$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft File: EOplMmUQJQKUQ84SQ1fTPSisJMA.mft (raw, json) Hash identifier: 3ocqJ3GxbJS/MSHPhQBh9lKRMCmsJynTmnA4rUxOgAI= Subject key identifier: C4:2D:F0:73:DE:F4:C2:83:3B:F6:55:ED:77:32:2C:83:5A:C1:10:4B Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 Certificate issuer: /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft Manifest number: C8 Signing time: Sat 23 Aug 2025 05:54:37 +0000 Manifest this update: Sat 23 Aug 2025 05:54:37 +0000 Manifest next update: Sat 30 Aug 2025 05:54:37 +0000 Files and hashes: 1: EOplMmUQJQKUQ84SQ1fTPSisJMA.crl (hash: HLyQBPkd5g1aoZyU6mOVM4kev+ppgwHFU8snJ9ZkhzY=) 2: 55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (hash: hYGISbkx0iOPIWsemxA5+ThrUTq4VIEQEwarwfGguJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7C90, serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Validity Not Before: Aug 23 05:54:37 2025 GMT Not After : Aug 30 05:54:37 2025 GMT Subject: CN=68a9579d-345a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:22:45:4a:fe:eb:01:2b:9b:b9:61:7d:b0:ab: 8f:e3:da:81:9c:f4:7a:99:84:9a:97:94:f5:38:14: eb:8e:07:c5:b5:a9:df:62:7b:be:0f:e0:0a:20:2a: 80:47:ce:bf:7a:e3:6b:05:6b:f2:0f:ce:d0:37:cd: a6:00:2c:25:11:0c:2d:9c:b3:3c:00:8e:68:ba:42: f8:6c:d2:18:55:55:c6:52:55:ab:27:6c:6b:7e:46: 6d:00:b9:80:16:12:d2:96:f9:70:d7:51:e7:59:c8: c6:33:f7:f4:ea:4a:f4:d2:57:47:37:e3:a6:10:32: 19:60:89:41:b4:d0:1b:50:88:e1:6d:5f:35:bd:09: 88:c2:d4:19:72:b9:9c:02:93:36:15:c1:40:25:39: 81:eb:ef:96:35:3f:09:14:73:9e:da:6d:ce:ee:2c: 0e:06:e3:de:be:69:b8:ec:7a:96:56:42:4f:5e:22: e1:c4:d3:65:0a:49:c9:e1:ad:f2:7e:c9:1a:64:8f: b5:7a:56:49:22:64:4c:9c:98:aa:e3:0c:f3:ea:65: 20:f0:93:48:3b:d7:4a:70:10:29:fc:85:9b:12:ba: 3a:81:78:15:50:46:5d:89:ad:7a:e4:7d:df:61:51: 9d:7a:11:63:e8:cc:71:3a:66:5d:79:06:19:be:d0: ff:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2D:F0:73:DE:F4:C2:83:3B:F6:55:ED:77:32:2C:83:5A:C1:10:4B X509v3 Authority Key Identifier: keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:18:2d:74:6b:19:12:0d:ec:ca:05:38:1f:f8:56:a4:f9:14: 51:b4:bb:70:89:b4:f9:8b:05:92:13:c2:a3:91:e4:97:69:10: bd:e4:c0:f9:68:e8:2d:e8:10:44:3c:1c:93:b6:dc:7c:bc:f6: 19:83:12:df:9c:9d:5d:d2:a2:6b:be:54:e7:a8:96:cf:2b:2e: 5f:00:c7:a5:9a:70:6f:69:df:24:2d:da:58:0a:7b:2a:d7:4e: b4:18:57:50:19:51:83:59:a9:ca:c6:5a:4b:cc:5b:ab:c2:55: 85:eb:38:fb:07:16:ae:27:e2:11:e2:a0:01:73:be:fd:62:7e: 1b:60:05:96:42:bf:ff:3c:33:60:83:5a:a2:89:25:93:86:fa: 43:a3:5c:2f:ea:58:37:2a:94:dd:2a:e2:d6:85:da:1e:56:dd: 37:97:7e:80:51:85:3d:ea:63:25:4a:d6:d7:ae:27:67:aa:35: cd:64:ce:c3:5b:aa:85:eb:b9:f4:6e:c7:b6:36:03:d0:a5:68: d9:2d:e7:7b:11:ae:dd:02:82:b5:67:17:0f:a6:cb:69:a7:31: e2:65:e9:28:d3:0e:1e:46:3f:4c:64:14:e2:30:8b:41:a3:03: 6a:f1:a6:89:f9:49:e1:b3:3e:8a:41:48:bd:d6:a5:27:39:51: c6:69:a7:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdDOTAxMTAvBgNVBAUTKDEwRUE2NTMyNjUxMDI1MDI5NDQzQ0UxMjQzNTdEMzNE MjhBQzI0QzAwHhcNMjUwODIzMDU1NDM3WhcNMjUwODMwMDU1NDM3WjAYMRYwFAYD VQQDEw02OGE5NTc5ZC0zNDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSJFSv7rASubuWF9sKuP49qBnPR6mYSal5T1OBTrjgfFtanfYnu+D+AKICqA R86/euNrBWvyD87QN82mACwlEQwtnLM8AI5oukL4bNIYVVXGUlWrJ2xrfkZtALmA FhLSlvlw11HnWcjGM/f06kr00ldHN+OmEDIZYIlBtNAbUIjhbV81vQmIwtQZcrmc ApM2FcFAJTmB6++WNT8JFHOe2m3O7iwOBuPevmm47HqWVkJPXiLhxNNlCknJ4a3y fskaZI+1elZJImRMnJiq4wzz6mUg8JNIO9dKcBAp/IWbEro6gXgVUEZdia165H3f YVGdehFj6MxxOmZdeQYZvtD/DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQt8HPe 9MKDO/ZV7XcyLINawRBLMB8GA1UdIwQYMBaAFBDqZTJlECUClEPOEkNX0z0orCTA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0M5MC8wMEQ3QjA0RTRF RTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpRS1VRODRTUTFmVFBTaXNK TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VPcGxNbVVRSlFLVVE4NFNRMWZUUFNpc0pNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0M5MC8wMEQ3QjA0RTRFRTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpR S1VRODRTUTFmVFBTaXNKTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0GC10axkSDezKBTgf+Fak+RRRtLtwibT5iwWSE8KjkeSXaRC95MD5 aOgt6BBEPByTttx8vPYZgxLfnJ1d0qJrvlTnqJbPKy5fAMelmnBvad8kLdpYCnsq 1060GFdQGVGDWanKxlpLzFurwlWF6zj7BxauJ+IR4qABc779Yn4bYAWWQr//PDNg g1qiiSWThvpDo1wv6lg3KpTdKuLWhdoeVt03l36AUYU96mMlStbXridnqjXNZM7D W6qF67n0bse2NgPQpWjZLed7Ea7dAoK1ZxcPpstppzHiZeko0w4eRj9MZBTiMItB owNq8aaJ+Unhsz6KQUi91qUnOVHGaaeL -----END CERTIFICATE-----Generated at Sat Aug 23 13:39:58 2025 by rpki-client