$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft File: EOplMmUQJQKUQ84SQ1fTPSisJMA.mft (raw, json) Hash identifier: KYU+ZMwCGjPMANbSwyaJbFzIUlhs0i8WweA1VD63MQU= Subject key identifier: EF:93:26:13:9A:10:8A:68:13:A2:E8:5F:0F:3B:06:DD:6D:DA:9E:5E Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 Certificate issuer: /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft Manifest number: EF Signing time: Mon 03 Nov 2025 05:18:29 +0000 Manifest this update: Mon 03 Nov 2025 05:18:28 +0000 Manifest next update: Mon 10 Nov 2025 05:18:28 +0000 Files and hashes: 1: EOplMmUQJQKUQ84SQ1fTPSisJMA.crl (hash: Hs2/ShfAb7iwJa5mCFw+Zd+HL+ZOJlaoq0MMJyL13yg=) 2: 55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (hash: HYF/fg1voE6IFgfpnqUye0EtCWfbuCFF1mA1Z69GiMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7C90, serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Validity Not Before: Nov 3 05:18:28 2025 GMT Not After : Nov 10 05:18:28 2025 GMT Subject: CN=69083b25-b4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b4:09:58:5f:bf:33:64:a0:61:c3:ec:46:75: 87:7b:32:dc:a6:e9:a5:aa:fc:52:7e:17:99:bd:8c: db:91:17:08:ae:f9:d0:dc:8c:de:f1:7f:be:e7:d9: 36:29:db:27:44:27:d3:2e:19:e7:bf:e7:0e:3d:9a: 0e:0b:ea:5e:e3:f3:cd:00:6d:61:da:02:33:83:b1: dd:e0:a1:cd:35:ab:39:90:78:e6:89:e4:14:7c:e6: 1a:b8:dd:09:89:75:2a:1c:47:f4:a8:e1:c5:8d:17: 09:94:8b:4f:c3:84:fd:de:4b:39:12:a5:3a:73:e4: ab:2b:d6:a4:6d:20:ee:f8:da:ab:6b:96:25:58:d0: b4:79:18:7f:84:c1:5c:e3:6e:e1:b1:16:c2:17:86: eb:a9:0a:ed:03:fb:6b:4b:fe:ef:c5:e4:e1:95:47: 3d:a4:6a:38:e3:72:a5:cc:67:e9:fa:c0:4d:17:2a: 32:45:34:c6:66:d8:1f:c2:16:9b:45:89:fe:8f:c0: fc:b7:e7:67:2e:b2:77:c9:4b:ba:cc:46:05:ed:37: 12:f1:63:7c:82:5a:fc:78:73:6c:0b:49:31:f6:b8: d5:34:e5:03:af:a5:a4:64:0e:29:f0:ca:75:b0:ba: 01:a2:80:26:14:ee:2b:a1:13:35:d4:c6:3c:aa:1f: aa:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:93:26:13:9A:10:8A:68:13:A2:E8:5F:0F:3B:06:DD:6D:DA:9E:5E X509v3 Authority Key Identifier: keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:08:4d:fe:1f:1b:fb:0f:78:4c:3b:2c:66:6c:e5:3b:4f:8a: 6d:21:63:8b:02:c0:97:8a:24:88:89:96:8d:2f:53:27:e9:d9: b0:2c:ec:cc:67:87:57:1d:f2:5a:8d:97:eb:dd:88:09:dc:72: 2d:9f:02:40:b0:ad:e8:91:3e:58:65:43:a6:b1:ba:dd:58:a0: fc:4c:ab:ad:cd:06:89:e8:e3:2d:99:99:03:0e:cc:ea:58:df: 45:45:98:c9:f9:b9:71:b2:14:64:dd:43:93:08:0b:cb:d4:18: 09:8e:e9:fa:f3:ca:ac:8c:23:ac:11:f6:24:68:a9:f0:28:52: fc:f2:d0:b2:a5:ff:5b:05:88:48:2a:b1:ba:1e:d5:f4:e3:99: c0:1c:dc:f3:66:56:3c:4d:c3:e3:51:e5:56:e3:31:4b:93:52: f1:27:ba:39:ce:3e:58:5c:9f:9c:6c:6e:a8:8a:0b:71:c5:1c: c3:e2:98:48:7d:5c:97:f5:55:15:7d:8c:6f:25:1f:60:b4:44: fb:cb:c7:75:ac:e4:cf:03:1e:e7:25:97:52:da:b8:ae:62:b2: d3:81:3c:01:de:89:ea:f8:3b:e6:21:64:85:2a:a2:eb:f4:2a: 99:53:24:22:44:99:c8:db:52:89:ae:3e:ac:70:c8:5a:1a:fb: 19:24:c3:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdDOTAxMTAvBgNVBAUTKDEwRUE2NTMyNjUxMDI1MDI5NDQzQ0UxMjQzNTdEMzNE MjhBQzI0QzAwHhcNMjUxMTAzMDUxODI4WhcNMjUxMTEwMDUxODI4WjAYMRYwFAYD VQQDEw02OTA4M2IyNS1iNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbQJWF+/M2SgYcPsRnWHezLcpumlqvxSfheZvYzbkRcIrvnQ3Ize8X++59k2 KdsnRCfTLhnnv+cOPZoOC+pe4/PNAG1h2gIzg7Hd4KHNNas5kHjmieQUfOYauN0J iXUqHEf0qOHFjRcJlItPw4T93ks5EqU6c+SrK9akbSDu+Nqra5YlWNC0eRh/hMFc 427hsRbCF4brqQrtA/trS/7vxeThlUc9pGo443KlzGfp+sBNFyoyRTTGZtgfwhab RYn+j8D8t+dnLrJ3yUu6zEYF7TcS8WN8glr8eHNsC0kx9rjVNOUDr6WkZA4p8Mp1 sLoBooAmFO4roRM11MY8qh+qBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+TJhOa EIpoE6LoXw87Bt1t2p5eMB8GA1UdIwQYMBaAFBDqZTJlECUClEPOEkNX0z0orCTA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0M5MC8wMEQ3QjA0RTRF RTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpRS1VRODRTUTFmVFBTaXNK TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VPcGxNbVVRSlFLVVE4NFNRMWZUUFNpc0pNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0M5MC8wMEQ3QjA0RTRFRTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpR S1VRODRTUTFmVFBTaXNKTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8CE3+Hxv7D3hMOyxmbOU7T4ptIWOLAsCXiiSIiZaNL1Mn6dmwLOzM Z4dXHfJajZfr3YgJ3HItnwJAsK3okT5YZUOmsbrdWKD8TKutzQaJ6OMtmZkDDszq WN9FRZjJ+blxshRk3UOTCAvL1BgJjun688qsjCOsEfYkaKnwKFL88tCypf9bBYhI KrG6HtX045nAHNzzZlY8TcPjUeVW4zFLk1LxJ7o5zj5YXJ+cbG6oigtxxRzD4phI fVyX9VUVfYxvJR9gtET7y8d1rOTPAx7nJZdS2riuYrLTgTwB3onq+DvmIWSFKqLr 9CqZUyQiRJnI21KJrj6scMhaGvsZJMPF -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:28 2025 by rpki-client