14:cb:ca:ce:c2:30:26: 4f:28:23:95:14:f7:68:55:dd:d8:e6:d0:d2:10:8a:09:67:ed: 69:11:ef:cc:1a:10:58:5a:14:14:7c:95:63:d2:62:2b:01:2f: e0:f4:be:ad:86:8a:ec:58:a0:1c:23:d2:87:c5:62:46:ac:af: cb:e4:42:8c:23:33:f4:39:e4:2a:39:a7:16:cb:56:bf:7e:18: ce:6c:0b:a3:b1:4c:d3:54:6c:91:2f:50:eb:bd:d2:11:7b:c5: f3:82:cb:4b:ee:7f:5e:03:9f:e7:db:35:d6:69:57:3b:3d:6e: 0a:ec:6e:af:a4:85:80:9d:81:29:b7:2a:bc:c2:5a:08:78:be: cf:bb:59:eb:9f:8e:79:5e:10:af:e1:b6:4d:bd:b4:d4:68:d6: c7:87:68:5f:b0:82:9d:0f:3a:ad:03:26:41:8d:71:83:37:6b: 89:04:c1:1e:41:7d:9a:bc:e8:eb:83:15:c2:c8:d2:44:07:45: 74:72:64:c9:02:4b:5a:3a:d3:73:6c:65:c6:ae:d3:cb:12:33: 27:70:7f:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0ODkxMTAvBgNVBAUTKDdBRUE3NzdDNkIxOTE1MTM1MzNCMEUyRURGMEYwRDg0 Q0I3MEJBMTEwHhcNMjUxMDE5MDkxMjE4WhcNMjUxMDI2MDkxMjE4WjAYMRYwFAYD VQQDEw02OGY0YWI3Mi05MDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqfKaek66d4zaCPpuQ9cyU6HD3w7yU6jEaxLYtUXvpomRytRf1HOaAnC1ojx 15bqDbkLi0mNLCP7vwPOlHxO6rqObP0UZ1eVkYSiUII31vEu3L6xUCOHGYlhfnRs J1xUVBcUbB/uMlZ/vDW/5apY6RswkCQq4ti+fd1Br3QBwneOmHF6qf2RNc7G1BHi qfU3PnauBKAdWS5+rGHLIJxEO6GhK0zPGmsVD7Qfr8lYYF3vcK9q/UFRQySuuy82 fa8OexLKyPKB9HG3Ha37hDgLftu9mLVuoQszQTh1kVi+h+my1BbRBugs76XMyrlw F2auv2WkeZ+mxflUkIIsmfg0mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4u/RHK dXlX3zW+fMWCC+0ZSpZcMB8GA1UdIwQYMBaAFHrqd3xrGRUTUzsOLt8PDYTLcLoR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ4OS8zMjg5QTkwRTlC RkExMUVGQkVCOTg0NkVDNEY5QUUwMi9ldXAzZkdzWkZSTlRPdzR1M3c4TmhNdHd1 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2V1cDNmR3NaRlJOVE93NHUzdzhOaE10d3VoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ4OS8zMjg5QTkwRTlCRkExMUVGQkVCOTg0NkVDNEY5QUUwMi9ldXAzZkdzWkZS TlRPdzR1M3c4TmhNdHd1aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPcwYXcQj69y4NexQ7uXkexojet07nlmuwmCd2DceAFVm9SnFO0wY4 JkescsqGgRTLys7CMCZPKCOVFPdoVd3Y5tDSEIoJZ+1pEe/MGhBYWhQUfJVj0mIr AS/g9L6thorsWKAcI9KHxWJGrK/L5EKMIzP0OeQqOacWy1a/fhjObAujsUzTVGyR L1DrvdIRe8XzgstL7n9eA5/n2zXWaVc7PW4K7G6vpIWAnYEptyq8wloIeL7Pu1nr n455XhCv4bZNvbTUaNbHh2hfsIKdDzqtAyZBjXGDN2uJBMEeQX2avOjrgxXCyNJE B0V0cmTJAktaOtNzbGXGrtPLEjMncH+g -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:37 2025 by rpki-client