$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft File: EOplMmUQJQKUQ84SQ1fTPSisJMA.mft (raw, json) Hash identifier: VVqggxcAiuBFE4T/L8XHWr/CKt0oqnjlWMm/W6g3vr4= Subject key identifier: 48:D4:E5:ED:36:35:89:FE:BE:ED:FF:77:C4:44:41:6D:51:80:A6:C5 Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 Certificate issuer: /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft Manifest number: E7 Signing time: Sun 19 Oct 2025 08:24:10 +0000 Manifest this update: Sun 19 Oct 2025 08:24:09 +0000 Manifest next update: Sun 26 Oct 2025 08:24:09 +0000 Files and hashes: 1: EOplMmUQJQKUQ84SQ1fTPSisJMA.crl (hash: O2M0EiTNLtAcDIE3lrV/lWKCqA0Q5YL4oipCRfUrV3Y=) 2: 55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (hash: HYF/fg1voE6IFgfpnqUye0EtCWfbuCFF1mA1Z69GiMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7C90, serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Validity Not Before: Oct 19 08:24:09 2025 GMT Not After : Oct 26 08:24:09 2025 GMT Subject: CN=68f4a02a-79c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7e:e5:f1:92:79:d7:26:f6:78:fe:9f:c9:2d: 02:59:48:06:46:75:0c:08:2b:18:a8:12:b2:63:f6: 73:a9:0d:12:65:96:5a:9b:89:3e:c0:8e:7d:79:de: fd:92:89:c5:e8:b6:b4:b2:73:a3:e7:a3:0f:1b:c1: 73:46:e1:07:d1:69:89:ac:49:61:fc:da:5a:00:17: 4d:ca:07:6f:39:3f:09:a6:14:4e:b4:48:87:36:e6: 04:ba:df:00:b9:76:b3:62:a7:80:4d:4c:b4:3b:ef: 57:d5:8d:aa:3b:12:93:29:e6:fb:3d:8c:d6:16:cf: 36:26:24:b7:a4:81:10:c2:9c:09:aa:c5:ba:74:92: e9:83:8b:40:1c:1f:79:89:e3:3b:02:2c:a0:ad:c4: f2:e3:a1:73:ee:ba:7a:ab:24:06:a9:1c:18:6c:b5: a5:d0:8d:93:19:99:5e:bc:21:e7:65:1b:db:b2:8c: 04:b8:c8:0f:4d:0a:4a:cb:70:83:86:c2:b4:d2:d4: 73:e9:3b:ca:ba:d6:0b:bb:95:49:00:fd:eb:ba:92: 0d:75:db:27:2b:ea:91:05:51:d6:73:00:72:e8:25: 07:06:68:99:72:9e:da:46:3d:84:01:7e:61:7f:56: 17:10:8d:bc:ef:f9:0b:8f:68:e4:1d:f1:a4:14:c5: e5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D4:E5:ED:36:35:89:FE:BE:ED:FF:77:C4:44:41:6D:51:80:A6:C5 X509v3 Authority Key Identifier: keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:e9:25:69:62:e8:8b:fd:a4:f5:5c:de:a3:da:37:fe:39:02: a7:d4:ff:ae:fb:70:0a:70:b7:4b:37:ee:89:ea:fa:87:a5:61: 39:fb:9b:13:42:0d:1b:0e:6e:0f:e6:10:59:1a:59:8c:20:ee: 5b:68:52:bc:11:e7:7d:b4:00:f7:62:5c:0c:a7:ff:bc:cf:40: 40:d3:75:33:30:4d:f1:bf:b9:5b:49:12:23:94:0e:41:8d:41: 9b:d8:73:35:cd:3e:08:b7:fb:a2:fb:cd:8d:06:04:21:6a:42: 9f:9f:55:55:dd:fa:2c:d2:89:64:d5:a0:d7:de:5a:e8:82:4b: a8:c7:12:5d:9e:04:d4:7f:0d:98:f6:6d:d1:b9:73:3f:a8:9d: 2d:66:6f:f6:ea:ff:a1:24:b7:cf:8c:9c:4f:ea:ea:11:7f:2c: fa:9a:8a:55:2e:ae:3e:8c:3b:5a:72:8d:68:62:f4:47:09:f6: c7:a9:65:80:75:72:f0:68:fe:60:c4:a1:05:19:f2:d6:8c:ec: 4b:cc:5d:fe:d0:a4:3a:5e:a2:86:f3:16:f8:99:41:56:1c:74: 52:9c:11:cc:61:ad:26:a2:7e:19:a6:10:66:6d:3d:f8:04:15: 8c:35:1d:dd:b6:8b:0c:e6:ab:bb:fe:77:7f:d3:ec:9e:79:51: 8c:e4:19:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdDOTAxMTAvBgNVBAUTKDEwRUE2NTMyNjUxMDI1MDI5NDQzQ0UxMjQzNTdEMzNE MjhBQzI0QzAwHhcNMjUxMDE5MDgyNDA5WhcNMjUxMDI2MDgyNDA5WjAYMRYwFAYD VQQDEw02OGY0YTAyYS03OWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArX7l8ZJ51yb2eP6fyS0CWUgGRnUMCCsYqBKyY/ZzqQ0SZZZam4k+wI59ed79 konF6La0snOj56MPG8FzRuEH0WmJrElh/NpaABdNygdvOT8JphROtEiHNuYEut8A uXazYqeATUy0O+9X1Y2qOxKTKeb7PYzWFs82JiS3pIEQwpwJqsW6dJLpg4tAHB95 ieM7AiygrcTy46Fz7rp6qyQGqRwYbLWl0I2TGZlevCHnZRvbsowEuMgPTQpKy3CD hsK00tRz6TvKutYLu5VJAP3rupINddsnK+qRBVHWcwBy6CUHBmiZcp7aRj2EAX5h f1YXEI287/kLj2jkHfGkFMXlxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjU5e02 NYn+vu3/d8REQW1RgKbFMB8GA1UdIwQYMBaAFBDqZTJlECUClEPOEkNX0z0orCTA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0M5MC8wMEQ3QjA0RTRF RTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpRS1VRODRTUTFmVFBTaXNK TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VPcGxNbVVRSlFLVVE4NFNRMWZUUFNpc0pNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0M5MC8wMEQ3QjA0RTRFRTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpR S1VRODRTUTFmVFBTaXNKTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC56SVpYuiL/aT1XN6j2jf+OQKn1P+u+3AKcLdLN+6J6vqHpWE5+5sT Qg0bDm4P5hBZGlmMIO5baFK8Eed9tAD3YlwMp/+8z0BA03UzME3xv7lbSRIjlA5B jUGb2HM1zT4It/ui+82NBgQhakKfn1VV3fos0olk1aDX3lrogkuoxxJdngTUfw2Y 9m3RuXM/qJ0tZm/26v+hJLfPjJxP6uoRfyz6mopVLq4+jDtaco1oYvRHCfbHqWWA dXLwaP5gxKEFGfLWjOxLzF3+0KQ6XqKG8xb4mUFWHHRSnBHMYa0mon4ZphBmbT34 BBWMNR3dtosM5qu7/nd/0+yeeVGM5Bm8 -----END CERTIFICATE-----Generated at Mon Oct 20 06:55:54 2025 by rpki-client