$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft File: EIRQx-37eFIbfkhx_obo9iOhBRs.mft (raw, json) Hash identifier: 5+zOCdW9MAgVuIBj6bAeLjnyTAUUfM0hNAXAhbBSrMU= Subject key identifier: 47:01:95:1A:1C:64:38:E8:C6:F7:96:B7:FC:95:27:A4:BC:F1:54:98 Authority key identifier: 10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B Certificate issuer: /CN=A91BA239/serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft Manifest number: 01E7 Signing time: Fri 13 Jun 2025 01:43:11 +0000 Manifest this update: Fri 13 Jun 2025 01:43:10 +0000 Manifest next update: Fri 20 Jun 2025 01:43:10 +0000 Files and hashes: 1: EIRQx-37eFIbfkhx_obo9iOhBRs.crl (hash: 1zwNE+fv3Pn4qn8xUL4XuY/oHgZV8eKBnVPScZskUWk=) 2: B2119B7464BA11ED8544E91DC4F9AE02.roa (hash: QbSn5YRTWG7olUrItxapoYIPCE3hPl44mhf7s2FPRaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA239, serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B Validity Not Before: Jun 13 01:43:10 2025 GMT Not After : Jun 20 01:43:10 2025 GMT Subject: CN=684b822e-0a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:55:ef:9a:91:1f:0f:bc:88:ca:85:45:a1: 00:3a:76:df:ac:26:aa:ae:1b:86:0d:20:b5:39:68: 46:d1:20:83:e2:4f:03:2e:09:b6:1f:7d:17:d2:c2: 52:de:ed:a3:89:a9:ae:46:7f:ab:92:0d:be:1f:e1: 06:31:98:06:27:c9:10:6c:b8:9b:25:e6:e3:eb:9a: be:63:82:9d:94:b0:cb:7a:2f:41:b3:f1:8c:76:7b: 4e:05:a8:ae:7b:6b:da:50:64:23:b5:8e:37:f3:c5: b8:52:af:b6:9e:26:a2:8c:7f:0a:b5:56:43:3d:d1: 4c:6b:41:cb:68:1e:42:7c:28:55:88:05:fc:62:e0: 3d:c7:20:65:5e:df:2e:24:a9:2d:44:15:16:9d:ff: 86:24:58:96:45:50:81:cd:f3:b7:97:7b:9e:98:b7: 6e:8a:6a:ac:6f:63:4a:9e:00:80:92:0f:df:e3:17: be:38:14:6f:0f:4d:65:ef:55:3c:cf:ee:11:9c:5d: 6f:53:4d:28:22:57:c0:61:45:c9:3b:b3:9d:e7:7d: 0a:e7:39:00:49:7b:d2:0b:1c:bd:42:3f:e7:5b:77: 32:d2:6f:bb:36:1a:df:b3:fc:9f:6f:1d:98:ae:19: e4:d4:48:16:41:2f:b6:d0:99:2a:6e:fe:21:07:43: 2d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:01:95:1A:1C:64:38:E8:C6:F7:96:B7:FC:95:27:A4:BC:F1:54:98 X509v3 Authority Key Identifier: keyid:10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:8c:ac:aa:28:5c:85:de:d9:a0:dd:42:fc:ea:6a:a3:7a:62: 40:31:bd:4e:00:51:54:63:84:da:4d:31:83:06:c6:45:8d:03: 5f:f6:1c:43:f4:ab:d0:68:bb:c7:d4:b3:4d:53:20:7b:11:6c: 25:e6:32:4a:ee:72:9b:8c:57:35:b9:4e:cb:26:f4:10:5e:7b: 15:2d:82:3e:59:7c:dd:e4:4b:ce:99:7a:28:11:99:d6:d2:9a: 01:f9:a0:22:de:92:a2:6a:9a:56:3c:5a:37:23:57:94:98:a6: 3c:74:d7:6a:bc:d7:db:43:85:54:36:05:21:f2:30:15:38:f0: e0:47:5c:80:ab:13:23:f8:56:df:ea:20:cb:07:6d:7f:47:13: 7d:9b:ed:ec:90:4a:a5:59:e5:fe:0c:75:18:da:e1:51:8e:20: 5b:80:30:d9:94:49:3b:3f:8d:73:a7:d4:68:a8:20:b7:d9:e9: a5:e5:1d:48:f1:d3:14:f7:4f:45:6c:e7:a5:6b:fb:2c:74:9e: 09:5d:20:31:44:9b:e5:0e:92:e8:89:38:00:9f:0f:e4:a0:08: 48:8c:67:d3:6b:2b:00:72:43:d6:0d:c0:e2:8c:59:d1:dc:d0: 99:ca:a3:28:11:2f:20:04:4e:df:60:24:15:a9:c5:6b:c2:b9: 09:f7:fd:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyMzkxMTAvBgNVBAUTKDEwODQ1MEM3RURGQjc4NTIxQjdFNDg3MUZFODZFOEY2 MjNBMTA1MUIwHhcNMjUwNjEzMDE0MzEwWhcNMjUwNjIwMDE0MzEwWjAYMRYwFAYD VQQDEw02ODRiODIyZS0wYTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRNV75qRHw+8iMqFRaEAOnbfrCaqrhuGDSC1OWhG0SCD4k8DLgm2H30X0sJS 3u2jiamuRn+rkg2+H+EGMZgGJ8kQbLibJebj65q+Y4KdlLDLei9Bs/GMdntOBaiu e2vaUGQjtY4388W4Uq+2niaijH8KtVZDPdFMa0HLaB5CfChViAX8YuA9xyBlXt8u JKktRBUWnf+GJFiWRVCBzfO3l3uemLduimqsb2NKngCAkg/f4xe+OBRvD01l71U8 z+4RnF1vU00oIlfAYUXJO7Od530K5zkASXvSCxy9Qj/nW3cy0m+7Nhrfs/yfbx2Y rhnk1EgWQS+20Jkqbv4hB0MtmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcBlRoc ZDjoxveWt/yVJ6S88VSYMB8GA1UdIwQYMBaAFBCEUMft+3hSG35Icf6G6PYjoQUb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTIzOS8xOUFEMEYxMDY0 QjcxMUVEQTA5MThBODNDNEY5QUUwMi9FSVJReC0zN2VGSWJma2h4X29ibzlpT2hC UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VJUlF4LTM3ZUZJYmZraHhfb2JvOWlPaEJScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTIzOS8xOUFEMEYxMDY0QjcxMUVEQTA5MThBODNDNEY5QUUwMi9FSVJReC0zN2VG SWJma2h4X29ibzlpT2hCUnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGjKyqKFyF3tmg3UL86mqjemJAMb1OAFFUY4TaTTGDBsZFjQNf9hxD 9KvQaLvH1LNNUyB7EWwl5jJK7nKbjFc1uU7LJvQQXnsVLYI+WXzd5EvOmXooEZnW 0poB+aAi3pKiappWPFo3I1eUmKY8dNdqvNfbQ4VUNgUh8jAVOPDgR1yAqxMj+Fbf 6iDLB21/RxN9m+3skEqlWeX+DHUY2uFRjiBbgDDZlEk7P41zp9RoqCC32eml5R1I 8dMU909FbOela/ssdJ4JXSAxRJvlDpLoiTgAnw/koAhIjGfTaysAckPWDcDijFnR 3NCZyqMoES8gBE7fYCQVqcVrwrkJ9/0S -----END CERTIFICATE-----Generated at Sat Jun 14 17:41:48 2025 by rpki-client