$ rpki-client -vvf rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft File: EEETzo9eAXUa9NDySWjYOSSmyAc.mft (raw, json) Hash identifier: lrSAm06KDxpom04w3qp6AjBoNj5FNJQNx4fFU4UWzC8= Subject key identifier: B9:90:A4:71:42:61:0E:5C:ED:A4:1C:57:73:55:9E:6C:D9:0D:0C:A9 Authority key identifier: 10:41:13:CE:8F:5E:01:75:1A:F4:D0:F2:49:68:D8:39:24:A6:C8:07 Certificate issuer: /CN=A912A517/serialNumber=104113CE8F5E01751AF4D0F24968D83924A6C807 Certificate serial: 1213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft Manifest number: 11FA Signing time: Sun 24 Aug 2025 17:08:50 +0000 Manifest this update: Sun 24 Aug 2025 17:08:49 +0000 Manifest next update: Sun 31 Aug 2025 17:08:49 +0000 Files and hashes: 1: EEETzo9eAXUa9NDySWjYOSSmyAc.crl (hash: 46FoVnPoE82EwSaIz3/PkXVkDCXl22TROsgz32EiHIo=) 2: 414227D6F03711EBB93D0345C4F9AE02.roa (hash: zcse+3V6ypo9qMai/JVipYWLsvmfpHazMGh7GCulYY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.crl rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4627 (0x1213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A517, serialNumber=104113CE8F5E01751AF4D0F24968D83924A6C807 Validity Not Before: Aug 24 17:08:49 2025 GMT Not After : Aug 31 17:08:49 2025 GMT Subject: CN=68ab4721-7467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:15:0d:6f:5c:72:ed:60:ee:63:e0:76:f7: f7:79:ef:15:ca:3f:d3:49:1e:d6:0c:82:53:f5:c6: 63:16:76:cc:e9:14:32:27:61:d2:90:99:0d:b6:53: 6a:51:0f:14:83:a7:8c:78:e0:0e:02:1e:66:5f:29: 36:89:f8:73:9e:43:ae:38:04:59:ae:5a:ac:59:57: 4f:c8:c2:da:ff:7c:22:40:37:84:00:f0:c1:73:f5: 51:bf:ef:a1:8e:57:59:6f:4d:bb:df:59:84:78:f1: e7:16:80:c3:e6:cd:fc:f4:66:8d:d2:dc:e9:e1:ca: 38:06:af:58:86:81:7f:35:de:17:e8:89:f7:8c:4a: bc:0c:3b:16:6c:17:f2:c7:d8:09:16:b3:5c:70:b3: 21:2b:e9:1c:59:27:80:37:3d:bd:fe:54:07:ff:65: 5d:d1:0a:f6:72:8c:a6:88:e2:fb:b6:d9:1d:1c:10: b7:e5:e3:73:54:20:c8:94:51:3f:a7:12:1e:9c:5b: 4e:53:84:f3:be:9f:db:a0:44:95:58:4f:aa:6d:ca: 71:18:0e:ce:6e:b8:e1:7c:a1:9a:2c:67:79:5e:1c: 0b:fc:a0:60:02:5c:a6:ae:ad:0e:07:08:77:7c:60: a3:2a:f6:85:bc:9a:e5:dc:23:69:29:e4:36:12:28: 23:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:90:A4:71:42:61:0E:5C:ED:A4:1C:57:73:55:9E:6C:D9:0D:0C:A9 X509v3 Authority Key Identifier: keyid:10:41:13:CE:8F:5E:01:75:1A:F4:D0:F2:49:68:D8:39:24:A6:C8:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:67:7a:d5:9f:c2:ec:2e:a7:db:77:30:47:cd:ed:e0:9e:c4: 