$ rpki-client -vvf rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft File: EibuEiKTgxtlHxW4vB8QVdtCicQ.mft (raw, json) Hash identifier: 7JrsnxrqrFj1bfX/n79Ix4QaGx+VXHm8pwfBZ0qg9qo= Subject key identifier: FC:80:1E:65:F7:D1:7E:63:CE:1C:40:01:3C:15:4D:AC:F5:F4:DC:9D Authority key identifier: 12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4 Certificate issuer: /CN=A91E861E/serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft Manifest number: 07 Signing time: Thu 03 Jul 2025 08:27:30 +0000 Manifest this update: Thu 03 Jul 2025 08:27:29 +0000 Manifest next update: Thu 10 Jul 2025 08:27:29 +0000 Files and hashes: 1: EibuEiKTgxtlHxW4vB8QVdtCicQ.crl (hash: KimSZFMhBawcIyIF2DR9eWe7wQCHT4s1lnVJWJ8Wejw=) 2: C67FDA48541E11F09E0E0C7DC4F9AE02.roa (hash: wa4TR1fvKETfK3e7ugA2YaJ41gq/9kU5OrG3vVI95Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E861E, serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4 Validity Not Before: Jul 3 08:27:29 2025 GMT Not After : Jul 10 08:27:29 2025 GMT Subject: CN=68663ef2-2bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0c:4d:f4:c9:6e:3f:87:ef:af:4b:d6:25:82: 4a:3a:c9:8a:39:f6:7c:0f:ab:84:19:3b:ef:6f:69: a6:53:1a:75:36:8a:4a:1f:63:91:f9:d9:b9:e9:e9: 45:6a:d6:ae:91:73:e6:b9:02:e2:74:23:a5:b3:35: 4c:01:7a:ed:05:eb:eb:d5:69:30:48:de:27:4b:40: 09:94:5a:b0:05:b6:44:24:51:21:e6:fe:9c:56:1c: c7:96:54:69:ef:fa:6e:e8:31:da:f7:47:2a:b6:ac: a5:bc:f6:ed:69:eb:2a:c7:f4:04:51:47:76:c1:82: 5c:16:42:25:46:25:d5:a3:1b:c1:f4:e2:f8:37:1a: c0:d7:16:cd:6f:73:39:5f:0b:1d:65:f5:28:21:24: 90:18:2a:4a:3d:92:6a:78:fd:26:0f:e2:c1:bf:97: 82:11:e5:ac:42:02:6b:ed:08:63:22:91:87:39:b2: 2d:99:f4:d8:9c:2d:21:35:69:79:c1:b4:d3:cb:fb: f9:a2:9b:77:78:bb:b7:7f:7d:c3:91:45:6e:9e:ec: 0e:8a:f5:b1:fe:31:84:0a:4e:0a:2f:d8:54:b9:55: 3c:ad:87:66:84:0f:be:68:cf:18:ff:a9:c1:f5:15: 5f:12:a6:a6:7e:e1:52:a3:34:8a:54:7a:24:ea:2a: 16:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:80:1E:65:F7:D1:7E:63:CE:1C:40:01:3C:15:4D:AC:F5:F4:DC:9D X509v3 Authority Key Identifier: keyid:12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:18:29:79:54:45:36:be:e2:b6:0d:a7:e4:c8:64:26:e2:c5: 29:7c:54:ee:7e:ef:6b:ca:1b:86:bd:9a:13:de:5d:80:35:ee: 55:c2:6b:1b:c5:5e:a0:e2:9d:fb:fd:10:4e:61:ef:5a:d6:81: 9c:65:06:83:74:c6:6f:19:25:d0:b3:73:b5:15:79:19:e3:6a: 2b:fb:77:cc:7b:8d:b2:d1:a5:c1:03:47:c4:82:6a:ab:03:80: 03:c4:61:04:30:dd:96:24:80:00:03:ba:33:6a:c1:3f:2f:16: 8c:93:59:74:b9:9c:9a:37:d8:37:bc:52:81:61:05:09:f2:f6: e2:05:d7:92:89:81:2d:d1:f2:33:52:8a:8c:96:73:22:3f:ab: 6c:bf:d7:23:6c:04:c7:d3:f4:07:c0:a0:78:7f:0e:f5:cf:73: 67:ea:fb:a3:38:9c:4c:d5:a6:ae:26:ee:15:eb:f2:38:0a:79: 0b:16:80:3a:ea:77:d4:90:1c:9c:95:bb:84:cd:3d:fa:0f:24: 94:32:b2:a5:65:79:5b:b8:c2:6d:a5:7c:5d:d3:94:26:bc:b5: 24:5f:33:3f:7d:b3:35:31:01:d2:4c:f5:2e:7f:83:96:6f:35: 5c:c5:eb:d9:50:0d:93:e9:c2:cc:4b:36:a6:7d:23:a3:d2:67: da:98:6c:aa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODYxRTExMC8GA1UEBRMoMTIyNkVFMTIyMjkzODMxQjY1MUYxNUI4QkMxRjEwNTVE QjQyODlDNDAeFw0yNTA3MDMwODI3MjlaFw0yNTA3MTAwODI3MjlaMBgxFjAUBgNV BAMTDTY4NjYzZWYyLTJiYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpDE30yW4/h++vS9Ylgko6yYo59nwPq4QZO+9vaaZTGnU2ikofY5H52bnp6UVq 1q6Rc+a5AuJ0I6WzNUwBeu0F6+vVaTBI3idLQAmUWrAFtkQkUSHm/pxWHMeWVGnv +m7oMdr3Ryq2rKW89u1p6yrH9ARRR3bBglwWQiVGJdWjG8H04vg3GsDXFs1vczlf Cx1l9SghJJAYKko9kmp4/SYP4sG/l4IR5axCAmvtCGMikYc5si2Z9NicLSE1aXnB tNPL+/mim3d4u7d/fcORRW6e7A6K9bH+MYQKTgov2FS5VTyth2aED75ozxj/qcH1 FV8SpqZ+4VKjNIpUeiTqKhb5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/IAeZffR fmPOHEABPBVNrPX03J0wHwYDVR0jBBgwFoAUEibuEiKTgxtlHxW4vB8QVdtCicQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NjFFLzQ1Q0VERjQ4NTQx RTExRjBBMENFRjQ3OEM0RjlBRTAyL0VpYnVFaUtUZ3h0bEh4VzR2QjhRVmR0Q2lj US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWlidUVpS1RneHRsSHhXNHZCOFFWZHRDaWNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NjFFLzQ1Q0VERjQ4NTQxRTExRjBBMENFRjQ3OEM0RjlBRTAyL0VpYnVFaUtUZ3h0 bEh4VzR2QjhRVmR0Q2ljUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABIYKXlURTa+4rYNp+TIZCbixSl8VO5+72vKG4a9mhPeXYA17lXCaxvF XqDinfv9EE5h71rWgZxlBoN0xm8ZJdCzc7UVeRnjaiv7d8x7jbLRpcEDR8SCaqsD gAPEYQQw3ZYkgAADujNqwT8vFoyTWXS5nJo32De8UoFhBQny9uIF15KJgS3R8jNS ioyWcyI/q2y/1yNsBMfT9AfAoHh/DvXPc2fq+6M4nEzVpq4m7hXr8jgKeQsWgDrq d9SQHJyVu4TNPfoPJJQysqVleVu4wm2lfF3TlCa8tSRfMz99szUxAdJM9S5/g5Zv NVzF69lQDZPpwsxLNqZ9I6PSZ9qYbKo= -----END CERTIFICATE-----Generated at Thu Jul 3 14:57:49 2025 by rpki-client