$ rpki-client -vvf rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft File: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft (raw, json) Hash identifier: rIPtw4ROzWNa/Yc90uDsVOKD3wVz9yT9QrLv7n6yKIs= Subject key identifier: C6:9D:07:A1:FE:24:3D:4C:24:38:36:08:18:2A:45:30:0B:6E:40:89 Authority key identifier: 78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6 Certificate issuer: /CN=A914CF73/serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6 Certificate serial: 349E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft Manifest number: 3496 Signing time: Sat 18 Oct 2025 15:30:58 +0000 Manifest this update: Sat 18 Oct 2025 15:30:57 +0000 Manifest next update: Sat 25 Oct 2025 15:30:57 +0000 Files and hashes: 1: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl (hash: ofvOrsMnl9rG48SwIRPeJEw4Fh9mMP0xYz7UDxOaPPc=) 2: 5007D8DECAB411E889484D32C4F9AE02.roa (hash: d/14FJHyt97NnvQezwZgszS2h7OqJIW+bhi4rgk0UNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13470 (0x349e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CF73, serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6 Validity Not Before: Oct 18 15:30:57 2025 GMT Not After : Oct 25 15:30:57 2025 GMT Subject: CN=68f3b2b2-f6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:99:f8:36:43:ac:a5:cf:db:48:ea:83:c1: 58:ea:86:61:4e:cb:9f:de:ab:ab:03:d7:66:78:27: 8b:43:10:5a:5c:79:df:27:51:53:ae:52:aa:cc:f9: be:a2:74:1a:c6:d9:31:8c:94:f8:5f:98:cc:db:05: d8:10:6f:2f:be:62:d4:a4:b6:9b:87:a1:6c:ac:a4: 61:5b:ea:c1:9b:f4:5e:43:08:4f:49:a3:73:e8:14: b1:7e:a4:e2:b9:4e:db:a3:d6:33:88:17:db:42:22: 50:a2:7e:37:bd:f2:e2:cf:c9:3c:de:55:f4:a6:87: 96:31:4b:38:b5:81:34:3b:fc:3b:3e:b2:0b:4d:e8: c9:83:07:85:6d:a7:71:0c:de:aa:05:5a:6c:39:2c: 4b:c7:1d:0d:ab:9a:df:86:05:a0:bb:af:94:ce:8e: 60:38:64:f2:4b:38:07:25:70:30:01:67:d7:f2:f4: 3a:2f:f2:03:5d:b1:af:d8:38:25:7a:c0:43:c7:20: 5b:05:6f:0a:b8:74:40:28:7a:04:95:4b:dd:98:06: f3:4b:8d:4c:d0:d1:1a:56:c0:ab:b6:ca:59:a7:60: d2:9e:23:6c:8b:61:ed:0e:74:2f:de:d4:af:6a:88: 40:e2:27:70:e0:5f:97:fb:ba:38:d3:7e:21:cd:5f: 4a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9D:07:A1:FE:24:3D:4C:24:38:36:08:18:2A:45:30:0B:6E:40:89 X509v3 Authority Key Identifier: keyid:78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:6c:52:69:06:bd:91:92:69:ea:09:7c:38:d4:a9:f0:4c:11: b7:da:0f:d3:a0:67:8b:3e:67:19:74:64:7d:6d:5a:c0:ac:41: 6e:5d:15:61:a1:28:f5:fa:b6:35:10:6b:83:e4:74:be:ea:af: f6:06:4f:33:93:15:ee:23:65:34:3a:b7:ec:24:e0:1f:99:d2: b5:8f:d0:33:04:25:b0:c6:b6:6a:37:b6:26:a0:fe:20:7c:37: 18:83:49:87:91:fc:84:43:79:7a:82:86:18:29:5d:6b:aa:ea: b8:2b:d7:6f:c6:8a:a7:f2:41:80:eb:af:95:1a:c9:91:7b:23: 80:d9:a0:dc:d1:25:f7:f7:a8:d1:6e:05:46:ab:27:9c:ba:61: cc:5d:97:c0:3f:a9:e1:88:e1:62:ae:48:9f:23:9d:90:be:77: b9:d4:63:12:a2:fd:8c:c5:f2:c9:b8:f7:02:9c:01:96:de:be: e8:92:45:f0:65:e1:5f:6a:19:83:d9:eb:c5:8b:4d:52:ab:b3: 99:56:3a:25:a7:07:6a:1a:70:7a:83:7f:5e:81:25:3e:67:58: 37:ce:49:b4:c5:62:ef:92:d9:6f:cc:9f:a7:d5:37:cc:6c:2f: e4:49:a0:ba:28:4b:6f:74:87:71:ce:25:02:a2:80:4a:95:10: b6:cd:55:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENGNzMxMTAvBgNVBAUTKDc4OUY4Qjc4N0VEM0REMzUyMDMzMzJDRUIzQjUzMkUx RkFGMEI2QzYwHhcNMjUxMDE4MTUzMDU3WhcNMjUxMDI1MTUzMDU3WjAYMRYwFAYD VQQDEw02OGYzYjJiMi1mNmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/yZ+DZDrKXP20jqg8FY6oZhTsuf3qurA9dmeCeLQxBaXHnfJ1FTrlKqzPm+ onQaxtkxjJT4X5jM2wXYEG8vvmLUpLabh6FsrKRhW+rBm/ReQwhPSaNz6BSxfqTi uU7bo9YziBfbQiJQon43vfLiz8k83lX0poeWMUs4tYE0O/w7PrILTejJgweFbadx DN6qBVpsOSxLxx0Nq5rfhgWgu6+Uzo5gOGTySzgHJXAwAWfX8vQ6L/IDXbGv2Dgl esBDxyBbBW8KuHRAKHoElUvdmAbzS41M0NEaVsCrtspZp2DSniNsi2HtDnQv3tSv aohA4idw4F+X+7o4034hzV9KowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMadB6H+ JD1MJDg2CBgqRTALbkCJMB8GA1UdIwQYMBaAFHifi3h+0901IDMyzrO1MuH68LbG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0Y3My9BNjg0NzU1MDJB MDExMUUyODE3MjNDQTYwOEIwMkNEMi9lSi1MZUg3VDNUVWdNekxPczdVeTRmcnd0 c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VKLUxlSDdUM1RVZ016TE9zN1V5NGZyd3RzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0Y3My9BNjg0NzU1MDJBMDExMUUyODE3MjNDQTYwOEIwMkNEMi9lSi1MZUg3VDNU VWdNekxPczdVeTRmcnd0c1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVbFJpBr2RkmnqCXw41KnwTBG32g/ToGeLPmcZdGR9bVrArEFuXRVh oSj1+rY1EGuD5HS+6q/2Bk8zkxXuI2U0OrfsJOAfmdK1j9AzBCWwxrZqN7YmoP4g fDcYg0mHkfyEQ3l6goYYKV1rquq4K9dvxoqn8kGA66+VGsmReyOA2aDc0SX396jR bgVGqyecumHMXZfAP6nhiOFirkifI52Qvne51GMSov2MxfLJuPcCnAGW3r7okkXw ZeFfahmD2evFi01Sq7OZVjolpwdqGnB6g39egSU+Z1g3zkm0xWLvktlvzJ+n1TfM bC/kSaC6KEtvdIdxziUCooBKlRC2zVXe -----END CERTIFICATE-----Generated at Mon Oct 20 17:08:27 2025 by rpki-client