$ rpki-client -vvf rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft File: eg_QMrwoEhCzyVIrRxWNVszepgo.mft (raw, json) Hash identifier: SdT/gpXI6tFki3+fBIXlueZP7ln1M1KGK8mrnhhu/aE= Subject key identifier: BF:1C:6F:84:7C:B0:2F:21:A5:27:7A:79:A2:5C:3B:8C:A4:A6:4C:1B Authority key identifier: 7A:0F:D0:32:BC:28:12:10:B3:C9:52:2B:47:15:8D:56:CC:DE:A6:0A Certificate issuer: /CN=A912582A/serialNumber=7A0FD032BC281210B3C9522B47158D56CCDEA60A Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft Manifest number: D6 Signing time: Fri 25 Apr 2025 04:39:41 +0000 Manifest this update: Fri 25 Apr 2025 04:39:41 +0000 Manifest next update: Fri 02 May 2025 04:39:41 +0000 Files and hashes: 1: eg_QMrwoEhCzyVIrRxWNVszepgo.crl (hash: fptGS6hXiyCiiGELAzXNoJqqfzer5g5FZDcYC+QbeBI=) 2: AEC87CF641F111EFAA3E956BC4F9AE02.roa (hash: mXUMVXFLrrSWvJCpuu18ijJfWusFAjCWTTEEiobIVgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.crl rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912582A, serialNumber=7A0FD032BC281210B3C9522B47158D56CCDEA60A Validity Not Before: Apr 25 04:39:41 2025 GMT Not After : May 2 04:39:41 2025 GMT Subject: CN=680b120d-ce29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:83:41:a6:2c:b1:79:00:d2:ad:df:cc:7b:19: 02:ee:2a:20:03:ec:18:46:67:5a:f9:c6:14:ff:5d: 70:2f:32:d3:51:df:ab:ec:32:cf:53:16:07:8d:70: 1b:ba:e8:e6:11:95:e8:f5:07:1e:25:d4:77:bd:96: a5:b1:ab:39:08:01:ce:bc:3d:88:63:b9:eb:8f:6e: f5:fc:79:a6:15:e9:fd:d4:74:dd:5b:1f:a5:57:89: 31:08:5d:51:29:5c:ef:f2:a0:5a:4d:9e:e2:54:f4: 0e:f0:38:4a:9a:25:8c:19:0f:e6:4a:5d:f1:6b:92: ed:97:a8:f4:33:d1:1d:ce:9e:7a:c1:27:73:13:1e: 96:26:74:d6:14:92:99:63:44:ee:e6:9a:9d:b9:f2: 8c:9f:90:4a:78:a1:4d:ed:5b:14:32:cb:c7:f1:70: 2d:c3:15:75:25:fe:dc:18:d5:53:2d:40:aa:f2:c9: db:69:75:a7:6e:93:78:a2:22:af:82:47:87:41:48: 6e:50:ca:18:19:55:fb:f4:51:e7:47:f8:00:12:47: 70:d9:ac:68:e3:a6:9c:18:f5:7b:3a:3a:5e:fd:cf: d0:a0:9c:99:21:bf:b4:7e:7e:0d:c9:e6:2b:f8:e5: 13:4f:38:85:f5:1d:a3:3a:b4:f8:81:a8:f7:70:f0: 9c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1C:6F:84:7C:B0:2F:21:A5:27:7A:79:A2:5C:3B:8C:A4:A6:4C:1B X509v3 Authority Key Identifier: keyid:7A:0F:D0:32:BC:28:12:10:B3:C9:52:2B:47:15:8D:56:CC:DE:A6:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:76:fd:49:ce:54:e5:d7:cc:fe:09:64:39:b4:77:db:d6:41: 