$ rpki-client -vvf rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft File: eo-Oag5Y9XX8feHNg4R51_c_4nk.mft (raw, json) Hash identifier: QjU0i4eDXbNZszfLHdeCfjsZJTxzaJXWsgsb7d5uEEM= Subject key identifier: 72:29:29:86:CB:C2:0E:B8:62:2B:EC:12:5E:89:2F:33:80:69:AB:43 Authority key identifier: 7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79 Certificate issuer: /CN=A91775B7/serialNumber=7A8F8E6A0E58F575FC7DE1CD838479D7F73FE279 Certificate serial: 34BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft Manifest number: 34AD Signing time: Sun 20 Jul 2025 15:07:57 +0000 Manifest this update: Sun 20 Jul 2025 15:07:57 +0000 Manifest next update: Sun 27 Jul 2025 15:07:57 +0000 Files and hashes: 1: eo-Oag5Y9XX8feHNg4R51_c_4nk.crl (hash: iR1h/OAPCVzhPRs5Y5szeQqIxaaadxTocZeGa7i7Akk=) 2: 92210D6AB66711EC86445C11C4F9AE02.roa (hash: d5k3YRL/FAKw8Wd7VKIcrrwAMtmamoxhcmJJDByEkkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.crl rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13498 (0x34ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775B7, serialNumber=7A8F8E6A0E58F575FC7DE1CD838479D7F73FE279 Validity Not Before: Jul 20 15:07:57 2025 GMT Not After : Jul 27 15:07:57 2025 GMT Subject: CN=687d064d-4794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:f3:87:f2:71:ea:45:a1:c5:39:bb:d5:3c:05: c1:b8:a8:fb:a7:22:a8:46:a5:be:f1:95:e8:79:9f: cb:09:91:63:4a:2a:3a:62:94:dd:79:c2:7f:8a:d4: 83:a2:d2:61:68:ec:d7:99:18:11:ae:85:06:97:4d: 64:0d:bd:28:c4:d0:b2:a1:47:1e:78:9c:b6:05:ab: dc:48:c2:07:4c:fd:f1:64:6d:46:4d:14:17:68:ce: 21:c4:df:ed:5d:ec:73:6f:c9:5d:3a:87:75:28:cd: 47:47:b6:2a:85:3d:c4:90:cf:20:2d:6b:b1:5a:c9: 08:e8:7d:65:33:70:0c:b6:8a:2f:bc:6e:c6:fd:8c: 06:86:4f:f1:28:16:0d:8a:d6:a1:07:e0:8a:89:35: d8:ff:73:89:a6:89:d9:9d:7f:51:8a:28:c7:21:1a: 5b:2a:08:32:47:6b:1e:1f:86:33:7c:0e:a9:5f:d2: 4e:06:c8:f0:62:60:a9:63:3d:99:55:04:46:be:52: 1c:77:94:8f:3f:8f:35:ff:ee:f1:b7:cc:4b:62:fe: 5f:fb:87:d4:55:28:2a:02:b5:2a:29:1c:d7:85:bd: 75:db:67:49:87:a9:c3:68:eb:db:01:d2:24:e0:27: 33:7e:fe:d9:6e:72:8d:1c:5c:03:3b:b4:88:a7:82: 15:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:29:29:86:CB:C2:0E:B8:62:2B:EC:12:5E:89:2F:33:80:69:AB:43 X509v3 Authority Key Identifier: keyid:7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:52:4a:36:cf:45:67:a7:bc:6a:0c:76:4b:84:be:4a:32:6f: 