$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft File: eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft (raw, json) Hash identifier: krsjzbiGXDJkzut/9SpDLj6HA2KetTjxMVkKRoGg0+Y= Subject key identifier: 50:C8:96:8B:15:F1:26:A8:80:26:AB:FF:6F:82:39:74:2B:69:69:D4 Authority key identifier: 79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 Certificate issuer: /CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Certificate serial: 2D6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft Manifest number: 2D4E Signing time: Sat 18 Oct 2025 15:42:50 +0000 Manifest this update: Sat 18 Oct 2025 15:42:49 +0000 Manifest next update: Sat 25 Oct 2025 15:42:49 +0000 Files and hashes: 1: eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl (hash: Noj6URQwOe3iNM19Rgw857S+GjfGT9Q3p9DulRfISMc=) 2: 6CB78E8E967811EA92E45A27C4F9AE02.roa (hash: Vd/aN0N0PZj/2E1lobGPke/BU2o5Mlhxl5a5kuQS0uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11626 (0x2d6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB27, serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Validity Not Before: Oct 18 15:42:49 2025 GMT Not After : Oct 25 15:42:49 2025 GMT Subject: CN=68f3b579-c7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:00:f0:2d:b4:a9:3c:60:fc:05:13:36:22:82: 92:ef:ff:c9:8f:fd:7a:44:14:00:3a:c9:18:18:46: 7b:73:9e:f6:5a:0f:7e:60:bc:f4:69:34:47:8b:78: ff:38:32:36:e0:8e:82:1d:d9:3b:09:bd:af:8c:1f: 8b:8c:88:eb:4d:c5:03:28:24:c4:f3:18:46:3a:35: e4:07:d8:3f:77:c3:a7:45:78:3a:e5:fa:65:91:af: 71:8f:99:b2:78:8d:0f:86:75:06:d3:70:e1:3a:a6: 48:50:28:bd:74:e6:2f:f1:37:b9:cf:04:3f:9c:72: da:6c:e6:3e:6d:58:93:1f:64:ca:73:93:1e:52:c7: ec:60:20:72:d5:37:4d:7b:b0:74:96:f6:ed:3a:58: 27:1e:a7:3f:5e:45:58:e2:b1:0f:5f:07:e7:a1:d0: fd:a5:b4:a5:e1:a7:c3:91:28:31:1e:98:f6:7a:92: 6f:6c:36:94:b5:fa:39:59:06:35:0b:97:48:ec:94: b5:c8:a7:68:62:13:34:64:dd:c6:eb:49:36:7a:80: f3:d2:14:fd:e1:06:3e:6f:30:79:a1:21:be:99:dc: f7:69:a4:ba:94:fe:0a:53:29:24:b0:66:97:9a:99: bc:af:85:1f:32:98:9a:3b:46:85:9a:d5:34:95:54: e0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C8:96:8B:15:F1:26:A8:80:26:AB:FF:6F:82:39:74:2B:69:69:D4 X509v3 Authority Key Identifier: keyid:79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:7d:53:df:40:8c:fd:65:58:b5:63:58:ea:84:65:a6:08:49: b8:80:26:99:2c:95:4e:cd:d1:d1:6a:9b:ad:c8:23:bc:b9:a7: f7:f0:d9:00:5a:b4:45:c9:bc:a9:8c:8f:9a:fb:c3:51:51:f5: 8e:34:e8:c0:2e:f2:fd:2f:16:72:77:bc:3f:84:1c:53:2e:80: 80:0e:c8:53:fa:41:49:0f:c9:e9:3f:37:47:67:01:4d:25:08: f6:b9:dc:16:e3:83:2b:6b:02:3f:1a:a7:3a:37:bc:43:7b:eb: 8b:d0:3e:d3:19:1e:b8:05:a2:de:fa:f2:47:05:23:3c:d8:3f: 9c:0c:77:66:99:b1:66:eb:0f:72:05:13:68:15:19:c2:4a:2e: a6:86:65:f9:23:a7:1d:3c:ec:7c:dc:2f:42:6d:b2:5e:56:43: b8:df:38:9a:bd:4e:e1:f4:f6:12:97:e6:5a:38:ef:13:ac:88: 12:35:6a:db:ea:c3:e4:19:70:ec:f9:e6:46:f2:1e:0b:39:b8: 0c:94:19:d2:57:98:df:86:46:99:6e:0a:e9:1a:5c:37:77:4e: 1a:91:e3:40:b0:51:cd:fb:7f:d6:19:62:d5:4a:61:35:7c:b1: 80:67:1f:3d:e0:73:53:1c:11:b8:db:7d:17:2b:1d:53:59:7f: 24:ba:32:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMjcxMTAvBgNVBAUTKDc5RTU2MzJBRjI5QkFFNjRFNUY5RjE5QzU3NUJDNUE5 OTVFMjA1NTAwHhcNMjUxMDE4MTU0MjQ5WhcNMjUxMDI1MTU0MjQ5WjAYMRYwFAYD VQQDEw02OGYzYjU3OS1jN2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugDwLbSpPGD8BRM2IoKS7//Jj/16RBQAOskYGEZ7c572Wg9+YLz0aTRHi3j/ ODI24I6CHdk7Cb2vjB+LjIjrTcUDKCTE8xhGOjXkB9g/d8OnRXg65fplka9xj5my eI0PhnUG03DhOqZIUCi9dOYv8Te5zwQ/nHLabOY+bViTH2TKc5MeUsfsYCBy1TdN e7B0lvbtOlgnHqc/XkVY4rEPXwfnodD9pbSl4afDkSgxHpj2epJvbDaUtfo5WQY1 C5dI7JS1yKdoYhM0ZN3G60k2eoDz0hT94QY+bzB5oSG+mdz3aaS6lP4KUykksGaX mpm8r4UfMpiaO0aFmtU0lVTgNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDIlosV 8SaogCar/2+COXQraWnUMB8GA1UdIwQYMBaAFHnlYyrym65k5fnxnFdbxamV4gVQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIyNy8xNjdBOTdFQzlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJtVGwtZkdjVjF2RnFaWGlC VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VlVmpLdkticm1UbC1mR2NWMXZGcVpYaUJWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUIyNy8xNjdBOTdFQzlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJt VGwtZkdjVjF2RnFaWGlCVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvfVPfQIz9ZVi1Y1jqhGWmCEm4gCaZLJVOzdHRaputyCO8uaf38NkA WrRFybypjI+a+8NRUfWONOjALvL9LxZyd7w/hBxTLoCADshT+kFJD8npPzdHZwFN JQj2udwW44MrawI/Gqc6N7xDe+uL0D7TGR64BaLe+vJHBSM82D+cDHdmmbFm6w9y BRNoFRnCSi6mhmX5I6cdPOx83C9CbbJeVkO43ziavU7h9PYSl+ZaOO8TrIgSNWrb 6sPkGXDs+eZG8h4LObgMlBnSV5jfhkaZbgrpGlw3d04akeNAsFHN+3/WGWLVSmE1 fLGAZx894HNTHBG4230XKx1TWX8kujLm -----END CERTIFICATE-----Generated at Sun Oct 19 23:27:08 2025 by rpki-client