$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft File: EOplMmUQJQKUQ84SQ1fTPSisJMA.mft (raw, json) Hash identifier: mZRjJJOsWnzOrWT0Z3bAZ4sxIe3he6NFUgc7KbZUovA= Subject key identifier: 58:D5:6D:41:27:C9:D0:DF:DA:E5:A5:25:8E:8D:26:D9:B8:28:C7:EB Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 Certificate issuer: /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft Manifest number: AC Signing time: Sun 29 Jun 2025 05:07:40 +0000 Manifest this update: Sun 29 Jun 2025 05:07:39 +0000 Manifest next update: Sun 06 Jul 2025 05:07:39 +0000 Files and hashes: 1: EOplMmUQJQKUQ84SQ1fTPSisJMA.crl (hash: M2NeX0cWdIYkJXwPUSqdIEe1Mldarbc4djXmG9ketxs=) 2: 55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (hash: hYGISbkx0iOPIWsemxA5+ThrUTq4VIEQEwarwfGguJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7C90, serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Validity Not Before: Jun 29 05:07:39 2025 GMT Not After : Jul 6 05:07:39 2025 GMT Subject: CN=6860ca1c-0d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:54:c8:00:84:f2:09:ab:46:fc:33:6f:3f:18: 26:09:93:af:21:db:0b:02:bb:76:dd:42:63:6d:80: f2:d5:67:58:0a:bb:18:75:e0:e1:06:58:93:66:75: 55:17:6d:4a:c9:0c:68:2d:e0:a3:b1:6b:40:cf:da: ac:e9:d8:05:46:7f:02:f1:4f:fc:b7:69:b5:cd:7c: db:d4:5f:99:49:49:b6:b6:f1:6c:54:10:94:8d:78: 81:64:3d:8b:30:42:9b:d2:e6:d1:21:d3:db:13:5f: ff:e7:f4:c4:a5:bc:6c:1e:5c:df:31:0a:d8:bf:9f: 9e:b7:7d:2d:9d:f0:3d:f7:5a:b7:d9:b6:b9:2e:48: a9:13:2e:9d:dc:3f:54:2c:d1:ab:45:6f:5a:bc:e8: 41:ab:3c:b8:35:5c:05:5f:43:f5:a5:77:22:b7:b7: c2:50:f6:2d:22:a2:dc:77:49:7e:ea:1d:54:7c:37: 33:71:9a:ff:76:2a:7d:e3:3a:cc:09:f7:30:ae:f1: 18:58:9a:a8:36:8d:87:20:d3:10:cb:38:cb:ba:ec: 05:97:4f:12:dc:40:aa:be:6d:6c:8e:a0:f5:09:bc: 5e:c2:bf:58:72:fd:1d:55:ed:bc:3f:9b:a7:90:7e: 16:b0:c2:3c:c3:86:1f:f7:1d:2d:7f:76:95:b8:c8: 50:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D5:6D:41:27:C9:D0:DF:DA:E5:A5:25:8E:8D:26:D9:B8:28:C7:EB X509v3 Authority Key Identifier: keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4d:5f:33:62:db:eb:5f:45:b8:81:96:7f:b6:c1:d5:1f:9c: 93:bd:29:0a:b3:ab:da:cf:2a:3d:99:3c:1a:93:83:a2:f4:b9: 9a:ef:1d:56:01:9e:db:50:19:d2:3f:50:f8:ef:99:a2:e4:ea: 0b:00:cc:e6:ff:80:60:0d:40:de:8a:e3:82:bb:0f:43:35:2a: 83:4b:f0:75:13:00:a7:fd:1d:5a:af:af:1d:bc:66:cd:3a:f1: 25:3b:32:26:d8:fe:87:b6:f2:d7:09:01:55:e6:da:d1:ba:24: 2a:d1:45:5c:76:67:6f:6f:75:89:a5:f2:ad:de:1c:f4:c5:c7: ce:3d:3a:13:eb:d1:97:10:91:1c:fd:98:00:11:e0:2a:ec:51: 4a:9b:27:bd:1b:39:a2:98:67:a9:d2:71:50:ec:00:27:6f:11: 9e:5a:eb:66:4a:08:b6:c4:b3:66:cf:52:09:f1:2d:9f:e4:33: 5e:c2:9e:8b:0a:af:69:c4:7e:fb:20:ed:6d:39:36:92:0a:d3: 50:b3:4b:f0:9b:b7:3f:f0:6b:3b:28:a1:fc:cb:2d:41:e5:49: f2:9c:a4:76:2b:85:47:40:29:a2:fe:e5:98:7a:d2:21:ea:5e: 36:0a:84:06:b5:1c:2f:44:cc:d5:e8:21:07:26:13:77:a3:4a: 74:87:55:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdDOTAxMTAvBgNVBAUTKDEwRUE2NTMyNjUxMDI1MDI5NDQzQ0UxMjQzNTdEMzNE MjhBQzI0QzAwHhcNMjUwNjI5MDUwNzM5WhcNMjUwNzA2MDUwNzM5WjAYMRYwFAYD VQQDEw02ODYwY2ExYy0wZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFTIAITyCatG/DNvPxgmCZOvIdsLArt23UJjbYDy1WdYCrsYdeDhBliTZnVV F21KyQxoLeCjsWtAz9qs6dgFRn8C8U/8t2m1zXzb1F+ZSUm2tvFsVBCUjXiBZD2L MEKb0ubRIdPbE1//5/TEpbxsHlzfMQrYv5+et30tnfA991q32ba5LkipEy6d3D9U LNGrRW9avOhBqzy4NVwFX0P1pXcit7fCUPYtIqLcd0l+6h1UfDczcZr/dip94zrM CfcwrvEYWJqoNo2HINMQyzjLuuwFl08S3ECqvm1sjqD1Cbxewr9Ycv0dVe28P5un kH4WsMI8w4Yf9x0tf3aVuMhQbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjVbUEn ydDf2uWlJY6NJtm4KMfrMB8GA1UdIwQYMBaAFBDqZTJlECUClEPOEkNX0z0orCTA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0M5MC8wMEQ3QjA0RTRF RTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpRS1VRODRTUTFmVFBTaXNK TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VPcGxNbVVRSlFLVVE4NFNRMWZUUFNpc0pNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0M5MC8wMEQ3QjA0RTRFRTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpR S1VRODRTUTFmVFBTaXNKTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALTV8zYtvrX0W4gZZ/tsHVH5yTvSkKs6vazyo9mTwak4Oi9Lma7x1W AZ7bUBnSP1D475mi5OoLAMzm/4BgDUDeiuOCuw9DNSqDS/B1EwCn/R1ar68dvGbN OvElOzIm2P6HtvLXCQFV5trRuiQq0UVcdmdvb3WJpfKt3hz0xcfOPToT69GXEJEc /ZgAEeAq7FFKmye9GzmimGep0nFQ7AAnbxGeWutmSgi2xLNmz1IJ8S2f5DNewp6L Cq9pxH77IO1tOTaSCtNQs0vwm7c/8Gs7KKH8yy1B5UnynKR2K4VHQCmi/uWYetIh 6l42CoQGtRwvRMzV6CEHJhN3o0p0h1XZ -----END CERTIFICATE-----Generated at Sun Jun 29 14:15:35 2025 by rpki-client