$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft File: EIRQx-37eFIbfkhx_obo9iOhBRs.mft (raw, json) Hash identifier: sZUCwdc+4YxY4vsNe02b188SREy7C32aooigQSX73t0= Subject key identifier: 5A:59:75:36:02:C9:F7:7F:1E:A6:B4:91:27:00:69:0D:63:3B:10:59 Authority key identifier: 10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B Certificate issuer: /CN=A91BA239/serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft Manifest number: 0228 Signing time: Sun 19 Oct 2025 04:16:26 +0000 Manifest this update: Sun 19 Oct 2025 04:16:26 +0000 Manifest next update: Sun 26 Oct 2025 04:16:25 +0000 Files and hashes: 1: EIRQx-37eFIbfkhx_obo9iOhBRs.crl (hash: exuXe5FdmOAAi91tEgUi5SsVckuxvJf/z9GUZsETM0U=) 2: B2119B7464BA11ED8544E91DC4F9AE02.roa (hash: QbSn5YRTWG7olUrItxapoYIPCE3hPl44mhf7s2FPRaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA239, serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B Validity Not Before: Oct 19 04:16:26 2025 GMT Not After : Oct 26 04:16:25 2025 GMT Subject: CN=68f4661a-9da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:6e:f4:f2:08:1a:54:75:a4:e6:bd:b6:25: 5e:1e:64:0c:b6:a8:b2:c0:3f:37:d4:6f:c1:82:93: a1:40:92:2e:11:6d:a3:3e:fd:4a:b7:6b:0f:6e:95: 1b:3f:24:07:67:44:e1:57:a0:2a:52:ba:42:43:c1: 72:5e:74:85:a5:a7:f3:89:ed:87:5e:18:67:eb:57: 36:2b:c9:c9:ab:9e:e4:1d:bc:ef:b3:3f:66:0d:4a: e0:c3:65:2f:3b:b9:e4:a9:30:2c:7c:3b:e9:12:23: d9:55:d5:b4:50:b5:36:87:67:1d:7a:16:32:b1:0f: 7d:e2:3b:d8:9e:75:1c:e6:fb:74:f5:29:b6:9d:92: 57:fa:ba:28:00:6a:36:72:ec:8f:c9:5c:39:bb:ad: d7:1e:0c:1b:6d:87:d1:68:99:9f:cb:bb:d5:1f:fb: 52:59:5a:ac:0d:98:46:6c:12:47:89:e4:0c:99:e6: 72:11:12:6e:7d:ab:8c:b5:5c:67:b0:a5:12:50:86: f3:c6:74:e3:c2:1e:75:fc:aa:e2:29:a3:8a:49:22: a0:1b:a3:83:3c:00:5e:8f:02:43:f3:c4:6a:ca:d6: cd:b8:dc:59:ea:8d:0f:7e:1c:88:ea:e3:8f:1a:a8: fe:f0:5e:74:40:57:74:3a:f6:6a:8d:bb:ef:3f:d4: 06:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:59:75:36:02:C9:F7:7F:1E:A6:B4:91:27:00:69:0D:63:3B:10:59 X509v3 Authority Key Identifier: keyid:10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a2:f2:38:b9:82:5b:81:5a:6f:eb:d2:9f:40:65:0f:fc:ab: b7:50:03:c6:64:48:e4:62:47:e2:89:f9:c6:a4:3e:97:f8:46: f3:f1:3f:c9:a0:64:e5:bf:81:97:30:e7:6c:58:4f:a7:aa:8c: a9:be:ef:42:7b:b4:60:16:6a:8d:10:13:55:07:ef:41:a4:a7: 3d:09:9c:13:d4:79:ce:46:7e:ae:73:ef:8e:bb:59:89:b6:4c: df:4b:af:46:f1:8c:c8:3c:ac:87:a1:56:8c:40:0e:ff:14:be: 78:72:29:4d:47:fc:46:df:67:7b:e9:08:96:4b:84:84:73:ca: dc:58:fc:42:a6:f1:57:7d:20:6f:36:0a:13:67:e5:26:72:70: 89:ac:6a:18:66:84:82:5d:b3:a9:79:15:3a:13:20:dc:e0:3f: 39:2c:6a:dd:b5:d2:b7:41:52:98:0b:25:5b:af:ea:1e:ce:b2: 75:e3:cb:f0:5a:fd:44:f4:95:0a:fa:2f:c1:2e:e4:10:0d:3e: 06:49:ab:b5:f9:f2:33:bf:d4:59:6b:3c:30:91:1c:c5:b2:b9: 84:b8:69:6f:24:85:0d:03:a9:00:1b:c7:b3:16:29:2e:cc:59: 2d:8a:93:97:9f:bd:e2:5d:fb:0d:cd:26:30:a7:30:ba:30:84: b0:74:9a:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyMzkxMTAvBgNVBAUTKDEwODQ1MEM3RURGQjc4NTIxQjdFNDg3MUZFODZFOEY2 MjNBMTA1MUIwHhcNMjUxMDE5MDQxNjI2WhcNMjUxMDI2MDQxNjI1WjAYMRYwFAYD VQQDEw02OGY0NjYxYS05ZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9Fu9PIIGlR1pOa9tiVeHmQMtqiywD831G/BgpOhQJIuEW2jPv1Kt2sPbpUb PyQHZ0ThV6AqUrpCQ8FyXnSFpafzie2HXhhn61c2K8nJq57kHbzvsz9mDUrgw2Uv O7nkqTAsfDvpEiPZVdW0ULU2h2cdehYysQ994jvYnnUc5vt09Sm2nZJX+rooAGo2 cuyPyVw5u63XHgwbbYfRaJmfy7vVH/tSWVqsDZhGbBJHieQMmeZyERJufauMtVxn sKUSUIbzxnTjwh51/KriKaOKSSKgG6ODPABejwJD88RqytbNuNxZ6o0PfhyI6uOP Gqj+8F50QFd0OvZqjbvvP9QGzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpZdTYC yfd/Hqa0kScAaQ1jOxBZMB8GA1UdIwQYMBaAFBCEUMft+3hSG35Icf6G6PYjoQUb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTIzOS8xOUFEMEYxMDY0 QjcxMUVEQTA5MThBODNDNEY5QUUwMi9FSVJReC0zN2VGSWJma2h4X29ibzlpT2hC UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VJUlF4LTM3ZUZJYmZraHhfb2JvOWlPaEJScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTIzOS8xOUFEMEYxMDY0QjcxMUVEQTA5MThBODNDNEY5QUUwMi9FSVJReC0zN2VG SWJma2h4X29ibzlpT2hCUnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQovI4uYJbgVpv69KfQGUP/Ku3UAPGZEjkYkfiifnGpD6X+Ebz8T/J oGTlv4GXMOdsWE+nqoypvu9Ce7RgFmqNEBNVB+9BpKc9CZwT1HnORn6uc++Ou1mJ tkzfS69G8YzIPKyHoVaMQA7/FL54cilNR/xG32d76QiWS4SEc8rcWPxCpvFXfSBv NgoTZ+UmcnCJrGoYZoSCXbOpeRU6EyDc4D85LGrdtdK3QVKYCyVbr+oezrJ148vw Wv1E9JUK+i/BLuQQDT4GSau1+fIzv9RZazwwkRzFsrmEuGlvJIUNA6kAG8ezFiku zFktipOXn73iXfsNzSYwpzC6MISwdJqc -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:38 2025 by rpki-client