$ rpki-client -vvf rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft File: EibuEiKTgxtlHxW4vB8QVdtCicQ.mft (raw, json) Hash identifier: 2y1VAXXlD7VPirKvw3lWMi+8rlRiSZ0CjeOKjlh9tb8= Subject key identifier: 61:F2:2E:B9:80:42:A8:C3:C7:DA:2F:A6:57:82:7A:AA:97:05:A2:99 Authority key identifier: 12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4 Certificate issuer: /CN=A91E861E/serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft Manifest number: 20 Signing time: Thu 21 Aug 2025 08:05:59 +0000 Manifest this update: Thu 21 Aug 2025 08:05:58 +0000 Manifest next update: Thu 28 Aug 2025 08:05:58 +0000 Files and hashes: 1: EibuEiKTgxtlHxW4vB8QVdtCicQ.crl (hash: YfofIpDox/KLk8usI1mhIp7AbVjysR0xWdw52ZN/L1c=) 2: C67FDA48541E11F09E0E0C7DC4F9AE02.roa (hash: wa4TR1fvKETfK3e7ugA2YaJ41gq/9kU5OrG3vVI95Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E861E, serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4 Validity Not Before: Aug 21 08:05:58 2025 GMT Not After : Aug 28 08:05:58 2025 GMT Subject: CN=68a6d367-9af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2f:ca:bf:7d:dc:23:c5:48:e0:6b:29:7b:bd: 92:f6:0f:e0:4e:25:73:67:d4:0e:85:61:73:34:db: 48:52:8a:76:6a:ed:f2:26:36:14:9c:e1:44:5e:64: 3d:4e:0b:cd:44:6a:00:82:0e:9c:dc:59:3c:3a:14: bb:55:5c:71:f4:35:06:0a:b7:47:ee:b0:19:8c:67: 80:c2:61:a5:72:b3:18:fb:0b:33:c3:3b:bd:10:05: c1:53:4e:54:7e:17:ce:20:05:e6:69:1a:bf:3f:20: 2c:19:f7:6a:3b:89:00:14:e2:60:ce:97:2e:7b:aa: ba:91:6a:a6:75:b3:2d:56:fc:4c:3f:df:09:a3:60: e7:ce:95:8d:cf:4b:c1:d4:fc:7e:b1:5f:cb:37:46: 79:41:b4:64:59:4d:97:b4:16:89:f3:67:61:b3:b6: 34:35:20:b7:ce:2d:a5:05:21:58:46:83:fe:52:60: 27:e8:9e:0c:05:1f:75:68:7e:52:d8:d4:61:04:dc: d9:5f:7c:a7:6a:29:88:99:aa:f8:77:5d:b8:b9:02: 77:80:ee:42:fd:41:ad:e4:66:e1:91:5f:38:18:9c: f4:e0:94:90:0e:db:90:cc:7c:8b:c7:91:b3:35:d0: b7:c7:ab:7a:65:b2:03:ad:52:44:66:8c:91:64:1e: 97:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F2:2E:B9:80:42:A8:C3:C7:DA:2F:A6:57:82:7A:AA:97:05:A2:99 X509v3 Authority Key Identifier: keyid:12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:e7:cd:8b:98:2b:fc:2d:eb:43:64:8d:0b:59:41:c7:ba:6a: 95:3f:64:45:23:a8:08:cb:09:57:fd:eb:80:a9:e0:19:fd:ed: 5e:cd:73:7f:0d:d2:70:a1:f7:9d:fd:85:90:2f:22:49:d1:cd: da:fa:8b:35:13:cd:21:f6:fb:02:c9:b1:34:11:01:48:4a:95: d7:bd:50:25:23:49:37:3a:3b:f0:59:23:1b:6b:1d:11:3a:eb: f3:a3:23:99:5d:76:b4:81:d0:5e:09:c1:8e:bf:6a:8e:a9:a6: 3c:4e:9b:42:0d:9b:fa:93:09:c5:04:68:d6:8e:43:04:da:c9: f5:2f:a1:37:59:f1:b1:e4:8b:d0:c1:ed:ea:34:89:21:e8:22: 7e:cd:0c:06:52:fe:4b:9b:f4:dc:8e:c7:72:9d:83:59:65:d8: bf:5a:ab:f6:5e:e2:bd:ca:55:59:24:0c:a3:dd:28:a1:8c:9f: 80:0d:ec:d6:17:2a:95:1b:be:d5:3d:ac:93:c8:4c:aa:cf:ec: e6:c3:12:52:6a:fc:e4:17:24:97:c2:69:c2:75:f8:af:e9:55: 40:ea:79:72:7c:fb:35:0f:6e:8a:ba:e6:af:59:21:5d:13:1a: 4e:a1:8f:55:3d:d5:b5:55:ce:64:83:3d:a8:7a:ef:ab:05:1b: a3:99:ea:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODYxRTExMC8GA1UEBRMoMTIyNkVFMTIyMjkzODMxQjY1MUYxNUI4QkMxRjEwNTVE QjQyODlDNDAeFw0yNTA4MjEwODA1NThaFw0yNTA4MjgwODA1NThaMBgxFjAUBgNV BAMTDTY4YTZkMzY3LTlhZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3L8q/fdwjxUjgayl7vZL2D+BOJXNn1A6FYXM020hSinZq7fImNhSc4UReZD1O C81EagCCDpzcWTw6FLtVXHH0NQYKt0fusBmMZ4DCYaVysxj7CzPDO70QBcFTTlR+ F84gBeZpGr8/ICwZ92o7iQAU4mDOly57qrqRaqZ1sy1W/Ew/3wmjYOfOlY3PS8HU /H6xX8s3RnlBtGRZTZe0FonzZ2GztjQ1ILfOLaUFIVhGg/5SYCfongwFH3VoflLY 1GEE3NlffKdqKYiZqvh3Xbi5AneA7kL9Qa3kZuGRXzgYnPTglJAO25DMfIvHkbM1 0LfHq3plsgOtUkRmjJFkHpeVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYfIuuYBC qMPH2i+mV4J6qpcFopkwHwYDVR0jBBgwFoAUEibuEiKTgxtlHxW4vB8QVdtCicQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NjFFLzQ1Q0VERjQ4NTQx RTExRjBBMENFRjQ3OEM0RjlBRTAyL0VpYnVFaUtUZ3h0bEh4VzR2QjhRVmR0Q2lj US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWlidUVpS1RneHRsSHhXNHZCOFFWZHRDaWNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NjFFLzQ1Q0VERjQ4NTQxRTExRjBBMENFRjQ3OEM0RjlBRTAyL0VpYnVFaUtUZ3h0 bEh4VzR2QjhRVmR0Q2ljUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAATnzYuYK/wt60NkjQtZQce6apU/ZEUjqAjLCVf964Cp4Bn97V7Nc38N 0nCh9539hZAvIknRzdr6izUTzSH2+wLJsTQRAUhKlde9UCUjSTc6O/BZIxtrHRE6 6/OjI5lddrSB0F4JwY6/ao6ppjxOm0INm/qTCcUEaNaOQwTayfUvoTdZ8bHki9DB 7eo0iSHoIn7NDAZS/kub9NyOx3Kdg1ll2L9aq/Ze4r3KVVkkDKPdKKGMn4AN7NYX KpUbvtU9rJPITKrP7ObDElJq/OQXJJfCacJ1+K/pVUDqeXJ8+zUPboq65q9ZIV0T Gk6hj1U91bVVzmSDPah676sFG6OZ6ng= -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:09 2025 by rpki-client