$ rpki-client -vvf rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft File: eg_QMrwoEhCzyVIrRxWNVszepgo.mft (raw, json) Hash identifier: JtHzkVj7btGgMiGtkuT+8nqY030TrUFWVYac7Tu+yBY= Subject key identifier: 2C:E2:EA:D7:73:92:9A:B9:81:25:7E:D5:CE:F6:DF:D3:DE:14:F5:08 Authority key identifier: 7A:0F:D0:32:BC:28:12:10:B3:C9:52:2B:47:15:8D:56:CC:DE:A6:0A Certificate issuer: /CN=A912582A/serialNumber=7A0FD032BC281210B3C9522B47158D56CCDEA60A Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft Manifest number: 013D Signing time: Wed 05 Nov 2025 04:38:29 +0000 Manifest this update: Wed 05 Nov 2025 04:38:29 +0000 Manifest next update: Wed 12 Nov 2025 04:38:29 +0000 Files and hashes: 1: eg_QMrwoEhCzyVIrRxWNVszepgo.crl (hash: Y5L2gC4z9kCUK9oTFVzchIbqgJJCue5eU2kezvK+zio=) 2: 2BB37D0641FB11F0AF4AA817C4F9AE02.roa (hash: XEo3yH9798bRctchsMT2LIaz6q7sk6+vjG3539bWh8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.crl rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912582A, serialNumber=7A0FD032BC281210B3C9522B47158D56CCDEA60A Validity Not Before: Nov 5 04:38:29 2025 GMT Not After : Nov 12 04:38:29 2025 GMT Subject: CN=690ad4c5-e9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:07:b2:fe:67:e5:4c:16:cb:fe:ee:5c:a1:b9: 39:d1:5c:2d:9e:b8:9d:fb:b7:aa:87:a7:92:83:98: 66:cc:36:2b:72:f1:6c:24:e4:ea:10:7c:ef:28:d7: 95:95:c6:53:c3:0b:59:f6:b8:b7:6d:96:b8:4e:18: 49:5c:a2:f9:6c:30:83:95:4a:f9:84:d6:71:a0:98: a4:ac:be:a9:81:f9:2c:e0:64:45:43:d9:dd:50:39: 53:da:e2:12:49:2d:64:38:94:bd:2f:f8:87:1a:cf: 16:ce:80:80:eb:c8:98:0c:72:4e:7b:74:84:d1:3e: b1:e9:5a:fc:f3:9a:bd:8e:23:5c:ed:06:a7:77:6a: b0:17:37:9b:10:c0:6f:4a:fa:86:8e:61:32:3b:e7: bb:26:ea:c4:97:a0:51:22:6d:da:71:a9:ec:47:02: d1:03:fd:43:3f:e9:4b:9d:bb:fc:66:68:9a:3d:de: 57:9c:46:39:43:c3:ff:b8:ae:d4:68:b9:c0:c9:6d: 09:89:79:df:73:a4:fd:d8:f2:84:1e:12:74:e0:23: 69:3e:d0:0d:4e:73:f2:78:99:c1:16:df:91:a2:05: 9d:c1:35:bc:61:a2:1c:ef:a0:ea:4e:27:a9:e9:56: c1:1a:02:f2:a7:47:69:35:bd:cd:88:a0:c7:e1:81: 51:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E2:EA:D7:73:92:9A:B9:81:25:7E:D5:CE:F6:DF:D3:DE:14:F5:08 X509v3 Authority Key Identifier: keyid:7A:0F:D0:32:BC:28:12:10:B3:C9:52:2B:47:15:8D:56:CC:DE:A6:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:52:c9:83:c6:50:2c:71:21:87:7b:d2:9d:5f:3f:c4:1e:90: 