$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft File: EIRQx-37eFIbfkhx_obo9iOhBRs.mft (raw, json) Hash identifier: nJAU9WcU7TeOmlcVKhRsNqJQP7sWzkFhZ8VF/C7RRQs= Subject key identifier: E1:B2:06:4D:91:E8:EF:86:10:0C:65:8A:86:73:5E:C8:07:5B:43:1D Authority key identifier: 10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B Certificate issuer: /CN=A91BA239/serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft Manifest number: 0202 Signing time: Tue 05 Aug 2025 02:47:59 +0000 Manifest this update: Tue 05 Aug 2025 02:47:59 +0000 Manifest next update: Tue 12 Aug 2025 02:47:59 +0000 Files and hashes: 1: EIRQx-37eFIbfkhx_obo9iOhBRs.crl (hash: 7k7pR6bYlt7NkAeshgecdMCWEdEPUZh4FgOL6S/iphU=) 2: B2119B7464BA11ED8544E91DC4F9AE02.roa (hash: QbSn5YRTWG7olUrItxapoYIPCE3hPl44mhf7s2FPRaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA239, serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B Validity Not Before: Aug 5 02:47:59 2025 GMT Not After : Aug 12 02:47:59 2025 GMT Subject: CN=689170df-eb7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:14:c6:ea:1d:0c:56:86:6e:55:15:a4:34:b5: 49:50:45:db:89:e5:b6:f0:32:f9:74:35:f1:81:4b: 8b:ac:a6:3c:8c:5e:23:b2:63:f3:7b:ae:c7:f8:bb: b9:ce:7f:1c:f9:45:dd:ac:64:93:6f:5e:59:dc:87: ee:ff:5b:e6:6f:0b:3e:83:31:5a:8e:eb:45:14:e3: 74:25:0a:f9:cb:44:29:48:57:1b:d8:f2:96:f5:d9: 71:15:90:bb:9c:3b:cf:b7:58:b7:c3:d3:be:e2:12: 7f:64:38:c1:a5:70:a6:1b:30:2f:6c:ea:5a:2f:19: 9d:ed:67:1e:b6:6e:db:8c:24:0b:3d:86:8b:5d:3e: a2:a4:50:08:8f:80:75:66:82:d0:8a:c4:12:37:ce: de:ff:9f:c7:03:d5:3a:f9:24:c6:1e:0d:88:9f:d7: 1b:68:69:ff:ec:a8:fe:a9:13:0c:20:62:e6:69:f6: ff:2a:be:8b:dc:d3:3f:da:d0:6e:a5:55:79:08:a5: f3:cd:3a:34:ad:2b:18:aa:eb:8a:de:c2:0b:3e:88: 1b:72:1b:e5:74:07:43:c5:09:f4:e4:b1:c7:2d:b7: 49:4b:f4:3f:d9:78:64:41:7c:c5:ee:d1:7d:ef:2e: 93:f4:e1:35:c1:75:0b:6f:cf:0a:c9:f2:4c:04:71: 33:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B2:06:4D:91:E8:EF:86:10:0C:65:8A:86:73:5E:C8:07:5B:43:1D X509v3 Authority Key Identifier: keyid:10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:40:c2:7f:ad:c8:5e:24:37:06:ad:1c:fa:14:32:8e:a2:b1: 40:fb:91:60:92:96:70:be:17:c6:ca:df:fb:7e:4c:3f:4a:b3: dd:63:16:8a:97:e3:40:69:22:db:45:8f:c7:4e:73:df:2d:57: 46:cb:f2:35:c7:ed:9b:7e:08:1d:0c:2d:3a:c0:ba:9f:d9:98: 9c:ad:09:04:2f:10:46:39:e3:eb:fb:fb:f2:ad:6f:bb:b1:c0: 48:ea:69:8c:27:2e:9d:a2:94:72:54:a7:ee:f6:d5:c5:3d:50: 9c:51:bf:e1:60:86:13:cd:20:f8:27:51:93:e2:58:b7:a6:de: a6:a5:46:be:f6:e1:43:13:8d:38:b2:59:73:39:46:d1:d4:43: 70:32:04:cb:b8:09:49:fb:bc:a8:f9:f9:3f:3e:78:03:40:a2: 3f:a8:4b:c6:89:24:9c:b4:e7:95:d6:47:27:b2:6d:38:ac:17: ce:0d:ef:5f:96:e7:7a:ca:33:e0:06:6a:25:f7:57:17:ce:17: 2e:73:01:89:13:74:b9:47:ed:f5:32:27:c7:51:42:ea:1c:a5: 11:88:e1:a1:9c:64:ad:ee:82:c2:a9:f4:0a:3d:e2:c5:d4:50: b1:76:b0:04:ca:63:c0:0e:b0:39:e7:06:38:35:8b:12:b0:d0: 29:d9:7f:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyMzkxMTAvBgNVBAUTKDEwODQ1MEM3RURGQjc4NTIxQjdFNDg3MUZFODZFOEY2 MjNBMTA1MUIwHhcNMjUwODA1MDI0NzU5WhcNMjUwODEyMDI0NzU5WjAYMRYwFAYD VQQDEw02ODkxNzBkZi1lYjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hTG6h0MVoZuVRWkNLVJUEXbieW28DL5dDXxgUuLrKY8jF4jsmPze67H+Lu5 zn8c+UXdrGSTb15Z3Ifu/1vmbws+gzFajutFFON0JQr5y0QpSFcb2PKW9dlxFZC7 nDvPt1i3w9O+4hJ/ZDjBpXCmGzAvbOpaLxmd7Wcetm7bjCQLPYaLXT6ipFAIj4B1 ZoLQisQSN87e/5/HA9U6+STGHg2In9cbaGn/7Kj+qRMMIGLmafb/Kr6L3NM/2tBu pVV5CKXzzTo0rSsYquuK3sILPogbchvldAdDxQn05LHHLbdJS/Q/2XhkQXzF7tF9 7y6T9OE1wXULb88KyfJMBHEzzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGyBk2R 6O+GEAxlioZzXsgHW0MdMB8GA1UdIwQYMBaAFBCEUMft+3hSG35Icf6G6PYjoQUb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTIzOS8xOUFEMEYxMDY0 QjcxMUVEQTA5MThBODNDNEY5QUUwMi9FSVJReC0zN2VGSWJma2h4X29ibzlpT2hC UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VJUlF4LTM3ZUZJYmZraHhfb2JvOWlPaEJScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTIzOS8xOUFEMEYxMDY0QjcxMUVEQTA5MThBODNDNEY5QUUwMi9FSVJReC0zN2VG SWJma2h4X29ibzlpT2hCUnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6QMJ/rcheJDcGrRz6FDKOorFA+5FgkpZwvhfGyt/7fkw/SrPdYxaK l+NAaSLbRY/HTnPfLVdGy/I1x+2bfggdDC06wLqf2ZicrQkELxBGOePr+/vyrW+7 scBI6mmMJy6dopRyVKfu9tXFPVCcUb/hYIYTzSD4J1GT4li3pt6mpUa+9uFDE404 sllzOUbR1ENwMgTLuAlJ+7yo+fk/PngDQKI/qEvGiSSctOeV1kcnsm04rBfODe9f lud6yjPgBmol91cXzhcucwGJE3S5R+31MifHUULqHKURiOGhnGSt7oLCqfQKPeLF 1FCxdrAEymPADrA55wY4NYsSsNAp2X+p -----END CERTIFICATE-----Generated at Wed Aug 6 13:23:44 2025 by rpki-client