$ rpki-client -vvf rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft File: EE2-9WUN1zWSotPPgXKfJprZkQg.mft (raw, json) Hash identifier: lLHzbEtKMtjN/AfcFNzqjWFxQx7n8fXTzVbmsRRa+4c= Subject key identifier: 70:31:A9:D8:D9:A7:36:B8:5C:20:ED:79:1A:A8:32:93:8F:1F:D9:C2 Authority key identifier: 10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 Certificate issuer: /CN=A914C429/serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Certificate serial: 0733 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft Manifest number: 072E Signing time: Wed 14 May 2025 21:50:14 +0000 Manifest this update: Wed 14 May 2025 21:50:14 +0000 Manifest next update: Wed 21 May 2025 21:50:14 +0000 Files and hashes: 1: EE2-9WUN1zWSotPPgXKfJprZkQg.crl (hash: k5xa+KO3k5M1rvhlKXCLibjwD13LxDUuRtCf5SVJEhY=) 2: 4D5B35402E8511EB850F8A18C4F9AE02.roa (hash: 7N0AglNEEqc9kfaZl/cHF7h51PfaQbNAvQaGl0/xNvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1843 (0x733) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C429, serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Validity Not Before: May 14 21:50:14 2025 GMT Not After : May 21 21:50:14 2025 GMT Subject: CN=68251016-cf95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d4:0c:4f:69:b8:f1:f1:41:04:4a:f6:2a:c7: 3d:46:78:fd:82:e1:31:25:0b:7e:45:a3:86:f5:ec: 20:ce:05:c9:0e:03:f5:4d:36:be:e2:88:76:28:f2: 77:ea:0d:7a:2f:c9:dd:9f:10:86:45:d5:8f:e3:34: 7a:53:21:aa:e3:a1:d7:e9:68:e8:1c:6f:26:68:ef: 99:e8:59:d9:85:a3:a6:af:a2:de:7d:13:06:c7:cc: be:6b:47:80:d5:24:fa:77:50:fa:bf:32:cb:fc:06: 3a:59:22:26:c3:45:86:de:2c:79:fb:da:32:ca:20: e4:6b:e4:dc:ea:2f:1a:4e:b4:83:59:e2:8e:19:ff: a0:03:f5:93:b3:0c:a2:39:5c:c8:7b:65:ab:5c:b4: 70:74:82:db:b7:34:45:38:56:c5:57:a5:19:39:9f: 07:3a:a9:46:6b:39:64:05:a9:ca:9c:b6:ca:b2:79: d0:f9:91:fb:ad:d9:56:29:d0:e5:18:9c:ea:ad:44: c4:ca:a7:09:1c:97:5f:71:d5:50:cb:d2:75:d5:3c: ca:3b:c4:b2:4c:93:7e:b7:6f:aa:81:87:8e:01:0d: 63:a1:8d:78:a8:02:68:dd:cc:26:7b:29:ad:d7:3c: 07:f5:6a:86:3d:f0:52:9c:d3:55:07:21:4c:67:b2: 2f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:31:A9:D8:D9:A7:36:B8:5C:20:ED:79:1A:A8:32:93:8F:1F:D9:C2 X509v3 Authority Key Identifier: keyid:10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:74:d3:fb:1f:73:b0:cd:bf:35:57:63:09:c0:07:35:93:d7: a9:c9:66:dc:8e:7b:8c:af:61:f3:8b:65:9a:12:1a:3e:ef:27: f3:9b:9f:d4:aa:b1:9a:36:00:53:22:af:d8:ae:29:6a:46:62: bb:30:07:6f:c9:7b:9a:4f:e8:53:f1:9e:1d:dd:91:18:dc:62: 03:1b:0d:45:5b:ab:d6:00:13:28:15:db:59:a9:db:83:b7:62: 7c:bf:2c:8b:e4:7e:09:3b:d6:76:73:bf:d8:df:18:b5:2a:ee: 79:1c:c5:85:67:20:1f:d8:44:10:5d:cd:c1:cb:1c:a3:ec:c9: 27:31:c3:f6:90:34:32:5c:17:e0:36:f9:98:1f:ae:ac:34:31: 33:3f:95:1a:bc:d2:a6:6c:e6:15:7d:bc:6d:8a:e1:d7:93:0a: 2f:86:64:28:4d:d3:9f:10:b0:0b:e4:62:b3:e5:85:41:51:68: ec:a3:14:6a:7c:a4:ff:23:98:28:ee:6c:c7:af:fb:eb:fd:80: 4d:93:5d:a6:17:ed:1e:f7:a5:1f:9b:ab:99:d2:4f:9f:b9:de: 50:e7:8b:0f:94:81:29:2c:be:81:b1:03:68:0c:ed:a1:6a:f9: 4f:03:6d:ad:ec:a6:ac:a5:01:50:e8:a6:86:7f:ef:c2:f3:02: 7e:a7:c0:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0MjkxMTAvBgNVBAUTKDEwNERCRUY1NjUwREQ3MzU5MkEyRDNDRjgxNzI5RjI2 OUFEOTkxMDgwHhcNMjUwNTE0MjE1MDE0WhcNMjUwNTIxMjE1MDE0WjAYMRYwFAYD VQQDEw02ODI1MTAxNi1jZjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tQMT2m48fFBBEr2Ksc9Rnj9guExJQt+RaOG9ewgzgXJDgP1TTa+4oh2KPJ3 6g16L8ndnxCGRdWP4zR6UyGq46HX6WjoHG8maO+Z6FnZhaOmr6LefRMGx8y+a0eA 1ST6d1D6vzLL/AY6WSImw0WG3ix5+9oyyiDka+Tc6i8aTrSDWeKOGf+gA/WTswyi OVzIe2WrXLRwdILbtzRFOFbFV6UZOZ8HOqlGazlkBanKnLbKsnnQ+ZH7rdlWKdDl GJzqrUTEyqcJHJdfcdVQy9J11TzKO8SyTJN+t2+qgYeOAQ1joY14qAJo3cwmeymt 1zwH9WqGPfBSnNNVByFMZ7IvkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAxqdjZ pza4XCDteRqoMpOPH9nCMB8GA1UdIwQYMBaAFBBNvvVlDdc1kqLTz4Fynyaa2ZEI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzQyOS8yNkQ2QjdDNDJF ODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6V1NvdFBQZ1hLZkpwclpr UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFMi05V1VOMXpXU290UFBnWEtmSnByWmtRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzQyOS8yNkQ2QjdDNDJFODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6 V1NvdFBQZ1hLZkpwclprUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2dNP7H3Owzb81V2MJwAc1k9epyWbcjnuMr2Hzi2WaEho+7yfzm5/U qrGaNgBTIq/YrilqRmK7MAdvyXuaT+hT8Z4d3ZEY3GIDGw1FW6vWABMoFdtZqduD t2J8vyyL5H4JO9Z2c7/Y3xi1Ku55HMWFZyAf2EQQXc3Byxyj7MknMcP2kDQyXBfg NvmYH66sNDEzP5UavNKmbOYVfbxtiuHXkwovhmQoTdOfELAL5GKz5YVBUWjsoxRq fKT/I5go7mzHr/vr/YBNk12mF+0e96Ufm6uZ0k+fud5Q54sPlIEpLL6BsQNoDO2h avlPA22t7KaspQFQ6KaGf+/C8wJ+p8Cq -----END CERTIFICATE-----Generated at Thu May 15 16:47:40 2025 by rpki-client