$ rpki-client -vvf rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft File: EE2-9WUN1zWSotPPgXKfJprZkQg.mft (raw, json) Hash identifier: uJNuvc5TgZkGiChvJLngnIdvvf0lcTlMaUfX7cjiTGM= Subject key identifier: 4C:6F:FD:98:31:B5:8C:97:5B:77:0F:00:25:46:4C:66:63:DF:D9:DF Authority key identifier: 10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 Certificate issuer: /CN=A914C429/serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Certificate serial: 0729 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft Manifest number: 0724 Signing time: Thu 24 Apr 2025 21:36:35 +0000 Manifest this update: Thu 24 Apr 2025 21:36:35 +0000 Manifest next update: Thu 01 May 2025 21:36:35 +0000 Files and hashes: 1: EE2-9WUN1zWSotPPgXKfJprZkQg.crl (hash: neK16vAiXfwpuIFhxEqk5PJM2XHBbSXbJaUCcduolJ8=) 2: 4D5B35402E8511EB850F8A18C4F9AE02.roa (hash: 7N0AglNEEqc9kfaZl/cHF7h51PfaQbNAvQaGl0/xNvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1833 (0x729) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C429, serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Validity Not Before: Apr 24 21:36:35 2025 GMT Not After : May 1 21:36:35 2025 GMT Subject: CN=680aaee3-34d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e6:2f:6f:7a:7a:32:74:64:99:df:48:48:be: 51:a7:e8:f0:e3:63:a3:e3:29:3b:b2:66:40:bb:e8: 00:29:77:5a:d1:82:84:93:f7:b7:06:58:f6:0b:50: 41:eb:d0:1b:d4:7d:23:ef:2e:63:56:e2:f7:86:60: c8:71:65:f0:15:7a:da:a1:7e:7c:72:f3:86:04:be: cc:1f:cb:cb:5b:b1:6b:b7:2d:8c:e6:f0:04:7f:3f: d9:a9:bf:f5:6b:88:92:91:65:cf:42:56:96:53:99: 27:d2:4e:c8:d6:7e:3d:fe:df:31:bd:f4:02:d8:99: 63:a9:ef:ab:de:d9:52:c7:43:21:00:7e:3d:db:fb: 0c:5a:96:40:01:f1:47:60:77:a1:c0:16:6c:27:b2: 52:2e:6d:55:7d:20:19:06:3f:f1:7f:e4:2f:27:5b: a5:6e:36:f2:40:e3:35:8b:87:a2:f7:eb:7b:64:25: 0c:8d:2b:eb:68:1f:e5:c6:ed:4c:a3:ae:cb:66:46: 59:1f:ff:35:3d:80:cc:55:01:c9:e4:6b:a9:03:78: f5:b9:31:a8:26:87:1d:51:b9:41:8c:66:47:70:18: 13:8f:55:cf:9b:89:15:bc:0c:13:60:86:83:91:e6: d3:34:49:c6:8b:99:4a:20:40:a8:b2:4b:04:54:d0: 63:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6F:FD:98:31:B5:8C:97:5B:77:0F:00:25:46:4C:66:63:DF:D9:DF X509v3 Authority Key Identifier: keyid:10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:c2:90:b1:a3:e8:07:45:b7:aa:49:6e:6b:6d:4d:fb:14:8f: 25:af:a6:9a:76:1e:71:42:63:4e:4b:9e:76:45:4d:d3:cd:ce: 7c:e1:05:71:60:eb:b5:4b:2a:b7:1e:c2:5a:12:08:c1:c9:a1: 52:cb:4b:48:c8:dd:41:39:af:7e:bf:67:0c:b3:d6:34:bd:f1: 46:c6:36:38:43:06:4c:58:1f:7a:09:73:df:15:33:ec:00:7a: 1a:92:d1:7d:a8:3b:a5:1c:21:e4:22:b9:ff:a7:0c:cd:45:46: d9:25:6e:c1:7e:1e:7c:dd:4c:89:13:83:0e:c1:a5:ee:a9:18: 1e:dd:57:07:79:96:c0:23:60:e5:0a:89:ad:e2:8d:5e:ba:e0: bf:47:91:ad:82:d0:6e:ab:7d:69:98:d9:00:88:96:37:95:c1: 30:e2:3a:6a:cf:f7:55:cf:3f:23:84:d1:3b:38:0b:22:32:bd: f7:11:59:55:33:fd:4f:56:39:80:19:27:c0:00:00:1a:e9:0c: cf:5a:f0:19:21:66:b4:6e:c6:cb:51:52:61:6b:c3:d1:f4:8d: 66:7e:e9:17:ec:dd:79:3d:50:45:b7:3b:f4:05:23:ce:89:fd: 2f:35:48:e1:5f:ec:84:4c:84:12:c3:f6:a6:b4:d8:35:2e:c9: 96:c5:51:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0MjkxMTAvBgNVBAUTKDEwNERCRUY1NjUwREQ3MzU5MkEyRDNDRjgxNzI5RjI2 OUFEOTkxMDgwHhcNMjUwNDI0MjEzNjM1WhcNMjUwNTAxMjEzNjM1WjAYMRYwFAYD VQQDEw02ODBhYWVlMy0zNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3uYvb3p6MnRkmd9ISL5Rp+jw42Oj4yk7smZAu+gAKXda0YKEk/e3Blj2C1BB 69Ab1H0j7y5jVuL3hmDIcWXwFXraoX58cvOGBL7MH8vLW7Frty2M5vAEfz/Zqb/1 a4iSkWXPQlaWU5kn0k7I1n49/t8xvfQC2Jljqe+r3tlSx0MhAH492/sMWpZAAfFH YHehwBZsJ7JSLm1VfSAZBj/xf+QvJ1ulbjbyQOM1i4ei9+t7ZCUMjSvraB/lxu1M o67LZkZZH/81PYDMVQHJ5GupA3j1uTGoJocdUblBjGZHcBgTj1XPm4kVvAwTYIaD kebTNEnGi5lKIECosksEVNBj1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExv/Zgx tYyXW3cPACVGTGZj39nfMB8GA1UdIwQYMBaAFBBNvvVlDdc1kqLTz4Fynyaa2ZEI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzQyOS8yNkQ2QjdDNDJF ODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6V1NvdFBQZ1hLZkpwclpr UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFMi05V1VOMXpXU290UFBnWEtmSnByWmtRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzQyOS8yNkQ2QjdDNDJFODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6 V1NvdFBQZ1hLZkpwclprUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4wpCxo+gHRbeqSW5rbU37FI8lr6aadh5xQmNOS552RU3Tzc584QVx YOu1Syq3HsJaEgjByaFSy0tIyN1BOa9+v2cMs9Y0vfFGxjY4QwZMWB96CXPfFTPs AHoaktF9qDulHCHkIrn/pwzNRUbZJW7Bfh583UyJE4MOwaXuqRge3VcHeZbAI2Dl Comt4o1euuC/R5GtgtBuq31pmNkAiJY3lcEw4jpqz/dVzz8jhNE7OAsiMr33EVlV M/1PVjmAGSfAAAAa6QzPWvAZIWa0bsbLUVJha8PR9I1mfukX7N15PVBFtzv0BSPO if0vNUjhX+yETIQSw/amtNg1LsmWxVFI -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:20 2025 by rpki-client