$ rpki-client -vvf rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft File: EEETzo9eAXUa9NDySWjYOSSmyAc.mft (raw, json) Hash identifier: l1Tr6vK+v18u/FXfqjtezsnCa7do5Sg7RhBQijCpjCA= Subject key identifier: 00:8E:1D:50:F8:90:1D:E5:B0:CA:3F:9F:E9:CA:F8:EC:5C:6B:D2:4C Authority key identifier: 10:41:13:CE:8F:5E:01:75:1A:F4:D0:F2:49:68:D8:39:24:A6:C8:07 Certificate issuer: /CN=A912A517/serialNumber=104113CE8F5E01751AF4D0F24968D83924A6C807 Certificate serial: 1212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft Manifest number: 11F9 Signing time: Fri 22 Aug 2025 17:18:28 +0000 Manifest this update: Fri 22 Aug 2025 17:18:27 +0000 Manifest next update: Fri 29 Aug 2025 17:18:27 +0000 Files and hashes: 1: EEETzo9eAXUa9NDySWjYOSSmyAc.crl (hash: KM6JDbU6WaSrLssN9rE5Pf1Ei/mZ01/1SYW8xybY5YE=) 2: 414227D6F03711EBB93D0345C4F9AE02.roa (hash: zcse+3V6ypo9qMai/JVipYWLsvmfpHazMGh7GCulYY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.crl rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4626 (0x1212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A517, serialNumber=104113CE8F5E01751AF4D0F24968D83924A6C807 Validity Not Before: Aug 22 17:18:27 2025 GMT Not After : Aug 29 17:18:27 2025 GMT Subject: CN=68a8a664-b36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d4:86:a4:66:13:47:6d:2a:60:4b:76:8d:84: 4d:e6:18:26:7f:fb:a8:7d:65:28:61:d5:f8:db:96: c5:e7:9b:a7:19:bc:b6:91:7d:01:a1:a7:6f:6e:e0: 04:f3:26:ba:dd:35:bc:89:2e:69:65:0c:bf:4f:f5: 96:da:7b:48:81:34:c4:0f:d5:74:6f:d2:0a:bb:ae: a0:5e:6d:f8:b9:01:25:5e:40:52:28:ad:1a:bb:76: e1:5b:7e:b7:e0:9b:8b:fb:49:46:99:0f:1c:66:4c: 68:a2:31:95:65:79:08:4e:70:fd:11:80:b9:09:42: 4d:26:d4:08:52:d8:24:33:d0:5e:d9:c4:65:d6:c9: 39:0f:ea:5c:33:0a:b1:48:cb:a8:e1:5b:dc:91:0b: 3e:56:fa:8d:87:15:50:22:81:15:15:68:2f:3b:d7: 57:08:eb:3a:dc:e2:c3:97:bd:8e:cb:e4:9d:33:32: a4:ec:56:c5:a8:8f:ee:68:a9:72:21:ba:cb:fe:e5: 3f:49:30:1f:09:d7:d5:5f:55:b8:3c:cb:9e:44:31: cc:14:f0:ca:33:98:e5:38:64:5e:20:35:81:c6:34: cb:51:d9:79:b0:c9:b4:ec:71:31:39:45:fc:8e:46: b2:ea:7d:70:97:e1:46:9a:e6:70:9d:9e:1f:94:bb: b7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8E:1D:50:F8:90:1D:E5:B0:CA:3F:9F:E9:CA:F8:EC:5C:6B:D2:4C X509v3 Authority Key Identifier: keyid:10:41:13:CE:8F:5E:01:75:1A:F4:D0:F2:49:68:D8:39:24:A6:C8:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:28:24:ef:80:39:30:b4:84:2a:de:45:0f:8c:e9:60:1d:3d: