$ rpki-client -vvf rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft File: EEETzo9eAXUa9NDySWjYOSSmyAc.mft (raw, json) Hash identifier: OujsFNDqVhtlKVrULPTfqUVeB77GEHuBteCCRiH3ph0= Subject key identifier: 97:C2:EC:04:57:24:22:E7:ED:6B:CD:72:F7:03:71:83:E4:F5:18:80 Authority key identifier: 10:41:13:CE:8F:5E:01:75:1A:F4:D0:F2:49:68:D8:39:24:A6:C8:07 Certificate issuer: /CN=A912A517/serialNumber=104113CE8F5E01751AF4D0F24968D83924A6C807 Certificate serial: 11F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft Manifest number: 11DE Signing time: Mon 30 Jun 2025 17:23:12 +0000 Manifest this update: Mon 30 Jun 2025 17:23:12 +0000 Manifest next update: Mon 07 Jul 2025 17:23:12 +0000 Files and hashes: 1: EEETzo9eAXUa9NDySWjYOSSmyAc.crl (hash: ZRqLUPk/jwtkTn1hvoFvM7VATBjxQzRwPS9KRlKqru8=) 2: 414227D6F03711EBB93D0345C4F9AE02.roa (hash: zcse+3V6ypo9qMai/JVipYWLsvmfpHazMGh7GCulYY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.crl rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4599 (0x11f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A517, serialNumber=104113CE8F5E01751AF4D0F24968D83924A6C807 Validity Not Before: Jun 30 17:23:12 2025 GMT Not After : Jul 7 17:23:12 2025 GMT Subject: CN=6862c800-9a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6d:3f:56:f2:d5:64:5e:5e:54:94:db:5d:12: 91:98:f9:8f:f0:84:2e:f3:0e:1f:c1:cb:6c:32:26: da:6e:b4:b5:fa:f1:96:39:dc:1c:1c:24:82:fc:c1: b3:65:99:8b:3c:35:74:23:80:2e:cc:8e:b7:de:a5: bb:1a:8b:e0:f5:9d:41:7e:d6:44:b6:ad:85:36:1c: c6:a2:f5:c6:d7:58:56:8f:8e:b6:49:59:e9:7a:85: 54:55:15:4e:92:69:8d:03:57:3c:72:5e:0a:7f:45: 87:f8:76:88:57:bd:61:71:a6:98:d3:74:de:30:aa: 45:6a:6d:95:f2:88:d8:be:68:1f:ac:54:75:f2:ae: a1:a5:54:1a:28:dd:91:57:bc:0b:ff:ae:da:ef:ac: 50:08:25:c1:a7:03:68:ef:bb:84:ca:36:30:b6:34: c7:97:c6:06:14:4f:70:2d:de:d4:5c:6c:a3:1f:ef: 0e:9b:a4:04:26:aa:72:04:d6:43:98:56:5e:be:13: 5a:b6:69:d7:3f:69:d1:fc:28:da:3d:5a:99:80:71: 47:68:f9:25:e2:b3:2a:93:d1:c1:3d:15:a7:a8:28: 43:19:3a:d1:6b:25:78:fb:a5:f8:c7:c9:5d:74:e6: e7:c0:0b:b6:78:f3:69:a0:7d:27:33:cc:76:ea:38: 07:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C2:EC:04:57:24:22:E7:ED:6B:CD:72:F7:03:71:83:E4:F5:18:80 X509v3 Authority Key Identifier: keyid:10:41:13:CE:8F:5E:01:75:1A:F4:D0:F2:49:68:D8:39:24:A6:C8:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c2:6b:3a:b8:77:10:db:de:2c:e7:e4:aa:59:31:68:b6:b0: 