$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft File: eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft (raw, json) Hash identifier: kyr4AonfvWgwD7HkpsXPVXwL2p1q9w+kgDvZE01LuyU= Subject key identifier: 40:98:B7:FA:5E:B6:EA:32:C8:C9:0B:45:7E:CA:F1:99:CD:EE:9F:25 Authority key identifier: 79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 Certificate issuer: /CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Certificate serial: 2D6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft Manifest number: 2D50 Signing time: Wed 22 Oct 2025 15:38:00 +0000 Manifest this update: Wed 22 Oct 2025 15:37:59 +0000 Manifest next update: Wed 29 Oct 2025 15:37:59 +0000 Files and hashes: 1: eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl (hash: kHgHN46908teRU8u1LHSPlcWxeHCmmbhtppscvUyxIM=) 2: 6CB78E8E967811EA92E45A27C4F9AE02.roa (hash: Vd/aN0N0PZj/2E1lobGPke/BU2o5Mlhxl5a5kuQS0uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 15:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11628 (0x2d6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB27, serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Validity Not Before: Oct 22 15:37:59 2025 GMT Not After : Oct 29 15:37:59 2025 GMT Subject: CN=68f8fa58-f089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:06:52:cd:f1:d9:7c:a9:51:e9:dd:5a:a5:3c: 11:e1:fd:97:ec:ac:aa:87:bb:07:fb:6e:21:76:cf: 29:65:b7:bc:b2:92:eb:e7:3f:a3:5c:a2:1d:17:1f: d4:62:38:b1:09:7f:ac:70:6b:07:52:61:e6:8a:26: 21:d0:4c:7b:de:8d:6e:76:81:20:31:09:7f:23:60: f2:e8:b3:92:1e:66:34:99:7f:32:1e:92:9a:c4:d8: b8:75:14:56:c4:cb:1c:81:40:8c:e0:ff:de:20:2c: 21:5b:7d:84:29:a7:4c:40:48:fc:fd:ae:e3:f6:fd: c0:6e:7a:74:b1:d1:73:de:b2:eb:67:41:8a:c8:44: b0:2a:e0:ce:84:22:d8:34:b5:d6:7b:a4:98:9e:3e: 85:be:95:88:9d:68:6f:b4:9c:bd:02:c6:72:8a:a2: b8:b7:73:d7:f9:1f:d5:55:85:18:c4:c3:88:7c:8a: f7:bf:75:d6:f1:f9:7a:cd:9d:61:1f:ac:21:50:d2: 8e:37:1e:d3:1b:77:e5:51:e3:e2:c3:cb:a1:c1:38: e2:59:4b:5f:dd:39:bd:19:1d:bc:11:16:54:23:b1: 1a:84:b9:36:b0:a8:33:19:7b:2e:14:ba:f2:70:b0: 57:6f:ca:0b:44:c7:4d:ac:c1:e8:1f:9e:78:58:84: d9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:98:B7:FA:5E:B6:EA:32:C8:C9:0B:45:7E:CA:F1:99:CD:EE:9F:25 X509v3 Authority Key Identifier: keyid:79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:80:5f:80:66:5f:3d:33:58:43:9b:89:1f:2e:8d:04:0f:7a: 77:38:d3:05:2a:e5:6b:9b:fa:4b:24:03:7d:13:8c:00:a8:95: fb:75:18:37:de:10:01:ff:82:66:8c:60:09:61:7c:56:92:f3: 85:78:b0:93:69:88:d5:03:ff:82:e8:e8:0f:53:ec:a1:d5:3e: 35:73:7f:cb:ba:e1:4f:b0:34:b6:1b:a7:43:91:12:05:03:79: c9:cf:0d:48:b1:fc:db:d1:04:19:13:0d:07:c9:22:7a:5f:aa: 1d:cc:ae:b6:23:0c:7b:0b:e6:57:b5:3e:99:8d:0a:19:8e:53: ec:dc:1f:1d:94:f3:94:2c:39:b0:8a:ef:13:69:e4:c7:98:f6: 51:32:54:71:83:0c:67:aa:33:99:54:d9:69:d1:da:cc:a1:fa: 47:33:1f:21:58:49:cc:c3:c9:74:e8:9e:13:5b:3c:b8:17:cb: 04:e5:c4:77:ec:c1:09:2f:80:70:8a:55:7b:c6:9d:34:d4:33: 09:e1:d3:30:e6:26:66:c8:33:1c:e6:63:66:56:2a:28:fe:fe: fa:a4:30:52:43:38:a9:b9:f0:99:7b:c0:46:35:ea:8d:bb:05: 95:ba:91:0b:00:c8:09:4a:6e:29:ca:b6:cf:48:a7:86:16:6a: 84:da:51:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMjcxMTAvBgNVBAUTKDc5RTU2MzJBRjI5QkFFNjRFNUY5RjE5QzU3NUJDNUE5 OTVFMjA1NTAwHhcNMjUxMDIyMTUzNzU5WhcNMjUxMDI5MTUzNzU5WjAYMRYwFAYD VQQDEw02OGY4ZmE1OC1mMDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAZSzfHZfKlR6d1apTwR4f2X7Kyqh7sH+24hds8pZbe8spLr5z+jXKIdFx/U YjixCX+scGsHUmHmiiYh0Ex73o1udoEgMQl/I2Dy6LOSHmY0mX8yHpKaxNi4dRRW xMscgUCM4P/eICwhW32EKadMQEj8/a7j9v3Abnp0sdFz3rLrZ0GKyESwKuDOhCLY NLXWe6SYnj6FvpWInWhvtJy9AsZyiqK4t3PX+R/VVYUYxMOIfIr3v3XW8fl6zZ1h H6whUNKONx7TG3flUePiw8uhwTjiWUtf3Tm9GR28ERZUI7EahLk2sKgzGXsuFLry cLBXb8oLRMdNrMHoH554WITZVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECYt/pe tuoyyMkLRX7K8ZnN7p8lMB8GA1UdIwQYMBaAFHnlYyrym65k5fnxnFdbxamV4gVQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIyNy8xNjdBOTdFQzlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJtVGwtZkdjVjF2RnFaWGlC VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VlVmpLdkticm1UbC1mR2NWMXZGcVpYaUJWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUIyNy8xNjdBOTdFQzlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJt VGwtZkdjVjF2RnFaWGlCVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKgF+AZl89M1hDm4kfLo0ED3p3ONMFKuVrm/pLJAN9E4wAqJX7dRg3 3hAB/4JmjGAJYXxWkvOFeLCTaYjVA/+C6OgPU+yh1T41c3/LuuFPsDS2G6dDkRIF A3nJzw1Isfzb0QQZEw0HySJ6X6odzK62Iwx7C+ZXtT6ZjQoZjlPs3B8dlPOULDmw iu8TaeTHmPZRMlRxgwxnqjOZVNlp0drMofpHMx8hWEnMw8l06J4TWzy4F8sE5cR3 7MEJL4BwilV7xp001DMJ4dMw5iZmyDMc5mNmVioo/v76pDBSQzipufCZe8BGNeqN uwWVupELAMgJSm4pyrbPSKeGFmqE2lFB -----END CERTIFICATE-----Generated at Thu Oct 23 05:54:54 2025 by rpki-client