16:91:46:54:31:a7:05:e5:f2:01:95:42:b1:0e:dc:3e:51:63: bf:5d:55:65:4f:25:80:d3:e7:e0:c7:dc:e0:b7:dc:c5:05:9c: f4:3a:78:61:03:f7:4f:72:b0:98:b5:c3:7c:97:ad:cd:16:43: 6a:0e:d6:b6:de:77:0f:81:14:17:75:4e:b2:2d:68:92:b0:76: 06:86:14:e5:ff:df:e4:3e:ee:f7:1a:9c:67:83:c0:88:e0:14: 89:3a:5a:f3:15:fd:47:99:6f:d3:9c:a5:43:63:8b:b5:3a:fc: ef:ac:ae:cf:c9:08:9c:87:20:ef:64:4e:c8:45:43:c4:e7:3f: f8:8e:b9:1d:22:40:53:a2:d7:99:a7:e6:63:fd:d4:97:06:a9: c7:a0:0f:0f:d8:78:d9:6a:ad:54:d8:29:5e:e6:cf:3a:64:fe: 1c:3e:51:00:f8:89:15:ac:94:4b:a3:95:5a:e2:fc:1e:81:bd: 69:00:20:bc:21:12:78:63:dd:33:d7:61:59:52:27:ef:b7:1c: 6d:ea:2b:93:d9:2d:ea:d6:27:ea:23:3a:ba:84:66:3a:2b:80: bf:3f:f6:76:b6:63:ae:e6:68:d3:59:bd:59:92:fa:2a:fe:a4: 81:e3:11:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU4MkExMTAvBgNVBAUTKDdBMEZEMDMyQkMyODEyMTBCM0M5NTIyQjQ3MTU4RDU2 Q0NERUE2MEEwHhcNMjUwNDI1MDQzOTQxWhcNMjUwNTAyMDQzOTQxWjAYMRYwFAYD VQQDEw02ODBiMTIwZC1jZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34NBpiyxeQDSrd/MexkC7iogA+wYRmda+cYU/11wLzLTUd+r7DLPUxYHjXAb uujmEZXo9QceJdR3vZalsas5CAHOvD2IY7nrj271/HmmFen91HTdWx+lV4kxCF1R KVzv8qBaTZ7iVPQO8DhKmiWMGQ/mSl3xa5Ltl6j0M9Edzp56wSdzEx6WJnTWFJKZ Y0Tu5pqdufKMn5BKeKFN7VsUMsvH8XAtwxV1Jf7cGNVTLUCq8snbaXWnbpN4oiKv gkeHQUhuUMoYGVX79FHnR/gAEkdw2axo46acGPV7Ojpe/c/QoJyZIb+0fn4NyeYr +OUTTziF9R2jOrT4gaj3cPCcNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8cb4R8 sC8hpSd6eaJcO4ykpkwbMB8GA1UdIwQYMBaAFHoP0DK8KBIQs8lSK0cVjVbM3qYK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTgyQS83OEQ3NDk2RURE RTgxMUVFQTNCMEU3MTNDNEY5QUUwMi9lZ19RTXJ3b0VoQ3p5VklyUnhXTlZzemVw Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VnX1FNcndvRWhDenlWSXJSeFdOVnN6ZXBnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTgyQS83OEQ3NDk2RURERTgxMUVFQTNCMEU3MTNDNEY5QUUwMi9lZ19RTXJ3b0Vo Q3p5VklyUnhXTlZzemVwZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0dv1JzlTl18z+CWQ5tHfb1kEWkUZUMacF5fIBlUKxDtw+UWO/XVVl TyWA0+fgx9zgt9zFBZz0OnhhA/dPcrCYtcN8l63NFkNqDta23ncPgRQXdU6yLWiS sHYGhhTl/9/kPu73Gpxng8CI4BSJOlrzFf1HmW/TnKVDY4u1OvzvrK7PyQichyDv ZE7IRUPE5z/4jrkdIkBToteZp+Zj/dSXBqnHoA8P2HjZaq1U2Cle5s86ZP4cPlEA +IkVrJRLo5Va4vwegb1pACC8IRJ4Y90z12FZUifvtxxt6iuT2S3q1ifqIzq6hGY6 K4C/P/Z2tmOu5mjTWb1Zkvoq/qSB4xHh -----END CERTIFICATE-----Generated at Sat Apr 26 17:19:49 2025 by rpki-client