f3:50:f0:6d:8c:d8:f2:6c:25:d7:26:fb:11:9f:be:34:28:50: ae:59:1f:7f:74:49:f3:c2:10:1a:91:1b:3b:bb:b3:f0:cc:68: 45:e9:8a:a5:4f:2f:bd:6c:fd:76:7f:a3:01:cb:8d:8e:14:92: 66:03:2b:4c:15:e4:f8:e9:03:5c:e2:22:5a:ee:18:cd:6a:aa: 2a:52:d8:45:63:95:f0:25:36:41:2f:43:1b:44:02:3b:0e:2c: 70:98:6e:f0:82:c4:c7:97:8d:5e:e4:27:ad:29:ca:d5:f5:03: e8:02:04:4e:bd:c3:19:0a:96:c3:cb:2b:77:19:34:a3:3a:bd: 8a:5b:e6:ab:85:3f:97:82:3c:a7:91:76:a0:ec:3c:5b:0c:3f: a1:c3:1d:0c:2b:4b:eb:7c:37:9e:60:f3:6b:d3:0e:63:c8:64: 40:0b:79:3c:7a:8a:22:fe:de:69:6a:41:5d:dc:0a:7a:10:f8: de:82:4b:6a:68:fe:7d:62:61:0f:06:a5:a2:11:30:ae:b2:ac: 34:3b:17:e1:34:25:5c:7d:c9:f9:62:aa:ce:96:9b:ed:01:46: 7e:e2:23:30:93:e0:c3:d5:5e:fa:ed:ad:5f:09:d5:f3:18:fa: db:0d:9e:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE1MTcxMTAvBgNVBAUTKDEwNDExM0NFOEY1RTAxNzUxQUY0RDBGMjQ5NjhEODM5 MjRBNkM4MDcwHhcNMjUwODIyMTcxODI3WhcNMjUwODI5MTcxODI3WjAYMRYwFAYD VQQDEw02OGE4YTY2NC1iMzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9SGpGYTR20qYEt2jYRN5hgmf/uofWUoYdX425bF55unGby2kX0BoadvbuAE 8ya63TW8iS5pZQy/T/WW2ntIgTTED9V0b9IKu66gXm34uQElXkBSKK0au3bhW363 4JuL+0lGmQ8cZkxoojGVZXkITnD9EYC5CUJNJtQIUtgkM9Be2cRl1sk5D+pcMwqx SMuo4VvckQs+VvqNhxVQIoEVFWgvO9dXCOs63OLDl72Oy+SdMzKk7FbFqI/uaKly IbrL/uU/STAfCdfVX1W4PMueRDHMFPDKM5jlOGReIDWBxjTLUdl5sMm07HExOUX8 jkay6n1wl+FGmuZwnZ4flLu3HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACOHVD4 kB3lsMo/n+nK+Oxca9JMMB8GA1UdIwQYMBaAFBBBE86PXgF1GvTQ8klo2DkkpsgH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTUxNy8yQjE5RkZCOEY1 MDAxMUU4QTkzQThFNjNDNEY5QUUwMi9FRUVUem85ZUFYVWE5TkR5U1dqWU9TU215 QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFRVR6bzllQVhVYTlORHlTV2pZT1NTbXlBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTUxNy8yQjE5RkZCOEY1MDAxMUU4QTkzQThFNjNDNEY5QUUwMi9FRUVUem85ZUFY VWE5TkR5U1dqWU9TU215QWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqKCTvgDkwtIQq3kUPjOlgHT3zUPBtjNjybCXXJvsRn740KFCuWR9/ dEnzwhAakRs7u7PwzGhF6YqlTy+9bP12f6MBy42OFJJmAytMFeT46QNc4iJa7hjN aqoqUthFY5XwJTZBL0MbRAI7DixwmG7wgsTHl41e5CetKcrV9QPoAgROvcMZCpbD yyt3GTSjOr2KW+arhT+XgjynkXag7DxbDD+hwx0MK0vrfDeeYPNr0w5jyGRAC3k8 eooi/t5pakFd3Ap6EPjegktqaP59YmEPBqWiETCusqw0OxfhNCVcfcn5YqrOlpvt AUZ+4iMwk+DD1V767a1fCdXzGPrbDZ5G -----END CERTIFICATE-----Generated at Sat Aug 23 18:22:17 2025 by rpki-client