$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft File: EIRQx-37eFIbfkhx_obo9iOhBRs.mft (raw, json) Hash identifier: cuLukALnE2VD1/TtRjPurGKBghDkANoYU2QTgPL8iZg= Subject key identifier: 1C:1C:F9:F9:F7:46:BA:15:7A:E2:E6:19:CC:CC:3A:79:98:FE:A2:51 Authority key identifier: 10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B Certificate issuer: /CN=A91BA239/serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft Manifest number: 0230 Signing time: Wed 05 Nov 2025 02:04:14 +0000 Manifest this update: Wed 05 Nov 2025 02:04:14 +0000 Manifest next update: Wed 12 Nov 2025 02:04:14 +0000 Files and hashes: 1: EIRQx-37eFIbfkhx_obo9iOhBRs.crl (hash: bBAGASauxvEwayG6xwS4ptcxNDPdHEWRtVoHPTUhAUU=) 2: B2119B7464BA11ED8544E91DC4F9AE02.roa (hash: QbSn5YRTWG7olUrItxapoYIPCE3hPl44mhf7s2FPRaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA239, serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B Validity Not Before: Nov 5 02:04:14 2025 GMT Not After : Nov 12 02:04:14 2025 GMT Subject: CN=690ab09e-6db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ee:cf:b1:ee:73:b6:08:2d:aa:d0:99:2e:11: 4f:69:31:00:3f:35:9c:ee:2e:cc:5b:6c:c3:8f:18: 95:ad:af:7d:b6:97:f4:38:41:13:f3:d6:57:00:7d: 33:f5:76:9c:1b:fc:3d:ec:34:c7:d7:93:31:6a:d3: dc:fc:e8:11:a2:81:e6:15:3e:55:d5:39:e0:22:9d: 78:33:ca:fe:99:18:6c:b2:b7:45:0d:92:26:e5:db: e1:28:57:c7:81:06:84:aa:58:6e:73:39:92:6f:09: d1:fa:5e:42:31:bf:56:a8:7c:36:fa:d8:5b:0e:88: 78:61:f7:c4:72:50:eb:8b:82:3a:0c:84:a1:ab:1c: dc:cd:5a:9c:da:f7:fd:c0:16:85:64:3a:c9:94:79: 35:1a:32:64:b6:19:99:e2:ad:41:1b:62:4f:1b:73: bd:73:91:76:cb:e0:1e:10:2a:4f:d2:46:f1:53:6d: c4:fd:92:d1:34:8e:52:09:49:d1:67:18:18:62:89: d3:3a:63:51:20:e2:c5:df:67:e3:bf:5c:2d:48:eb: 88:74:41:b5:5c:08:96:21:cc:e5:21:cf:02:42:5d: ac:b8:bc:b0:93:3f:92:d6:0d:11:38:16:71:53:71: 92:83:92:d4:cf:73:18:dd:42:6b:e4:1d:bb:d3:ef: 40:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1C:F9:F9:F7:46:BA:15:7A:E2:E6:19:CC:CC:3A:79:98:FE:A2:51 X509v3 Authority Key Identifier: keyid:10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:42:2e:7a:8e:cf:a7:1e:e7:c7:43:a4:05:d1:40:0a:7b:ab: 93:93:1c:9c:ef:a1:93:c1:9e:a1:19:a5:ec:ca:04:fb:c3:2d: ac:81:f4:3a:37:a6:8b:28:bf:b2:d9:20:cc:f6:f7:4f:a4:ca: fa:0e:b0:29:6f:46:b6:b7:d9:7a:c1:9c:23:4c:de:b6:00:03: dd:c7:d8:0c:14:a6:21:fc:fb:df:32:33:9b:04:8f:bc:e6:17: 0c:a5:48:1b:6b:d4:91:64:14:fa:27:18:99:12:ae:18:89:d2: ad:13:9a:9f:6c:7b:cd:f0:eb:a5:c3:c2:9a:de:c9:5a:01:44: 40:a6:93:cf:d6:42:f0:e2:6e:ab:ea:ef:36:35:24:0f:90:2f: 8f:a0:57:8f:51:a3:8e:e7:d0:bf:1f:e6:73:03:d0:51:23:90: 37:56:1f:b4:0d:35:5b:20:8d:3f:45:53:d0:38:88:df:64:d3: bc:92:51:cf:4f:d8:01:97:1f:7c:24:6d:f3:27:98:99:b1:f0: dd:42:40:a4:1a:6f:72:e1:e9:7f:8c:1d:8b:02:9e:81:2f:ee: d8:99:03:64:94:53:19:53:59:60:7d:39:72:45:c7:81:7b:d3: 37:10:7c:c4:f5:0a:3f:80:f9:39:e7:86:70:15:f9:82:d0:65: 21:b9:4c:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyMzkxMTAvBgNVBAUTKDEwODQ1MEM3RURGQjc4NTIxQjdFNDg3MUZFODZFOEY2 MjNBMTA1MUIwHhcNMjUxMTA1MDIwNDE0WhcNMjUxMTEyMDIwNDE0WjAYMRYwFAYD VQQDEw02OTBhYjA5ZS02ZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAru7Pse5ztggtqtCZLhFPaTEAPzWc7i7MW2zDjxiVra99tpf0OEET89ZXAH0z 9XacG/w97DTH15MxatPc/OgRooHmFT5V1TngIp14M8r+mRhssrdFDZIm5dvhKFfH gQaEqlhuczmSbwnR+l5CMb9WqHw2+thbDoh4YffEclDri4I6DIShqxzczVqc2vf9 wBaFZDrJlHk1GjJkthmZ4q1BG2JPG3O9c5F2y+AeECpP0kbxU23E/ZLRNI5SCUnR ZxgYYonTOmNRIOLF32fjv1wtSOuIdEG1XAiWIczlIc8CQl2suLywkz+S1g0ROBZx U3GSg5LUz3MY3UJr5B270+9AtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwc+fn3 RroVeuLmGczMOnmY/qJRMB8GA1UdIwQYMBaAFBCEUMft+3hSG35Icf6G6PYjoQUb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTIzOS8xOUFEMEYxMDY0 QjcxMUVEQTA5MThBODNDNEY5QUUwMi9FSVJReC0zN2VGSWJma2h4X29ibzlpT2hC UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VJUlF4LTM3ZUZJYmZraHhfb2JvOWlPaEJScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTIzOS8xOUFEMEYxMDY0QjcxMUVEQTA5MThBODNDNEY5QUUwMi9FSVJReC0zN2VG SWJma2h4X29ibzlpT2hCUnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxQi56js+nHufHQ6QF0UAKe6uTkxyc76GTwZ6hGaXsygT7wy2sgfQ6 N6aLKL+y2SDM9vdPpMr6DrApb0a2t9l6wZwjTN62AAPdx9gMFKYh/PvfMjObBI+8 5hcMpUgba9SRZBT6JxiZEq4YidKtE5qfbHvN8Oulw8Ka3slaAURAppPP1kLw4m6r 6u82NSQPkC+PoFePUaOO59C/H+ZzA9BRI5A3Vh+0DTVbII0/RVPQOIjfZNO8klHP T9gBlx98JG3zJ5iZsfDdQkCkGm9y4el/jB2LAp6BL+7YmQNklFMZU1lgfTlyRceB e9M3EHzE9Qo/gPk554ZwFfmC0GUhuUxL -----END CERTIFICATE-----Generated at Wed Nov 5 11:24:46 2025 by rpki-client