$ rpki-client -vvf rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft File: EibuEiKTgxtlHxW4vB8QVdtCicQ.mft (raw, json) Hash identifier: ComZ5JCYNpHwWEIwId1twPkcXPwjGxV8dE7ZQDc6F24= Subject key identifier: D5:B3:40:35:F9:41:6A:68:A8:05:C4:65:03:BD:F5:1C:DE:D6:8B:02 Authority key identifier: 12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4 Certificate issuer: /CN=A91E861E/serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft Manifest number: 08 Signing time: Sat 05 Jul 2025 08:30:38 +0000 Manifest this update: Sat 05 Jul 2025 08:30:38 +0000 Manifest next update: Sat 12 Jul 2025 08:30:38 +0000 Files and hashes: 1: EibuEiKTgxtlHxW4vB8QVdtCicQ.crl (hash: UZHNE+3vPJRnf0rallkgvkNCYNH0K3EFld15C3PMFzk=) 2: C67FDA48541E11F09E0E0C7DC4F9AE02.roa (hash: wa4TR1fvKETfK3e7ugA2YaJ41gq/9kU5OrG3vVI95Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Jul 2025 08:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E861E, serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4 Validity Not Before: Jul 5 08:30:38 2025 GMT Not After : Jul 12 08:30:38 2025 GMT Subject: CN=6868e2ae-ba35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:36:28:02:3a:8b:a7:ee:02:7b:34:b4:15:53: 1a:62:b1:ce:55:85:66:8a:10:1f:8d:e7:63:64:ca: 7c:42:34:97:0c:d7:55:16:b9:e0:2f:59:18:27:55: 55:5c:0b:3c:58:d4:83:a1:1f:01:cb:08:9d:44:33: 96:84:2c:a9:81:ec:1e:e3:1e:3e:20:5e:1a:c8:13: da:0a:09:3b:c1:71:38:e9:34:a3:4d:dd:e2:4d:04: 54:9b:71:51:17:74:3a:8a:78:89:d3:95:be:37:7a: e9:c1:b1:50:2f:fe:be:75:6d:3b:77:a5:19:b4:94: d9:6e:6f:41:ec:c7:db:91:a3:f5:c7:ef:38:32:da: f7:70:50:0b:a1:96:23:99:c7:31:1c:a4:ba:c1:0e: dc:a3:ae:20:b7:3c:58:8b:1b:2c:df:2d:32:5f:39: 58:c9:60:69:4d:69:e6:9d:d6:46:a7:ec:4c:99:22: d4:eb:d6:9b:f5:fd:6f:48:55:df:84:18:ef:ed:7e: 09:ad:f2:6a:7a:9f:a7:6e:9e:8f:38:37:25:6e:8a: a0:6b:26:f1:9b:d2:4b:9c:96:a8:91:c0:9a:ec:c3: 38:27:d8:94:51:c2:48:d9:35:8d:06:b7:3e:ba:a2: b8:6c:27:95:03:c8:1f:86:93:fd:02:2f:7d:95:fd: 80:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B3:40:35:F9:41:6A:68:A8:05:C4:65:03:BD:F5:1C:DE:D6:8B:02 X509v3 Authority Key Identifier: keyid:12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e2:a1:cc:15:f3:a4:e6:12:f2:38:47:7a:46:a2:59:49:a3: 83:52:c1:3f:76:6b:0b:b8:3f:15:65:64:25:43:6c:3d:78:de: 2b:e1:74:59:f4:1a:a1:ce:90:95:f4:77:9b:40:f2:df:6e:32: e3:11:09:5d:7a:e8:97:82:4c:e2:13:4b:17:3c:77:40:de:f7: f2:f9:68:66:e6:15:7e:9e:78:1d:bf:0a:49:12:ae:e7:2a:3c: a4:bd:b0:e1:c6:21:27:1f:e9:96:42:71:84:a3:84:dc:1c:75: 8f:da:83:22:17:32:f8:d1:f0:93:65:c2:06:f4:d2:52:0f:63: 71:ba:95:c5:66:d4:61:a4:f5:67:3b:46:2d:d2:12:96:d4:a0: 55:67:92:14:35:74:57:15:ac:4e:cb:de:37:23:cb:5e:c3:0b: 97:40:74:c8:b6:a0:9c:e4:05:54:74:8c:d7:33:35:90:66:80: ba:d4:67:6b:d6:c0:25:8c:75:5a:14:c1:89:52:c6:3f:91:84: a8:0d:69:42:a3:7c:5a:95:3f:d1:c7:36:c6:08:4e:29:d8:a1: 48:fb:04:c2:44:09:6b:ce:45:86:fb:a8:7c:f1:5b:62:f6:8f: 5d:4a:3f:61:f8:f1:d0:03:35:5f:7c:66:72:34:79:f6:1c:ab: b7:a5:02:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODYxRTExMC8GA1UEBRMoMTIyNkVFMTIyMjkzODMxQjY1MUYxNUI4QkMxRjEwNTVE QjQyODlDNDAeFw0yNTA3MDUwODMwMzhaFw0yNTA3MTIwODMwMzhaMBgxFjAUBgNV BAMTDTY4NjhlMmFlLWJhMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDENigCOoun7gJ7NLQVUxpisc5VhWaKEB+N52NkynxCNJcM11UWueAvWRgnVVVc CzxY1IOhHwHLCJ1EM5aELKmB7B7jHj4gXhrIE9oKCTvBcTjpNKNN3eJNBFSbcVEX dDqKeInTlb43eunBsVAv/r51bTt3pRm0lNlub0Hsx9uRo/XH7zgy2vdwUAuhliOZ xzEcpLrBDtyjriC3PFiLGyzfLTJfOVjJYGlNaead1kan7EyZItTr1pv1/W9IVd+E GO/tfgmt8mp6n6duno84NyVuiqBrJvGb0kuclqiRwJrswzgn2JRRwkjZNY0Gtz66 orhsJ5UDyB+Gk/0CL32V/YArAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1bNANflB amioBcRlA731HN7WiwIwHwYDVR0jBBgwFoAUEibuEiKTgxtlHxW4vB8QVdtCicQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NjFFLzQ1Q0VERjQ4NTQx RTExRjBBMENFRjQ3OEM0RjlBRTAyL0VpYnVFaUtUZ3h0bEh4VzR2QjhRVmR0Q2lj US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWlidUVpS1RneHRsSHhXNHZCOFFWZHRDaWNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NjFFLzQ1Q0VERjQ4NTQxRTExRjBBMENFRjQ3OEM0RjlBRTAyL0VpYnVFaUtUZ3h0 bEh4VzR2QjhRVmR0Q2ljUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG3iocwV86TmEvI4R3pGollJo4NSwT92awu4PxVlZCVDbD143ivhdFn0 GqHOkJX0d5tA8t9uMuMRCV166JeCTOITSxc8d0De9/L5aGbmFX6eeB2/CkkSrucq PKS9sOHGIScf6ZZCcYSjhNwcdY/agyIXMvjR8JNlwgb00lIPY3G6lcVm1GGk9Wc7 Ri3SEpbUoFVnkhQ1dFcVrE7L3jcjy17DC5dAdMi2oJzkBVR0jNczNZBmgLrUZ2vW wCWMdVoUwYlSxj+RhKgNaUKjfFqVP9HHNsYITinYoUj7BMJECWvORYb7qHzxW2L2 j11KP2H48dADNV98ZnI0efYcq7elAhI= -----END CERTIFICATE-----Generated at Mon Jul 7 09:39:00 2025 by rpki-client