$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft File: eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json) Hash identifier: /a+fwrwiASWjvmznwZVvRLhcFalVVL8/54JzNJp0h48= Subject key identifier: BC:F2:1D:F5:C3:86:6F:83:E0:8D:AD:8D:8F:A5:63:9D:44:8B:1F:6E Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 Certificate issuer: /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft Manifest number: 77 Signing time: Sat 21 Jun 2025 05:50:13 +0000 Manifest this update: Sat 21 Jun 2025 05:50:12 +0000 Manifest next update: Sat 28 Jun 2025 05:50:12 +0000 Files and hashes: 1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: sLSUKgeC1A2zyEQBgxF5/WO/P/FeL3vIRod4JgOjBvk=) 2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: OlXBby3DJZy8rl/8+NH1zeLmOWVMUXLA2k9gi34qwsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Validity Not Before: Jun 21 05:50:12 2025 GMT Not After : Jun 28 05:50:12 2025 GMT Subject: CN=68564814-1ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:70:37:f5:0c:35:d1:b8:d4:2d:26:af:ec:a9: ab:b9:6f:28:cc:52:ce:a0:0c:f5:2c:a4:17:15:6d: 1f:a8:8f:dd:2b:82:91:a9:a7:a6:65:db:aa:02:72: bb:0e:de:57:a5:62:34:c7:2c:fb:a1:d7:36:bf:fe: da:4f:6e:ee:75:29:8a:6f:89:64:c6:19:f3:eb:cc: 51:39:f7:f6:7b:17:0b:ac:2d:79:33:b3:b5:e6:4c: 2c:69:75:a1:58:5a:00:ab:6d:88:3b:a4:2a:1f:27: 4e:a1:1c:7d:97:c6:a9:a3:0a:66:51:72:4d:55:37: 48:21:4a:8b:01:89:54:00:5d:9b:56:7d:da:ab:78: be:d0:43:92:2b:f0:69:17:b7:4f:a0:93:db:17:9f: 75:96:be:a5:11:96:b1:b9:e0:d7:f4:16:d4:af:26: 94:e1:65:af:de:ec:f2:43:0c:77:a5:4c:56:38:2c: d1:47:11:53:dd:f5:08:42:83:e0:17:fb:72:c6:0f: c8:09:32:af:a0:a8:8a:24:b0:39:f8:5d:d3:1d:bd: 6f:5a:eb:b4:ca:ed:f7:0e:0c:fc:9a:40:a0:b2:c7: fd:d9:ab:e9:c9:3d:f9:8d:99:ca:c5:82:f1:d7:dc: 58:ee:65:48:35:6c:7d:03:3e:e8:0f:36:a4:51:7d: cc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F2:1D:F5:C3:86:6F:83:E0:8D:AD:8D:8F:A5:63:9D:44:8B:1F:6E X509v3 Authority Key Identifier: keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:4f:8e:0e:eb:10:94:89:46:2b:bd:89:94:21:50:29:d1:4f: 0a:4a:70:8f:94:ed:57:89:41:c9:e4:e7:4e:dc:e3:dc:55:dd: 6b:d3:3c:22:11:1d:56:48:0a:28:4f:98:b2:86:39:14:28:97: fc:b3:9a:e8:e0:b3:79:0a:6b:a2:2c:39:01:a6:a2:f9:72:9e: 9f:fd:31:f0:a7:e7:06:04:26:41:7d:1d:69:cb:71:d0:04:d1: 7f:df:58:40:66:07:93:d4:0f:39:af:5b:d5:eb:bc:73:e9:ad: 86:cf:4b:40:1b:cd:91:36:a9:54:cc:e4:63:82:89:d4:1d:c8: 5a:22:ad:4f:d1:c6:a9:47:83:39:52:a8:9d:9a:eb:02:48:aa: ed:3a:2b:9a:d5:04:fc:f6:61:9f:99:46:40:cf:d1:c5:1b:e2: 26:06:4e:ae:35:e0:0d:fb:b4:f5:50:51:de:20:37:f7:54:ed: af:3a:24:62:84:bb:04:92:7c:d1:ea:29:6c:fc:28:3e:2e:af: d7:8f:5b:74:c5:bb:07:57:bb:11:8f:b8:d9:d4:36:2b:3d:22: fa:e1:70:70:be:50:61:74:75:5a:7b:3f:28:84:ae:22:1d:3c: 1f:c7:45:86:dd:36:c2:5b:55:6c:e9:b3:51:ac:d7:f1:45:30: c2:c7:6b:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjQ4OTExMC8GA1UEBRMoN0FFQTc3N0M2QjE5MTUxMzUzM0IwRTJFREYwRjBEODRD QjcwQkExMTAeFw0yNTA2MjEwNTUwMTJaFw0yNTA2MjgwNTUwMTJaMBgxFjAUBgNV BAMTDTY4NTY0ODE0LTFjZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmcDf1DDXRuNQtJq/sqau5byjMUs6gDPUspBcVbR+oj90rgpGpp6Zl26oCcrsO 3lelYjTHLPuh1za//tpPbu51KYpviWTGGfPrzFE59/Z7FwusLXkzs7XmTCxpdaFY WgCrbYg7pCofJ06hHH2XxqmjCmZRck1VN0ghSosBiVQAXZtWfdqreL7QQ5Ir8GkX t0+gk9sXn3WWvqURlrG54Nf0FtSvJpThZa/e7PJDDHelTFY4LNFHEVPd9QhCg+AX +3LGD8gJMq+gqIoksDn4XdMdvW9a67TK7fcODPyaQKCyx/3Zq+nJPfmNmcrFgvHX 3FjuZUg1bH0DPugPNqRRfczPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvPId9cOG b4Pgja2Nj6VjnUSLH24wHwYDVR0jBBgwFoAUeup3fGsZFRNTOw4u3w8NhMtwuhEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNDg5LzMyODlBOTBFOUJG QTExRUZCRUI5ODQ2RUM0RjlBRTAyL2V1cDNmR3NaRlJOVE93NHUzdzhOaE10d3Vo RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZXVwM2ZHc1pGUk5UT3c0dTN3OE5oTXR3dWhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NDg5LzMyODlBOTBFOUJGQTExRUZCRUI5ODQ2RUM0RjlBRTAyL2V1cDNmR3NaRlJO VE93NHUzdzhOaE10d3VoRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM1Pjg7rEJSJRiu9iZQhUCnRTwpKcI+U7VeJQcnk507c49xV3WvTPCIR HVZICihPmLKGORQol/yzmujgs3kKa6IsOQGmovlynp/9MfCn5wYEJkF9HWnLcdAE 0X/fWEBmB5PUDzmvW9XrvHPprYbPS0AbzZE2qVTM5GOCidQdyFoirU/RxqlHgzlS qJ2a6wJIqu06K5rVBPz2YZ+ZRkDP0cUb4iYGTq414A37tPVQUd4gN/dU7a86JGKE uwSSfNHqKWz8KD4ur9ePW3TFuwdXuxGPuNnUNis9IvrhcHC+UGF0dVp7PyiEriId PB/HRYbdNsJbVWzps1Gs1/FFMMLHa4A= -----END CERTIFICATE-----Generated at Sat Jun 21 09:30:37 2025 by rpki-client