$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft File: eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json) Hash identifier: 1otCkoTA0n5JC533gRATPpVhv/LAnQPJFHNU8EyQ16o= Subject key identifier: 3A:82:78:7D:C2:E9:8B:96:DC:3F:24:93:AA:FC:DA:35:BC:C4:9D:9C Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 Certificate issuer: /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft Manifest number: BB Signing time: Mon 03 Nov 2025 05:57:42 +0000 Manifest this update: Mon 03 Nov 2025 05:57:42 +0000 Manifest next update: Mon 10 Nov 2025 05:57:42 +0000 Files and hashes: 1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: oOLEylzYRZMFcYR0oejIyQXhHgF++oBwNRtAmPUYj6k=) 2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: OlXBby3DJZy8rl/8+NH1zeLmOWVMUXLA2k9gi34qwsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Validity Not Before: Nov 3 05:57:42 2025 GMT Not After : Nov 10 05:57:42 2025 GMT Subject: CN=69084456-301c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8d:bc:70:34:0c:54:bd:85:20:c9:aa:33:fe: 35:ac:91:bd:00:ef:da:ee:4c:00:b2:43:d7:71:77: 6d:71:bc:81:bd:87:71:c4:0b:92:46:0a:44:89:6b: b7:01:5a:b8:ac:ba:56:09:4c:6c:eb:c8:30:74:7e: f9:3d:4f:40:e6:a8:5c:b4:0a:d3:92:cf:e5:22:25: 2b:a0:92:b4:5d:30:97:a3:2b:b0:bf:02:aa:14:b7: 93:83:96:ac:e3:2e:84:a8:ab:b6:e1:16:0f:4b:1e: 7f:1c:aa:a9:f0:df:24:ec:e0:9e:d0:48:28:c7:3e: 80:18:eb:2c:75:9e:e2:1f:7e:aa:e7:29:bc:45:6f: a8:c7:1b:21:a1:f9:d8:05:57:77:49:95:d7:a0:78: 7f:76:93:55:48:7c:b2:7d:72:8a:a7:0a:0c:2c:3d: 80:13:cf:55:8f:fb:81:fd:4f:9d:09:f6:b7:af:b9: 20:7e:81:37:66:62:8d:39:42:0a:89:a2:c7:b2:07: a7:31:f8:25:97:a8:da:b1:23:ba:77:36:d5:ff:12: 6d:0d:79:b2:dc:13:2d:46:8e:93:15:a7:74:15:74: 0e:22:f9:23:61:7b:4d:10:29:4f:bc:e4:79:4a:03: 9c:da:c8:9e:ea:60:b6:87:18:01:11:0b:90:cc:8c: 21:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:82:78:7D:C2:E9:8B:96:DC:3F:24:93:AA:FC:DA:35:BC:C4:9D:9C X509v3 Authority Key Identifier: keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:2f:5d:04:16:c3:03:3c:f1:ac:7a:1b:64:f5:aa:31:21:d8: e8:1e:ed:99:4a:33:38:aa:82:e6:62:c9:f6:86:35:e3:94:5c: 61:dc:15:53:0d:16:52:b8:01:d5:44:9c:34:b3:92:8f:7f:0c: 4e:aa:96:e9:31:11:0a:f6:38:7b:5a:94:df:ca:10:e1:bf:3c: a6:2c:8f:dd:3a:ec:4f:d3:04:f1:43:18:c2:f2:1f:3d:7f:f0: 6d:71:0d:84:1f:e8:c3:68:ce:14:ca:74:9a:7d:28:f2:04:60: 2f:05:84:51:fe:16:6c:9a:e9:94:92:4e:e3:d1:3a:a8:23:c4: 69:d7:05:87:4a:23:b8:f6:00:a0:0f:d7:2b:67:23:a6:96:a3: 95:f5:da:76:7e:7e:11:e4:65:b2:cb:84:c9:2d:5c:56:81:b8: a8:ef:2b:7e:95:c3:a5:cb:8b:37:35:e9:4f:cc:b8:2d:ec:3e: e2:72:42:b7:99:75:39:8c:d5:f6:a2:2a:d8:4c:1f:7d:fc:b5: ac:2a:52:06:bf:99:98:58:d0:a1:80:a4:45:5b:c8:ec:ed:9b: 70:13:e8:b0:7c:eb:52:5a:ea:4d:38:dc:16:c3:01:da:3e:eb: 15:49:2b:b1:6c:63:87:69:99:40:0a:73:d6:37:1a:9b:91:96: a8:d4:9c:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0ODkxMTAvBgNVBAUTKDdBRUE3NzdDNkIxOTE1MTM1MzNCMEUyRURGMEYwRDg0 Q0I3MEJBMTEwHhcNMjUxMTAzMDU1NzQyWhcNMjUxMTEwMDU1NzQyWjAYMRYwFAYD VQQDEw02OTA4NDQ1Ni0zMDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsY28cDQMVL2FIMmqM/41rJG9AO/a7kwAskPXcXdtcbyBvYdxxAuSRgpEiWu3 AVq4rLpWCUxs68gwdH75PU9A5qhctArTks/lIiUroJK0XTCXoyuwvwKqFLeTg5as 4y6EqKu24RYPSx5/HKqp8N8k7OCe0Egoxz6AGOssdZ7iH36q5ym8RW+oxxshofnY BVd3SZXXoHh/dpNVSHyyfXKKpwoMLD2AE89Vj/uB/U+dCfa3r7kgfoE3ZmKNOUIK iaLHsgenMfgll6jasSO6dzbV/xJtDXmy3BMtRo6TFad0FXQOIvkjYXtNEClPvOR5 SgOc2sie6mC2hxgBEQuQzIwhpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqCeH3C 6YuW3D8kk6r82jW8xJ2cMB8GA1UdIwQYMBaAFHrqd3xrGRUTUzsOLt8PDYTLcLoR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ4OS8zMjg5QTkwRTlC RkExMUVGQkVCOTg0NkVDNEY5QUUwMi9ldXAzZkdzWkZSTlRPdzR1M3c4TmhNdHd1 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2V1cDNmR3NaRlJOVE93NHUzdzhOaE10d3VoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ4OS8zMjg5QTkwRTlCRkExMUVGQkVCOTg0NkVDNEY5QUUwMi9ldXAzZkdzWkZS TlRPdzR1M3c4TmhNdHd1aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOL10EFsMDPPGsehtk9aoxIdjoHu2ZSjM4qoLmYsn2hjXjlFxh3BVT DRZSuAHVRJw0s5KPfwxOqpbpMREK9jh7WpTfyhDhvzymLI/dOuxP0wTxQxjC8h89 f/BtcQ2EH+jDaM4UynSafSjyBGAvBYRR/hZsmumUkk7j0TqoI8Rp1wWHSiO49gCg D9crZyOmlqOV9dp2fn4R5GWyy4TJLVxWgbio7yt+lcOly4s3NelPzLgt7D7ickK3 mXU5jNX2oirYTB99/LWsKlIGv5mYWNChgKRFW8js7ZtwE+iwfOtSWupNONwWwwHa PusVSSuxbGOHaZlACnPWNxqbkZao1Jyq -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:28 2025 by rpki-client