$ rpki-client -vvf rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft File: eg_QMrwoEhCzyVIrRxWNVszepgo.mft (raw, json) Hash identifier: ekavLOnwUdNd1Hlf8Kza+5HQPbQqYx0NBaZQV66AwX0= Subject key identifier: 54:0B:74:32:09:1F:C3:D5:5A:75:66:E7:49:67:29:78:03:34:3E:0C Authority key identifier: 7A:0F:D0:32:BC:28:12:10:B3:C9:52:2B:47:15:8D:56:CC:DE:A6:0A Certificate issuer: /CN=A912582A/serialNumber=7A0FD032BC281210B3C9522B47158D56CCDEA60A Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft Manifest number: 013C Signing time: Mon 03 Nov 2025 04:29:43 +0000 Manifest this update: Mon 03 Nov 2025 04:29:43 +0000 Manifest next update: Mon 10 Nov 2025 04:29:43 +0000 Files and hashes: 1: eg_QMrwoEhCzyVIrRxWNVszepgo.crl (hash: BJNZkz8RmHl5yW42yW9Nuo7UkrBA2gKBoVqviQl0Y/c=) 2: 2BB37D0641FB11F0AF4AA817C4F9AE02.roa (hash: XEo3yH9798bRctchsMT2LIaz6q7sk6+vjG3539bWh8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.crl rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912582A, serialNumber=7A0FD032BC281210B3C9522B47158D56CCDEA60A Validity Not Before: Nov 3 04:29:43 2025 GMT Not After : Nov 10 04:29:43 2025 GMT Subject: CN=69082fb7-4f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c7:0e:9d:60:1d:6b:7e:41:1e:54:4e:1a:70: 96:e2:22:a4:0e:b8:80:d1:50:cd:21:03:03:11:df: 36:c8:3a:b2:d3:38:02:18:54:4f:2d:56:e0:a6:55: 50:12:c5:63:98:85:5a:37:31:16:d3:e6:7e:d6:94: 15:7c:0c:d8:c0:ba:66:8e:84:76:e3:25:0e:ab:0f: 76:9e:b4:17:1f:9d:2f:d3:73:84:6d:5b:56:34:05: 70:96:02:63:cd:bf:af:1e:e8:5e:55:c3:a7:5e:30: 63:8c:d1:2b:e6:d7:d0:3d:a6:33:26:26:a0:a8:ee: 99:95:41:d6:37:99:f9:da:c6:ab:bb:be:bc:29:ed: 21:b3:6f:ee:17:d4:1d:23:17:2d:3d:64:dd:38:70: b6:58:4e:9e:bb:3b:35:f6:84:ae:48:e9:5f:c5:ba: 04:29:35:f6:1a:1c:b5:61:59:87:a8:6d:f3:72:25: 89:9a:8d:4b:a5:c2:d6:1d:e4:55:a6:00:b0:74:3e: 51:2e:93:48:78:a3:1b:02:98:a3:a7:50:d7:bc:94: 50:7d:99:aa:04:5d:b3:61:04:da:a2:33:79:12:09: 58:53:4d:c1:45:b0:35:6c:5e:27:c4:d6:fc:3c:c3: 6f:03:9e:25:2f:a4:82:d6:49:73:81:cd:ec:cd:7d: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0B:74:32:09:1F:C3:D5:5A:75:66:E7:49:67:29:78:03:34:3E:0C X509v3 Authority Key Identifier: keyid:7A:0F:D0:32:BC:28:12:10:B3:C9:52:2B:47:15:8D:56:CC:DE:A6:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:a0:f9:30:00:3d:cd:49:42:e0:75:c7:61:58:dc:57:f9:5c: 