$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft File: eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft (raw, json) Hash identifier: vPgKwS0zaYRD1aSzr1fIxQB6QVeSvrVDwa1lpS8o3+Q= Subject key identifier: FC:81:3C:0F:44:99:66:9F:25:3E:83:F8:CD:AB:85:03:19:61:E0:F4 Authority key identifier: 79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 Certificate issuer: /CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Certificate serial: 2D4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft Manifest number: 2D31 Signing time: Fri 22 Aug 2025 15:34:00 +0000 Manifest this update: Fri 22 Aug 2025 15:33:59 +0000 Manifest next update: Fri 29 Aug 2025 15:33:59 +0000 Files and hashes: 1: eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl (hash: JLIpikeJNEBhO+0cb+I+TFYiEWbKIrQUttwsDWraeFs=) 2: 6CB78E8E967811EA92E45A27C4F9AE02.roa (hash: Vd/aN0N0PZj/2E1lobGPke/BU2o5Mlhxl5a5kuQS0uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11597 (0x2d4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB27, serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Validity Not Before: Aug 22 15:33:59 2025 GMT Not After : Aug 29 15:33:59 2025 GMT Subject: CN=68a88de8-9a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:f0:ab:d1:c7:80:5c:1e:00:ca:61:3f:a1: 67:ca:d9:3a:2c:78:9b:db:d5:56:0c:ef:dd:e0:c4: ad:30:95:4e:3f:83:30:7a:6f:fa:e1:64:62:22:1e: 55:44:a2:6a:49:39:5b:47:ee:1d:ef:eb:7b:b1:cc: e4:0b:6d:d7:b2:0f:e4:b0:c0:20:29:09:21:42:72: d3:2c:17:7d:4a:a5:af:19:2b:61:43:05:5f:5d:b2: 89:79:c1:9e:b7:1d:94:0d:47:ae:86:47:5e:2d:04: 27:f6:bb:8d:ee:0a:b9:26:25:dd:10:e9:7c:fb:e5: 07:15:ec:e3:ec:14:6a:33:67:00:3a:23:78:a6:ac: 3a:6e:0b:a4:e9:a2:60:c9:44:be:61:9e:68:e0:da: 28:83:e6:ca:c4:38:b9:49:41:05:6e:be:1c:f4:3b: 07:a3:b6:63:74:90:4f:18:27:e6:30:0d:69:1a:4f: f3:84:6d:1a:77:f8:c2:e0:a2:62:41:15:47:7b:fe: 76:1d:f4:eb:81:c3:14:61:d2:d1:ec:40:60:7c:78: ec:76:44:33:d1:ee:7f:af:55:52:14:25:92:27:0e: 1b:61:0d:13:f8:cc:4a:a8:d7:be:c4:f7:34:f4:d4: 3b:c9:30:ba:93:58:e1:bd:a2:c2:a2:bb:c8:01:03: f2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:81:3C:0F:44:99:66:9F:25:3E:83:F8:CD:AB:85:03:19:61:E0:F4 X509v3 Authority Key Identifier: keyid:79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5e:20:02:7c:eb:49:0d:50:2c:df:12:cd:00:28:fc:f0:e3: 7f:4d:1c:ef:80:ea:3d:bb:de:9b:1c:ad:fc:2c:c3:a4:32:8b: 05:3a:71:e3:13:b5:4f:4a:7d:1c:16:d2:6e:fe:d6:f4:aa:98: 58:fb:76:76:be:18:f9:fd:c2:1b:71:b7:b6:8b:69:c8:51:c2: a4:a1:29:e5:ad:78:c0:3a:3f:8e:45:d5:61:f3:6e:13:33:86: 89:43:3e:f9:49:91:cb:6d:b0:c8:87:9d:03:cf:52:ed:46:89: 07:aa:45:81:19:eb:3f:e7:b4:e3:55:bc:22:d1:25:4e:f5:2d: 29:33:b7:a9:86:50:fa:25:f6:66:b5:5c:86:4c:cf:25:6b:99: 3b:c7:25:e5:8f:a9:ca:5b:48:f7:ca:ac:29:3f:3b:9c:39:3f: aa:e5:6e:e0:b2:bf:85:20:fb:ff:b9:ad:3c:18:84:70:8c:fe: ac:71:48:20:ed:2f:91:95:0d:8b:13:aa:91:32:3a:33:37:1f: 15:82:9d:93:f5:cd:d6:b5:fb:05:46:58:db:27:bc:d3:f8:26: 78:85:ab:71:12:8d:fc:34:ae:d1:1a:6e:f6:79:06:13:37:a3: b3:2f:37:12:41:a6:29:fa:c0:06:4b:3e:f8:b7:a2:76:2d:8b: 5d:70:c5:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMjcxMTAvBgNVBAUTKDc5RTU2MzJBRjI5QkFFNjRFNUY5RjE5QzU3NUJDNUE5 OTVFMjA1NTAwHhcNMjUwODIyMTUzMzU5WhcNMjUwODI5MTUzMzU5WjAYMRYwFAYD VQQDEw02OGE4OGRlOC05YTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/Pwq9HHgFweAMphP6Fnytk6LHib29VWDO/d4MStMJVOP4Mwem/64WRiIh5V RKJqSTlbR+4d7+t7sczkC23Xsg/ksMAgKQkhQnLTLBd9SqWvGSthQwVfXbKJecGe tx2UDUeuhkdeLQQn9ruN7gq5JiXdEOl8++UHFezj7BRqM2cAOiN4pqw6bguk6aJg yUS+YZ5o4Noog+bKxDi5SUEFbr4c9DsHo7ZjdJBPGCfmMA1pGk/zhG0ad/jC4KJi QRVHe/52HfTrgcMUYdLR7EBgfHjsdkQz0e5/r1VSFCWSJw4bYQ0T+MxKqNe+xPc0 9NQ7yTC6k1jhvaLCorvIAQPyWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyBPA9E mWafJT6D+M2rhQMZYeD0MB8GA1UdIwQYMBaAFHnlYyrym65k5fnxnFdbxamV4gVQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIyNy8xNjdBOTdFQzlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJtVGwtZkdjVjF2RnFaWGlC VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VlVmpLdkticm1UbC1mR2NWMXZGcVpYaUJWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUIyNy8xNjdBOTdFQzlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJt VGwtZkdjVjF2RnFaWGlCVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvXiACfOtJDVAs3xLNACj88ON/TRzvgOo9u96bHK38LMOkMosFOnHj E7VPSn0cFtJu/tb0qphY+3Z2vhj5/cIbcbe2i2nIUcKkoSnlrXjAOj+ORdVh824T M4aJQz75SZHLbbDIh50Dz1LtRokHqkWBGes/57TjVbwi0SVO9S0pM7ephlD6JfZm tVyGTM8la5k7xyXlj6nKW0j3yqwpPzucOT+q5W7gsr+FIPv/ua08GIRwjP6scUgg 7S+RlQ2LE6qRMjozNx8Vgp2T9c3WtfsFRljbJ7zT+CZ4hatxEo38NK7RGm72eQYT N6OzLzcSQaYp+sAGSz74t6J2LYtdcMV5 -----END CERTIFICATE-----Generated at Sat Aug 23 19:01:26 2025 by rpki-client