$ rpki-client -vvf rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft File: EEETzo9eAXUa9NDySWjYOSSmyAc.mft (raw, json) Hash identifier: wr3PQj9DIXXlY/bN5EJ/CyVwBvkgwkxKLOERG9cOt7Y= Subject key identifier: 5E:9A:A8:E7:35:1B:3F:3C:B7:B2:1D:05:16:91:8A:53:D2:1F:17:5A Authority key identifier: 10:41:13:CE:8F:5E:01:75:1A:F4:D0:F2:49:68:D8:39:24:A6:C8:07 Certificate issuer: /CN=A912A517/serialNumber=104113CE8F5E01751AF4D0F24968D83924A6C807 Certificate serial: 11EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft Manifest number: 11D6 Signing time: Sat 14 Jun 2025 17:08:24 +0000 Manifest this update: Sat 14 Jun 2025 17:08:23 +0000 Manifest next update: Sat 21 Jun 2025 17:08:23 +0000 Files and hashes: 1: EEETzo9eAXUa9NDySWjYOSSmyAc.crl (hash: WtEWeaZwwWmwiUT9REZvnQjbDZ3RKkIV8xw6IB6c3gc=) 2: 414227D6F03711EBB93D0345C4F9AE02.roa (hash: zcse+3V6ypo9qMai/JVipYWLsvmfpHazMGh7GCulYY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.crl rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4591 (0x11ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A517, serialNumber=104113CE8F5E01751AF4D0F24968D83924A6C807 Validity Not Before: Jun 14 17:08:23 2025 GMT Not After : Jun 21 17:08:23 2025 GMT Subject: CN=684dac87-bea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:43:c4:69:09:7e:89:27:91:d8:30:3d:89: e7:46:f2:6c:99:26:30:37:3a:4b:d6:8d:28:4b:59: 49:a9:7b:1f:a9:4b:66:64:60:d9:2d:d3:52:39:46: 2c:6a:ef:37:bb:89:2b:a5:8d:c8:da:1b:9f:97:86: 92:10:38:e9:20:e2:00:f9:f5:65:5b:de:80:2b:65: 89:e8:43:4b:9b:89:25:a4:58:54:55:e2:94:a6:2a: ed:60:78:24:5e:d3:8e:22:f6:47:63:5b:0e:7f:c3: 2c:51:84:a6:ac:b9:af:d2:08:b8:d4:f5:e4:53:81: bd:1b:3d:2e:67:a2:90:a9:6f:b9:03:d9:5a:2e:1a: 9c:6a:99:16:8e:90:c9:d7:7d:36:cc:a0:b3:cb:a7: 3e:86:1f:55:aa:ab:cc:bf:b6:28:82:14:65:de:b5: f1:b1:fb:9f:f9:23:9f:e6:e1:b7:7b:3e:7c:28:1b: 96:a4:69:2c:4c:c8:bc:d3:1c:7f:be:c7:93:0c:01: 51:09:c7:7e:ae:71:e8:8b:df:aa:08:13:93:62:74: 9e:39:8b:76:31:30:f2:da:e9:3b:18:69:f7:5b:c5: 16:7e:6e:02:83:69:da:8e:54:d3:85:7d:43:56:e0: b5:b0:eb:6d:c0:eb:d9:39:14:36:70:42:81:28:42: c8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9A:A8:E7:35:1B:3F:3C:B7:B2:1D:05:16:91:8A:53:D2:1F:17:5A X509v3 Authority Key Identifier: keyid:10:41:13:CE:8F:5E:01:75:1A:F4:D0:F2:49:68:D8:39:24:A6:C8:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:b3:c6:c1:5d:6b:f1:3e:03:a3:e5:5c:b4:fd:87:7b:e9:99: 