$ rpki-client -vvf rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft File: EEz4cGO16r803k4l_s6ata9zbBQ.mft (raw, json) Hash identifier: bXJuKPU2qvgQ3H24xYZDs97jD9lJliia5YWrhVvnWF4= Subject key identifier: E0:E5:4F:6B:67:9A:1B:52:5B:AA:EA:15:94:18:E8:D4:8A:8D:8E:B1 Authority key identifier: 10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14 Certificate issuer: /CN=A9111FFD/serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft Manifest number: 69 Signing time: Sat 09 Aug 2025 07:31:08 +0000 Manifest this update: Sat 09 Aug 2025 07:31:08 +0000 Manifest next update: Sat 16 Aug 2025 07:31:07 +0000 Files and hashes: 1: EEz4cGO16r803k4l_s6ata9zbBQ.crl (hash: bl6BcQ6WCCxffvfzPcaJaS+D2Mv+CP5iQMXhjYwGg2g=) 2: 7BF6BA42E91A11EF804C4B57C4F9AE02.roa (hash: HNlYiglg+bBDY8hf2XbMc61T9NCbbnRV5gfydPimiu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111FFD, serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14 Validity Not Before: Aug 9 07:31:08 2025 GMT Not After : Aug 16 07:31:07 2025 GMT Subject: CN=6896f93c-3626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:55:2c:8a:01:8f:f4:ae:a2:a1:b5:cf:52:10: 55:f8:01:ff:7c:94:09:7b:e1:36:db:81:04:55:e7: cd:70:b1:34:5a:20:e5:f6:2e:e7:f4:8d:10:af:dc: 4a:26:2f:bd:ad:7c:b9:06:70:b9:71:da:48:39:d5: e8:ad:a3:e2:8b:b5:96:81:21:d3:da:95:66:c7:62: f4:85:72:81:c7:5e:d7:c5:53:ee:37:54:5a:fb:85: e4:29:d2:77:2e:24:92:82:ac:cc:35:51:ae:2e:7e: ce:6d:f6:79:11:b3:cc:2e:76:4a:86:42:95:44:61: 77:01:95:c8:d5:ea:5d:2a:db:8a:d6:d8:38:b3:9f: 26:15:75:73:62:42:8a:9f:9b:4e:f8:7b:0a:9c:16: d8:6f:29:6d:e9:5c:4e:77:c5:40:a0:0c:10:3a:dc: 48:1a:c3:17:22:7f:b5:4e:ef:b5:84:96:d5:21:a5: 2c:3f:56:a2:4e:bc:0f:68:c7:70:68:6e:0f:6a:a7: 96:dd:a2:1d:cc:02:cf:d3:49:f9:b7:bb:ff:3a:3a: bd:7a:4c:ca:a5:a0:40:2c:b2:cc:16:6d:74:65:36: 2d:eb:f7:76:0f:51:47:b6:50:84:81:bf:59:4e:fe: c1:f3:9d:a8:f1:d6:fd:05:50:9a:da:d7:cb:8b:1b: 11:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E5:4F:6B:67:9A:1B:52:5B:AA:EA:15:94:18:E8:D4:8A:8D:8E:B1 X509v3 Authority Key Identifier: keyid:10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f6:31:11:eb:09:95:da:20:bb:93:55:0e:f8:74:0e:42:18: ad:6d:97:36:72:5c:da:34:d6:f3:07:ab:03:f9:6d:ac:8c:d6: 61:47:36:a3:1e:f1:1c:0f:24:fb:a0:38:64:d8:6a:e6:d4:45: 3d:e3:b1:ca:dc:3c:1a:6e:4e:e9:72:8e:81:ed:a1:e7:4a:6d: 34:84:43:ae:87:b1:1d:91:38:7e:f3:05:49:a0:bd:5f:15:43: 37:cc:0c:ef:01:53:47:40:be:2e:23:45:fa:af:ca:15:d4:de: 98:36:a5:da:e9:67:c6:e3:05:fe:8d:08:48:70:1a:98:f5:97: 30:cc:3a:06:21:cf:03:92:de:a4:fe:a5:98:dd:5b:87:61:a9: 49:f2:63:ad:e6:a5:c9:a2:3c:1e:f4:d4:a9:79:9e:d2:5b:30: f4:f8:9c:a0:92:9d:f3:c3:5d:ad:39:98:f8:8b:52:64:1b:4d: de:f5:dd:c8:6e:af:96:29:f2:a8:03:d8:2e:83:6e:49:8c:3f: f6:c4:48:af:ce:6d:8d:a5:0b:aa:21:a4:20:9c:f8:43:92:ef: a3:56:e8:9c:68:1f:f5:f1:e9:e4:19:4f:73:c6:db:09:fc:3b: 78:25:2d:b1:4e:cb:96:e3:b4:13:87:7c:f8:04:54:93:c8:09: dc:75:ad:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUZGRDExMC8GA1UEBRMoMTA0Q0Y4NzA2M0I1RUFCRjM0REU0RTI1RkVDRTlBQjVB RjczNkMxNDAeFw0yNTA4MDkwNzMxMDhaFw0yNTA4MTYwNzMxMDdaMBgxFjAUBgNV BAMTDTY4OTZmOTNjLTM2MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpVSyKAY/0rqKhtc9SEFX4Af98lAl74TbbgQRV581wsTRaIOX2Luf0jRCv3Eom L72tfLkGcLlx2kg51eito+KLtZaBIdPalWbHYvSFcoHHXtfFU+43VFr7heQp0ncu JJKCrMw1Ua4ufs5t9nkRs8wudkqGQpVEYXcBlcjV6l0q24rW2DiznyYVdXNiQoqf m074ewqcFthvKW3pXE53xUCgDBA63Egawxcif7VO77WEltUhpSw/VqJOvA9ox3Bo bg9qp5bdoh3MAs/TSfm3u/86Or16TMqloEAssswWbXRlNi3r93YPUUe2UISBv1lO /sHznajx1v0FUJra18uLGxGBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4OVPa2ea G1JbquoVlBjo1IqNjrEwHwYDVR0jBBgwFoAUEEz4cGO16r803k4l/s6ata9zbBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRkZELzQyRUIwNTM0REQz ODExRUY5QzM0Njc0NUM0RjlBRTAyL0VFejRjR08xNnI4MDNrNGxfczZhdGE5emJC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRUV6NGNHTzE2cjgwM2s0bF9zNmF0YTl6YkJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx RkZELzQyRUIwNTM0REQzODExRUY5QzM0Njc0NUM0RjlBRTAyL0VFejRjR08xNnI4 MDNrNGxfczZhdGE5emJCUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC/2MRHrCZXaILuTVQ74dA5CGK1tlzZyXNo01vMHqwP5bayM1mFHNqMe 8RwPJPugOGTYaubURT3jscrcPBpuTulyjoHtoedKbTSEQ66HsR2ROH7zBUmgvV8V QzfMDO8BU0dAvi4jRfqvyhXU3pg2pdrpZ8bjBf6NCEhwGpj1lzDMOgYhzwOS3qT+ pZjdW4dhqUnyY63mpcmiPB701Kl5ntJbMPT4nKCSnfPDXa05mPiLUmQbTd713chu r5Yp8qgD2C6DbkmMP/bESK/ObY2lC6ohpCCc+EOS76NW6JxoH/Xx6eQZT3PG2wn8 O3glLbFOy5bjtBOHfPgEVJPICdx1rcw= -----END CERTIFICATE-----Generated at Sat Aug 9 15:18:08 2025 by rpki-client