5f:39:48:7c:af:00:f8:83:30:18:81:02:8d:b2:09:a2:42:95: b5:f8:a9:58:25:d5:b7:dd:dd:98:d5:60:d2:f3:21:6e:03:25: 30:14:fe:d6:9a:04:d8:1b:61:1b:0f:8a:8e:e5:f2:5c:f5:cb: 4e:bd:c9:60:a0:c1:e0:9a:47:5a:f9:7c:09:4c:04:ab:59:58: 21:13:5c:68:89:95:00:5e:9f:83:fa:80:c3:9e:d5:fe:30:de: 1f:31:2d:78:f1:3c:ab:fd:c5:6e:16:2d:a4:ee:ea:bb:39:b2: 3b:91:55:b4:c4:4e:6d:ad:8c:75:f1:4f:e3:f8:4c:6b:97:d3: a4:6b:8a:e7:6c:75:3f:91:57:14:6c:65:15:5c:4d:c7:c9:61: 05:e2:2f:db:2f:01:cb:79:c2:0a:50:6e:71:36:04:20:a5:a2: 8f:dd:4a:6f:35:87:6a:d8:68:98:e7:53:68:82:b8:c6:a1:1f: 00:9f:7f:36:d3:78:2e:e0:95:ee:cc:c2:a1:6e:e6:47:b0:97: d6:fa:70:cc:4a:d7:b4:fd:e4:2b:7d:04:17:df:4d:77:9e:1d: 5f:6e:65:4b:62:03:63:80:0c:07:35:69:13:08:2f:03:1b:1f: 43:e3:c4:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU4MkExMTAvBgNVBAUTKDdBMEZEMDMyQkMyODEyMTBCM0M5NTIyQjQ3MTU4RDU2 Q0NERUE2MEEwHhcNMjUxMTAzMDQyOTQzWhcNMjUxMTEwMDQyOTQzWjAYMRYwFAYD VQQDEw02OTA4MmZiNy00ZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08cOnWAda35BHlROGnCW4iKkDriA0VDNIQMDEd82yDqy0zgCGFRPLVbgplVQ EsVjmIVaNzEW0+Z+1pQVfAzYwLpmjoR24yUOqw92nrQXH50v03OEbVtWNAVwlgJj zb+vHuheVcOnXjBjjNEr5tfQPaYzJiagqO6ZlUHWN5n52saru768Ke0hs2/uF9Qd IxctPWTdOHC2WE6euzs19oSuSOlfxboEKTX2Ghy1YVmHqG3zciWJmo1LpcLWHeRV pgCwdD5RLpNIeKMbApijp1DXvJRQfZmqBF2zYQTaojN5EglYU03BRbA1bF4nxNb8 PMNvA54lL6SC1klzgc3szX26GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQLdDIJ H8PVWnVm50lnKXgDND4MMB8GA1UdIwQYMBaAFHoP0DK8KBIQs8lSK0cVjVbM3qYK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTgyQS83OEQ3NDk2RURE RTgxMUVFQTNCMEU3MTNDNEY5QUUwMi9lZ19RTXJ3b0VoQ3p5VklyUnhXTlZzemVw Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VnX1FNcndvRWhDenlWSXJSeFdOVnN6ZXBnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTgyQS83OEQ3NDk2RURERTgxMUVFQTNCMEU3MTNDNEY5QUUwMi9lZ19RTXJ3b0Vo Q3p5VklyUnhXTlZzemVwZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHoPkwAD3NSULgdcdhWNxX+VxfOUh8rwD4gzAYgQKNsgmiQpW1+KlY JdW33d2Y1WDS8yFuAyUwFP7WmgTYG2EbD4qO5fJc9ctOvclgoMHgmkda+XwJTASr WVghE1xoiZUAXp+D+oDDntX+MN4fMS148Tyr/cVuFi2k7uq7ObI7kVW0xE5trYx1 8U/j+Exrl9Oka4rnbHU/kVcUbGUVXE3HyWEF4i/bLwHLecIKUG5xNgQgpaKP3Upv NYdq2GiY51NogrjGoR8An38203gu4JXuzMKhbuZHsJfW+nDMSte0/eQrfQQX3013 nh1fbmVLYgNjgAwHNWkTCC8DGx9D48Sh -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:46 2025 by rpki-client