$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft File: EZQLtYNEqix5xJU51t-RUZbv6CY.mft (raw, json) Hash identifier: p5Iq/Go/z8CwjQlNpKd31QfE0Cy/2Bz7/AEFfI1X5X4= Subject key identifier: EA:7D:EE:04:FE:AC:78:FC:ED:5E:FA:A3:2F:22:40:DB:92:E4:38:AD Authority key identifier: 11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26 Certificate issuer: /CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826 Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft Manifest number: 07AB Signing time: Mon 02 Jun 2025 14:47:58 +0000 Manifest this update: Mon 02 Jun 2025 14:47:58 +0000 Manifest next update: Mon 09 Jun 2025 14:47:58 +0000 Files and hashes: 1: EZQLtYNEqix5xJU51t-RUZbv6CY.crl (hash: FZVl/VwZK3G0lI9xOH6gofsjve563b/iaT0sAV9GQk4=) 2: 5DE12890180311EBA311E181C4F9AE02.roa (hash: F8xinTLI0D4YZKI6rrpI2+NEMkL5MZGo2LQqsqaOFZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826 Validity Not Before: Jun 2 14:47:58 2025 GMT Not After : Jun 9 14:47:58 2025 GMT Subject: CN=683db99e-4f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:52:18:57:9d:da:37:53:d1:bb:72:37:f7:fa: de:a0:f4:68:2c:88:c5:2e:7f:da:27:74:44:b2:ec: 26:c7:3c:30:f6:1f:2a:ec:40:ef:70:f1:42:b8:57: 03:0d:47:29:7a:f0:79:2f:f5:aa:4e:a4:f3:16:60: 51:1d:43:ac:e8:6f:34:67:5a:7b:98:8b:91:71:7a: 7d:25:1a:b1:61:62:03:5f:0d:e8:8b:55:54:06:33: 89:37:ea:55:ab:46:67:18:11:60:9a:83:96:2f:18: 32:bb:a0:ce:61:34:ea:53:57:b4:25:d0:b1:2d:c3: 5b:d2:66:c2:87:b6:67:ad:84:a3:28:ed:ed:9c:98: 1d:76:b3:88:00:e4:ee:73:35:fd:b9:47:87:98:be: 82:18:68:9e:27:c3:08:3c:61:ce:2d:75:b5:bf:0b: 9f:77:a1:7c:bb:47:6c:40:51:b2:59:18:6e:88:06: bc:4c:eb:f4:5c:fd:65:56:56:6b:b6:15:46:9d:74: 2b:ef:1b:dc:0c:79:8a:41:d7:4a:2f:5d:f3:62:7b: aa:79:b6:d7:ee:61:70:38:77:d3:32:6d:f0:bc:79: 3f:b5:5f:66:86:62:62:27:4c:2a:ed:b9:26:d7:92: 36:23:68:b9:1a:34:5b:8c:fe:e7:ab:74:a3:e0:8c: 17:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7D:EE:04:FE:AC:78:FC:ED:5E:FA:A3:2F:22:40:DB:92:E4:38:AD X509v3 Authority Key Identifier: keyid:11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f3:56:78:e2:13:d1:79:32:e9:4d:50:1e:60:3f:79:22:b9: f2:8f:06:f4:a2:1b:97:21:6e:24:cb:0d:f6:fe:58:6a:f1:95: ad:e4:fe:83:ee:09:9a:be:82:29:61:63:96:ac:a8:11:e6:a2: a6:ee:34:99:51:f6:e6:bb:b0:85:4e:09:50:12:87:da:1c:b6: 59:ef:20:19:56:d7:22:61:90:19:9d:31:2a:9f:00:9f:4b:fa: 7e:1d:62:01:1e:fe:13:e9:90:58:6f:ac:9f:c8:0a:f4:40:85: f5:b0:ba:0a:08:cf:ea:af:41:ee:79:fd:e3:b2:0d:af:f3:57: 48:e9:5e:be:b5:2a:1b:f1:46:72:c6:97:3e:72:48:4a:a4:4d: 91:cc:b1:79:ed:21:ab:31:61:69:f7:a4:8c:07:cb:36:6c:69: 74:99:2b:5c:2d:21:72:d3:6a:0f:7c:53:5b:a0:2a:9d:97:08: 6c:31:3c:13:0e:91:c5:68:79:e2:0b:78:97:fb:75:c1:a6:b5: 62:f1:5f:d5:56:6e:75:5a:42:89:cd:0d:df:66:3a:a3:12:49: fe:01:a5:08:ac:e6:8d:89:10:2c:3f:cd:0e:a8:d8:d9:3a:15: da:7f:4c:38:0e:5f:24:f2:99:26:a9:da:b8:90:0f:a7:75:12: 0c:f1:7d:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDExOTQwQkI1ODM0NEFBMkM3OUM0OTUzOUQ2REY5MTUx OTZFRkU4MjYwHhcNMjUwNjAyMTQ0NzU4WhcNMjUwNjA5MTQ0NzU4WjAYMRYwFAYD VQQDEw02ODNkYjk5ZS00ZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VIYV53aN1PRu3I39/reoPRoLIjFLn/aJ3REsuwmxzww9h8q7EDvcPFCuFcD DUcpevB5L/WqTqTzFmBRHUOs6G80Z1p7mIuRcXp9JRqxYWIDXw3oi1VUBjOJN+pV q0ZnGBFgmoOWLxgyu6DOYTTqU1e0JdCxLcNb0mbCh7ZnrYSjKO3tnJgddrOIAOTu czX9uUeHmL6CGGieJ8MIPGHOLXW1vwufd6F8u0dsQFGyWRhuiAa8TOv0XP1lVlZr thVGnXQr7xvcDHmKQddKL13zYnuqebbX7mFwOHfTMm3wvHk/tV9mhmJiJ0wq7bkm 15I2I2i5GjRbjP7nq3Sj4IwXwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOp97gT+ rHj87V76oy8iQNuS5DitMB8GA1UdIwQYMBaAFBGUC7WDRKosecSVOdbfkVGW7+gm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9DMEI1NzQyMjA5 NzUxMUVCOUQ0NjFCMzBDNEY5QUUwMi9FWlFMdFlORXFpeDV4SlU1MXQtUlVaYnY2 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VaUUx0WU5FcWl4NXhKVTUxdC1SVVpidjZDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC9DMEI1NzQyMjA5NzUxMUVCOUQ0NjFCMzBDNEY5QUUwMi9FWlFMdFlORXFp eDV4SlU1MXQtUlVaYnY2Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC81Z44hPReTLpTVAeYD95Irnyjwb0ohuXIW4kyw32/lhq8ZWt5P6D 7gmavoIpYWOWrKgR5qKm7jSZUfbmu7CFTglQEofaHLZZ7yAZVtciYZAZnTEqnwCf S/p+HWIBHv4T6ZBYb6yfyAr0QIX1sLoKCM/qr0Huef3jsg2v81dI6V6+tSob8UZy xpc+ckhKpE2RzLF57SGrMWFp96SMB8s2bGl0mStcLSFy02oPfFNboCqdlwhsMTwT DpHFaHniC3iX+3XBprVi8V/VVm51WkKJzQ3fZjqjEkn+AaUIrOaNiRAsP80OqNjZ OhXaf0w4Dl8k8pkmqdq4kA+ndRIM8X0J -----END CERTIFICATE-----Generated at Mon Jun 2 21:59:28 2025 by rpki-client