$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft File: EOplMmUQJQKUQ84SQ1fTPSisJMA.mft (raw, json) Hash identifier: hhob6BWcL6N9ngdwgaHFhMXE7SVixK87vycp8eGzkPI= Subject key identifier: 66:FE:FC:8F:3D:CD:6A:5A:35:1E:41:5A:D4:FF:2B:1D:4F:4F:7E:80 Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 Certificate issuer: /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft Manifest number: A4 Signing time: Fri 13 Jun 2025 05:07:02 +0000 Manifest this update: Fri 13 Jun 2025 05:07:01 +0000 Manifest next update: Fri 20 Jun 2025 05:07:01 +0000 Files and hashes: 1: EOplMmUQJQKUQ84SQ1fTPSisJMA.crl (hash: irTRqO3U2tgUzVy65fWd5vqtVHg9JM2UePXt6b8vqmc=) 2: 55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (hash: hYGISbkx0iOPIWsemxA5+ThrUTq4VIEQEwarwfGguJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7C90, serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Validity Not Before: Jun 13 05:07:01 2025 GMT Not After : Jun 20 05:07:01 2025 GMT Subject: CN=684bb1f5-572a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ba:01:8b:95:ef:06:c2:4b:02:e4:53:fc:45: 63:b6:4f:e2:09:8c:02:bc:98:da:d0:1e:58:6e:52: 17:5e:31:e6:68:0c:51:c4:a1:36:76:c6:7e:1f:8d: ff:f3:2d:b0:8e:a3:f4:25:21:36:97:d7:f4:ac:64: ac:f5:ac:75:3c:50:b9:9f:a1:1f:cf:92:de:29:b2: 08:6f:84:67:18:9c:9b:09:03:95:c7:51:53:1b:f5: c7:32:e9:28:fa:bc:99:d1:10:35:d7:fc:c4:cb:30: 36:83:c9:bc:b6:1c:7b:c3:f7:a2:d5:41:30:32:f2: a6:c6:9f:71:4d:2c:c5:aa:f6:3d:64:b7:96:d6:8b: 15:3b:d0:c2:a5:bc:d3:bb:e9:87:eb:d5:19:05:a2: 04:03:54:b3:b2:47:86:0f:62:4f:1c:38:9f:d4:1c: fe:fe:2e:3e:68:4d:96:99:88:6b:b8:72:6c:86:e8: 61:43:fa:cd:7a:f8:c5:49:db:2e:42:a6:f3:b5:48: f8:01:a9:c6:61:ee:41:de:68:f4:64:39:79:37:48: 45:3f:25:29:1b:26:2f:f7:1f:69:62:1b:bf:7c:71: b5:5e:c4:8f:70:cc:7e:cb:9e:4e:3a:7d:50:3e:79: 30:c3:88:3f:d8:1f:ac:46:7d:b3:d3:38:08:bf:0f: 55:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FE:FC:8F:3D:CD:6A:5A:35:1E:41:5A:D4:FF:2B:1D:4F:4F:7E:80 X509v3 Authority Key Identifier: keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:37:7e:9a:68:71:1b:d1:2c:b4:91:e1:80:0b:9f:4c:db:e8: f3:08:5c:80:e3:3f:24:db:8d:27:f8:28:09:94:22:1b:10:98: 97:df:01:94:9a:bf:63:ce:a0:5e:6a:50:8d:70:c4:0c:94:b0: 05:98:64:07:58:1d:83:8a:65:e4:74:b3:6f:89:a9:0a:5b:1c: 66:e0:ae:37:b9:db:f1:2f:61:7a:aa:2b:87:38:f5:25:a0:a6: 38:af:20:1f:a1:fd:63:5f:84:5d:da:2e:bb:aa:ca:d8:f4:66: 31:82:ff:0e:a9:b0:5b:d1:2a:51:28:94:e5:6f:58:08:32:c1: e1:86:46:f3:54:dd:d0:3c:52:e8:52:39:d4:d1:43:4d:77:1d: 48:1d:e9:50:77:36:25:d2:05:88:a0:f7:29:44:07:34:e7:99: c3:86:da:88:3c:6b:7d:35:64:2a:ab:cb:22:e0:73:f1:2d:97: b0:3f:9d:6e:90:09:ff:d8:60:e8:8f:86:d9:0a:33:13:52:2f: af:67:b1:8f:23:25:7a:71:31:34:ea:4d:e6:98:c6:36:be:10: 6a:48:e3:05:9f:1c:5d:e7:6b:9c:6d:64:38:71:25:2d:c2:b2: 5f:71:94:90:a7:91:06:04:f2:49:98:7b:bb:38:3c:58:c5:17: 84:4e:18:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdDOTAxMTAvBgNVBAUTKDEwRUE2NTMyNjUxMDI1MDI5NDQzQ0UxMjQzNTdEMzNE MjhBQzI0QzAwHhcNMjUwNjEzMDUwNzAxWhcNMjUwNjIwMDUwNzAxWjAYMRYwFAYD VQQDEw02ODRiYjFmNS01NzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLoBi5XvBsJLAuRT/EVjtk/iCYwCvJja0B5YblIXXjHmaAxRxKE2dsZ+H43/ 8y2wjqP0JSE2l9f0rGSs9ax1PFC5n6Efz5LeKbIIb4RnGJybCQOVx1FTG/XHMuko +ryZ0RA11/zEyzA2g8m8thx7w/ei1UEwMvKmxp9xTSzFqvY9ZLeW1osVO9DCpbzT u+mH69UZBaIEA1SzskeGD2JPHDif1Bz+/i4+aE2WmYhruHJshuhhQ/rNevjFSdsu QqbztUj4AanGYe5B3mj0ZDl5N0hFPyUpGyYv9x9pYhu/fHG1XsSPcMx+y55OOn1Q Pnkww4g/2B+sRn2z0zgIvw9V9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGb+/I89 zWpaNR5BWtT/Kx1PT36AMB8GA1UdIwQYMBaAFBDqZTJlECUClEPOEkNX0z0orCTA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0M5MC8wMEQ3QjA0RTRF RTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpRS1VRODRTUTFmVFBTaXNK TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VPcGxNbVVRSlFLVVE4NFNRMWZUUFNpc0pNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0M5MC8wMEQ3QjA0RTRFRTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpR S1VRODRTUTFmVFBTaXNKTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMN36aaHEb0Sy0keGAC59M2+jzCFyA4z8k240n+CgJlCIbEJiX3wGU mr9jzqBealCNcMQMlLAFmGQHWB2DimXkdLNviakKWxxm4K43udvxL2F6qiuHOPUl oKY4ryAfof1jX4Rd2i67qsrY9GYxgv8OqbBb0SpRKJTlb1gIMsHhhkbzVN3QPFLo UjnU0UNNdx1IHelQdzYl0gWIoPcpRAc055nDhtqIPGt9NWQqq8si4HPxLZewP51u kAn/2GDoj4bZCjMTUi+vZ7GPIyV6cTE06k3mmMY2vhBqSOMFnxxd52ucbWQ4cSUt wrJfcZSQp5EGBPJJmHu7ODxYxReEThh/ -----END CERTIFICATE-----Generated at Sun Jun 15 05:15:14 2025 by rpki-client