$ rpki-client -vvf rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft File: EE2-9WUN1zWSotPPgXKfJprZkQg.mft (raw, json) Hash identifier: z+kKRwNgmVr6wDtMfnFePHx1kMFCnuhJj3WZ7XZV6+o= Subject key identifier: 50:89:B4:7D:AA:4D:3C:1C:7D:BC:1A:3D:7A:A9:F9:4E:C2:BE:1C:F4 Authority key identifier: 10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 Certificate issuer: /CN=A914C429/serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Certificate serial: 0789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft Manifest number: 0784 Signing time: Sun 02 Nov 2025 21:30:14 +0000 Manifest this update: Sun 02 Nov 2025 21:30:14 +0000 Manifest next update: Sun 09 Nov 2025 21:30:14 +0000 Files and hashes: 1: EE2-9WUN1zWSotPPgXKfJprZkQg.crl (hash: wwYmKXjhAKE8GjyKGLOjbRuUgf59Lh0m1i9b8XFeVro=) 2: 4D5B35402E8511EB850F8A18C4F9AE02.roa (hash: 7N0AglNEEqc9kfaZl/cHF7h51PfaQbNAvQaGl0/xNvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1929 (0x789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C429, serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Validity Not Before: Nov 2 21:30:14 2025 GMT Not After : Nov 9 21:30:14 2025 GMT Subject: CN=6907cd66-bdd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:72:d6:2c:57:23:7f:e1:e7:74:69:d5:14:dc: 83:82:1e:49:67:28:7c:ff:ba:77:e2:7e:47:b7:17: fb:af:73:84:b6:1f:e7:19:b5:18:c9:10:72:31:03: 86:ea:21:1d:d6:cf:c9:98:de:ca:79:30:11:53:1c: 42:7b:6c:05:d4:c5:5b:78:4a:e5:cf:8a:8e:8b:8d: d7:eb:b3:2a:a7:59:dc:44:4a:39:55:69:27:72:33: dd:55:88:73:6a:ac:d7:d4:28:ee:b0:83:26:a3:4f: 61:23:9b:84:d1:64:a8:3a:07:66:9d:d4:15:93:04: ad:79:b1:1d:1e:f8:1f:77:26:e2:5d:c0:4d:82:5c: c5:b4:a4:a9:b6:b3:c9:f4:b5:7c:39:a6:ac:b2:5a: 18:71:c6:fc:56:2f:4f:fb:b6:98:76:03:6c:53:68: 35:e8:08:f5:4e:1d:58:b5:0d:5b:ac:7e:c8:b7:9e: f1:8e:3c:8e:d7:1b:13:89:cb:de:72:4b:0c:ae:4e: e5:7f:cf:5a:d8:fa:fe:dd:b9:26:85:1b:f0:18:d9: e9:98:08:09:61:7f:8a:9d:d4:81:2d:60:df:68:4d: 85:0c:21:91:92:94:52:2f:9f:40:57:1c:e0:90:bf: 6f:f8:e6:a0:0a:f2:9a:32:b5:00:24:ac:03:38:02: 86:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:89:B4:7D:AA:4D:3C:1C:7D:BC:1A:3D:7A:A9:F9:4E:C2:BE:1C:F4 X509v3 Authority Key Identifier: keyid:10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:5d:5f:e9:2d:52:85:fe:82:c2:13:94:2c:ec:93:3d:f3:d0: c7:b7:83:bb:05:5e:3e:8a:77:13:85:b1:ae:15:a7:0e:2c:4b: f6:9e:6a:6f:7a:51:85:47:fd:d0:0f:b7:28:cb:ac:97:3f:75: a1:87:c0:42:1a:e6:8f:25:2c:b7:69:9e:0d:9a:08:50:ac:30: f2:18:38:df:87:7c:cf:c9:45:52:c9:04:b3:77:41:ca:76:c6: df:80:bf:67:81:38:f1:1c:f6:96:1f:ce:4b:8c:d4:1a:0c:a5: e4:9c:52:f5:eb:b4:47:7b:50:ea:94:29:7b:f0:ba:75:3a:af: 15:c3:30:55:e8:e4:54:d3:35:a7:71:ec:3c:29:7f:29:6c:e0: bd:8c:fe:c6:1b:c6:fa:31:97:a8:2b:53:e8:cc:70:15:af:71: 3e:33:95:48:04:9c:34:b2:40:28:52:2c:92:57:29:fe:ba:cc: 5e:6a:f8:b5:8d:38:6e:91:ae:7e:14:21:be:fe:a4:40:f1:ec: cf:28:a5:7c:6b:5f:98:3c:ce:5a:34:20:ef:f1:0e:d5:e0:bb: 40:6a:56:ac:8f:fb:97:7c:42:97:98:e2:da:2e:19:60:51:1f: 1b:92:b9:d0:f6:d2:7d:01:2a:f8:08:f0:9e:17:64:5f:66:7e: 2d:6c:13:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0MjkxMTAvBgNVBAUTKDEwNERCRUY1NjUwREQ3MzU5MkEyRDNDRjgxNzI5RjI2 OUFEOTkxMDgwHhcNMjUxMTAyMjEzMDE0WhcNMjUxMTA5MjEzMDE0WjAYMRYwFAYD VQQDEw02OTA3Y2Q2Ni1iZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3LWLFcjf+HndGnVFNyDgh5JZyh8/7p34n5Htxf7r3OEth/nGbUYyRByMQOG 6iEd1s/JmN7KeTARUxxCe2wF1MVbeErlz4qOi43X67Mqp1ncREo5VWkncjPdVYhz aqzX1CjusIMmo09hI5uE0WSoOgdmndQVkwStebEdHvgfdybiXcBNglzFtKSptrPJ 9LV8OaassloYccb8Vi9P+7aYdgNsU2g16Aj1Th1YtQ1brH7It57xjjyO1xsTicve cksMrk7lf89a2Pr+3bkmhRvwGNnpmAgJYX+KndSBLWDfaE2FDCGRkpRSL59AVxzg kL9v+OagCvKaMrUAJKwDOAKGNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCJtH2q TTwcfbwaPXqp+U7Cvhz0MB8GA1UdIwQYMBaAFBBNvvVlDdc1kqLTz4Fynyaa2ZEI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzQyOS8yNkQ2QjdDNDJF ODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6V1NvdFBQZ1hLZkpwclpr UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFMi05V1VOMXpXU290UFBnWEtmSnByWmtRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzQyOS8yNkQ2QjdDNDJFODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6 V1NvdFBQZ1hLZkpwclprUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1XV/pLVKF/oLCE5Qs7JM989DHt4O7BV4+incThbGuFacOLEv2nmpv elGFR/3QD7coy6yXP3Whh8BCGuaPJSy3aZ4NmghQrDDyGDjfh3zPyUVSyQSzd0HK dsbfgL9ngTjxHPaWH85LjNQaDKXknFL167RHe1DqlCl78Lp1Oq8VwzBV6ORU0zWn cew8KX8pbOC9jP7GG8b6MZeoK1PozHAVr3E+M5VIBJw0skAoUiySVyn+usxeavi1 jThuka5+FCG+/qRA8ezPKKV8a1+YPM5aNCDv8Q7V4LtAalasj/uXfEKXmOLaLhlg UR8bkrnQ9tJ9ASr4CPCeF2RfZn4tbBMt -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:37 2025 by rpki-client