$ rpki-client -vvf rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft File: EibuEiKTgxtlHxW4vB8QVdtCicQ.mft (raw, json) Hash identifier: HVkOo7a0WBiHIPeALnDFvfHNPbiaJHLlXNoh4trKoPw= Subject key identifier: AB:A2:ED:59:7C:1E:17:80:AA:4E:38:C0:DD:95:80:D6:75:79:F3:23 Authority key identifier: 12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4 Certificate issuer: /CN=A91E861E/serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft Manifest number: 21 Signing time: Sat 23 Aug 2025 08:06:06 +0000 Manifest this update: Sat 23 Aug 2025 08:06:06 +0000 Manifest next update: Sat 30 Aug 2025 08:06:06 +0000 Files and hashes: 1: EibuEiKTgxtlHxW4vB8QVdtCicQ.crl (hash: JUbKKhXB0Ju6iLNDuv5ymTr33Ib9qd/E94Ecqw+R8MY=) 2: C67FDA48541E11F09E0E0C7DC4F9AE02.roa (hash: wa4TR1fvKETfK3e7ugA2YaJ41gq/9kU5OrG3vVI95Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E861E, serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4 Validity Not Before: Aug 23 08:06:06 2025 GMT Not After : Aug 30 08:06:06 2025 GMT Subject: CN=68a9766e-6767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:7a:50:ca:c5:10:bb:9a:15:86:7c:8c:d6: 2e:35:ed:65:12:4b:64:67:24:67:f8:d7:a5:3f:17: f3:7c:c4:24:f6:ed:97:02:eb:51:2f:8a:31:7f:27: e2:62:bf:06:bf:69:a4:a8:e8:13:ba:e7:d0:e0:67: e6:bd:de:d5:c9:c1:9c:42:57:b0:eb:d8:ea:37:7d: f3:1b:7e:c8:0a:a3:1a:4f:e6:16:0c:32:c5:67:a1: 7f:f3:08:fa:c7:e4:b1:19:69:9d:ce:68:5e:1c:8b: da:46:77:06:f3:a0:2b:b8:d7:64:94:9e:ab:42:fd: 36:53:d3:9c:ae:24:59:00:c5:e9:20:2c:86:68:5f: 1e:9a:1c:d6:85:55:1c:8a:e6:7d:0c:ac:44:54:5c: 8c:ac:23:a3:b3:00:fe:cc:e0:c0:e0:72:12:9b:93: 4c:0a:af:e7:b5:fa:7e:df:e4:89:a0:80:59:83:49: a2:f6:b2:fe:6d:f1:df:3a:d6:c1:dc:88:cc:32:5e: af:e1:4f:76:d2:79:a9:e9:6c:8c:61:7d:7c:ed:16: d9:de:48:a6:ea:eb:95:28:77:08:b4:6c:f9:dd:13: 7f:ec:2d:ea:c7:07:2d:63:05:28:11:58:86:e9:e3: cd:79:bd:01:3c:49:6c:3f:17:f0:2c:e5:a3:84:4e: 7f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A2:ED:59:7C:1E:17:80:AA:4E:38:C0:DD:95:80:D6:75:79:F3:23 X509v3 Authority Key Identifier: keyid:12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:e2:75:24:aa:89:df:c8:52:a6:80:49:67:4b:6f:b9:c1:ba: 2e:3b:15:ec:ea:25:ec:ed:4f:f3:1e:10:77:d4:ea:5c:56:66: 7b:c3:e8:a0:cb:e2:6d:7f:ee:86:39:f1:60:06:ca:20:63:f8: 91:f1:28:b4:42:a6:99:96:8f:bb:7c:45:95:ba:e5:43:ae:4d: 07:7d:4e:42:ae:50:9b:02:b3:80:5b:d3:cd:81:f6:d7:16:26: f4:6a:c8:99:14:43:e3:d1:a9:f2:79:42:1e:87:ca:f6:9b:6a: ec:78:c3:02:77:f9:b7:1f:73:c5:bc:33:63:46:f6:42:16:3c: e5:19:53:31:b8:59:6e:bb:47:47:63:ff:d1:e1:28:08:85:37: 26:e0:fc:c2:87:7e:4b:26:9c:8c:01:0f:c2:70:ae:ec:0f:05: 0a:d4:2c:2a:1a:73:03:de:35:b8:41:3e:4d:57:69:23:77:d9: 8c:2f:ad:86:fe:cd:c2:c3:41:7d:d7:9e:0a:40:66:f7:15:64: 27:1d:d5:36:c0:65:98:10:a8:19:59:ab:de:3c:90:33:10:51: 10:ea:a8:7d:a3:71:87:3a:92:73:74:aa:1f:64:df:e4:c9:2d: a8:59:6c:4d:af:94:cc:57:c8:d6:ff:e9:f5:d5:33:b6:9f:ef: ba:85:7f:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODYxRTExMC8GA1UEBRMoMTIyNkVFMTIyMjkzODMxQjY1MUYxNUI4QkMxRjEwNTVE QjQyODlDNDAeFw0yNTA4MjMwODA2MDZaFw0yNTA4MzAwODA2MDZaMBgxFjAUBgNV BAMTDTY4YTk3NjZlLTY3NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1YHpQysUQu5oVhnyM1i417WUSS2RnJGf416U/F/N8xCT27ZcC61EvijF/J+Ji vwa/aaSo6BO659DgZ+a93tXJwZxCV7Dr2Oo3ffMbfsgKoxpP5hYMMsVnoX/zCPrH 5LEZaZ3OaF4ci9pGdwbzoCu412SUnqtC/TZT05yuJFkAxekgLIZoXx6aHNaFVRyK 5n0MrERUXIysI6OzAP7M4MDgchKbk0wKr+e1+n7f5ImggFmDSaL2sv5t8d861sHc iMwyXq/hT3bSeanpbIxhfXztFtneSKbq65Uodwi0bPndE3/sLerHBy1jBSgRWIbp 4815vQE8SWw/F/As5aOETn+FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq6LtWXwe F4CqTjjA3ZWA1nV58yMwHwYDVR0jBBgwFoAUEibuEiKTgxtlHxW4vB8QVdtCicQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NjFFLzQ1Q0VERjQ4NTQx RTExRjBBMENFRjQ3OEM0RjlBRTAyL0VpYnVFaUtUZ3h0bEh4VzR2QjhRVmR0Q2lj US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWlidUVpS1RneHRsSHhXNHZCOFFWZHRDaWNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NjFFLzQ1Q0VERjQ4NTQxRTExRjBBMENFRjQ3OEM0RjlBRTAyL0VpYnVFaUtUZ3h0 bEh4VzR2QjhRVmR0Q2ljUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJHidSSqid/IUqaASWdLb7nBui47FezqJeztT/MeEHfU6lxWZnvD6KDL 4m1/7oY58WAGyiBj+JHxKLRCppmWj7t8RZW65UOuTQd9TkKuUJsCs4Bb082B9tcW JvRqyJkUQ+PRqfJ5Qh6Hyvabaux4wwJ3+bcfc8W8M2NG9kIWPOUZUzG4WW67R0dj /9HhKAiFNybg/MKHfksmnIwBD8JwruwPBQrULCoacwPeNbhBPk1XaSN32YwvrYb+ zcLDQX3XngpAZvcVZCcd1TbAZZgQqBlZq948kDMQURDqqH2jcYc6knN0qh9k3+TJ LahZbE2vlMxXyNb/6fXVM7af77qFf8M= -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:38 2025 by rpki-client