$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft File: eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json) Hash identifier: f/sMk5VbEw1ifRHqevWV9DBRYu+fvybfiLuOWt2VZEI= Subject key identifier: DF:5C:03:51:0C:45:8D:A6:2C:2B:F4:31:97:BA:D5:D2:03:7A:30:26 Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 Certificate issuer: /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft Manifest number: 97 Signing time: Sat 23 Aug 2025 06:37:43 +0000 Manifest this update: Sat 23 Aug 2025 06:37:42 +0000 Manifest next update: Sat 30 Aug 2025 06:37:42 +0000 Files and hashes: 1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: 7531qvbo8h3ACsJHY3Py/yFuuN1Lrw+7Hptm54Vx7jY=) 2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: OlXBby3DJZy8rl/8+NH1zeLmOWVMUXLA2k9gi34qwsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Validity Not Before: Aug 23 06:37:42 2025 GMT Not After : Aug 30 06:37:42 2025 GMT Subject: CN=68a961b7-f2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a7:c9:02:5f:c6:ea:54:63:61:b5:78:71:05: c7:7c:74:f6:15:c8:74:58:42:b1:1d:3c:f4:b0:b1: f9:5f:5f:d9:9b:49:35:5a:0e:84:27:0f:fa:13:9d: c8:1b:74:c9:1d:c7:f3:00:06:5a:89:dd:5d:81:37: c1:4a:74:9f:36:45:ad:10:3a:f2:df:a9:57:be:92: f1:8b:c1:02:e4:79:ac:4f:7e:fd:7c:f2:57:f2:3b: 1c:82:2f:41:bc:82:23:2d:8b:de:3b:f9:b4:c1:8b: b8:f0:6a:7b:ba:c6:d9:00:f3:ff:98:c6:2c:85:07: 38:dc:54:a4:a5:a0:81:f5:1f:50:30:10:ad:ed:09: df:58:64:37:f3:63:d9:be:79:73:db:46:d3:db:5d: a6:9d:2a:a2:4d:8b:26:90:26:18:1c:38:e9:9e:9f: 0a:da:ca:1d:e6:5f:18:e5:27:7a:4c:65:9b:82:1c: 79:7c:b7:74:7d:e8:68:48:62:06:be:56:8a:1c:6e: a0:1f:c7:8c:ec:19:83:7a:14:4a:57:71:50:bd:32: 64:63:07:32:06:37:eb:c1:55:09:6d:7c:e4:e6:50: 65:75:1e:87:a6:ac:89:b5:36:37:f0:e7:20:77:d0: f0:88:b9:c0:2a:5c:20:ac:67:3e:21:46:13:5e:d2: 09:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5C:03:51:0C:45:8D:A6:2C:2B:F4:31:97:BA:D5:D2:03:7A:30:26 X509v3 Authority Key Identifier: keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c0:ba:0a:a7:e2:83:70:e9:d4:c3:26:97:13:04:72:f1:cd: 66:f7:f9:f5:a5:e2:59:99:cb:ca:df:76:d8:3b:e8:07:09:71: 88:a4:e3:b1:12:5e:d9:7e:14:54:1f:cf:72:04:6c:3f:d8:ce: 09:3b:e5:98:c2:7b:95:39:d0:0d:e5:f8:6a:c8:4f:3b:7c:68: a8:b8:2c:aa:b8:9d:f6:e9:8c:5d:8d:08:74:4c:9c:c6:a0:ed: 1c:cc:32:4d:6d:15:a4:fe:f7:f0:62:59:ae:d4:43:9a:5d:e2: 9d:aa:0d:d3:65:32:5f:df:c8:9d:cf:2c:f2:c7:10:1b:41:b4: 9c:e0:93:6b:f5:e0:44:91:c5:e7:1a:6c:b5:59:79:ff:d3:17: 64:99:38:4f:2e:59:0b:ac:b4:24:92:98:92:57:a3:7a:a2:4c: e4:ae:c6:40:ee:ee:d1:c8:4e:ce:cd:c3:9d:ca:42:66:c0:5a: 73:45:21:07:8c:6c:ee:43:8b:fe:06:f3:92:7a:7b:fc:64:60: 53:9f:03:8e:85:1d:43:d8:f2:2d:ff:78:db:57:22:cd:bd:90: 70:85:85:57:ee:fa:06:18:e1:7e:d9:43:83:ee:52:9c:1d:3d: 96:c3:1f:26:02:8d:e2:b2:5f:30:1f:ce:1d:ec:22:40:6d:d1: bb:49:45:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0ODkxMTAvBgNVBAUTKDdBRUE3NzdDNkIxOTE1MTM1MzNCMEUyRURGMEYwRDg0 Q0I3MEJBMTEwHhcNMjUwODIzMDYzNzQyWhcNMjUwODMwMDYzNzQyWjAYMRYwFAYD VQQDEw02OGE5NjFiNy1mMmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KfJAl/G6lRjYbV4cQXHfHT2Fch0WEKxHTz0sLH5X1/Zm0k1Wg6EJw/6E53I G3TJHcfzAAZaid1dgTfBSnSfNkWtEDry36lXvpLxi8EC5HmsT379fPJX8jscgi9B vIIjLYveO/m0wYu48Gp7usbZAPP/mMYshQc43FSkpaCB9R9QMBCt7QnfWGQ382PZ vnlz20bT212mnSqiTYsmkCYYHDjpnp8K2sod5l8Y5Sd6TGWbghx5fLd0fehoSGIG vlaKHG6gH8eM7BmDehRKV3FQvTJkYwcyBjfrwVUJbXzk5lBldR6HpqyJtTY38Ocg d9DwiLnAKlwgrGc+IUYTXtIJOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9cA1EM RY2mLCv0MZe61dIDejAmMB8GA1UdIwQYMBaAFHrqd3xrGRUTUzsOLt8PDYTLcLoR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ4OS8zMjg5QTkwRTlC RkExMUVGQkVCOTg0NkVDNEY5QUUwMi9ldXAzZkdzWkZSTlRPdzR1M3c4TmhNdHd1 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2V1cDNmR3NaRlJOVE93NHUzdzhOaE10d3VoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ4OS8zMjg5QTkwRTlCRkExMUVGQkVCOTg0NkVDNEY5QUUwMi9ldXAzZkdzWkZS TlRPdzR1M3c4TmhNdHd1aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtwLoKp+KDcOnUwyaXEwRy8c1m9/n1peJZmcvK33bYO+gHCXGIpOOx El7ZfhRUH89yBGw/2M4JO+WYwnuVOdAN5fhqyE87fGiouCyquJ326YxdjQh0TJzG oO0czDJNbRWk/vfwYlmu1EOaXeKdqg3TZTJf38idzyzyxxAbQbSc4JNr9eBEkcXn Gmy1WXn/0xdkmThPLlkLrLQkkpiSV6N6okzkrsZA7u7RyE7OzcOdykJmwFpzRSEH jGzuQ4v+BvOSenv8ZGBTnwOOhR1D2PIt/3jbVyLNvZBwhYVX7voGGOF+2UOD7lKc HT2Wwx8mAo3isl8wH84d7CJAbdG7SUXM -----END CERTIFICATE-----Generated at Sat Aug 23 10:45:37 2025 by rpki-client