$ rpki-client -vvf rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft File: e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft (raw, json) Hash identifier: 8noMngZouxSEVYukr1fkDvetjSENCSjUde7ypdwRp1w= Subject key identifier: 63:9B:97:2E:FE:31:42:4E:19:20:F6:F5:62:50:75:0F:2E:2E:9E:53 Authority key identifier: 7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 Certificate issuer: /CN=A9115964/serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Certificate serial: 07A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft Manifest number: 0790 Signing time: Mon 04 Aug 2025 21:54:20 +0000 Manifest this update: Mon 04 Aug 2025 21:54:20 +0000 Manifest next update: Mon 11 Aug 2025 21:54:20 +0000 Files and hashes: 1: e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl (hash: sZB345E4sTmd4b8/ncp+oFOHknH99aI5r+hUsfS0J28=) 2: FAFC712C485611EDB713C522C4F9AE02.roa (hash: fq5HCtnKfkn7/JuyPv2TRFDGy6fu3YXaJZP30LJYt74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1955 (0x7a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115964, serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Validity Not Before: Aug 4 21:54:20 2025 GMT Not After : Aug 11 21:54:20 2025 GMT Subject: CN=68912c0c-fb1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:74:2e:af:5b:98:8d:95:50:6c:9e:b7:1a:70: 3a:37:b5:b1:33:8a:2d:63:a4:46:06:67:6f:a7:2b: 8d:25:2b:b4:f2:6a:cd:95:6a:50:93:05:12:e9:3d: 02:d5:94:a9:d7:57:5d:75:ce:27:35:53:24:ec:ee: ba:fa:ac:46:2e:f1:07:c6:d5:7d:a8:25:67:b4:b6: c5:f4:74:09:d3:06:e3:89:5f:4e:7a:f8:02:05:8e: 38:a6:38:d8:34:66:db:cc:a2:20:c2:8d:d6:d3:d3: 4b:1b:26:cb:b6:1e:1e:b3:9e:ec:fc:82:a7:24:df: 1b:b2:d1:b7:03:fd:6c:fe:98:35:d0:4b:6a:9b:c0: 89:f8:3c:fa:45:9a:13:5d:de:68:2f:6a:e6:c4:58: f5:01:83:83:5d:e1:3e:24:84:ab:bc:8d:a2:d4:b0: 07:7a:c1:75:88:c1:7b:5d:b8:21:c6:ca:75:fb:d7: 87:f2:e2:cf:ac:04:d4:53:bb:19:4b:67:4f:02:29: 46:bd:56:34:1b:88:93:0f:2e:16:dd:46:e5:e0:0b: ce:ca:9b:ea:d7:96:b2:80:a8:5b:7d:f5:d3:86:5f: 30:9b:e8:d1:a4:bb:55:f6:c5:90:f7:60:21:6e:c4: da:57:bc:e6:1f:27:21:6e:4d:0d:9e:cf:6a:53:a2: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9B:97:2E:FE:31:42:4E:19:20:F6:F5:62:50:75:0F:2E:2E:9E:53 X509v3 Authority Key Identifier: keyid:7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:4a:2b:8c:6e:62:41:da:b1:a9:31:d1:b4:33:ad:15:bc:4d: c9:1c:82:25:9f:1b:7d:0b:57:06:29:a3:37:56:0f:04:26:5b: e8:67:e2:1c:a3:2a:15:f3:c9:e0:43:0f:21:3a:62:d0:06:f8: 97:ba:2d:f4:3b:ea:21:9f:4c:cc:23:56:1b:a0:34:59:56:7c: ea:c3:ff:92:3a:be:6a:c5:89:ff:2a:11:fa:bf:6d:6a:fd:b5: 1b:98:27:7c:40:a4:e5:81:2a:af:34:16:57:6e:12:b0:16:f7: d3:07:31:81:18:f4:b2:04:26:f5:50:83:7f:2f:3c:29:66:75: 35:c8:81:7f:51:90:64:17:6f:d7:6f:09:ab:92:02:fc:63:ef: 4e:08:5d:c7:ca:98:0a:68:36:c3:9a:ce:af:51:0c:cf:40:51: 4b:9f:d7:99:03:e0:62:e0:e5:6a:93:71:63:cb:1f:8f:8b:5c: 37:66:84:f6:ee:95:46:fc:7c:57:38:00:f3:c2:ee:22:d4:32: a0:37:74:36:ff:71:46:58:f1:84:7f:58:36:73:59:17:34:bc: 6f:8b:a9:8c:58:c7:c9:bf:43:8c:55:67:cf:58:2f:26:3f:e3: d8:49:9b:10:35:b8:4b:e5:21:6c:f8:a8:c7:6c:aa:e6:c6:52: 17:0d:28:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5NjQxMTAvBgNVBAUTKDdCNzIxMzg4RkQxM0U4QUU0M0M5N0YwMzAxOTgxRDIy OTJDODg4OTcwHhcNMjUwODA0MjE1NDIwWhcNMjUwODExMjE1NDIwWjAYMRYwFAYD VQQDEw02ODkxMmMwYy1mYjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmnQur1uYjZVQbJ63GnA6N7WxM4otY6RGBmdvpyuNJSu08mrNlWpQkwUS6T0C 1ZSp11dddc4nNVMk7O66+qxGLvEHxtV9qCVntLbF9HQJ0wbjiV9OevgCBY44pjjY NGbbzKIgwo3W09NLGybLth4es57s/IKnJN8bstG3A/1s/pg10Etqm8CJ+Dz6RZoT Xd5oL2rmxFj1AYODXeE+JISrvI2i1LAHesF1iMF7Xbghxsp1+9eH8uLPrATUU7sZ S2dPAilGvVY0G4iTDy4W3Ubl4AvOypvq15aygKhbffXThl8wm+jRpLtV9sWQ92Ah bsTaV7zmHychbk0Nns9qU6IFjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGObly7+ MUJOGSD29WJQdQ8uLp5TMB8GA1UdIwQYMBaAFHtyE4j9E+iuQ8l/AwGYHSKSyIiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTk2NC9FRkMyQ0NCQzI3 MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZLNUR5WDhEQVpnZElwTElp SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UzSVRpUDBUNks1RHlYOERBWmdkSXBMSWlKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTk2NC9FRkMyQ0NCQzI3MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZL NUR5WDhEQVpnZElwTElpSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJSiuMbmJB2rGpMdG0M60VvE3JHIIlnxt9C1cGKaM3Vg8EJlvoZ+Ic oyoV88ngQw8hOmLQBviXui30O+ohn0zMI1YboDRZVnzqw/+SOr5qxYn/KhH6v21q /bUbmCd8QKTlgSqvNBZXbhKwFvfTBzGBGPSyBCb1UIN/LzwpZnU1yIF/UZBkF2/X bwmrkgL8Y+9OCF3HypgKaDbDms6vUQzPQFFLn9eZA+Bi4OVqk3Fjyx+Pi1w3ZoT2 7pVG/HxXOADzwu4i1DKgN3Q2/3FGWPGEf1g2c1kXNLxvi6mMWMfJv0OMVWfPWC8m P+PYSZsQNbhL5SFs+KjHbKrmxlIXDSiJ -----END CERTIFICATE-----Generated at Wed Aug 6 00:35:06 2025 by rpki-client