$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft File: eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft (raw, json) Hash identifier: 7JpLFW3tYVwg+Jy2tvgHVzpxlDteFGNXt9cmc8RxtU8= Subject key identifier: 4A:B4:60:96:FD:D2:CE:C0:B3:9C:9E:2C:56:15:15:68:B5:43:2F:A9 Authority key identifier: 79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 Certificate issuer: /CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Certificate serial: 2D46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft Manifest number: 2D2A Signing time: Fri 08 Aug 2025 15:34:37 +0000 Manifest this update: Fri 08 Aug 2025 15:34:37 +0000 Manifest next update: Fri 15 Aug 2025 15:34:37 +0000 Files and hashes: 1: eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl (hash: dFHiY7vQCTJqimGiSo18rhTknaYZYK/p3A9oD2shC9I=) 2: 6CB78E8E967811EA92E45A27C4F9AE02.roa (hash: Vd/aN0N0PZj/2E1lobGPke/BU2o5Mlhxl5a5kuQS0uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11590 (0x2d46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB27, serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Validity Not Before: Aug 8 15:34:37 2025 GMT Not After : Aug 15 15:34:37 2025 GMT Subject: CN=6896190d-3022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0b:61:82:05:57:9f:fb:a9:0a:5a:4d:86:4c: 34:3b:4c:ba:db:86:cd:10:65:7d:69:17:61:d6:b4: 6a:64:29:a5:a0:07:b2:21:af:39:2a:e7:e7:fd:3b: 9d:a9:cd:70:36:d7:e8:43:cc:ef:bc:74:0f:48:cf: 1e:b0:fa:ea:07:b9:6d:ad:48:00:58:32:5e:85:be: 67:b7:a0:2f:c7:78:7b:93:6b:ab:6e:e7:fd:43:55: 34:31:ab:ee:e5:64:7a:18:8d:bd:f5:7f:3f:fe:41: 74:1f:de:2b:30:ba:d1:a3:fc:23:12:35:14:d3:2f: d5:ba:f3:91:de:98:20:43:10:8d:0e:6c:5f:49:83: 14:26:b4:fa:69:ae:06:0e:b6:76:23:cf:14:23:a8: 55:e3:10:cc:33:37:c5:a9:53:4a:d2:96:08:37:ff: fe:3f:4f:1f:74:63:a8:cb:02:33:6d:f3:72:9e:ca: 31:d7:1a:e0:38:63:e9:85:f4:60:d8:4c:f9:ef:65: 8a:13:c1:3f:0e:24:22:d6:4d:e0:cc:0e:8e:11:a0: b5:bb:c8:d1:9d:42:a6:7a:1e:f3:15:69:cf:bc:3b: 1d:a4:78:87:6a:9e:25:c1:85:ec:10:99:28:66:b1: 0d:e8:22:1e:36:97:80:7c:79:39:a3:75:7a:e1:8a: 96:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B4:60:96:FD:D2:CE:C0:B3:9C:9E:2C:56:15:15:68:B5:43:2F:A9 X509v3 Authority Key Identifier: keyid:79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:3f:d9:41:93:fd:7d:24:ca:4e:41:93:1e:80:ae:fe:42:bb: b9:3a:91:e4:44:7c:4e:58:21:db:55:84:07:06:df:3c:62:c5: 99:b2:3d:4a:1a:b7:4e:74:d5:cd:40:76:f9:99:66:4b:82:dc: b8:27:6a:ee:08:3e:e2:83:58:06:a6:44:63:60:51:95:82:2b: be:d1:25:b4:66:6d:ef:14:7b:4d:20:b3:39:19:78:c1:b3:72: 2e:80:60:a2:0d:d9:38:ac:8c:8c:49:2b:00:26:0d:75:88:94: 27:f2:84:97:5a:40:9c:bb:53:5d:6a:6a:a4:3a:bb:de:db:99: 0e:08:e0:56:22:72:dd:b7:90:7f:23:ba:d9:e2:6c:82:51:8a: 72:05:a4:bb:69:e8:88:4d:1a:07:a9:e2:ea:bd:8e:45:8e:dd: 2c:9e:d3:95:e2:54:2b:4c:06:23:1f:d0:f6:27:a7:c4:0d:e2: 1d:37:79:08:a4:07:af:ba:60:d0:48:0c:90:93:9a:78:1a:a0: 93:5f:75:13:16:bd:8e:50:f8:e2:92:0f:12:43:48:a0:6d:9a: 0b:9c:d0:82:a5:5d:e4:90:5a:3e:b4:96:51:09:8e:28:52:03: 9b:1a:d9:bc:d7:e7:63:69:80:21:0d:92:fa:a5:eb:f0:29:25: 96:1b:86:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMjcxMTAvBgNVBAUTKDc5RTU2MzJBRjI5QkFFNjRFNUY5RjE5QzU3NUJDNUE5 OTVFMjA1NTAwHhcNMjUwODA4MTUzNDM3WhcNMjUwODE1MTUzNDM3WjAYMRYwFAYD VQQDEw02ODk2MTkwZC0zMDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QthggVXn/upClpNhkw0O0y624bNEGV9aRdh1rRqZCmloAeyIa85Kufn/Tud qc1wNtfoQ8zvvHQPSM8esPrqB7ltrUgAWDJehb5nt6Avx3h7k2urbuf9Q1U0Mavu 5WR6GI299X8//kF0H94rMLrRo/wjEjUU0y/VuvOR3pggQxCNDmxfSYMUJrT6aa4G DrZ2I88UI6hV4xDMMzfFqVNK0pYIN//+P08fdGOoywIzbfNynsox1xrgOGPphfRg 2Ez572WKE8E/DiQi1k3gzA6OEaC1u8jRnUKmeh7zFWnPvDsdpHiHap4lwYXsEJko ZrEN6CIeNpeAfHk5o3V64YqWwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEq0YJb9 0s7As5yeLFYVFWi1Qy+pMB8GA1UdIwQYMBaAFHnlYyrym65k5fnxnFdbxamV4gVQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIyNy8xNjdBOTdFQzlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJtVGwtZkdjVjF2RnFaWGlC VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VlVmpLdkticm1UbC1mR2NWMXZGcVpYaUJWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUIyNy8xNjdBOTdFQzlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJt VGwtZkdjVjF2RnFaWGlCVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkP9lBk/19JMpOQZMegK7+Qru5OpHkRHxOWCHbVYQHBt88YsWZsj1K GrdOdNXNQHb5mWZLgty4J2ruCD7ig1gGpkRjYFGVgiu+0SW0Zm3vFHtNILM5GXjB s3IugGCiDdk4rIyMSSsAJg11iJQn8oSXWkCcu1NdamqkOrve25kOCOBWInLdt5B/ I7rZ4myCUYpyBaS7aeiITRoHqeLqvY5Fjt0sntOV4lQrTAYjH9D2J6fEDeIdN3kI pAevumDQSAyQk5p4GqCTX3UTFr2OUPjikg8SQ0igbZoLnNCCpV3kkFo+tJZRCY4o UgObGtm81+djaYAhDZL6pevwKSWWG4ZY -----END CERTIFICATE-----Generated at Sat Aug 9 10:42:55 2025 by rpki-client