$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft File: ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft (raw, json) Hash identifier: qVko5zElemuBqBJWWdRlY9aglFFp/dP01pDLlyP75qQ= Subject key identifier: 89:ED:BF:C1:28:04:74:F9:66:82:84:8A:97:CA:4C:41:E3:E5:7E:51 Authority key identifier: 7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D Certificate issuer: /CN=A91E782F/serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft Manifest number: EE Signing time: Sun 19 Oct 2025 08:16:19 +0000 Manifest this update: Sun 19 Oct 2025 08:16:18 +0000 Manifest next update: Sun 26 Oct 2025 08:16:18 +0000 Files and hashes: 1: ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl (hash: ZiOGgRsYOK4JChkXbujxn3KzLyYlGMONsJq4cssPBg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E782F, serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D Validity Not Before: Oct 19 08:16:18 2025 GMT Not After : Oct 26 08:16:18 2025 GMT Subject: CN=68f49e52-e5bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c1:8e:ce:44:f4:b1:1b:8b:4a:09:87:ac:57: b0:c0:83:95:93:40:cc:b2:b3:07:b8:6b:48:45:59: e7:3c:97:35:4b:48:56:ec:1a:29:b2:78:cb:94:51: 0f:0a:b0:25:b7:ca:70:ee:7a:f1:54:73:3b:64:52: 27:53:a0:bc:c6:9f:db:a8:f7:87:c3:c4:ae:c2:75: fb:6c:aa:ec:73:20:52:92:b3:74:99:04:d2:15:5d: 3f:eb:f5:3c:f1:7e:75:4f:5e:29:c3:7d:ee:a4:13: e8:29:dc:df:99:5f:01:34:ca:cf:6b:1c:4b:47:a2: d6:51:20:89:e3:a3:79:39:ed:0f:1d:4d:3e:35:34: 05:cb:08:05:86:fb:70:6f:af:60:89:c0:ea:b7:25: 1f:39:57:3c:d0:f9:4c:73:ad:bb:c2:9f:8e:ef:e3: bf:be:60:a5:68:cb:7c:c0:2c:a7:a8:38:70:f0:bb: bf:56:84:4e:f6:89:83:45:47:38:94:04:46:3c:4e: e2:65:5c:ab:5f:04:a2:46:bc:a6:99:1b:d2:33:b6: a5:df:dd:9b:64:06:f3:47:2d:85:bc:3b:99:a9:af: 84:47:ef:ea:66:dc:ba:07:e3:3f:0e:0f:8c:56:56: 3b:20:23:04:3f:8e:67:36:2f:a9:32:d8:84:4c:44: f1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:ED:BF:C1:28:04:74:F9:66:82:84:8A:97:CA:4C:41:E3:E5:7E:51 X509v3 Authority Key Identifier: keyid:7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:6a:af:e0:fa:7f:0b:20:4e:c0:e9:b1:97:e7:97:1f:78:d8: 84:22:6a:da:75:20:f9:6d:14:51:15:a1:bc:80:85:13:13:58: ac:b6:d0:47:64:4e:e5:1c:a2:f3:cc:3c:f0:a7:cf:16:bc:d5: cf:81:e0:4d:ef:9c:4d:19:e8:cd:df:88:54:e7:75:88:41:9b: e3:85:c5:56:f9:a5:18:92:88:09:b6:64:e5:21:a3:36:d1:66: 6b:66:48:0d:2e:80:39:8d:82:fe:ca:6f:a8:99:1a:41:0a:86: c2:15:da:53:d2:95:58:ac:67:0e:31:08:c6:84:b9:f4:73:01: d2:d1:5e:3d:4d:63:e4:0d:92:68:0b:dd:fb:0a:21:b3:1f:b6: 81:f7:6d:e8:d6:9e:55:ca:47:5d:5e:5e:b4:94:05:f5:7c:06: b8:82:42:fb:13:ab:1d:3d:a9:42:9a:8d:06:98:22:16:95:84: db:f4:3c:39:9f:6d:aa:d6:a3:bc:39:28:fc:db:37:67:81:53: c3:a0:15:3e:7e:7f:c4:b3:cd:ef:3c:cd:e4:ef:30:ae:61:1f: c3:33:a5:2e:73:5a:58:2d:ba:96:c0:be:71:86:7a:d1:93:b8: f5:7d:57:85:10:66:2d:44:92:80:68:af:6f:d3:aa:f9:aa:ef: 3f:6c:5c:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4MkYxMTAvBgNVBAUTKDdBOUZGODY0QzUwMzE4MDY3MTMwNTg4RTZEQkE5MjhC QTFDMDNBNUQwHhcNMjUxMDE5MDgxNjE4WhcNMjUxMDI2MDgxNjE4WjAYMRYwFAYD VQQDEw02OGY0OWU1Mi1lNWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7cGOzkT0sRuLSgmHrFewwIOVk0DMsrMHuGtIRVnnPJc1S0hW7BopsnjLlFEP CrAlt8pw7nrxVHM7ZFInU6C8xp/bqPeHw8SuwnX7bKrscyBSkrN0mQTSFV0/6/U8 8X51T14pw33upBPoKdzfmV8BNMrPaxxLR6LWUSCJ46N5Oe0PHU0+NTQFywgFhvtw b69gicDqtyUfOVc80PlMc627wp+O7+O/vmClaMt8wCynqDhw8Lu/VoRO9omDRUc4 lARGPE7iZVyrXwSiRrymmRvSM7al392bZAbzRy2FvDuZqa+ER+/qZty6B+M/Dg+M VlY7ICMEP45nNi+pMtiETETxWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIntv8Eo BHT5ZoKEipfKTEHj5X5RMB8GA1UdIwQYMBaAFHqf+GTFAxgGcTBYjm26kouhwDpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi83NjRDQTJEMDQw NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi9lcF80Wk1VREdBWnhNRmlPYmJxU2k2SEFP bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwXzRaTVVER0FaeE1GaU9iYnFTaTZIQU9sMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzgyRi83NjRDQTJEMDQwNzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi9lcF80Wk1VREdB WnhNRmlPYmJxU2k2SEFPbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsaq/g+n8LIE7A6bGX55cfeNiEImradSD5bRRRFaG8gIUTE1isttBH ZE7lHKLzzDzwp88WvNXPgeBN75xNGejN34hU53WIQZvjhcVW+aUYkogJtmTlIaM2 0WZrZkgNLoA5jYL+ym+omRpBCobCFdpT0pVYrGcOMQjGhLn0cwHS0V49TWPkDZJo C937CiGzH7aB923o1p5VykddXl60lAX1fAa4gkL7E6sdPalCmo0GmCIWlYTb9Dw5 n22q1qO8OSj82zdngVPDoBU+fn/Es83vPM3k7zCuYR/DM6Uuc1pYLbqWwL5xhnrR k7j1fVeFEGYtRJKAaK9v06r5qu8/bFw5 -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:35 2025 by rpki-client