20:df:ff:02:c8:ae:23:4b:bd:9d:6f:22:c4:72:b9:c2:1e:ec: 73:64:d6:73:18:df:bb:c9:3a:f8:36:ef:4e:80:7e:c1:d2:33: 17:7f:19:db:e5:af:57:8c:5a:36:e9:c9:06:7c:46:db:40:59: a7:39:48:1b:62:c0:4e:6b:e1:f0:95:8e:c0:04:01:f2:d1:87: 6c:a2:bb:50:ec:7a:ad:ba:08:8a:8b:47:22:51:a3:a1:41:b2: b7:39:84:e3:b5:0b:1f:0a:d9:e3:e2:ec:4c:93:65:f6:46:69: 70:8c:a4:d5:f9:9c:fc:04:3d:38:ef:01:06:b7:ce:d3:1b:77: 8f:af:8f:9a:48:55:3a:26:18:ad:bf:66:c6:9d:74:f1:0e:58: 89:e1:6f:9f:e7:e9:b9:de:b8:b2:48:bb:13:db:dc:54:4a:e4: 9a:d8:fc:fc:ac:00:45:15:fd:bd:c7:17:08:3a:ed:ce:33:2e: b1:44:80:03:7f:ef:e5:d3:11:b8:01:50:1a:f6:91:65:55:41: 21:7a:ce:ba:eb:86:dc:36:ff:a5:4c:60:31:b5:ad:e3:36:45: 2c:59:62:b6:c5:fb:4d:8d:d5:ee:a5:0d:30:5b:2c:43:16:85: 43:fd:74:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU4MkExMTAvBgNVBAUTKDdBMEZEMDMyQkMyODEyMTBCM0M5NTIyQjQ3MTU4RDU2 Q0NERUE2MEEwHhcNMjUxMTA1MDQzODI5WhcNMjUxMTEyMDQzODI5WjAYMRYwFAYD VQQDEw02OTBhZDRjNS1lOWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygey/mflTBbL/u5cobk50Vwtnrid+7eqh6eSg5hmzDYrcvFsJOTqEHzvKNeV lcZTwwtZ9ri3bZa4ThhJXKL5bDCDlUr5hNZxoJikrL6pgfks4GRFQ9ndUDlT2uIS SS1kOJS9L/iHGs8WzoCA68iYDHJOe3SE0T6x6Vr885q9jiNc7Qand2qwFzebEMBv SvqGjmEyO+e7JurEl6BRIm3acansRwLRA/1DP+lLnbv8ZmiaPd5XnEY5Q8P/uK7U aLnAyW0JiXnfc6T92PKEHhJ04CNpPtANTnPyeJnBFt+RogWdwTW8YaIc76DqTiep 6VbBGgLyp0dpNb3NiKDH4YFRGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzi6tdz kpq5gSV+1c7239PeFPUIMB8GA1UdIwQYMBaAFHoP0DK8KBIQs8lSK0cVjVbM3qYK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTgyQS83OEQ3NDk2RURE RTgxMUVFQTNCMEU3MTNDNEY5QUUwMi9lZ19RTXJ3b0VoQ3p5VklyUnhXTlZzemVw Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VnX1FNcndvRWhDenlWSXJSeFdOVnN6ZXBnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTgyQS83OEQ3NDk2RURERTgxMUVFQTNCMEU3MTNDNEY5QUUwMi9lZ19RTXJ3b0Vo Q3p5VklyUnhXTlZzemVwZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkUsmDxlAscSGHe9KdXz/EHpAg3/8CyK4jS72dbyLEcrnCHuxzZNZz GN+7yTr4Nu9OgH7B0jMXfxnb5a9XjFo26ckGfEbbQFmnOUgbYsBOa+HwlY7ABAHy 0YdsortQ7HqtugiKi0ciUaOhQbK3OYTjtQsfCtnj4uxMk2X2RmlwjKTV+Zz8BD04 7wEGt87TG3ePr4+aSFU6Jhitv2bGnXTxDliJ4W+f5+m53riySLsT29xUSuSa2Pz8 rABFFf29xxcIOu3OMy6xRIADf+/l0xG4AVAa9pFlVUEhes6664bcNv+lTGAxta3j NkUsWWK2xftNjdXupQ0wWyxDFoVD/XTy -----END CERTIFICATE-----Generated at Wed Nov 5 12:06:12 2025 by rpki-client