$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft File: ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft (raw, json) Hash identifier: ouxQ/QbBxdIPMrACzBl3o/TINglNOK+Jz0Ts1cIrT1o= Subject key identifier: AB:3F:B5:D5:42:B4:5D:8E:97:B7:D6:D9:0B:27:B8:49:08:7C:E2:58 Authority key identifier: 7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D Certificate issuer: /CN=A91E782F/serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft Manifest number: F5 Signing time: Mon 03 Nov 2025 05:12:14 +0000 Manifest this update: Mon 03 Nov 2025 05:12:13 +0000 Manifest next update: Mon 10 Nov 2025 05:12:13 +0000 Files and hashes: 1: ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl (hash: mUJHU84V316iUJ0vXbTC5ce5Z2e8buVgVNRx/I6WkfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E782F, serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D Validity Not Before: Nov 3 05:12:13 2025 GMT Not After : Nov 10 05:12:13 2025 GMT Subject: CN=690839ae-f47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:47:56:81:6b:18:b7:b2:20:9f:5c:0c:bd:61: c5:b9:db:fd:81:22:5f:12:5c:93:32:9f:ac:dd:9c: 1f:f3:91:12:c2:32:24:c8:6c:24:ad:87:e3:1b:57: 0c:cb:93:e7:28:2c:66:59:0c:26:40:86:e9:6d:a0: 4d:f3:99:d0:6e:c5:cd:f0:ef:db:e2:d2:74:00:5e: 57:df:24:de:22:f4:35:c5:e9:4b:7e:c6:15:10:18: 4b:ad:90:d9:c4:cc:da:d9:d0:61:fa:43:15:31:b3: 9d:41:89:fb:41:e8:d5:4f:27:c8:09:c1:03:4b:e6: b8:86:92:7c:39:4c:dd:f9:b9:93:bf:ab:a6:d1:5d: f3:6a:20:48:97:1c:af:ba:f8:87:9f:fc:34:c0:f5: 15:43:64:a5:47:21:73:72:f0:74:35:17:1c:a0:f6: e9:3b:56:60:db:a4:4c:de:55:65:f0:7d:42:99:47: f6:63:f3:84:50:d6:5d:5c:92:38:3b:47:1a:5a:d1: cd:c8:01:2c:d2:82:a5:1e:04:2e:d5:76:fc:1c:18: a0:20:57:d7:1d:9f:31:63:5b:33:7b:86:02:6d:e2: 42:46:35:38:e9:51:78:e3:6b:1e:09:b4:be:2c:a0: 30:a7:05:67:f1:5b:58:23:41:ce:40:60:ed:59:24: 12:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3F:B5:D5:42:B4:5D:8E:97:B7:D6:D9:0B:27:B8:49:08:7C:E2:58 X509v3 Authority Key Identifier: keyid:7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:9b:ff:d1:f0:ab:36:92:df:66:97:ae:7d:c1:18:50:e0:7b: 5a:1d:7a:5b:ee:0d:25:72:44:e3:f2:7d:7c:33:30:7c:9b:b4: bc:1d:37:99:92:ff:40:f1:69:fa:10:21:ee:cf:f6:8e:b0:f6: d1:d2:8a:39:69:7f:d5:a4:a5:3b:d7:3e:cd:32:38:b2:f9:67: 88:c7:3e:73:a9:f0:80:e2:53:78:2f:dd:29:de:76:80:96:03: 24:cc:c2:64:35:c7:bd:76:c9:73:f4:3a:43:4b:ee:f0:8e:7f: 0e:61:ab:fd:f0:6a:0d:14:aa:71:38:38:80:55:75:90:10:dd: 93:0d:d3:b1:61:59:d8:3d:52:2d:b0:96:d2:a3:df:cf:cc:2a: 80:04:a2:39:bb:9e:65:fa:d3:81:d9:a6:c0:82:d0:31:6f:0c: c4:b7:04:08:bd:c0:44:b3:80:be:d8:1e:f8:ec:70:f2:73:64: a7:f2:c2:bf:de:2f:95:ba:f9:34:10:1f:66:4e:e4:d8:8f:76: df:6c:f3:7c:ca:4e:7a:f0:3d:99:d3:34:d1:1a:d2:2e:b1:35: 41:63:ad:d7:eb:81:cc:a5:08:42:ba:e7:7e:98:93:0d:6e:dd: 44:28:ed:dc:bc:a7:88:00:41:7a:be:76:2e:8b:28:80:4b:78: 6e:e3:49:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4MkYxMTAvBgNVBAUTKDdBOUZGODY0QzUwMzE4MDY3MTMwNTg4RTZEQkE5MjhC QTFDMDNBNUQwHhcNMjUxMTAzMDUxMjEzWhcNMjUxMTEwMDUxMjEzWjAYMRYwFAYD VQQDEw02OTA4MzlhZS1mNDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykdWgWsYt7Ign1wMvWHFudv9gSJfElyTMp+s3Zwf85ESwjIkyGwkrYfjG1cM y5PnKCxmWQwmQIbpbaBN85nQbsXN8O/b4tJ0AF5X3yTeIvQ1xelLfsYVEBhLrZDZ xMza2dBh+kMVMbOdQYn7QejVTyfICcEDS+a4hpJ8OUzd+bmTv6um0V3zaiBIlxyv uviHn/w0wPUVQ2SlRyFzcvB0NRccoPbpO1Zg26RM3lVl8H1CmUf2Y/OEUNZdXJI4 O0caWtHNyAEs0oKlHgQu1Xb8HBigIFfXHZ8xY1sze4YCbeJCRjU46VF442seCbS+ LKAwpwVn8VtYI0HOQGDtWSQSkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKs/tdVC tF2Ol7fW2QsnuEkIfOJYMB8GA1UdIwQYMBaAFHqf+GTFAxgGcTBYjm26kouhwDpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi83NjRDQTJEMDQw NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi9lcF80Wk1VREdBWnhNRmlPYmJxU2k2SEFP bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwXzRaTVVER0FaeE1GaU9iYnFTaTZIQU9sMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzgyRi83NjRDQTJEMDQwNzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi9lcF80Wk1VREdB WnhNRmlPYmJxU2k2SEFPbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7m//R8Ks2kt9ml659wRhQ4HtaHXpb7g0lckTj8n18MzB8m7S8HTeZ kv9A8Wn6ECHuz/aOsPbR0oo5aX/VpKU71z7NMjiy+WeIxz5zqfCA4lN4L90p3naA lgMkzMJkNce9dslz9DpDS+7wjn8OYav98GoNFKpxODiAVXWQEN2TDdOxYVnYPVIt sJbSo9/PzCqABKI5u55l+tOB2abAgtAxbwzEtwQIvcBEs4C+2B747HDyc2Sn8sK/ 3i+Vuvk0EB9mTuTYj3bfbPN8yk568D2Z0zTRGtIusTVBY63X64HMpQhCuud+mJMN bt1EKO3cvKeIAEF6vnYuiyiAS3hu40nk -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:07 2025 by rpki-client