$ rpki-client -vvf rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft File: EE2-9WUN1zWSotPPgXKfJprZkQg.mft (raw, json) Hash identifier: VEAv7/LSynCnBavbAMD4sRTCSKq1WDI1Gn200qQqxMg= Subject key identifier: 28:94:7E:5F:43:90:5C:51:D1:15:D5:62:7F:2B:02:4F:BD:88:C3:72 Authority key identifier: 10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 Certificate issuer: /CN=A914C429/serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Certificate serial: 0765 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft Manifest number: 0760 Signing time: Fri 22 Aug 2025 21:46:02 +0000 Manifest this update: Fri 22 Aug 2025 21:46:02 +0000 Manifest next update: Fri 29 Aug 2025 21:46:02 +0000 Files and hashes: 1: EE2-9WUN1zWSotPPgXKfJprZkQg.crl (hash: /Zo0K9KBtFeoA1g0tIqkpasJFEO44L350kbW5ybi3EI=) 2: 4D5B35402E8511EB850F8A18C4F9AE02.roa (hash: 7N0AglNEEqc9kfaZl/cHF7h51PfaQbNAvQaGl0/xNvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1893 (0x765) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C429, serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Validity Not Before: Aug 22 21:46:02 2025 GMT Not After : Aug 29 21:46:02 2025 GMT Subject: CN=68a8e51a-5ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:a3:83:b1:52:59:bb:aa:68:70:7c:d6:7d: 4e:2e:86:39:7a:a5:88:83:e0:e2:36:02:3e:1d:9b: a3:ef:f2:59:f9:f4:e0:8d:a4:a3:c5:66:e9:30:bd: bf:b4:f6:e2:bf:e5:22:81:2b:e4:28:8b:71:9f:2c: 63:66:d9:70:86:8b:bc:df:dd:71:67:c3:c9:4a:e4: 3a:50:30:75:3c:85:f3:c4:74:b7:9b:7e:46:64:ba: 4a:9a:8a:52:6b:ef:49:ca:57:c5:f8:f9:6e:aa:c9: be:fa:0b:22:58:07:2a:37:12:ea:d0:3f:85:dd:8f: 47:ca:71:c8:f6:eb:1f:2d:e2:06:99:09:3c:82:78: 8c:b1:89:58:29:fa:18:0e:11:47:2f:88:ca:22:c0: 54:00:31:74:83:4e:d8:98:88:42:11:fc:be:6e:47: 80:c1:13:ae:9c:2e:20:96:0a:50:01:92:43:ea:04: 6d:57:db:1d:74:2b:54:ee:54:e3:99:5b:ac:25:87: 1b:47:1c:16:a2:b0:10:70:b3:54:d8:34:bd:de:f6: 6b:e9:a3:c8:b7:09:03:b8:3c:bd:65:bf:13:fd:9f: 07:23:c2:68:72:fa:59:2f:67:d2:0b:b8:48:db:11: 30:bd:a1:36:63:e5:77:67:99:f7:61:4c:2e:79:74: ea:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:94:7E:5F:43:90:5C:51:D1:15:D5:62:7F:2B:02:4F:BD:88:C3:72 X509v3 Authority Key Identifier: keyid:10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:15:ae:90:95:49:27:86:9a:79:e0:4d:91:1e:de:49:85:ed: 67:30:74:26:fe:d8:a6:34:0b:46:f9:11:ba:3a:96:97:1b:95: 41:e3:5a:d8:d1:63:6a:3c:e7:c6:c9:7d:66:02:7c:40:b2:74: 7a:cf:81:cc:86:27:cf:27:82:f3:71:7e:2b:19:a3:aa:7d:e5: 32:83:25:be:b0:6d:33:8d:e5:79:8e:c2:89:61:73:46:4e:20: 68:bc:e1:f7:cc:85:a6:3e:d3:d0:c6:66:30:8d:9b:97:66:2f: 6d:3a:67:1c:3c:5f:1a:17:fa:60:56:49:b9:07:ce:de:0f:1a: d9:cf:9f:04:75:86:e1:7c:c5:a8:e8:f9:5c:1b:67:83:3a:db: a8:23:f0:dd:cf:95:11:7f:84:9a:ae:b8:28:5b:1a:fd:b0:bf: f5:c9:73:32:3e:ba:b6:ce:3c:2a:72:b4:ee:db:4b:61:ed:87: a4:b7:0a:eb:33:de:3c:18:ee:35:91:a2:37:8f:d3:a1:5d:f8: 6f:41:cf:fe:f8:cc:8a:d4:90:29:a5:db:d2:58:a4:c4:55:17: e5:69:21:21:9d:db:31:62:22:c2:37:22:fd:7a:32:1b:9e:b4: f6:7f:4d:1c:e9:2b:e2:66:72:4e:ae:a5:e4:00:86:4f:83:2e: a1:e2:95:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0MjkxMTAvBgNVBAUTKDEwNERCRUY1NjUwREQ3MzU5MkEyRDNDRjgxNzI5RjI2 OUFEOTkxMDgwHhcNMjUwODIyMjE0NjAyWhcNMjUwODI5MjE0NjAyWjAYMRYwFAYD VQQDEw02OGE4ZTUxYS01ZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0ejg7FSWbuqaHB81n1OLoY5eqWIg+DiNgI+HZuj7/JZ+fTgjaSjxWbpML2/ tPbiv+UigSvkKItxnyxjZtlwhou8391xZ8PJSuQ6UDB1PIXzxHS3m35GZLpKmopS a+9JylfF+Pluqsm++gsiWAcqNxLq0D+F3Y9HynHI9usfLeIGmQk8gniMsYlYKfoY DhFHL4jKIsBUADF0g07YmIhCEfy+bkeAwROunC4glgpQAZJD6gRtV9sddCtU7lTj mVusJYcbRxwWorAQcLNU2DS93vZr6aPItwkDuDy9Zb8T/Z8HI8JocvpZL2fSC7hI 2xEwvaE2Y+V3Z5n3YUwueXTqDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiUfl9D kFxR0RXVYn8rAk+9iMNyMB8GA1UdIwQYMBaAFBBNvvVlDdc1kqLTz4Fynyaa2ZEI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzQyOS8yNkQ2QjdDNDJF ODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6V1NvdFBQZ1hLZkpwclpr UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFMi05V1VOMXpXU290UFBnWEtmSnByWmtRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzQyOS8yNkQ2QjdDNDJFODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6 V1NvdFBQZ1hLZkpwclprUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXFa6QlUknhpp54E2RHt5Jhe1nMHQm/timNAtG+RG6OpaXG5VB41rY 0WNqPOfGyX1mAnxAsnR6z4HMhifPJ4LzcX4rGaOqfeUygyW+sG0zjeV5jsKJYXNG TiBovOH3zIWmPtPQxmYwjZuXZi9tOmccPF8aF/pgVkm5B87eDxrZz58EdYbhfMWo 6PlcG2eDOtuoI/Ddz5URf4SarrgoWxr9sL/1yXMyPrq2zjwqcrTu20th7Yektwrr M948GO41kaI3j9OhXfhvQc/++MyK1JAppdvSWKTEVRflaSEhndsxYiLCNyL9ejIb nrT2f00c6SviZnJOrqXkAIZPgy6h4pW3 -----END CERTIFICATE-----Generated at Sun Aug 24 21:54:15 2025 by rpki-client