$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft File: EIRQx-37eFIbfkhx_obo9iOhBRs.mft (raw, json) Hash identifier: uErPIskqxXw0bBlCz08I1QjCCiMMrNCXEe6X+ElMiiY= Subject key identifier: AD:C2:51:85:DA:CF:CA:66:C8:5E:E4:48:C4:B4:32:7D:EA:D0:59:46 Authority key identifier: 10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B Certificate issuer: /CN=A91BA239/serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft Manifest number: 01E4 Signing time: Sat 07 Jun 2025 02:17:26 +0000 Manifest this update: Sat 07 Jun 2025 02:17:26 +0000 Manifest next update: Sat 14 Jun 2025 02:17:26 +0000 Files and hashes: 1: EIRQx-37eFIbfkhx_obo9iOhBRs.crl (hash: BENNjYdOBmkrIWPRTKqqkckdO9AnGFRlRG2tI6WNt7I=) 2: B2119B7464BA11ED8544E91DC4F9AE02.roa (hash: QbSn5YRTWG7olUrItxapoYIPCE3hPl44mhf7s2FPRaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 02:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA239, serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B Validity Not Before: Jun 7 02:17:26 2025 GMT Not After : Jun 14 02:17:26 2025 GMT Subject: CN=6843a136-ff37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:c5:e9:69:dc:aa:b4:d2:13:ee:f1:60:10: 37:27:68:e8:11:1d:30:9d:32:6f:fa:ad:a6:15:16: 08:fd:78:38:de:38:e9:de:f6:e8:79:f0:f8:d9:2b: 41:ff:d5:65:2d:43:05:16:db:35:3b:34:a1:eb:fe: d9:f3:b9:a2:f5:92:1b:50:af:41:e3:e5:fe:2a:6b: 06:4e:d5:40:7f:20:67:2b:9a:47:3e:9c:10:7d:a5: 3f:c1:04:8c:63:cf:4c:84:f4:07:dc:e1:4d:80:bb: 1d:d1:2b:36:9d:28:a7:5a:58:8b:66:0b:cd:81:21: f4:91:bd:82:be:0b:d6:b6:c5:1f:c3:f1:75:d7:66: 36:45:e6:c8:96:06:18:5c:76:c3:4b:22:16:30:1a: 22:9b:79:03:51:91:f2:ab:db:e7:63:88:1e:33:c5: aa:22:d6:a1:45:1d:41:5c:7e:06:bb:50:27:07:53: 05:85:6d:06:8c:2b:b7:9b:a5:d8:b3:e9:75:96:48: 55:bc:7d:cb:e7:40:ef:b3:43:8f:09:7f:39:ba:fd: 70:a9:cb:d9:07:c4:d5:2e:99:83:61:32:e3:bb:08: 37:8a:4e:d5:49:c1:ea:9e:fd:17:3b:cb:77:b9:11: 31:56:93:ed:d0:9e:dd:19:48:0a:37:7b:f9:8f:56: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C2:51:85:DA:CF:CA:66:C8:5E:E4:48:C4:B4:32:7D:EA:D0:59:46 X509v3 Authority Key Identifier: keyid:10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:1e:af:54:09:45:62:26:08:0c:b6:c0:33:91:f6:88:73:80: 5b:b4:06:1f:8f:40:95:ad:79:59:fe:e2:7f:6b:05:8c:11:69: 7e:be:1d:0e:2b:00:f5:09:fa:69:c6:ab:0c:91:70:20:85:aa: 66:a6:a4:4f:2c:3f:7b:26:1d:25:52:51:ac:29:91:79:d1:3d: 63:f9:f4:c5:7b:16:16:6e:c6:44:e5:2b:83:63:6a:a6:25:e8: 5c:fa:48:f2:ac:22:3c:84:09:26:42:b7:04:50:1d:17:28:04: df:9b:43:1a:25:f9:94:7c:f6:e8:d0:a9:c4:de:3f:be:c8:61: c6:cd:91:25:0c:2f:c3:83:2e:8e:c6:47:ca:d4:3d:fa:88:ec: c0:47:22:86:f5:e3:c5:26:32:b2:b9:28:18:81:74:57:ce:e9: 0f:25:5f:02:49:00:da:fe:50:d7:e7:6e:e4:87:5a:5d:e8:d0: 8a:bf:23:a4:d6:a7:53:b6:67:fe:22:08:1d:61:40:0b:f8:7a: c4:60:b6:2a:24:aa:6b:9a:41:9d:17:2e:b8:19:8c:79:35:d2: 89:f6:d0:3b:a9:1c:a2:54:0b:81:bc:57:91:e2:86:6e:16:fa: 75:05:a8:74:f0:29:7d:5f:48:ce:ca:4e:86:7a:3a:29:de:5a: c0:f2:a7:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyMzkxMTAvBgNVBAUTKDEwODQ1MEM3RURGQjc4NTIxQjdFNDg3MUZFODZFOEY2 MjNBMTA1MUIwHhcNMjUwNjA3MDIxNzI2WhcNMjUwNjE0MDIxNzI2WjAYMRYwFAYD VQQDEw02ODQzYTEzNi1mZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjXF6WncqrTSE+7xYBA3J2joER0wnTJv+q2mFRYI/Xg43jjp3vboefD42StB /9VlLUMFFts1OzSh6/7Z87mi9ZIbUK9B4+X+KmsGTtVAfyBnK5pHPpwQfaU/wQSM Y89MhPQH3OFNgLsd0Ss2nSinWliLZgvNgSH0kb2CvgvWtsUfw/F112Y2RebIlgYY XHbDSyIWMBoim3kDUZHyq9vnY4geM8WqItahRR1BXH4Gu1AnB1MFhW0GjCu3m6XY s+l1lkhVvH3L50Dvs0OPCX85uv1wqcvZB8TVLpmDYTLjuwg3ik7VScHqnv0XO8t3 uRExVpPt0J7dGUgKN3v5j1bvswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3CUYXa z8pmyF7kSMS0Mn3q0FlGMB8GA1UdIwQYMBaAFBCEUMft+3hSG35Icf6G6PYjoQUb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTIzOS8xOUFEMEYxMDY0 QjcxMUVEQTA5MThBODNDNEY5QUUwMi9FSVJReC0zN2VGSWJma2h4X29ibzlpT2hC UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VJUlF4LTM3ZUZJYmZraHhfb2JvOWlPaEJScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTIzOS8xOUFEMEYxMDY0QjcxMUVEQTA5MThBODNDNEY5QUUwMi9FSVJReC0zN2VG SWJma2h4X29ibzlpT2hCUnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5Hq9UCUViJggMtsAzkfaIc4BbtAYfj0CVrXlZ/uJ/awWMEWl+vh0O KwD1CfppxqsMkXAghapmpqRPLD97Jh0lUlGsKZF50T1j+fTFexYWbsZE5SuDY2qm Jehc+kjyrCI8hAkmQrcEUB0XKATfm0MaJfmUfPbo0KnE3j++yGHGzZElDC/Dgy6O xkfK1D36iOzARyKG9ePFJjKyuSgYgXRXzukPJV8CSQDa/lDX527kh1pd6NCKvyOk 1qdTtmf+IggdYUAL+HrEYLYqJKprmkGdFy64GYx5NdKJ9tA7qRyiVAuBvFeR4oZu Fvp1Bah08Cl9X0jOyk6Gejop3lrA8qfh -----END CERTIFICATE-----Generated at Mon Jun 9 00:16:50 2025 by rpki-client