47:94:ce:ae:48:0c:48:b9:55:85:2a:7a:da:25:fb:f2:8b:74: de:2a:81:e8:dd:14:22:bc:24:8c:43:22:f3:64:e7:27:90:2f: 36:80:a0:92:d4:70:f8:a2:63:39:fb:11:fb:03:b8:0a:eb:aa: 4e:85:47:a9:61:98:88:4a:f0:d3:55:5d:61:c8:95:a8:d9:69: 72:fa:f9:93:cc:58:e6:8e:2c:73:b6:9a:0f:84:00:a8:97:ba: f7:79:ad:c0:d8:1d:09:41:70:29:58:b5:a4:06:c1:0c:c4:da: be:2d:b9:6f:ee:04:9e:58:39:91:a8:ce:15:d4:82:d3:df:89: 74:9f:35:d3:29:2b:bf:ab:dc:00:70:ad:c1:c8:de:bb:1d:7c: f2:8a:60:7a:42:a3:93:42:e6:cd:d1:b3:0f:55:87:7c:70:f0: 2d:2a:33:c2:60:f6:9e:e9:1b:25:c9:0f:62:e3:de:77:a7:73: 81:ad:24:b2:f9:47:13:e8:9a:c4:46:77:ab:c9:97:d7:3b:94: 0f:f1:66:54:ff:3e:7f:a4:46:5c:53:11:95:27:74:ed:7a:fd: fa:6a:c0:ce:94:60:4d:c4:63:89:45:34:3d:a9:49:e0:36:85: 31:b0:0a:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE1MTcxMTAvBgNVBAUTKDEwNDExM0NFOEY1RTAxNzUxQUY0RDBGMjQ5NjhEODM5 MjRBNkM4MDcwHhcNMjUwNjMwMTcyMzEyWhcNMjUwNzA3MTcyMzEyWjAYMRYwFAYD VQQDEw02ODYyYzgwMC05YTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsW0/VvLVZF5eVJTbXRKRmPmP8IQu8w4fwctsMibabrS1+vGWOdwcHCSC/MGz ZZmLPDV0I4AuzI633qW7Govg9Z1BftZEtq2FNhzGovXG11hWj462SVnpeoVUVRVO kmmNA1c8cl4Kf0WH+HaIV71hcaaY03TeMKpFam2V8ojYvmgfrFR18q6hpVQaKN2R V7wL/67a76xQCCXBpwNo77uEyjYwtjTHl8YGFE9wLd7UXGyjH+8Om6QEJqpyBNZD mFZevhNatmnXP2nR/CjaPVqZgHFHaPkl4rMqk9HBPRWnqChDGTrRayV4+6X4x8ld dObnwAu2ePNpoH0nM8x26jgH8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfC7ARX JCLn7WvNcvcDcYPk9RiAMB8GA1UdIwQYMBaAFBBBE86PXgF1GvTQ8klo2DkkpsgH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTUxNy8yQjE5RkZCOEY1 MDAxMUU4QTkzQThFNjNDNEY5QUUwMi9FRUVUem85ZUFYVWE5TkR5U1dqWU9TU215 QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFRVR6bzllQVhVYTlORHlTV2pZT1NTbXlBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTUxNy8yQjE5RkZCOEY1MDAxMUU4QTkzQThFNjNDNEY5QUUwMi9FRUVUem85ZUFY VWE5TkR5U1dqWU9TU215QWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+wms6uHcQ294s5+SqWTFotrBHlM6uSAxIuVWFKnraJfvyi3TeKoHo 3RQivCSMQyLzZOcnkC82gKCS1HD4omM5+xH7A7gK66pOhUepYZiISvDTVV1hyJWo 2Wly+vmTzFjmjixztpoPhACol7r3ea3A2B0JQXApWLWkBsEMxNq+Lblv7gSeWDmR qM4V1ILT34l0nzXTKSu/q9wAcK3ByN67HXzyimB6QqOTQubN0bMPVYd8cPAtKjPC YPae6RslyQ9i4953p3OBrSSy+UcT6JrERneryZfXO5QP8WZU/z5/pEZcUxGVJ3Tt ev36asDOlGBNxGOJRTQ9qUngNoUxsApG -----END CERTIFICATE-----Generated at Tue Jul 1 21:06:27 2025 by rpki-client