$ rpki-client -vvf rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft File: EE2-9WUN1zWSotPPgXKfJprZkQg.mft (raw, json) Hash identifier: rFCyzUMJPUDLD93QBd29W/2EHAsXjKn6RbimSnMCVTE= Subject key identifier: F1:6C:D8:7E:F5:2C:47:13:9B:D7:71:11:89:E0:91:C9:DA:EC:AB:D2 Authority key identifier: 10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 Certificate issuer: /CN=A914C429/serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Certificate serial: 0727 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft Manifest number: 0722 Signing time: Sun 20 Apr 2025 21:27:31 +0000 Manifest this update: Sun 20 Apr 2025 21:27:31 +0000 Manifest next update: Sun 27 Apr 2025 21:27:31 +0000 Files and hashes: 1: EE2-9WUN1zWSotPPgXKfJprZkQg.crl (hash: iXtRZEZ5xEE5EfyCZf8PQeyQQyaLE09fpBTd6oyQgkA=) 2: 4D5B35402E8511EB850F8A18C4F9AE02.roa (hash: 7N0AglNEEqc9kfaZl/cHF7h51PfaQbNAvQaGl0/xNvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 21:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1831 (0x727) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C429, serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Validity Not Before: Apr 20 21:27:31 2025 GMT Not After : Apr 27 21:27:31 2025 GMT Subject: CN=680566c3-1dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:f9:7a:20:9a:28:19:5a:a4:a2:df:b2:b9: 00:9c:cf:02:a6:bb:67:f2:b2:da:6c:84:86:74:26: 5b:99:ad:df:35:da:ba:7e:1f:e5:04:57:4b:d6:e2: af:c0:3d:83:67:07:80:bf:50:2b:07:7d:5d:60:ac: 6c:6e:b5:93:b2:85:d1:07:f2:bc:79:27:13:5c:f5: 80:47:a7:be:03:11:01:dc:3a:0e:57:72:3e:ca:f3: b9:fb:48:f9:ed:55:31:3f:d1:16:f1:db:05:ac:b9: 3e:d2:19:2a:0c:5f:7c:86:0f:70:9b:11:4a:20:cf: 40:5c:27:4a:8e:d4:24:3c:3a:cc:99:48:a5:2e:37: 28:ef:d1:ac:a6:d3:f0:6b:e8:cf:bf:3a:97:8d:a7: 15:df:fb:01:e3:bd:aa:c4:a9:80:ad:1c:b1:12:35: 5e:a8:0c:7a:2f:82:f1:0f:f4:9f:17:27:6b:29:8e: 3d:34:f0:0d:61:7e:db:00:8f:30:a2:22:e5:2e:6d: 8a:de:5f:ed:2c:99:2d:1e:48:97:86:72:44:ca:9b: d0:96:92:56:c7:0b:07:0b:59:36:6a:3c:8e:bd:66: 2b:8a:f0:8d:c7:50:7c:0e:4a:93:0f:e4:ce:c5:77: 50:d9:ac:55:4a:73:20:fe:11:59:49:47:8b:04:b5: 7c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6C:D8:7E:F5:2C:47:13:9B:D7:71:11:89:E0:91:C9:DA:EC:AB:D2 X509v3 Authority Key Identifier: keyid:10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:3b:06:33:32:3f:7d:bd:00:18:03:08:99:a1:db:50:05:bc: 41:36:3e:18:38:c6:a2:0a:0d:07:0a:c5:66:55:07:d4:33:1f: c5:06:9c:e2:c0:20:2c:b3:33:b5:d3:0d:4e:1a:12:e5:38:f8: 6a:47:bb:75:1d:bb:0a:4b:42:61:0a:cc:2a:35:41:04:14:16: f7:3c:6b:64:4f:b7:55:2f:16:0d:79:a4:da:f7:ab:80:37:a2: bb:05:09:fd:7d:ab:86:0f:f5:f1:2f:96:70:ad:b9:c1:fc:4d: 54:68:c5:8f:28:3d:b3:d8:2a:ba:c4:8c:ac:2c:9b:a8:70:6f: 07:5e:c6:33:e9:98:ee:c9:31:ec:e4:93:8f:48:96:20:c6:4a: e5:42:99:42:ed:25:9e:18:72:1c:58:05:b6:9c:c6:b0:23:4e: 56:82:40:c9:16:74:9b:25:81:d8:75:a4:15:46:19:b2:cb:45: f7:cc:47:52:d9:45:98:65:e5:7a:33:96:c9:73:a1:d2:8b:c7: 32:03:33:92:da:c4:91:ce:06:2b:44:80:96:af:c7:14:40:95: 66:c3:84:86:56:d8:0a:4e:70:9d:d3:c1:bd:27:2b:27:a9:56: f2:3a:a5:3d:7a:dc:6d:c1:fd:41:08:41:23:38:d4:62:c1:01: 47:0f:55:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0MjkxMTAvBgNVBAUTKDEwNERCRUY1NjUwREQ3MzU5MkEyRDNDRjgxNzI5RjI2 OUFEOTkxMDgwHhcNMjUwNDIwMjEyNzMxWhcNMjUwNDI3MjEyNzMxWjAYMRYwFAYD VQQDEw02ODA1NjZjMy0xZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAn5eiCaKBlapKLfsrkAnM8Cprtn8rLabISGdCZbma3fNdq6fh/lBFdL1uKv wD2DZweAv1ArB31dYKxsbrWTsoXRB/K8eScTXPWAR6e+AxEB3DoOV3I+yvO5+0j5 7VUxP9EW8dsFrLk+0hkqDF98hg9wmxFKIM9AXCdKjtQkPDrMmUilLjco79GsptPw a+jPvzqXjacV3/sB472qxKmArRyxEjVeqAx6L4LxD/SfFydrKY49NPANYX7bAI8w oiLlLm2K3l/tLJktHkiXhnJEypvQlpJWxwsHC1k2ajyOvWYrivCNx1B8DkqTD+TO xXdQ2axVSnMg/hFZSUeLBLV8TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFs2H71 LEcTm9dxEYngkcna7KvSMB8GA1UdIwQYMBaAFBBNvvVlDdc1kqLTz4Fynyaa2ZEI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzQyOS8yNkQ2QjdDNDJF ODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6V1NvdFBQZ1hLZkpwclpr UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFMi05V1VOMXpXU290UFBnWEtmSnByWmtRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzQyOS8yNkQ2QjdDNDJFODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6 V1NvdFBQZ1hLZkpwclprUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUOwYzMj99vQAYAwiZodtQBbxBNj4YOMaiCg0HCsVmVQfUMx/FBpzi wCAsszO10w1OGhLlOPhqR7t1HbsKS0JhCswqNUEEFBb3PGtkT7dVLxYNeaTa96uA N6K7BQn9fauGD/XxL5ZwrbnB/E1UaMWPKD2z2Cq6xIysLJuocG8HXsYz6ZjuyTHs 5JOPSJYgxkrlQplC7SWeGHIcWAW2nMawI05WgkDJFnSbJYHYdaQVRhmyy0X3zEdS 2UWYZeV6M5bJc6HSi8cyAzOS2sSRzgYrRICWr8cUQJVmw4SGVtgKTnCd08G9Jysn qVbyOqU9etxtwf1BCEEjONRiwQFHD1VC -----END CERTIFICATE-----Generated at Tue Apr 22 05:59:40 2025 by rpki-client