$ rpki-client -vvf rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft File: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft (raw, json) Hash identifier: zBiuC0nO+vFOZQpYCfQfpIaB8i00aFX4m7Rv/FQpIMo= Subject key identifier: E8:EE:17:5B:EB:48:A7:DD:AC:D0:91:AF:B8:3B:DE:86:CA:1C:6B:C2 Authority key identifier: 78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6 Certificate issuer: /CN=A914CF73/serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6 Certificate serial: 3481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft Manifest number: 3479 Signing time: Fri 22 Aug 2025 15:22:11 +0000 Manifest this update: Fri 22 Aug 2025 15:22:11 +0000 Manifest next update: Fri 29 Aug 2025 15:22:11 +0000 Files and hashes: 1: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl (hash: dqWRNYYzrUJlY3DzBc1LL7iwjlVc0SqEM+ZTR+dlncc=) 2: 5007D8DECAB411E889484D32C4F9AE02.roa (hash: d/14FJHyt97NnvQezwZgszS2h7OqJIW+bhi4rgk0UNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13441 (0x3481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CF73, serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6 Validity Not Before: Aug 22 15:22:11 2025 GMT Not After : Aug 29 15:22:11 2025 GMT Subject: CN=68a88b23-e0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:fa:1d:e4:b0:94:55:72:c3:90:a1:b8:08: 49:7d:30:df:8e:b8:70:e0:ff:49:ad:73:1c:bb:a0: 26:fb:3a:f3:d2:b8:78:53:07:27:59:f8:68:25:0c: 68:32:55:ba:01:4f:97:d4:31:89:9e:2e:4d:6b:63: 8c:67:c8:1e:35:f4:90:23:38:8d:57:a4:99:64:47: e5:cf:c5:04:b8:fa:3e:49:7b:27:6c:9d:5d:37:a3: b7:a3:ec:b6:61:68:eb:7b:e5:50:49:3e:ef:a7:37: 50:45:03:f8:17:8a:f0:ea:c4:eb:7d:d7:1d:72:6b: 11:ca:3d:36:7b:39:4d:32:7d:1f:55:c7:82:08:87: f9:54:85:c2:37:39:a0:69:d0:68:6c:c4:c5:47:2d: 39:77:0a:a8:c7:4c:3e:f3:88:88:f9:f7:b3:ae:72: cf:ad:58:63:c7:56:20:ab:c4:53:c4:85:2e:26:15: 49:0c:43:c9:4c:8d:07:79:8e:cc:71:fe:6f:bd:75: 19:57:ee:05:84:51:02:25:ff:f0:e6:ff:89:47:17: f1:fe:71:56:34:64:db:0b:85:66:42:f8:1d:1d:c7: 51:68:99:a6:ce:37:a8:1c:64:db:b2:39:13:76:63: a7:cd:f1:cd:ad:46:f7:fd:8a:f0:c9:03:66:0b:50: af:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EE:17:5B:EB:48:A7:DD:AC:D0:91:AF:B8:3B:DE:86:CA:1C:6B:C2 X509v3 Authority Key Identifier: keyid:78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ee:18:bb:2c:a2:b0:9a:f9:01:43:4b:3c:75:e4:2c:9e:2b: 10:68:d9:42:8e:0a:c2:69:44:6b:0f:b4:1f:57:6a:f2:28:89: a5:46:bf:27:86:60:d8:6d:7c:30:cd:46:43:81:d4:b5:77:44: 3e:cc:55:36:e5:e1:a3:d2:bd:67:d8:d1:4a:63:d0:eb:32:c1: 51:eb:68:35:41:2d:1c:c1:b2:79:c8:01:36:fd:02:c0:12:18: ba:0f:f0:a2:40:bc:50:25:4f:2e:cc:64:ae:35:cc:dd:01:be: f2:2c:fb:a6:4f:24:27:78:47:f9:75:db:c4:07:84:d0:92:41: 4e:b4:3c:6c:74:1a:9f:44:19:49:22:6e:56:2c:79:e5:5c:6c: 8d:1a:88:ea:e7:50:e2:62:fb:ef:04:cf:39:9c:cb:c6:0a:58: 7d:2c:21:dd:64:d9:36:55:fa:e9:7e:60:7c:ae:34:c5:58:5d: 3e:8f:62:78:d5:6a:7b:2c:94:1f:61:3b:66:2f:48:c7:f1:5e: 34:d3:32:de:39:b6:12:1e:8d:00:ba:1c:80:4a:9b:7c:1e:a1: ec:77:16:c5:30:53:31:bc:5a:89:fd:af:2f:45:5c:31:bc:e5: 33:43:43:5a:6a:c9:54:36:c2:63:99:bb:df:03:f3:b4:02:05: d4:2c:22:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENGNzMxMTAvBgNVBAUTKDc4OUY4Qjc4N0VEM0REMzUyMDMzMzJDRUIzQjUzMkUx RkFGMEI2QzYwHhcNMjUwODIyMTUyMjExWhcNMjUwODI5MTUyMjExWjAYMRYwFAYD VQQDEw02OGE4OGIyMy1lMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxj6HeSwlFVyw5ChuAhJfTDfjrhw4P9JrXMcu6Am+zrz0rh4UwcnWfhoJQxo MlW6AU+X1DGJni5Na2OMZ8geNfSQIziNV6SZZEflz8UEuPo+SXsnbJ1dN6O3o+y2 YWjre+VQST7vpzdQRQP4F4rw6sTrfdcdcmsRyj02ezlNMn0fVceCCIf5VIXCNzmg adBobMTFRy05dwqox0w+84iI+fezrnLPrVhjx1Ygq8RTxIUuJhVJDEPJTI0HeY7M cf5vvXUZV+4FhFECJf/w5v+JRxfx/nFWNGTbC4VmQvgdHcdRaJmmzjeoHGTbsjkT dmOnzfHNrUb3/YrwyQNmC1CvNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjuF1vr SKfdrNCRr7g73obKHGvCMB8GA1UdIwQYMBaAFHifi3h+0901IDMyzrO1MuH68LbG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0Y3My9BNjg0NzU1MDJB MDExMUUyODE3MjNDQTYwOEIwMkNEMi9lSi1MZUg3VDNUVWdNekxPczdVeTRmcnd0 c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VKLUxlSDdUM1RVZ016TE9zN1V5NGZyd3RzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0Y3My9BNjg0NzU1MDJBMDExMUUyODE3MjNDQTYwOEIwMkNEMi9lSi1MZUg3VDNU VWdNekxPczdVeTRmcnd0c1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB87hi7LKKwmvkBQ0s8deQsnisQaNlCjgrCaURrD7QfV2ryKImlRr8n hmDYbXwwzUZDgdS1d0Q+zFU25eGj0r1n2NFKY9DrMsFR62g1QS0cwbJ5yAE2/QLA Ehi6D/CiQLxQJU8uzGSuNczdAb7yLPumTyQneEf5ddvEB4TQkkFOtDxsdBqfRBlJ Im5WLHnlXGyNGojq51DiYvvvBM85nMvGClh9LCHdZNk2VfrpfmB8rjTFWF0+j2J4 1Wp7LJQfYTtmL0jH8V400zLeObYSHo0AuhyASpt8HqHsdxbFMFMxvFqJ/a8vRVwx vOUzQ0NaaslUNsJjmbvfA/O0AgXULCJW -----END CERTIFICATE-----Generated at Sun Aug 24 05:16:29 2025 by rpki-client