$ rpki-client -vvf rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft File: EE2-9WUN1zWSotPPgXKfJprZkQg.mft (raw, json) Hash identifier: w0Bzueg085U8FhkZ5WSfnsuTYgD1p1anY2gNG/5yKOQ= Subject key identifier: 8E:EC:B2:CD:3D:BB:BF:52:48:0D:63:FC:B8:9E:FC:D7:CC:51:2F:02 Authority key identifier: 10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 Certificate issuer: /CN=A914C429/serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Certificate serial: 074B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft Manifest number: 0746 Signing time: Wed 02 Jul 2025 21:58:24 +0000 Manifest this update: Wed 02 Jul 2025 21:58:23 +0000 Manifest next update: Wed 09 Jul 2025 21:58:23 +0000 Files and hashes: 1: EE2-9WUN1zWSotPPgXKfJprZkQg.crl (hash: VkPGsSwmn7R6g8K1VTod1+6gnpvj2vQmj6sVQHNM3bo=) 2: 4D5B35402E8511EB850F8A18C4F9AE02.roa (hash: 7N0AglNEEqc9kfaZl/cHF7h51PfaQbNAvQaGl0/xNvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1867 (0x74b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C429, serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Validity Not Before: Jul 2 21:58:23 2025 GMT Not After : Jul 9 21:58:23 2025 GMT Subject: CN=6865ab80-27a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:de:f5:19:37:35:24:6c:ba:3f:a1:68:a1:63: 06:c6:2a:57:17:ef:b7:99:7a:4b:81:5e:da:79:e2: 3f:f8:5b:f1:7b:b4:5c:15:03:22:ca:18:4d:f0:5d: a0:a1:3e:c3:7c:b0:40:38:e7:84:50:1c:4b:b4:62: be:d5:b3:f7:f5:46:a8:51:c1:30:df:fe:11:b4:f7: 1f:36:58:f3:b4:85:c7:6c:c4:aa:7c:46:a8:f8:44: fc:e7:0d:ea:78:db:ed:6e:18:70:85:3d:85:ea:f3: ef:28:c9:a9:b3:da:d0:c5:9c:f5:67:bf:4a:e6:fe: 1c:94:2a:09:2c:59:87:69:c8:1d:ea:e6:3f:ce:f2: 2b:f6:eb:5f:e2:ce:e2:f7:30:a1:8b:0e:eb:1a:2c: d7:2c:9d:60:c6:62:a4:67:1e:9e:de:75:8d:0a:08: d5:e9:91:82:33:d3:18:bd:15:d6:44:ea:55:68:9c: f0:8b:20:36:ea:b1:03:f2:79:56:a2:96:e8:df:bf: f0:21:07:f4:57:74:e6:7b:31:44:c2:6d:83:59:df: c9:89:b9:b0:b6:4f:1f:92:a9:d9:30:54:f0:49:15: 12:68:aa:24:ed:1b:5f:cc:1e:7d:84:93:7f:df:98: 19:e3:3e:d7:b1:a8:89:69:40:69:48:1e:5e:62:1f: 89:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EC:B2:CD:3D:BB:BF:52:48:0D:63:FC:B8:9E:FC:D7:CC:51:2F:02 X509v3 Authority Key Identifier: keyid:10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:10:f6:a1:fe:89:d4:1e:25:49:7d:89:f6:df:a5:53:5c:bf: 86:3f:2a:ac:ce:3a:44:e6:93:07:31:01:9b:cc:38:5b:f5:9d: 95:2c:78:00:24:b8:98:27:b5:3f:ce:05:4b:ed:1b:4c:e9:53: 8e:c6:39:5e:31:bf:9e:a6:dc:9c:44:57:5f:ed:fb:23:22:b7: dc:f1:7d:b4:c5:9a:ae:44:5a:0b:e6:9e:04:1e:f2:b9:3c:16: 95:5f:65:f5:95:52:2b:3d:db:8c:f5:35:12:60:b5:d6:d4:5f: 43:0a:23:69:6a:dc:ed:48:ff:75:ec:8d:17:e6:11:da:c4:42: ca:a3:10:c7:2b:6c:74:fc:5c:43:82:82:6a:1b:96:b9:fa:db: 54:7d:dc:61:c6:cc:6b:bb:10:8f:fd:8b:88:a0:d2:6e:ed:3c: 39:b4:02:41:72:01:dd:29:71:e4:e4:d2:95:36:ff:e9:81:60: f5:2f:35:e9:24:e9:db:dc:6c:da:2e:03:21:f3:11:80:0b:ac: 22:bf:99:f0:92:d5:83:47:69:e4:ab:81:2f:48:07:20:b4:28: a4:27:4c:1b:d7:72:21:4d:a8:d0:26:72:c9:c4:2f:4b:52:26: 96:d2:f9:cd:55:52:7b:ff:f9:b7:a7:77:1c:7b:00:6c:29:8e: e9:59:41:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0MjkxMTAvBgNVBAUTKDEwNERCRUY1NjUwREQ3MzU5MkEyRDNDRjgxNzI5RjI2 OUFEOTkxMDgwHhcNMjUwNzAyMjE1ODIzWhcNMjUwNzA5MjE1ODIzWjAYMRYwFAYD VQQDEw02ODY1YWI4MC0yN2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1t71GTc1JGy6P6FooWMGxipXF++3mXpLgV7aeeI/+Fvxe7RcFQMiyhhN8F2g oT7DfLBAOOeEUBxLtGK+1bP39UaoUcEw3/4RtPcfNljztIXHbMSqfEao+ET85w3q eNvtbhhwhT2F6vPvKMmps9rQxZz1Z79K5v4clCoJLFmHacgd6uY/zvIr9utf4s7i 9zChiw7rGizXLJ1gxmKkZx6e3nWNCgjV6ZGCM9MYvRXWROpVaJzwiyA26rED8nlW opbo37/wIQf0V3TmezFEwm2DWd/Jibmwtk8fkqnZMFTwSRUSaKok7RtfzB59hJN/ 35gZ4z7XsaiJaUBpSB5eYh+JCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7sss09 u79SSA1j/Lie/NfMUS8CMB8GA1UdIwQYMBaAFBBNvvVlDdc1kqLTz4Fynyaa2ZEI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzQyOS8yNkQ2QjdDNDJF ODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6V1NvdFBQZ1hLZkpwclpr UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFMi05V1VOMXpXU290UFBnWEtmSnByWmtRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzQyOS8yNkQ2QjdDNDJFODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6 V1NvdFBQZ1hLZkpwclprUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQEPah/onUHiVJfYn236VTXL+GPyqszjpE5pMHMQGbzDhb9Z2VLHgA JLiYJ7U/zgVL7RtM6VOOxjleMb+eptycRFdf7fsjIrfc8X20xZquRFoL5p4EHvK5 PBaVX2X1lVIrPduM9TUSYLXW1F9DCiNpatztSP917I0X5hHaxELKoxDHK2x0/FxD goJqG5a5+ttUfdxhxsxruxCP/YuIoNJu7Tw5tAJBcgHdKXHk5NKVNv/pgWD1LzXp JOnb3GzaLgMh8xGAC6wiv5nwktWDR2nkq4EvSAcgtCikJ0wb13IhTajQJnLJxC9L UiaW0vnNVVJ7//m3p3ccewBsKY7pWUEh -----END CERTIFICATE-----Generated at Thu Jul 3 08:29:22 2025 by rpki-client