$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft File: EZQLtYNEqix5xJU51t-RUZbv6CY.mft (raw, json) Hash identifier: aBv0sDE55/grdGcvdF9IqDRxckKa8qiAYJcKMegQu8k= Subject key identifier: 87:40:F0:52:20:52:86:E2:8F:25:B5:AA:EA:30:FA:AE:0E:90:4F:33 Authority key identifier: 11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26 Certificate issuer: /CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826 Certificate serial: 07C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft Manifest number: 07C3 Signing time: Sun 20 Jul 2025 14:47:40 +0000 Manifest this update: Sun 20 Jul 2025 14:47:39 +0000 Manifest next update: Sun 27 Jul 2025 14:47:39 +0000 Files and hashes: 1: EZQLtYNEqix5xJU51t-RUZbv6CY.crl (hash: utL8Ku7Xl1fuq1DLsx5LMkNqAXYm8CI7qRYgu2gWNTI=) 2: 5DE12890180311EBA311E181C4F9AE02.roa (hash: F8xinTLI0D4YZKI6rrpI2+NEMkL5MZGo2LQqsqaOFZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1993 (0x7c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826 Validity Not Before: Jul 20 14:47:39 2025 GMT Not After : Jul 27 14:47:39 2025 GMT Subject: CN=687d018b-606f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6e:1a:ce:e3:37:1b:ca:42:9f:9b:33:22:23: f7:fb:83:d3:56:fc:c9:d5:85:22:58:d6:61:85:06: f9:63:88:ba:99:fa:ff:5b:1b:6b:96:73:c0:ae:b5: e8:3a:54:3f:7e:1b:a3:bb:08:f2:c5:16:1a:c1:ff: 94:e8:f9:f8:f6:26:d8:52:17:c3:81:76:cf:b1:1f: 66:93:83:98:18:07:ed:88:05:05:32:92:9a:b7:15: c4:0f:77:7c:c8:b4:1a:bf:fa:f1:2c:0b:7c:58:f5: 9a:6a:78:b4:61:f3:dc:bb:b4:34:aa:ca:3d:5e:3e: fb:2f:85:74:a8:9d:89:39:fd:29:70:0c:1d:94:61: a6:ad:c7:de:5b:34:83:9f:16:33:93:cf:2a:20:e3: 51:5b:c5:7e:06:06:63:b1:84:b6:0d:e4:dc:5c:55: d4:74:94:e1:71:20:71:83:33:5c:e3:a0:d5:a0:1e: 93:44:c3:1e:f4:4a:f1:17:88:54:05:d1:28:f1:ca: 61:78:bf:2c:92:82:9c:bf:5c:6b:d4:e8:da:c7:85: 5f:a9:34:13:82:17:7c:0d:58:76:95:80:fa:99:08: a1:70:21:2b:c8:53:11:4d:a5:60:d0:ae:5e:87:c4: a9:e4:6e:24:45:10:70:22:05:ac:33:a9:98:3a:bf: 0b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:40:F0:52:20:52:86:E2:8F:25:B5:AA:EA:30:FA:AE:0E:90:4F:33 X509v3 Authority Key Identifier: keyid:11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:5e:e0:32:cc:5c:2a:be:00:e1:d0:ae:fd:64:f3:ea:49:40: c9:8d:bb:bd:04:ee:74:4a:6e:e2:77:8d:55:6f:89:26:69:e0: e7:b9:39:37:d3:c4:0d:13:66:8a:3e:45:f9:c5:1b:cb:3f:e9: 58:65:0e:ef:f7:15:d3:93:5d:64:60:89:c2:2c:f7:f1:c4:97: 39:9a:f6:d8:cd:4c:6e:80:12:a1:52:8f:d1:ee:59:5e:5a:2c: e0:59:8e:2c:9e:87:49:4d:04:d2:a7:60:28:34:ea:84:7d:90: 50:89:f8:ed:23:c0:7d:f2:76:ec:42:ae:ea:c7:f7:fa:b3:49: e8:e1:d4:3f:9a:c3:28:b3:2c:b9:6a:27:1d:15:e1:84:3e:63: 38:fe:78:ca:9c:95:03:ca:e1:5d:67:47:ad:e1:44:c3:5e:c1: 0e:fa:03:ea:90:f7:ae:0a:d6:43:9d:c3:eb:a8:1f:cb:8d:f5: 85:44:2c:d8:eb:f3:5c:27:35:56:35:7a:4e:2f:8b:f9:11:1e: 52:ba:fb:66:57:ca:9d:fb:b8:14:c8:b5:ac:73:70:8a:af:7b: cb:7e:18:88:d6:f8:2d:52:6a:49:11:7a:75:fb:c6:ff:28:7d: ef:19:eb:55:b9:e3:6b:43:e1:35:c7:11:e7:c8:7a:05:bb:9c: b9:d8:b1:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDExOTQwQkI1ODM0NEFBMkM3OUM0OTUzOUQ2REY5MTUx OTZFRkU4MjYwHhcNMjUwNzIwMTQ0NzM5WhcNMjUwNzI3MTQ0NzM5WjAYMRYwFAYD VQQDEw02ODdkMDE4Yi02MDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzW4azuM3G8pCn5szIiP3+4PTVvzJ1YUiWNZhhQb5Y4i6mfr/WxtrlnPArrXo OlQ/fhujuwjyxRYawf+U6Pn49ibYUhfDgXbPsR9mk4OYGAftiAUFMpKatxXED3d8 yLQav/rxLAt8WPWaani0YfPcu7Q0qso9Xj77L4V0qJ2JOf0pcAwdlGGmrcfeWzSD nxYzk88qIONRW8V+BgZjsYS2DeTcXFXUdJThcSBxgzNc46DVoB6TRMMe9ErxF4hU BdEo8cpheL8skoKcv1xr1Ojax4VfqTQTghd8DVh2lYD6mQihcCEryFMRTaVg0K5e h8Sp5G4kRRBwIgWsM6mYOr8LYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdA8FIg UobijyW1quow+q4OkE8zMB8GA1UdIwQYMBaAFBGUC7WDRKosecSVOdbfkVGW7+gm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9DMEI1NzQyMjA5 NzUxMUVCOUQ0NjFCMzBDNEY5QUUwMi9FWlFMdFlORXFpeDV4SlU1MXQtUlVaYnY2 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VaUUx0WU5FcWl4NXhKVTUxdC1SVVpidjZDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC9DMEI1NzQyMjA5NzUxMUVCOUQ0NjFCMzBDNEY5QUUwMi9FWlFMdFlORXFp eDV4SlU1MXQtUlVaYnY2Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkXuAyzFwqvgDh0K79ZPPqSUDJjbu9BO50Sm7id41Vb4kmaeDnuTk3 08QNE2aKPkX5xRvLP+lYZQ7v9xXTk11kYInCLPfxxJc5mvbYzUxugBKhUo/R7lle WizgWY4snodJTQTSp2AoNOqEfZBQifjtI8B98nbsQq7qx/f6s0no4dQ/msMosyy5 aicdFeGEPmM4/njKnJUDyuFdZ0et4UTDXsEO+gPqkPeuCtZDncPrqB/LjfWFRCzY 6/NcJzVWNXpOL4v5ER5SuvtmV8qd+7gUyLWsc3CKr3vLfhiI1vgtUmpJEXp1+8b/ KH3vGetVueNrQ+E1xxHnyHoFu5y52LER -----END CERTIFICATE-----Generated at Sun Jul 20 19:20:44 2025 by rpki-client