$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft File: EOplMmUQJQKUQ84SQ1fTPSisJMA.mft (raw, json) Hash identifier: WYtho9K3KaOFewaOvYdtGHm33ZKeXYswbpMO8fcqgRw= Subject key identifier: DB:F6:DB:3C:52:4E:A2:70:75:E6:10:BA:8E:BC:8B:D3:F9:69:6A:CA Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 Certificate issuer: /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft Manifest number: A0 Signing time: Thu 05 Jun 2025 05:36:30 +0000 Manifest this update: Thu 05 Jun 2025 05:36:30 +0000 Manifest next update: Thu 12 Jun 2025 05:36:30 +0000 Files and hashes: 1: EOplMmUQJQKUQ84SQ1fTPSisJMA.crl (hash: 7fhsKUOn93fvWC06MNBWoToRd9pxkgbh24Q/cNDL8xE=) 2: 55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (hash: hYGISbkx0iOPIWsemxA5+ThrUTq4VIEQEwarwfGguJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 05:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7C90, serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Validity Not Before: Jun 5 05:36:30 2025 GMT Not After : Jun 12 05:36:30 2025 GMT Subject: CN=68412cde-7054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:45:f3:55:e9:a3:07:91:f9:65:52:6e:63: 45:ab:b9:70:8c:73:ee:6d:ea:6b:e6:b1:68:6e:08: 08:9f:19:57:de:e5:84:be:bb:f1:3e:97:19:85:18: c8:69:af:31:7b:d4:45:b2:f6:cd:5d:86:35:70:ed: de:95:5a:29:af:e5:c0:fc:66:26:a4:18:e6:30:49: 21:8e:63:13:0e:81:bd:66:76:87:fd:0a:03:58:3d: e4:a4:65:db:86:58:35:c8:3a:fa:3b:c1:34:a0:ce: 7c:77:f8:19:f6:16:6f:a5:85:b0:0c:29:c4:d5:ab: ad:e4:66:41:e6:8a:38:5a:45:e2:6c:1d:2d:7d:d5: 8b:c4:aa:f7:7c:b5:1e:8c:83:b9:17:c0:16:1c:97: 2a:83:a3:27:ea:92:e7:43:5e:3f:bd:c5:24:e0:a5: d8:6f:04:69:f1:47:45:f1:3c:b5:9a:79:60:06:8e: 05:dd:27:e8:de:32:eb:60:86:e7:e9:d7:13:92:78: 6f:ad:ed:8b:9b:f2:7e:d5:92:69:b5:8c:3b:9b:91: 17:74:8c:8c:2b:62:21:9e:bc:20:37:16:26:cf:dc: 87:8a:4c:28:e2:da:44:6a:74:13:5f:eb:ff:76:b3: 4d:4c:b8:e1:44:c3:a4:73:71:c9:6f:7a:9f:f0:3e: 17:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F6:DB:3C:52:4E:A2:70:75:E6:10:BA:8E:BC:8B:D3:F9:69:6A:CA X509v3 Authority Key Identifier: keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:19:34:67:45:2b:1f:7d:83:b5:ee:ae:84:f8:03:1c:a0:fd: b3:9f:11:d3:dd:c7:bc:b3:40:f9:35:e6:4f:a0:0f:ba:08:b5: 9b:1a:64:c5:eb:de:78:cc:cb:32:24:b4:e7:ca:01:17:a6:cf: 3e:cd:a6:a1:29:88:53:58:be:b3:1e:8e:0d:ae:ec:8f:05:48: 4c:bf:50:55:67:4c:fd:7b:2e:77:18:c8:0d:2d:3f:ee:83:5e: ae:e4:f9:00:45:7f:93:74:c2:2e:44:9e:3b:4f:12:a3:30:51: b9:1e:f4:df:79:e4:3a:ef:8b:06:eb:5d:a6:d8:42:e6:bf:f7: 0c:62:4e:2a:cb:08:ae:c9:d5:bb:d9:b4:32:ee:96:a6:29:ca: e9:d0:ae:df:65:52:cd:03:89:98:99:c3:93:5b:8c:50:1a:3c: b2:c3:b8:1c:9c:04:1d:e5:dd:dd:54:a4:0f:19:93:71:7c:10: ea:3d:01:9d:09:bd:5e:2d:c7:79:fe:d8:0c:38:23:cb:54:1d: 9f:74:74:86:70:bf:41:cf:a0:e5:41:50:5b:eb:d3:e5:7e:d0: 77:4f:e6:99:e7:ec:8c:26:e4:18:8c:d5:e9:dc:2d:27:29:4b: a2:13:57:2b:d1:b9:40:e2:8c:5b:0a:a9:b1:ce:8c:7f:94:39: 79:e3:f7:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdDOTAxMTAvBgNVBAUTKDEwRUE2NTMyNjUxMDI1MDI5NDQzQ0UxMjQzNTdEMzNE MjhBQzI0QzAwHhcNMjUwNjA1MDUzNjMwWhcNMjUwNjEyMDUzNjMwWjAYMRYwFAYD VQQDEw02ODQxMmNkZS03MDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6dF81XpoweR+WVSbmNFq7lwjHPubepr5rFobggInxlX3uWEvrvxPpcZhRjI aa8xe9RFsvbNXYY1cO3elVopr+XA/GYmpBjmMEkhjmMTDoG9ZnaH/QoDWD3kpGXb hlg1yDr6O8E0oM58d/gZ9hZvpYWwDCnE1aut5GZB5oo4WkXibB0tfdWLxKr3fLUe jIO5F8AWHJcqg6Mn6pLnQ14/vcUk4KXYbwRp8UdF8Ty1mnlgBo4F3Sfo3jLrYIbn 6dcTknhvre2Lm/J+1ZJptYw7m5EXdIyMK2IhnrwgNxYmz9yHikwo4tpEanQTX+v/ drNNTLjhRMOkc3HJb3qf8D4XjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNv22zxS TqJwdeYQuo68i9P5aWrKMB8GA1UdIwQYMBaAFBDqZTJlECUClEPOEkNX0z0orCTA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0M5MC8wMEQ3QjA0RTRF RTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpRS1VRODRTUTFmVFBTaXNK TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VPcGxNbVVRSlFLVVE4NFNRMWZUUFNpc0pNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0M5MC8wMEQ3QjA0RTRFRTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpR S1VRODRTUTFmVFBTaXNKTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9GTRnRSsffYO17q6E+AMcoP2znxHT3ce8s0D5NeZPoA+6CLWbGmTF 6954zMsyJLTnygEXps8+zaahKYhTWL6zHo4NruyPBUhMv1BVZ0z9ey53GMgNLT/u g16u5PkARX+TdMIuRJ47TxKjMFG5HvTfeeQ674sG612m2ELmv/cMYk4qywiuydW7 2bQy7pamKcrp0K7fZVLNA4mYmcOTW4xQGjyyw7gcnAQd5d3dVKQPGZNxfBDqPQGd Cb1eLcd5/tgMOCPLVB2fdHSGcL9Bz6DlQVBb69PlftB3T+aZ5+yMJuQYjNXp3C0n KUuiE1cr0blA4oxbCqmxzox/lDl54/fx -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:13 2025 by rpki-client