74:59:e1:77:5e:8f:ae:7d:ca:fd:43:ec:f1:47:9d:d3:81:ca: 0e:06:dc:24:65:a5:11:80:7a:97:4e:bd:79:f3:45:6c:df:f0: 19:7e:d6:57:ee:15:d1:2e:4e:57:05:0f:25:b3:02:93:03:16: 11:62:df:0f:c1:db:7a:d9:50:5a:aa:73:6f:18:a6:6d:66:15: e3:4f:1e:38:91:47:a3:0d:9d:a4:65:47:a8:2c:c6:8a:d7:d7: 76:55:09:21:ec:d3:b0:ea:81:4a:28:93:cf:31:55:86:09:55: 8a:db:73:23:83:ec:64:09:ca:3b:f9:0b:6c:fe:3e:1b:db:92: 55:32:78:a9:17:40:4e:aa:e8:91:17:d9:3b:e2:4c:07:ac:24: 8a:83:df:c3:20:f3:c2:e1:2a:ad:77:37:c2:8b:80:e6:5f:ac: 1f:32:db:65:5d:20:94:7c:3b:2d:6b:65:c3:f3:c0:4f:65:cd: eb:67:05:68:b7:54:ea:8f:0c:cc:93:1b:04:be:2c:24:5e:b4: a1:19:f9:2e:41:f3:6b:8f:c6:68:98:f7:e5:f2:15:0d:66:55: 66:75:ec:87:da:60:49:ba:0a:c8:ec:85:f2:89:11:e4:b8:c2: 13:11:78:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE1MTcxMTAvBgNVBAUTKDEwNDExM0NFOEY1RTAxNzUxQUY0RDBGMjQ5NjhEODM5 MjRBNkM4MDcwHhcNMjUwODI0MTcwODQ5WhcNMjUwODMxMTcwODQ5WjAYMRYwFAYD VQQDEw02OGFiNDcyMS03NDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxD4VDW9ccu1g7mPgdvf3ee8Vyj/TSR7WDIJT9cZjFnbM6RQyJ2HSkJkNtlNq UQ8Ug6eMeOAOAh5mXyk2ifhznkOuOARZrlqsWVdPyMLa/3wiQDeEAPDBc/VRv++h jldZb02731mEePHnFoDD5s389GaN0tzp4co4Bq9YhoF/Nd4X6In3jEq8DDsWbBfy x9gJFrNccLMhK+kcWSeANz29/lQH/2Vd0Qr2coymiOL7ttkdHBC35eNzVCDIlFE/ pxIenFtOU4Tzvp/boESVWE+qbcpxGA7ObrjhfKGaLGd5XhwL/KBgAlymrq0OBwh3 fGCjKvaFvJrl3CNpKeQ2EigjcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmQpHFC YQ5c7aQcV3NVnmzZDQypMB8GA1UdIwQYMBaAFBBBE86PXgF1GvTQ8klo2DkkpsgH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTUxNy8yQjE5RkZCOEY1 MDAxMUU4QTkzQThFNjNDNEY5QUUwMi9FRUVUem85ZUFYVWE5TkR5U1dqWU9TU215 QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFRVR6bzllQVhVYTlORHlTV2pZT1NTbXlBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTUxNy8yQjE5RkZCOEY1MDAxMUU4QTkzQThFNjNDNEY5QUUwMi9FRUVUem85ZUFY VWE5TkR5U1dqWU9TU215QWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGZ3rVn8LsLqfbdzBHze3gnsR0WeF3Xo+ufcr9Q+zxR53TgcoOBtwk ZaURgHqXTr1580Vs3/AZftZX7hXRLk5XBQ8lswKTAxYRYt8Pwdt62VBaqnNvGKZt ZhXjTx44kUejDZ2kZUeoLMaK19d2VQkh7NOw6oFKKJPPMVWGCVWK23Mjg+xkCco7 +Qts/j4b25JVMnipF0BOquiRF9k74kwHrCSKg9/DIPPC4SqtdzfCi4DmX6wfMttl XSCUfDsta2XD88BPZc3rZwVot1TqjwzMkxsEviwkXrShGfkuQfNrj8ZomPfl8hUN ZlVmdeyH2mBJugrI7IXyiRHkuMITEXgO -----END CERTIFICATE-----Generated at Sun Aug 24 21:38:50 2025 by rpki-client