$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft File: EZQLtYNEqix5xJU51t-RUZbv6CY.mft (raw, json) Hash identifier: WOggzPtcL1HFQ4IEl2hmwdI21dBCzZyWopJ7jHHcDQQ= Subject key identifier: C6:31:60:25:85:F1:1E:46:48:1A:DF:23:B4:89:5E:5A:38:85:75:79 Authority key identifier: 11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26 Certificate issuer: /CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826 Certificate serial: 07BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft Manifest number: 07B4 Signing time: Fri 20 Jun 2025 14:46:37 +0000 Manifest this update: Fri 20 Jun 2025 14:46:36 +0000 Manifest next update: Fri 27 Jun 2025 14:46:36 +0000 Files and hashes: 1: EZQLtYNEqix5xJU51t-RUZbv6CY.crl (hash: MelN1Ob2SvJ6c/6VDCdlFFFMDWg5krnbUQ+awqpRsao=) 2: 5DE12890180311EBA311E181C4F9AE02.roa (hash: F8xinTLI0D4YZKI6rrpI2+NEMkL5MZGo2LQqsqaOFZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 14:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1978 (0x7ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826 Validity Not Before: Jun 20 14:46:36 2025 GMT Not After : Jun 27 14:46:36 2025 GMT Subject: CN=6855744c-8ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e0:f3:88:67:06:65:45:f0:97:7f:12:c8:67: 3e:1c:bb:a9:15:cb:08:b6:a5:39:bd:c2:3a:27:c7: e0:63:87:4f:60:04:1d:90:5a:a9:3b:88:73:ff:0d: 70:2b:0b:8e:bd:11:16:0e:8c:47:31:c9:99:b4:81: f4:6b:f5:c0:4a:24:ad:69:dc:62:3b:1c:35:7a:48: 6d:de:d7:e9:1b:ea:b2:93:7d:fa:90:99:a6:0b:04: 5c:2a:90:36:20:b2:00:73:56:23:20:4e:29:7e:14: 60:31:b9:a8:de:13:57:ca:2d:35:81:4d:34:68:e1: ab:83:f2:ec:be:ec:81:7b:94:a7:d6:08:81:d1:76: 41:a6:da:42:f2:40:ca:0d:c7:2d:2a:28:d1:91:8c: 78:61:f4:3c:b1:a5:42:a9:19:1f:aa:e1:09:18:e1: 9f:0c:89:b4:30:91:46:4b:a4:cc:e0:5f:a2:5b:53: 20:4c:b9:33:cd:f9:dd:e0:a7:4f:98:cd:a4:0a:68: 41:70:7d:8f:09:fc:75:24:dd:e9:59:91:98:f4:02: 72:f9:0f:55:d7:60:03:1d:a4:97:70:33:a7:35:9b: f9:d8:8c:36:f0:b0:a4:3b:60:bc:d8:fc:f0:89:09: 22:a9:b3:4b:21:2e:01:82:70:aa:10:84:a1:e9:e6: be:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:31:60:25:85:F1:1E:46:48:1A:DF:23:B4:89:5E:5A:38:85:75:79 X509v3 Authority Key Identifier: keyid:11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:60:da:0c:a8:3f:a6:63:e0:83:c1:5e:69:be:00:a2:23:82: 2e:85:ed:0f:6a:81:d9:25:d2:d8:a3:ea:7a:0d:b9:fe:e7:ed: af:b5:3b:a5:19:2f:2d:84:b6:25:c3:47:f3:7e:39:2e:67:33: 15:4e:00:ac:47:23:c5:b4:6a:c6:2d:c8:97:7c:ef:47:6d:85: cc:d7:cd:7e:d0:a7:c7:19:99:fa:df:94:e1:e0:69:19:99:87: 56:7d:b2:ed:29:1e:cb:7a:99:0e:b4:18:dd:21:fe:18:e0:16: dc:b3:ab:8a:35:aa:ac:39:1b:8c:55:44:84:f1:e1:32:b6:5a: 69:85:1a:d5:33:95:44:19:4d:3d:58:92:36:12:c8:ff:c6:30: a4:6d:cf:41:5f:1e:5d:2d:e7:be:cc:ad:bf:b1:ac:5d:a4:4a: 79:8f:5f:b9:70:88:07:f8:33:21:5c:f9:0d:fc:73:c3:77:14: 75:b5:4f:55:5a:0f:3e:85:42:6f:4e:98:9c:11:cf:c7:1e:1e: 0a:ba:85:45:4b:1d:cf:0e:d5:07:10:f1:85:b9:1a:4a:41:55: 97:95:00:c0:2a:4b:cc:5c:10:ba:03:d0:4b:fc:87:42:3f:32: 4e:b3:b7:74:9b:f2:76:9e:87:67:9c:4c:3e:80:3b:ed:17:8e: 7d:cc:3b:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDExOTQwQkI1ODM0NEFBMkM3OUM0OTUzOUQ2REY5MTUx OTZFRkU4MjYwHhcNMjUwNjIwMTQ0NjM2WhcNMjUwNjI3MTQ0NjM2WjAYMRYwFAYD VQQDEw02ODU1NzQ0Yy04YWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eDziGcGZUXwl38SyGc+HLupFcsItqU5vcI6J8fgY4dPYAQdkFqpO4hz/w1w KwuOvREWDoxHMcmZtIH0a/XASiStadxiOxw1ekht3tfpG+qyk336kJmmCwRcKpA2 ILIAc1YjIE4pfhRgMbmo3hNXyi01gU00aOGrg/LsvuyBe5Sn1giB0XZBptpC8kDK DcctKijRkYx4YfQ8saVCqRkfquEJGOGfDIm0MJFGS6TM4F+iW1MgTLkzzfnd4KdP mM2kCmhBcH2PCfx1JN3pWZGY9AJy+Q9V12ADHaSXcDOnNZv52Iw28LCkO2C82Pzw iQkiqbNLIS4BgnCqEISh6ea+6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYxYCWF 8R5GSBrfI7SJXlo4hXV5MB8GA1UdIwQYMBaAFBGUC7WDRKosecSVOdbfkVGW7+gm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9DMEI1NzQyMjA5 NzUxMUVCOUQ0NjFCMzBDNEY5QUUwMi9FWlFMdFlORXFpeDV4SlU1MXQtUlVaYnY2 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VaUUx0WU5FcWl4NXhKVTUxdC1SVVpidjZDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC9DMEI1NzQyMjA5NzUxMUVCOUQ0NjFCMzBDNEY5QUUwMi9FWlFMdFlORXFp eDV4SlU1MXQtUlVaYnY2Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARYNoMqD+mY+CDwV5pvgCiI4Iuhe0PaoHZJdLYo+p6Dbn+5+2vtTul GS8thLYlw0fzfjkuZzMVTgCsRyPFtGrGLciXfO9HbYXM181+0KfHGZn635Th4GkZ mYdWfbLtKR7LepkOtBjdIf4Y4Bbcs6uKNaqsORuMVUSE8eEytlpphRrVM5VEGU09 WJI2Esj/xjCkbc9BXx5dLee+zK2/saxdpEp5j1+5cIgH+DMhXPkN/HPDdxR1tU9V Wg8+hUJvTpicEc/HHh4KuoVFSx3PDtUHEPGFuRpKQVWXlQDAKkvMXBC6A9BL/IdC PzJOs7d0m/J2nodnnEw+gDvtF459zDuH -----END CERTIFICATE-----Generated at Fri Jun 20 23:44:35 2025 by rpki-client