$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft File: EIRQx-37eFIbfkhx_obo9iOhBRs.mft (raw, json) Hash identifier: g6Q5bGlX/gqeXQWfCWrAevOylvxjwi7pGRy+WkZL1WU= Subject key identifier: 21:21:79:B6:9D:90:91:16:0F:40:93:65:9A:4D:6A:AE:68:E3:9C:D0 Authority key identifier: 10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B Certificate issuer: /CN=A91BA239/serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft Manifest number: 020B Signing time: Sat 23 Aug 2025 02:22:37 +0000 Manifest this update: Sat 23 Aug 2025 02:22:37 +0000 Manifest next update: Sat 30 Aug 2025 02:22:36 +0000 Files and hashes: 1: EIRQx-37eFIbfkhx_obo9iOhBRs.crl (hash: TDNWTqpiX73AhURuEQiUve5MqZSoVBS3y4D35HnwtSo=) 2: B2119B7464BA11ED8544E91DC4F9AE02.roa (hash: QbSn5YRTWG7olUrItxapoYIPCE3hPl44mhf7s2FPRaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA239, serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B Validity Not Before: Aug 23 02:22:37 2025 GMT Not After : Aug 30 02:22:36 2025 GMT Subject: CN=68a925ed-f0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:27:21:25:e0:41:81:8c:3a:7e:ba:4c:38: 23:f1:f7:75:11:3a:85:c6:94:ed:e6:a4:e1:f8:02: 1b:f3:96:56:88:ac:01:21:70:c6:d3:86:0b:4b:93: 2e:02:4f:0a:53:7d:a7:e9:83:fd:ab:f1:4d:35:fc: f8:96:ba:39:b3:83:91:db:53:69:3f:5c:d1:86:a4: 9b:be:a7:05:f7:cd:dd:31:ab:fe:73:0a:d0:bb:05: 54:9d:b9:2b:fb:51:6d:c1:ab:69:73:32:1f:6d:83: 94:20:96:a1:53:e9:0e:47:cf:78:c7:43:fa:df:cb: 02:a4:a7:e9:d1:2a:ee:e3:71:8f:b8:f5:42:8c:db: d3:63:13:b0:67:b2:53:1c:0f:a6:b3:b5:33:be:29: 34:97:cd:0c:5a:aa:69:e1:89:9d:17:57:67:f5:1c: 48:18:1b:23:69:a2:8b:9f:ec:9b:17:22:55:c9:2e: ba:1f:3e:ca:b5:ac:c4:2b:34:4c:2b:ce:64:b5:38: bf:fd:ff:6e:ce:eb:76:ac:63:7d:db:71:ef:69:1c: 67:38:d2:86:55:f8:d2:0e:7e:91:e4:f9:76:f1:52: f0:1c:e8:91:99:52:24:f2:65:b0:64:c8:c2:2d:15: ab:8f:f8:37:cd:25:ef:89:fc:2c:74:3f:5b:5f:34: 63:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:21:79:B6:9D:90:91:16:0F:40:93:65:9A:4D:6A:AE:68:E3:9C:D0 X509v3 Authority Key Identifier: keyid:10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:6c:0f:3d:65:ce:cc:11:b5:ad:6e:f6:5e:27:f1:74:74:b4: 55:0f:6e:62:68:2b:5d:0d:51:31:d8:a4:a5:69:53:9b:f6:85: da:63:ae:ad:67:cc:73:12:94:c6:4f:81:a9:36:b4:74:5a:5c: 95:a2:98:d5:ec:a7:18:a5:ee:7e:05:df:44:5b:f2:8d:ae:7f: e8:09:d2:f6:03:cd:b0:0d:5d:43:c6:6d:6e:0d:5d:7c:6a:a8: 20:fd:2a:cf:0f:b0:c4:6e:1a:53:2d:ea:2a:50:06:92:9e:de: b6:54:74:15:e5:0f:36:7b:ce:78:5e:25:ac:c6:59:53:4f:a2: ac:b4:4a:58:91:5c:c0:4a:b7:fa:a3:13:8e:4c:02:ba:55:c9: aa:97:b0:54:1f:e2:6f:0a:39:30:65:9a:8b:72:a5:16:87:38: 05:ea:86:29:54:4c:98:b0:75:00:43:13:a6:92:36:95:37:8e: e0:c7:45:3e:94:59:95:6e:86:a1:40:14:5f:2a:85:70:d8:cf: ab:61:2c:5b:e1:21:35:60:84:56:bb:90:5f:4a:f5:e6:db:2e: c3:15:81:cd:d5:ab:24:be:45:98:fb:88:4c:d2:10:7d:a7:69: 28:31:47:e7:40:36:a4:83:1a:3d:84:11:9a:57:8d:51:e0:b1: 48:45:b9:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyMzkxMTAvBgNVBAUTKDEwODQ1MEM3RURGQjc4NTIxQjdFNDg3MUZFODZFOEY2 MjNBMTA1MUIwHhcNMjUwODIzMDIyMjM3WhcNMjUwODMwMDIyMjM2WjAYMRYwFAYD VQQDEw02OGE5MjVlZC1mMGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQInISXgQYGMOn66TDgj8fd1ETqFxpTt5qTh+AIb85ZWiKwBIXDG04YLS5Mu Ak8KU32n6YP9q/FNNfz4lro5s4OR21NpP1zRhqSbvqcF983dMav+cwrQuwVUnbkr +1FtwatpczIfbYOUIJahU+kOR894x0P638sCpKfp0Sru43GPuPVCjNvTYxOwZ7JT HA+ms7Uzvik0l80MWqpp4YmdF1dn9RxIGBsjaaKLn+ybFyJVyS66Hz7KtazEKzRM K85ktTi//f9uzut2rGN923HvaRxnONKGVfjSDn6R5Pl28VLwHOiRmVIk8mWwZMjC LRWrj/g3zSXvifwsdD9bXzRjhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEhebad kJEWD0CTZZpNaq5o45zQMB8GA1UdIwQYMBaAFBCEUMft+3hSG35Icf6G6PYjoQUb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTIzOS8xOUFEMEYxMDY0 QjcxMUVEQTA5MThBODNDNEY5QUUwMi9FSVJReC0zN2VGSWJma2h4X29ibzlpT2hC UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VJUlF4LTM3ZUZJYmZraHhfb2JvOWlPaEJScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTIzOS8xOUFEMEYxMDY0QjcxMUVEQTA5MThBODNDNEY5QUUwMi9FSVJReC0zN2VG SWJma2h4X29ibzlpT2hCUnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/bA89Zc7MEbWtbvZeJ/F0dLRVD25iaCtdDVEx2KSlaVOb9oXaY66t Z8xzEpTGT4GpNrR0WlyVopjV7KcYpe5+Bd9EW/KNrn/oCdL2A82wDV1Dxm1uDV18 aqgg/SrPD7DEbhpTLeoqUAaSnt62VHQV5Q82e854XiWsxllTT6KstEpYkVzASrf6 oxOOTAK6Vcmql7BUH+JvCjkwZZqLcqUWhzgF6oYpVEyYsHUAQxOmkjaVN47gx0U+ lFmVboahQBRfKoVw2M+rYSxb4SE1YIRWu5BfSvXm2y7DFYHN1askvkWY+4hM0hB9 p2koMUfnQDakgxo9hBGaV41R4LFIRblH -----END CERTIFICATE-----Generated at Sat Aug 23 18:50:15 2025 by rpki-client