$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft File: EIRQx-37eFIbfkhx_obo9iOhBRs.mft (raw, json) Hash identifier: u6iC5xM9gsdLDbnb/zHe1WnVd4/9q/2yKo8FL7MkIK8= Subject key identifier: 47:24:90:B7:D4:75:77:1A:A7:89:A6:27:BE:8C:56:FA:FC:6F:FA:E0 Authority key identifier: 10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B Certificate issuer: /CN=A91BA239/serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft Manifest number: 022F Signing time: Mon 03 Nov 2025 01:54:59 +0000 Manifest this update: Mon 03 Nov 2025 01:54:59 +0000 Manifest next update: Mon 10 Nov 2025 01:54:59 +0000 Files and hashes: 1: EIRQx-37eFIbfkhx_obo9iOhBRs.crl (hash: IdbhrXgyfqDCzUq1YKdPDzSOQmuMi4gzSJlQxQYaHC0=) 2: B2119B7464BA11ED8544E91DC4F9AE02.roa (hash: QbSn5YRTWG7olUrItxapoYIPCE3hPl44mhf7s2FPRaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA239, serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B Validity Not Before: Nov 3 01:54:59 2025 GMT Not After : Nov 10 01:54:59 2025 GMT Subject: CN=69080b73-a12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3a:88:c8:29:e1:88:d3:5c:a8:f5:57:9d:95: 4b:93:fb:7b:b5:a9:5b:b6:ea:80:3a:c2:84:f1:46: 7a:89:5d:70:4a:81:bd:23:64:ab:2c:c9:50:5e:b1: db:18:ca:63:72:e4:74:ac:7b:26:91:ca:20:0d:6b: f2:51:e4:5c:e7:fa:a8:99:f6:2b:f9:d6:c1:b7:63: 5d:26:19:8e:e2:43:3c:80:ce:58:fd:9f:65:f1:e2: 8b:2a:0d:c0:f1:bd:72:42:2a:03:9d:cb:e6:23:92: ee:29:14:92:68:60:f9:d6:08:56:80:be:21:52:08: 9c:cc:2b:b2:66:1f:13:a3:3c:50:d0:14:40:ed:2f: d5:dc:41:11:9b:c1:ef:74:ca:15:8e:4f:c0:11:bb: 1b:02:64:74:52:23:5e:19:bc:24:17:b0:dd:7d:8d: 70:4f:90:b9:a7:61:b2:58:96:56:85:13:ed:36:8b: c7:8a:81:e2:99:b8:47:71:36:e7:39:b8:80:8a:d3: 8c:c9:d6:ff:82:35:8b:9c:3c:05:e0:ff:ab:50:9a: 35:de:cf:a9:31:76:b4:3d:0b:8f:5c:27:b5:9c:38: 87:75:94:1b:f0:25:bb:61:56:02:eb:df:08:82:f2: 64:ba:ce:ef:ef:f2:bc:81:22:34:64:a8:c8:3a:b9: 08:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:24:90:B7:D4:75:77:1A:A7:89:A6:27:BE:8C:56:FA:FC:6F:FA:E0 X509v3 Authority Key Identifier: keyid:10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3d:ad:96:16:46:1a:c1:1f:2a:9c:66:de:a0:59:7d:8b:20: 80:f8:08:77:74:8b:c3:00:fa:6b:1f:2e:b4:7a:22:06:2c:e3: e0:c6:08:91:8e:09:1a:fa:9a:54:07:e5:00:8a:5c:31:0b:0f: 6c:18:de:f7:f4:ec:3f:1c:8b:dc:5e:e2:b2:54:20:a2:9a:0f: 37:10:9b:5e:43:dc:d7:e3:ac:9b:f4:a9:b7:ee:ef:25:1d:1f: 0d:6c:10:5a:a8:7e:b6:9f:42:7b:1a:de:b7:26:b3:9f:ac:ba: 58:75:9d:29:ec:0c:ed:ed:b7:6e:94:c5:99:cc:60:1b:9b:b1: a2:6b:f3:3a:c8:ac:b2:77:bd:9b:de:55:10:55:43:eb:49:c4: cf:56:5e:09:77:b0:81:17:c7:92:61:a1:07:48:91:49:85:f0: 73:ae:36:81:be:85:fe:c6:10:a6:ce:98:30:66:a7:fc:a7:11: 1d:f3:8f:39:78:93:ff:6c:60:45:19:75:62:34:19:fd:72:d0: 93:2a:c2:32:9d:76:1d:97:a7:1c:db:ee:ef:a1:a7:b1:14:9f: 8f:77:78:80:d3:d2:cb:01:14:28:d7:ee:fd:32:97:25:70:67: 5f:bf:35:8d:e9:35:6c:b2:73:55:83:74:00:4a:fe:9d:d7:bd: 2f:8e:5e:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyMzkxMTAvBgNVBAUTKDEwODQ1MEM3RURGQjc4NTIxQjdFNDg3MUZFODZFOEY2 MjNBMTA1MUIwHhcNMjUxMTAzMDE1NDU5WhcNMjUxMTEwMDE1NDU5WjAYMRYwFAYD VQQDEw02OTA4MGI3My1hMTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzqIyCnhiNNcqPVXnZVLk/t7talbtuqAOsKE8UZ6iV1wSoG9I2SrLMlQXrHb GMpjcuR0rHsmkcogDWvyUeRc5/qomfYr+dbBt2NdJhmO4kM8gM5Y/Z9l8eKLKg3A 8b1yQioDncvmI5LuKRSSaGD51ghWgL4hUgiczCuyZh8TozxQ0BRA7S/V3EERm8Hv dMoVjk/AEbsbAmR0UiNeGbwkF7DdfY1wT5C5p2GyWJZWhRPtNovHioHimbhHcTbn ObiAitOMydb/gjWLnDwF4P+rUJo13s+pMXa0PQuPXCe1nDiHdZQb8CW7YVYC698I gvJkus7v7/K8gSI0ZKjIOrkICQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEckkLfU dXcap4mmJ76MVvr8b/rgMB8GA1UdIwQYMBaAFBCEUMft+3hSG35Icf6G6PYjoQUb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTIzOS8xOUFEMEYxMDY0 QjcxMUVEQTA5MThBODNDNEY5QUUwMi9FSVJReC0zN2VGSWJma2h4X29ibzlpT2hC UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VJUlF4LTM3ZUZJYmZraHhfb2JvOWlPaEJScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTIzOS8xOUFEMEYxMDY0QjcxMUVEQTA5MThBODNDNEY5QUUwMi9FSVJReC0zN2VG SWJma2h4X29ibzlpT2hCUnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdPa2WFkYawR8qnGbeoFl9iyCA+Ah3dIvDAPprHy60eiIGLOPgxgiR jgka+ppUB+UAilwxCw9sGN739Ow/HIvcXuKyVCCimg83EJteQ9zX46yb9Km37u8l HR8NbBBaqH62n0J7Gt63JrOfrLpYdZ0p7Azt7bdulMWZzGAbm7Gia/M6yKyyd72b 3lUQVUPrScTPVl4Jd7CBF8eSYaEHSJFJhfBzrjaBvoX+xhCmzpgwZqf8pxEd8485 eJP/bGBFGXViNBn9ctCTKsIynXYdl6cc2+7voaexFJ+Pd3iA09LLARQo1+79Mpcl cGdfvzWN6TVssnNVg3QASv6d170vjl5U -----END CERTIFICATE-----Generated at Wed Nov 5 01:39:27 2025 by rpki-client