$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft File: eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft (raw, json) Hash identifier: dRcuAgCxXy/oIrcSMzMmDq4VvXEXM6vmEhEv5pCInrg= Subject key identifier: EB:3E:92:6F:DF:69:9D:0A:0A:C5:E4:83:41:77:5B:13:C5:56:79:1B Authority key identifier: 79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 Certificate issuer: /CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Certificate serial: 2D55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft Manifest number: 2D39 Signing time: Sat 06 Sep 2025 15:33:01 +0000 Manifest this update: Sat 06 Sep 2025 15:33:00 +0000 Manifest next update: Sat 13 Sep 2025 15:33:00 +0000 Files and hashes: 1: eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl (hash: jkdOK6TEh4gseVclLeo1aibbBe0nbXeRSdNoculmuGQ=) 2: 6CB78E8E967811EA92E45A27C4F9AE02.roa (hash: Vd/aN0N0PZj/2E1lobGPke/BU2o5Mlhxl5a5kuQS0uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11605 (0x2d55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB27, serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Validity Not Before: Sep 6 15:33:00 2025 GMT Not After : Sep 13 15:33:00 2025 GMT Subject: CN=68bc542c-fcf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:53:67:96:1e:4e:b0:88:2b:89:a8:0f:5a:e7: 63:7b:d7:4f:a4:1d:b1:17:a7:f9:48:be:21:8f:72: ee:5f:a0:62:65:ea:d2:42:cb:a1:46:08:54:40:f5: 93:6b:e6:86:b5:21:1f:5e:35:05:cc:7c:41:e3:e0: 62:89:25:04:cf:f1:18:b3:5f:c4:25:de:65:e8:d0: 53:97:0f:dd:bb:47:66:81:96:48:c7:6e:f2:33:f5: 80:e3:59:4e:f6:50:37:17:f2:1f:76:9b:fd:ce:80: 4c:ed:80:98:4b:6b:74:2a:97:a4:64:c3:e3:11:b7: b0:8f:07:2d:1a:68:58:3e:78:c5:93:d7:59:83:a8: df:e2:7e:43:8e:ce:c6:2d:f6:fa:8f:d0:db:66:a8: 60:f4:b1:67:02:e7:bd:76:25:85:b2:45:95:f6:1a: 52:37:bc:c5:53:d0:3e:d0:5d:c0:11:16:60:2a:12: 86:34:f6:db:45:ab:c0:9f:99:f7:49:f3:09:81:56: 78:7f:61:a3:50:54:4d:d3:53:56:ae:95:4a:44:33: f4:89:40:9e:d3:9b:c4:e6:c8:f7:da:3c:b6:21:ab: 09:b6:4c:42:ee:26:b0:66:4b:cd:ea:72:18:97:52: 69:7b:b4:18:e8:68:28:18:d7:80:0f:83:96:33:40: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3E:92:6F:DF:69:9D:0A:0A:C5:E4:83:41:77:5B:13:C5:56:79:1B X509v3 Authority Key Identifier: keyid:79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:2b:d4:8e:05:1c:3e:e7:82:3a:96:d3:b1:e7:be:2d:fa:94: 1b:2f:fa:a2:9b:d7:9f:1c:39:d5:89:50:c0:08:f2:30:ad:5c: d5:8a:a2:c8:40:ca:60:f7:61:01:76:4c:32:76:71:d6:64:de: 6b:02:c3:de:f8:86:16:83:9d:00:3a:57:fd:58:8c:28:48:ec: 22:fb:de:e5:d3:2d:c2:8d:80:58:2c:34:76:b7:54:c6:db:47: 18:0b:5a:13:e1:d0:47:3b:44:b6:e6:bb:3c:71:69:46:68:f1: 82:ae:1d:dd:e5:1f:ea:0b:41:57:dd:d6:03:cb:58:16:3c:55: f2:1b:9a:4b:96:ec:25:a2:8b:00:9b:79:bf:3f:4f:b5:77:54: b0:3b:8e:e5:d9:18:a8:5b:0d:37:f2:ad:29:0a:0c:99:c7:3b: 40:9f:e2:16:28:f9:a9:59:4a:3e:37:aa:f3:00:31:49:20:b7: 10:17:50:48:1e:82:05:e7:8c:87:62:3d:b0:c6:ff:6f:9a:36: 1e:b7:53:5e:ad:43:91:3f:77:5f:3a:9a:39:ef:c5:f2:c0:3f: 92:e6:96:95:91:e9:b6:1a:7a:a2:01:37:b0:69:23:82:af:1f: c7:8a:86:5c:c8:90:29:90:55:ea:85:4b:56:d7:cc:b9:9a:7f: b6:67:fa:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMjcxMTAvBgNVBAUTKDc5RTU2MzJBRjI5QkFFNjRFNUY5RjE5QzU3NUJDNUE5 OTVFMjA1NTAwHhcNMjUwOTA2MTUzMzAwWhcNMjUwOTEzMTUzMzAwWjAYMRYwFAYD VQQDEw02OGJjNTQyYy1mY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFNnlh5OsIgriagPWudje9dPpB2xF6f5SL4hj3LuX6BiZerSQsuhRghUQPWT a+aGtSEfXjUFzHxB4+BiiSUEz/EYs1/EJd5l6NBTlw/du0dmgZZIx27yM/WA41lO 9lA3F/Ifdpv9zoBM7YCYS2t0KpekZMPjEbewjwctGmhYPnjFk9dZg6jf4n5Djs7G Lfb6j9DbZqhg9LFnAue9diWFskWV9hpSN7zFU9A+0F3AERZgKhKGNPbbRavAn5n3 SfMJgVZ4f2GjUFRN01NWrpVKRDP0iUCe05vE5sj32jy2IasJtkxC7iawZkvN6nIY l1Jpe7QY6GgoGNeAD4OWM0BeNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOs+km/f aZ0KCsXkg0F3WxPFVnkbMB8GA1UdIwQYMBaAFHnlYyrym65k5fnxnFdbxamV4gVQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIyNy8xNjdBOTdFQzlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJtVGwtZkdjVjF2RnFaWGlC VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VlVmpLdkticm1UbC1mR2NWMXZGcVpYaUJWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUIyNy8xNjdBOTdFQzlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJt VGwtZkdjVjF2RnFaWGlCVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcK9SOBRw+54I6ltOx574t+pQbL/qim9efHDnViVDACPIwrVzViqLI QMpg92EBdkwydnHWZN5rAsPe+IYWg50AOlf9WIwoSOwi+97l0y3CjYBYLDR2t1TG 20cYC1oT4dBHO0S25rs8cWlGaPGCrh3d5R/qC0FX3dYDy1gWPFXyG5pLluwloosA m3m/P0+1d1SwO47l2RioWw038q0pCgyZxztAn+IWKPmpWUo+N6rzADFJILcQF1BI HoIF54yHYj2wxv9vmjYet1NerUORP3dfOpo578XywD+S5paVkem2GnqiATewaSOC rx/HioZcyJApkFXqhUtW18y5mn+2Z/pm -----END CERTIFICATE-----Generated at Mon Sep 8 02:17:50 2025 by rpki-client