$ rpki-client -vvf rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft File: eg_QMrwoEhCzyVIrRxWNVszepgo.mft (raw, json) Hash identifier: jOb3w0NAHgn38dRwuR7DJoLPxLlhBbwGClhXUNG4F2U= Subject key identifier: 0A:75:C4:36:04:FD:56:E8:34:73:00:24:D8:4C:8F:71:48:A5:F2:E5 Authority key identifier: 7A:0F:D0:32:BC:28:12:10:B3:C9:52:2B:47:15:8D:56:CC:DE:A6:0A Certificate issuer: /CN=A912582A/serialNumber=7A0FD032BC281210B3C9522B47158D56CCDEA60A Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft Manifest number: 0135 Signing time: Sun 19 Oct 2025 07:23:34 +0000 Manifest this update: Sun 19 Oct 2025 07:23:33 +0000 Manifest next update: Sun 26 Oct 2025 07:23:33 +0000 Files and hashes: 1: eg_QMrwoEhCzyVIrRxWNVszepgo.crl (hash: St184t7VHoDpnzC/p3Br6DSxEvOSkALjxddLzlslZME=) 2: 2BB37D0641FB11F0AF4AA817C4F9AE02.roa (hash: XEo3yH9798bRctchsMT2LIaz6q7sk6+vjG3539bWh8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.crl rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912582A, serialNumber=7A0FD032BC281210B3C9522B47158D56CCDEA60A Validity Not Before: Oct 19 07:23:33 2025 GMT Not After : Oct 26 07:23:33 2025 GMT Subject: CN=68f491f5-120f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e4:c9:55:63:2b:04:8d:68:7f:a9:24:3c:89: 83:8b:79:e9:c8:6e:2a:60:e4:36:17:e4:f5:6b:64: a7:2f:be:bb:74:e6:be:10:74:b0:fc:b7:fb:67:6d: fc:be:d0:51:d7:e2:bc:94:1e:a0:2a:b3:c2:c8:0d: b0:2f:17:ae:38:03:ac:d5:c5:d0:01:fd:96:56:e5: 83:13:10:a8:21:12:a8:33:8f:d4:cf:1d:98:27:0e: cc:7d:83:be:01:04:f1:c1:d6:fc:46:38:e3:c9:42: 55:bc:ed:f4:46:bc:ae:62:aa:6c:c0:ed:ee:3c:9a: 54:1f:26:05:94:db:3f:47:94:08:e7:fa:81:db:f7: 39:af:60:92:ba:1f:25:65:61:e1:6c:4f:62:f7:4b: e5:78:e7:74:00:41:57:98:3d:cd:73:27:0c:b3:1b: b6:b7:6d:c8:45:0a:9a:a5:88:5b:99:88:17:68:ec: 09:93:71:e9:4c:30:64:2d:46:3b:68:57:fa:fa:14: ce:56:ea:09:8a:80:15:eb:e0:ed:00:72:bd:28:ca: 9f:e6:98:d0:4c:6f:b2:a3:3c:f3:cd:25:b4:b5:35: 12:3f:02:54:46:7d:b5:df:7e:bd:60:f6:4c:e2:3f: 6a:7d:66:66:31:45:87:9d:21:90:f3:b5:28:cd:85: db:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:75:C4:36:04:FD:56:E8:34:73:00:24:D8:4C:8F:71:48:A5:F2:E5 X509v3 Authority Key Identifier: keyid:7A:0F:D0:32:BC:28:12:10:B3:C9:52:2B:47:15:8D:56:CC:DE:A6:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:3c:f5:42:ed:11:7b:cd:0d:bb:35:7f:b6:3b:38:1d:7b:74: bd:06:cc:26:8f:7e:a5:cb:44:4a:ef:34:24:2c:c2:3c:1b:5d: 5d:8b:cd:a5:64:06:9d:5f:f7:34:4c:8b:ee:8c:57:59:c3:f1: f9:6a:6f:d5:68:ef:31:71:fd:67:bd:99:8c:e2:97:11:b0:c3: 05:ff:b0:3b:d0:83:59:96:64:43:1e:ca:d9:ca:de:fa:6a:c2: 4b:c2:32:c6:02:84:78:88:cb:a2:2e:83:c1:06:47:5e:ba:73: a4:e2:3c:ca:2e:c0:c0:35:58:eb:1f:e9:5b:e5:4b:c2:3f:a1: 64:78:f1:77:02:d4:65:e5:03:8f:7a:c8:a6:3d:d4:7f:14:2b: 9c:ab:d5:dd:e3:a0:41:77:eb:cf:aa:d3:90:51:47:59:3c:94: 10:de:b0:b2:ac:95:c9:e6:eb:55:2f:e2:c3:68:f1:f0:fd:37: b5:04:17:f4:08:ce:de:e4:fd:9e:30:61:b8:38:64:d5:93:78: 58:4f:87:a6:bc:36:a1:4e:db:5a:b3:80:e8:a1:c7:24:50:0f: 4e:71:40:24:39:2b:70:78:67:60:2a:69:26:9e:ea:bf:80:2b: 57:8b:85:97:6f:9e:53:68:37:f6:bf:a4:1c:a1:9c:11:bc:89: e8:1f:2c:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU4MkExMTAvBgNVBAUTKDdBMEZEMDMyQkMyODEyMTBCM0M5NTIyQjQ3MTU4RDU2 Q0NERUE2MEEwHhcNMjUxMDE5MDcyMzMzWhcNMjUxMDI2MDcyMzMzWjAYMRYwFAYD VQQDEw02OGY0OTFmNS0xMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+TJVWMrBI1of6kkPImDi3npyG4qYOQ2F+T1a2SnL767dOa+EHSw/Lf7Z238 vtBR1+K8lB6gKrPCyA2wLxeuOAOs1cXQAf2WVuWDExCoIRKoM4/Uzx2YJw7MfYO+ AQTxwdb8RjjjyUJVvO30RryuYqpswO3uPJpUHyYFlNs/R5QI5/qB2/c5r2CSuh8l ZWHhbE9i90vleOd0AEFXmD3NcycMsxu2t23IRQqapYhbmYgXaOwJk3HpTDBkLUY7 aFf6+hTOVuoJioAV6+DtAHK9KMqf5pjQTG+yozzzzSW0tTUSPwJURn213369YPZM 4j9qfWZmMUWHnSGQ87UozYXbGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAp1xDYE /VboNHMAJNhMj3FIpfLlMB8GA1UdIwQYMBaAFHoP0DK8KBIQs8lSK0cVjVbM3qYK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTgyQS83OEQ3NDk2RURE RTgxMUVFQTNCMEU3MTNDNEY5QUUwMi9lZ19RTXJ3b0VoQ3p5VklyUnhXTlZzemVw Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VnX1FNcndvRWhDenlWSXJSeFdOVnN6ZXBnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTgyQS83OEQ3NDk2RURERTgxMUVFQTNCMEU3MTNDNEY5QUUwMi9lZ19RTXJ3b0Vo Q3p5VklyUnhXTlZzemVwZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzPPVC7RF7zQ27NX+2Ozgde3S9Bswmj36ly0RK7zQkLMI8G11di82l ZAadX/c0TIvujFdZw/H5am/VaO8xcf1nvZmM4pcRsMMF/7A70INZlmRDHsrZyt76 asJLwjLGAoR4iMuiLoPBBkdeunOk4jzKLsDANVjrH+lb5UvCP6FkePF3AtRl5QOP esimPdR/FCucq9Xd46BBd+vPqtOQUUdZPJQQ3rCyrJXJ5utVL+LDaPHw/Te1BBf0 CM7e5P2eMGG4OGTVk3hYT4emvDahTttas4DoocckUA9OcUAkOStweGdgKmkmnuq/ gCtXi4WXb55TaDf2v6QcoZwRvInoHyxj -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:27 2025 by rpki-client