$ rpki-client -vvf rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft File: eg_QMrwoEhCzyVIrRxWNVszepgo.mft (raw, json) Hash identifier: aoVk3FdoyLumcq+5eeEtEUXa5f4ufyEpchXBfzjBdPU= Subject key identifier: C9:93:92:85:A3:5E:5C:D1:58:46:90:77:2E:B8:F2:B1:96:78:E7:C8 Authority key identifier: 7A:0F:D0:32:BC:28:12:10:B3:C9:52:2B:47:15:8D:56:CC:DE:A6:0A Certificate issuer: /CN=A912582A/serialNumber=7A0FD032BC281210B3C9522B47158D56CCDEA60A Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft Manifest number: E0 Signing time: Thu 15 May 2025 04:50:00 +0000 Manifest this update: Thu 15 May 2025 04:49:59 +0000 Manifest next update: Thu 22 May 2025 04:49:59 +0000 Files and hashes: 1: eg_QMrwoEhCzyVIrRxWNVszepgo.crl (hash: 9sfk4siOV3OjFT3U0bNwYiXbRV52WKLFMN9y2HWvl1k=) 2: AEC87CF641F111EFAA3E956BC4F9AE02.roa (hash: mXUMVXFLrrSWvJCpuu18ijJfWusFAjCWTTEEiobIVgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.crl rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912582A, serialNumber=7A0FD032BC281210B3C9522B47158D56CCDEA60A Validity Not Before: May 15 04:49:59 2025 GMT Not After : May 22 04:49:59 2025 GMT Subject: CN=68257278-0816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bf:8f:72:5c:70:e6:1a:08:ab:78:5d:3b:20: 25:64:77:7e:ec:2f:e8:6f:db:59:84:3e:c5:bf:46: 6e:0b:8a:de:1c:aa:9d:ac:bd:58:38:56:43:86:66: d8:91:ad:86:d9:3f:ff:5f:31:d9:bf:46:4f:4d:2c: 01:04:09:b3:1e:60:80:60:97:de:44:be:37:56:47: e2:d4:0c:aa:cc:ab:a8:f8:2c:50:71:10:1d:10:46: 72:6a:a2:6f:af:9e:ab:88:52:94:9b:35:c6:16:51: 79:53:7a:6d:10:6a:eb:e3:80:d6:40:47:c2:ec:1c: f7:3a:e0:5a:b8:ae:72:23:0f:69:04:82:bb:99:fc: ed:8c:0e:69:2e:45:23:cb:1f:62:e0:f6:fc:89:ee: a4:a5:88:1f:15:90:78:60:65:74:c7:06:21:e8:09: 9d:c9:68:99:27:ed:1e:90:1d:80:a6:27:08:22:49: ca:38:a2:6a:9c:b2:73:20:ce:95:d6:59:c6:f9:4b: e5:4f:1d:4f:27:9b:ca:11:9e:c0:c6:09:7e:e9:29: 5e:79:ce:1c:ff:25:c9:25:5b:49:1c:22:27:b4:8c: ad:c2:d4:df:7c:dc:db:a6:9a:7b:80:e6:85:77:74: 6f:de:cb:e6:6e:5a:d7:0f:31:fe:c7:00:1b:ca:90: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:93:92:85:A3:5E:5C:D1:58:46:90:77:2E:B8:F2:B1:96:78:E7:C8 X509v3 Authority Key Identifier: keyid:7A:0F:D0:32:BC:28:12:10:B3:C9:52:2B:47:15:8D:56:CC:DE:A6:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:6a:3c:82:e0:da:2a:1b:27:ce:45:b6:88:fd:9d:47:cb:95: c0:99:f3:fb:3c:9c:0b:bb:f6:61:1a:28:a2:02:ce:33:d0:32: e1:e9:c6:42:fb:d3:67:27:8d:d5:a5:23:9e:df:5d:df:51:d8: 12:61:19:18:cc:33:48:22:86:ba:18:d1:72:25:f6:6b:00:86: fa:f4:b5:6d:6e:fa:0c:68:05:2b:54:09:f4:8a:76:c4:07:b0: ec:af:9a:d5:09:3d:ee:9e:80:fa:c2:77:4c:f5:98:2a:9a:63: 11:c6:bc:8a:47:b7:ad:a8:6e:57:22:e9:0b:cc:78:c7:88:bc: 67:e7:53:e4:bb:73:00:e9:9a:b1:c1:5f:43:df:b6:bc:01:f8: d5:23:90:45:a2:92:ed:9a:66:cb:1e:c6:a9:6b:e6:f0:ee:23: 49:19:4a:c0:c4:f0:01:6b:a2:5e:c5:5c:14:56:90:a0:da:61: d3:92:6f:91:22:4c:bd:03:00:9d:7c:76:16:fc:a3:21:26:2d: 2f:8f:c5:05:00:46:e5:03:01:a8:36:58:a7:54:9d:36:94:f5: e1:51:13:ae:a4:bf:e9:19:66:18:17:2e:76:0b:67:b7:06:73: 03:e0:d3:9a:d0:c5:3a:87:a9:07:78:aa:d4:7c:29:c2:93:46: 31:a9:78:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU4MkExMTAvBgNVBAUTKDdBMEZEMDMyQkMyODEyMTBCM0M5NTIyQjQ3MTU4RDU2 Q0NERUE2MEEwHhcNMjUwNTE1MDQ0OTU5WhcNMjUwNTIyMDQ0OTU5WjAYMRYwFAYD VQQDEw02ODI1NzI3OC0wODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0L+Pclxw5hoIq3hdOyAlZHd+7C/ob9tZhD7Fv0ZuC4reHKqdrL1YOFZDhmbY ka2G2T//XzHZv0ZPTSwBBAmzHmCAYJfeRL43Vkfi1AyqzKuo+CxQcRAdEEZyaqJv r56riFKUmzXGFlF5U3ptEGrr44DWQEfC7Bz3OuBauK5yIw9pBIK7mfztjA5pLkUj yx9i4Pb8ie6kpYgfFZB4YGV0xwYh6AmdyWiZJ+0ekB2ApicIIknKOKJqnLJzIM6V 1lnG+UvlTx1PJ5vKEZ7Axgl+6Sleec4c/yXJJVtJHCIntIytwtTffNzbppp7gOaF d3Rv3svmblrXDzH+xwAbypByVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmTkoWj XlzRWEaQdy648rGWeOfIMB8GA1UdIwQYMBaAFHoP0DK8KBIQs8lSK0cVjVbM3qYK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTgyQS83OEQ3NDk2RURE RTgxMUVFQTNCMEU3MTNDNEY5QUUwMi9lZ19RTXJ3b0VoQ3p5VklyUnhXTlZzemVw Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VnX1FNcndvRWhDenlWSXJSeFdOVnN6ZXBnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTgyQS83OEQ3NDk2RURERTgxMUVFQTNCMEU3MTNDNEY5QUUwMi9lZ19RTXJ3b0Vo Q3p5VklyUnhXTlZzemVwZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASajyC4NoqGyfORbaI/Z1Hy5XAmfP7PJwLu/ZhGiiiAs4z0DLh6cZC +9NnJ43VpSOe313fUdgSYRkYzDNIIoa6GNFyJfZrAIb69LVtbvoMaAUrVAn0inbE B7Dsr5rVCT3unoD6wndM9ZgqmmMRxryKR7etqG5XIukLzHjHiLxn51Pku3MA6Zqx wV9D37a8AfjVI5BFopLtmmbLHsapa+bw7iNJGUrAxPABa6JexVwUVpCg2mHTkm+R Iky9AwCdfHYW/KMhJi0vj8UFAEblAwGoNlinVJ02lPXhUROupL/pGWYYFy52C2e3 BnMD4NOa0MU6h6kHeKrUfCnCk0YxqXh9 -----END CERTIFICATE-----Generated at Sat May 17 04:13:54 2025 by rpki-client