5c:91:bb:bf:11:9c:ff:3b:17:46:58:10:cb:39:16:01:71:89: 4d:37:26:f5:b9:8c:11:19:56:78:5b:47:81:74:3b:6d:59:74: 60:f0:ae:76:b0:fd:c9:05:6f:d0:00:e3:3a:57:bb:e2:70:7b: 61:9d:ae:9a:cf:4f:66:1d:0e:ec:22:5a:a0:8e:ed:e5:06:3c: 06:1a:82:b8:85:ec:ea:40:13:07:97:f4:e8:66:f8:ba:15:24: 1a:9c:6a:0d:f2:a7:0f:8c:d4:ea:0c:7f:38:ce:f9:6e:ec:f8: 0f:92:2c:bc:40:1a:ba:ff:42:98:84:b7:83:ae:4a:e4:f7:5e: e4:e9:66:36:fc:cc:33:1c:2d:6c:9b:c6:47:39:0a:06:60:f2: 01:b8:ff:76:ee:62:5c:66:c7:4f:29:a2:aa:74:2c:77:1d:9f: 33:5e:b2:a9:93:2e:fa:95:bb:d3:80:a3:27:7b:0e:df:13:54: 9c:52:07:98:d9:d1:c5:ee:ed:0c:71:ef:0c:e4:bb:22:29:03: c5:0c:78:a0:8d:d4:e0:c4:37:4e:a7:aa:b2:14:e0:ee:5c:ec: 68:65:24:01:98:24:93:28:b1:8d:e2:c9:08:32:8d:aa:a4:9e: ea:30:ff:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1QjcxMTAvBgNVBAUTKDdBOEY4RTZBMEU1OEY1NzVGQzdERTFDRDgzODQ3OUQ3 RjczRkUyNzkwHhcNMjUwNzIwMTUwNzU3WhcNMjUwNzI3MTUwNzU3WjAYMRYwFAYD VQQDEw02ODdkMDY0ZC00Nzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/fOH8nHqRaHFObvVPAXBuKj7pyKoRqW+8ZXoeZ/LCZFjSio6YpTdecJ/itSD otJhaOzXmRgRroUGl01kDb0oxNCyoUceeJy2BavcSMIHTP3xZG1GTRQXaM4hxN/t Xexzb8ldOod1KM1HR7YqhT3EkM8gLWuxWskI6H1lM3AMtoovvG7G/YwGhk/xKBYN itahB+CKiTXY/3OJponZnX9RiijHIRpbKggyR2seH4YzfA6pX9JOBsjwYmCpYz2Z VQRGvlIcd5SPP481/+7xt8xLYv5f+4fUVSgqArUqKRzXhb1122dJh6nDaOvbAdIk 4Cczfv7ZbnKNHFwDO7SIp4IVvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIpKYbL wg64YivsEl6JLzOAaatDMB8GA1UdIwQYMBaAFHqPjmoOWPV1/H3hzYOEedf3P+J5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVCNy8wOEE0OUJEMjFE QTIxMUUyOTM2NDk1OTQwOEIwMkNEMi9lby1PYWc1WTlYWDhmZUhOZzRSNTFfY180 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VvLU9hZzVZOVhYOGZlSE5nNFI1MV9jXzRuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzVCNy8wOEE0OUJEMjFEQTIxMUUyOTM2NDk1OTQwOEIwMkNEMi9lby1PYWc1WTlY WDhmZUhOZzRSNTFfY180bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgUko2z0Vnp7xqDHZLhL5KMm9ckbu/EZz/OxdGWBDLORYBcYlNNyb1 uYwRGVZ4W0eBdDttWXRg8K52sP3JBW/QAOM6V7vicHthna6az09mHQ7sIlqgju3l BjwGGoK4hezqQBMHl/ToZvi6FSQanGoN8qcPjNTqDH84zvlu7PgPkiy8QBq6/0KY hLeDrkrk917k6WY2/MwzHC1sm8ZHOQoGYPIBuP927mJcZsdPKaKqdCx3HZ8zXrKp ky76lbvTgKMnew7fE1ScUgeY2dHF7u0Mce8M5LsiKQPFDHigjdTgxDdOp6qyFODu XOxoZSQBmCSTKLGN4skIMo2qpJ7qMP+U -----END CERTIFICATE-----Generated at Mon Jul 21 07:13:07 2025 by rpki-client