$ rpki-client -vvf rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft File: eg_QMrwoEhCzyVIrRxWNVszepgo.mft (raw, json) Hash identifier: a5miYUdR/r+diWvqUpjzXW1/IqJpx8S5PleDYQJ4ywA= Subject key identifier: 26:03:75:8C:93:36:F8:BE:B3:D1:25:F0:1A:A7:54:13:33:79:44:38 Authority key identifier: 7A:0F:D0:32:BC:28:12:10:B3:C9:52:2B:47:15:8D:56:CC:DE:A6:0A Certificate issuer: /CN=A912582A/serialNumber=7A0FD032BC281210B3C9522B47158D56CCDEA60A Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft Manifest number: E7 Signing time: Sat 31 May 2025 05:01:19 +0000 Manifest this update: Sat 31 May 2025 05:01:19 +0000 Manifest next update: Sat 07 Jun 2025 05:01:19 +0000 Files and hashes: 1: eg_QMrwoEhCzyVIrRxWNVszepgo.crl (hash: pPO5C2B4Zm1p20C292+dQS98jKXzuNv6L7KhskHFB38=) 2: AEC87CF641F111EFAA3E956BC4F9AE02.roa (hash: mXUMVXFLrrSWvJCpuu18ijJfWusFAjCWTTEEiobIVgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.crl rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912582A, serialNumber=7A0FD032BC281210B3C9522B47158D56CCDEA60A Validity Not Before: May 31 05:01:19 2025 GMT Not After : Jun 7 05:01:19 2025 GMT Subject: CN=683a8d1f-375b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ae:e8:02:37:ed:b3:4d:68:30:f1:f4:ac:ae: 00:be:b1:a9:4e:8e:cd:30:f2:3b:33:5d:39:5e:bd: d9:8a:a9:83:b4:9b:cc:7f:3d:9c:1f:dd:93:fb:81: 0d:a6:ac:5c:2b:64:9f:35:05:11:2d:08:30:a6:10: 74:1d:36:88:31:0d:e6:a8:5a:70:4e:18:38:c8:77: d8:f3:a3:1b:ae:49:15:be:16:6d:f1:89:b6:f6:1d: 2c:8a:e1:e4:df:84:09:94:ed:69:92:43:b6:7c:e8: 31:03:35:16:42:60:44:7f:d9:10:38:58:47:d5:c2: 63:28:94:66:70:9d:8c:da:5f:c7:03:8e:17:6c:2b: 5d:ee:78:a1:9c:82:1a:c4:9b:5a:dd:00:38:bf:84: 35:5d:3e:62:f7:31:d2:b2:34:fd:3f:0a:2d:d7:28: c9:f8:92:38:f5:81:4d:36:e4:6c:ad:fa:b1:0e:4c: 2d:d2:55:ec:70:07:b9:36:99:01:6b:fa:0c:3a:65: 67:54:8f:e8:7f:43:f7:f4:4b:6c:9a:6f:52:98:bb: be:87:80:4e:e4:9a:b5:1d:1a:d6:64:96:9c:05:5c: e8:19:71:6a:c9:44:1d:3c:90:11:a3:b9:63:0c:2f: a4:bb:57:26:10:00:98:06:09:f6:52:e5:80:fa:18: 49:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:03:75:8C:93:36:F8:BE:B3:D1:25:F0:1A:A7:54:13:33:79:44:38 X509v3 Authority Key Identifier: keyid:7A:0F:D0:32:BC:28:12:10:B3:C9:52:2B:47:15:8D:56:CC:DE:A6:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:f4:92:68:bf:15:15:b9:51:c4:37:55:9e:8d:33:2f:c2:6c: d5:a1:53:59:27:32:a6:3e:ab:a7:d8:3c:82:94:5d:11:f1:90: 3e:f1:c8:a6:d1:8d:d7:fe:be:84:fa:83:f6:46:0a:ef:a4:44: 72:6d:49:e7:2a:b4:3a:71:d0:3b:de:5c:bf:46:0c:4f:3b:02: 0c:1f:c6:b3:84:d0:9c:5b:3f:61:4c:59:f3:19:3b:f7:58:b2: 3d:74:79:43:84:3a:62:1f:e0:d4:a2:2c:83:d9:0c:48:3e:3c: 3b:4e:55:fd:ce:c2:8b:d0:70:67:4f:77:c9:9c:89:f6:c3:8c: 05:10:91:e2:91:6e:f0:be:40:19:3d:ad:6b:e8:a2:2f:ad:68: 69:a9:4a:0b:0a:f8:23:b8:d7:09:19:15:46:64:13:ea:08:60: 0a:ec:4a:38:e1:8e:fb:71:d9:22:cf:64:93:0a:e9:e1:b5:2b: d5:93:0f:44:91:c1:23:16:77:22:b0:0e:b9:50:7e:e4:bb:a8: 3d:1d:91:a9:4f:2a:8e:7f:01:65:3f:7e:f8:fc:e9:94:e5:fe: e8:1a:91:58:51:bf:09:bf:2f:75:9a:fa:7d:3d:7f:8d:9d:4d: f7:30:5c:58:a5:6f:3e:97:2f:e0:f3:68:22:18:bc:3f:58:31: 1c:5b:bc:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU4MkExMTAvBgNVBAUTKDdBMEZEMDMyQkMyODEyMTBCM0M5NTIyQjQ3MTU4RDU2 Q0NERUE2MEEwHhcNMjUwNTMxMDUwMTE5WhcNMjUwNjA3MDUwMTE5WjAYMRYwFAYD VQQDEw02ODNhOGQxZi0zNzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7a7oAjfts01oMPH0rK4AvrGpTo7NMPI7M105Xr3ZiqmDtJvMfz2cH92T+4EN pqxcK2SfNQURLQgwphB0HTaIMQ3mqFpwThg4yHfY86MbrkkVvhZt8Ym29h0siuHk 34QJlO1pkkO2fOgxAzUWQmBEf9kQOFhH1cJjKJRmcJ2M2l/HA44XbCtd7nihnIIa xJta3QA4v4Q1XT5i9zHSsjT9Pwot1yjJ+JI49YFNNuRsrfqxDkwt0lXscAe5NpkB a/oMOmVnVI/of0P39Etsmm9SmLu+h4BO5Jq1HRrWZJacBVzoGXFqyUQdPJARo7lj DC+ku1cmEACYBgn2UuWA+hhJHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYDdYyT Nvi+s9El8BqnVBMzeUQ4MB8GA1UdIwQYMBaAFHoP0DK8KBIQs8lSK0cVjVbM3qYK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTgyQS83OEQ3NDk2RURE RTgxMUVFQTNCMEU3MTNDNEY5QUUwMi9lZ19RTXJ3b0VoQ3p5VklyUnhXTlZzemVw Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VnX1FNcndvRWhDenlWSXJSeFdOVnN6ZXBnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTgyQS83OEQ3NDk2RURERTgxMUVFQTNCMEU3MTNDNEY5QUUwMi9lZ19RTXJ3b0Vo Q3p5VklyUnhXTlZzemVwZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw9JJovxUVuVHEN1WejTMvwmzVoVNZJzKmPqun2DyClF0R8ZA+8cim 0Y3X/r6E+oP2RgrvpERybUnnKrQ6cdA73ly/RgxPOwIMH8azhNCcWz9hTFnzGTv3 WLI9dHlDhDpiH+DUoiyD2QxIPjw7TlX9zsKL0HBnT3fJnIn2w4wFEJHikW7wvkAZ Pa1r6KIvrWhpqUoLCvgjuNcJGRVGZBPqCGAK7Eo44Y77cdkiz2STCunhtSvVkw9E kcEjFncisA65UH7ku6g9HZGpTyqOfwFlP374/OmU5f7oGpFYUb8Jvy91mvp9PX+N nU33MFxYpW8+ly/g82giGLw/WDEcW7wi -----END CERTIFICATE-----Generated at Sat May 31 17:51:35 2025 by rpki-client