36:ef:c5:77:8c:5c:4f:e4:1f:fb:82:84:c4:f5:9e:a4:2f:9d: cb:51:c0:02:d5:e3:4a:62:d9:4b:00:d9:19:a0:23:bd:cd:ff: 79:8e:82:71:c8:64:eb:cf:03:cf:11:02:2f:86:07:7c:91:9e: 6f:42:16:2e:00:d6:67:84:a5:8e:d6:60:92:df:e1:44:df:32: ae:02:36:43:73:78:3b:e4:87:9f:3c:dc:a3:31:b0:0b:b7:5e: 16:b6:54:3d:87:ac:4f:ce:e3:84:fd:47:68:b1:42:cd:60:8f: 18:af:b4:01:cc:08:dd:a6:8e:41:4b:a4:a0:5a:f8:6e:31:28: 04:3f:72:9a:24:07:8d:40:44:79:ed:1b:b4:0a:65:15:77:75: ad:9f:e0:27:a8:5a:40:24:1b:5e:ce:d9:4b:58:e3:f6:cb:84: 18:08:fa:93:66:af:3e:ad:51:91:38:9f:1b:61:f3:11:35:09: fb:d6:dc:4d:3f:b7:aa:ef:9a:d3:1b:33:bf:1c:49:50:98:e2: fb:ef:0e:18:6d:dc:6e:08:5b:06:67:c6:54:e4:01:cc:c1:71: 44:f8:fd:ec:a0:3e:c4:b7:d7:80:4e:10:e9:b3:84:45:63:ca: 3b:0c:97:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE1MTcxMTAvBgNVBAUTKDEwNDExM0NFOEY1RTAxNzUxQUY0RDBGMjQ5NjhEODM5 MjRBNkM4MDcwHhcNMjUwNjE0MTcwODIzWhcNMjUwNjIxMTcwODIzWjAYMRYwFAYD VQQDEw02ODRkYWM4Ny1iZWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWhDxGkJfoknkdgwPYnnRvJsmSYwNzpL1o0oS1lJqXsfqUtmZGDZLdNSOUYs au83u4krpY3I2hufl4aSEDjpIOIA+fVlW96AK2WJ6ENLm4klpFhUVeKUpirtYHgk XtOOIvZHY1sOf8MsUYSmrLmv0gi41PXkU4G9Gz0uZ6KQqW+5A9laLhqcapkWjpDJ 1302zKCzy6c+hh9VqqvMv7YoghRl3rXxsfuf+SOf5uG3ez58KBuWpGksTMi80xx/ vseTDAFRCcd+rnHoi9+qCBOTYnSeOYt2MTDy2uk7GGn3W8UWfm4Cg2najlTThX1D VuC1sOttwOvZORQ2cEKBKELI1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6aqOc1 Gz88t7IdBRaRilPSHxdaMB8GA1UdIwQYMBaAFBBBE86PXgF1GvTQ8klo2DkkpsgH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTUxNy8yQjE5RkZCOEY1 MDAxMUU4QTkzQThFNjNDNEY5QUUwMi9FRUVUem85ZUFYVWE5TkR5U1dqWU9TU215 QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFRVR6bzllQVhVYTlORHlTV2pZT1NTbXlBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTUxNy8yQjE5RkZCOEY1MDAxMUU4QTkzQThFNjNDNEY5QUUwMi9FRUVUem85ZUFY VWE5TkR5U1dqWU9TU215QWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARs8bBXWvxPgOj5Vy0/Yd76Zk278V3jFxP5B/7goTE9Z6kL53LUcAC 1eNKYtlLANkZoCO9zf95joJxyGTrzwPPEQIvhgd8kZ5vQhYuANZnhKWO1mCS3+FE 3zKuAjZDc3g75IefPNyjMbALt14WtlQ9h6xPzuOE/UdosULNYI8Yr7QBzAjdpo5B S6SgWvhuMSgEP3KaJAeNQER57Ru0CmUVd3Wtn+AnqFpAJBteztlLWOP2y4QYCPqT Zq8+rVGROJ8bYfMRNQn71txNP7eq75rTGzO/HElQmOL77w4YbdxuCFsGZ8ZU5AHM wXFE+P3soD7Et9eAThDps4RFY8o7DJeE -----END CERTIFICATE-----Generated at Sun Jun 15 07:06:58 2025 by rpki-client