$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft File: EZQLtYNEqix5xJU51t-RUZbv6CY.mft (raw, json) Hash identifier: JCFm/zkhulfGiikVstDrnbDJDTBMNKvbEOnTuo+49HM= Subject key identifier: 4B:54:E8:BA:91:0D:C7:2F:05:DF:74:11:68:58:25:E3:CB:2A:6D:6E Authority key identifier: 11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26 Certificate issuer: /CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826 Certificate serial: 07C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft Manifest number: 07BA Signing time: Wed 02 Jul 2025 14:48:44 +0000 Manifest this update: Wed 02 Jul 2025 14:48:44 +0000 Manifest next update: Wed 09 Jul 2025 14:48:44 +0000 Files and hashes: 1: EZQLtYNEqix5xJU51t-RUZbv6CY.crl (hash: 8hd/3naGpYAXWGN0ZU9jhPIT2GcvsTeK4eI+xvI0ueY=) 2: 5DE12890180311EBA311E181C4F9AE02.roa (hash: F8xinTLI0D4YZKI6rrpI2+NEMkL5MZGo2LQqsqaOFZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1984 (0x7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826 Validity Not Before: Jul 2 14:48:44 2025 GMT Not After : Jul 9 14:48:44 2025 GMT Subject: CN=686546cc-859f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:aa:2d:4f:03:1d:a1:3e:82:f4:ba:39:b7:57: b0:0c:ad:ad:8f:60:d9:31:f7:ba:71:15:d6:f7:51: ad:b7:be:52:9a:a2:43:dc:eb:6d:92:f8:ae:ba:3e: 1d:53:1c:05:25:d7:fc:d8:3e:e5:9a:13:64:75:8d: 45:12:d9:ac:9d:4e:e9:0b:48:f3:27:7d:f1:b4:97: f7:f8:31:60:1e:56:90:18:7c:f9:77:f0:c6:dd:75: e9:dc:5c:bd:50:bc:9b:6d:e3:e0:b3:ca:2a:a2:f8: f3:95:1a:38:86:9d:34:55:5e:fe:d0:65:da:d9:8c: 5d:2c:6c:1c:fa:81:fe:7f:8d:8e:a6:d9:34:49:2f: d4:ea:19:d7:38:6e:47:60:eb:c2:77:fa:be:c3:e6: 97:73:02:be:ef:f4:0a:36:33:fb:51:c0:c2:d3:99: 28:40:02:e7:64:be:f5:dd:77:c4:18:c3:c1:d3:2b: 6c:26:63:b3:62:ac:75:08:94:34:20:e4:06:f2:bd: e7:c6:f9:1a:8e:7d:4c:b9:d6:93:cc:a9:12:b3:7e: 1b:31:c9:8d:6b:67:b0:81:ae:b6:ef:94:d8:34:8f: da:a3:f2:c9:de:58:a3:b3:2f:6c:7c:f9:1f:e5:3f: 70:07:62:d6:40:41:77:88:1e:4c:f8:75:91:5c:f5: 34:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:54:E8:BA:91:0D:C7:2F:05:DF:74:11:68:58:25:E3:CB:2A:6D:6E X509v3 Authority Key Identifier: keyid:11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:04:a6:3c:7b:5a:b6:b5:0a:a5:7a:d9:b2:c9:1b:42:0a:20: 02:ac:6d:09:ea:b1:ad:4f:9f:9c:5c:aa:62:33:01:e5:66:dd: ec:c1:61:cb:8c:54:da:fd:7f:ef:1f:3e:4b:a9:d1:7f:ed:c1: 49:fe:bf:d6:57:31:c6:5d:17:f5:b1:b8:50:6e:39:a3:8e:2f: f9:68:e5:6d:cf:1b:31:74:d2:05:da:7e:16:3a:b8:bc:d2:50: cb:2d:94:6a:5e:7d:92:a0:63:e1:e6:46:ec:0d:d1:17:29:d8: f2:62:86:ac:35:66:3b:7a:d2:a7:05:e1:67:06:0e:05:00:0e: 93:82:d6:9e:f9:13:7a:7b:43:6a:be:b9:b1:9e:a3:4d:98:31: 4e:33:c4:11:02:96:a6:1b:65:58:e8:9d:eb:9f:08:ff:72:33: d6:54:97:8c:4d:60:bc:fa:1b:a2:92:d9:d6:62:0a:dc:51:fe: b9:c4:d0:be:f5:d3:d1:9a:89:0e:ff:a2:8b:39:fe:d4:b8:de: c9:9a:51:3c:e1:4f:ce:ec:95:26:a4:e0:b6:26:8e:f7:72:c0: 38:e2:48:68:17:82:65:81:19:16:aa:03:8e:4b:5d:f8:79:46: ba:7a:04:8a:7d:93:87:e9:c2:4c:43:4a:fd:b0:3e:a2:64:91: 68:35:7a:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDExOTQwQkI1ODM0NEFBMkM3OUM0OTUzOUQ2REY5MTUx OTZFRkU4MjYwHhcNMjUwNzAyMTQ0ODQ0WhcNMjUwNzA5MTQ0ODQ0WjAYMRYwFAYD VQQDEw02ODY1NDZjYy04NTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqotTwMdoT6C9Lo5t1ewDK2tj2DZMfe6cRXW91Gtt75SmqJD3Ottkviuuj4d UxwFJdf82D7lmhNkdY1FEtmsnU7pC0jzJ33xtJf3+DFgHlaQGHz5d/DG3XXp3Fy9 ULybbePgs8oqovjzlRo4hp00VV7+0GXa2YxdLGwc+oH+f42Optk0SS/U6hnXOG5H YOvCd/q+w+aXcwK+7/QKNjP7UcDC05koQALnZL713XfEGMPB0ytsJmOzYqx1CJQ0 IOQG8r3nxvkajn1MudaTzKkSs34bMcmNa2ewga6275TYNI/ao/LJ3lijsy9sfPkf 5T9wB2LWQEF3iB5M+HWRXPU0wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtU6LqR DccvBd90EWhYJePLKm1uMB8GA1UdIwQYMBaAFBGUC7WDRKosecSVOdbfkVGW7+gm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9DMEI1NzQyMjA5 NzUxMUVCOUQ0NjFCMzBDNEY5QUUwMi9FWlFMdFlORXFpeDV4SlU1MXQtUlVaYnY2 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VaUUx0WU5FcWl4NXhKVTUxdC1SVVpidjZDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC9DMEI1NzQyMjA5NzUxMUVCOUQ0NjFCMzBDNEY5QUUwMi9FWlFMdFlORXFp eDV4SlU1MXQtUlVaYnY2Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9BKY8e1q2tQqletmyyRtCCiACrG0J6rGtT5+cXKpiMwHlZt3swWHL jFTa/X/vHz5LqdF/7cFJ/r/WVzHGXRf1sbhQbjmjji/5aOVtzxsxdNIF2n4WOri8 0lDLLZRqXn2SoGPh5kbsDdEXKdjyYoasNWY7etKnBeFnBg4FAA6Tgtae+RN6e0Nq vrmxnqNNmDFOM8QRApamG2VY6J3rnwj/cjPWVJeMTWC8+huiktnWYgrcUf65xNC+ 9dPRmokO/6KLOf7UuN7JmlE84U/O7JUmpOC2Jo73csA44khoF4JlgRkWqgOOS134 eUa6egSKfZOH6cJMQ0r9sD6iZJFoNXpO -----END CERTIFICATE-----Generated at Fri Jul 4 00:43:21 2025 by rpki-client