$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft File: EZQLtYNEqix5xJU51t-RUZbv6CY.mft (raw, json) Hash identifier: f2UXRZLCArMZFY0qr+5Kjih1/m9SXQe+fDbIxQn+xRU= Subject key identifier: 3C:61:8E:00:07:CB:69:ED:36:08:E6:97:0C:1A:2A:5B:70:1C:FA:DE Authority key identifier: 11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26 Certificate issuer: /CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826 Certificate serial: 079D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft Manifest number: 0797 Signing time: Thu 24 Apr 2025 14:45:22 +0000 Manifest this update: Thu 24 Apr 2025 14:45:22 +0000 Manifest next update: Thu 01 May 2025 14:45:22 +0000 Files and hashes: 1: EZQLtYNEqix5xJU51t-RUZbv6CY.crl (hash: zi66igVZDIlRLZSeSsUSF4knRMmytAO2nzZUnJlx2bk=) 2: 5DE12890180311EBA311E181C4F9AE02.roa (hash: F8xinTLI0D4YZKI6rrpI2+NEMkL5MZGo2LQqsqaOFZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826 Validity Not Before: Apr 24 14:45:22 2025 GMT Not After : May 1 14:45:22 2025 GMT Subject: CN=680a4e82-723b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:9f:34:15:92:74:db:57:61:ab:0d:a6:16: 47:aa:02:1e:06:07:4b:2e:93:f9:7c:bd:17:69:56: f9:dd:b1:5a:6d:a7:ab:bd:cb:95:17:40:bc:44:00: 9b:74:22:96:78:76:9e:59:7d:c7:7a:fe:c8:17:8a: db:b9:61:23:88:2e:cb:a5:af:2b:96:81:75:3a:a0: ce:cc:6d:7f:45:49:d7:30:62:07:af:c0:1d:98:64: 62:c9:1a:f3:f6:de:12:b8:9b:fa:c4:89:bf:a4:c2: 3b:77:4e:3e:fd:de:1f:87:98:8e:f2:49:fa:29:d4: 5a:7b:5d:78:9b:28:2d:a0:a7:8d:f3:b8:e8:27:08: 9a:d6:b4:6d:74:4d:aa:83:d7:1f:63:9d:fa:0d:72: 94:30:6c:e9:dd:e0:d8:c9:e4:db:3a:f0:3e:02:68: d3:13:e2:ee:48:02:1a:e7:da:1c:f1:be:63:5b:09: 6b:64:22:37:46:ff:a2:8f:36:51:64:df:26:fb:0f: c2:85:f3:e1:02:ae:9d:9a:96:db:2e:83:11:f4:f8: 72:8b:d4:10:dc:a0:22:54:3b:39:0b:42:41:3f:d4: 67:f2:39:08:3c:66:e9:89:00:38:2f:39:fa:76:46: 49:be:89:f0:31:64:f4:d1:df:bb:85:bd:dc:35:be: 24:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:61:8E:00:07:CB:69:ED:36:08:E6:97:0C:1A:2A:5B:70:1C:FA:DE X509v3 Authority Key Identifier: keyid:11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:2b:ec:10:88:87:04:4b:3a:e5:5b:17:8d:d3:26:0c:4b:00: 30:4e:01:57:d5:c5:f8:fe:07:5d:d8:5c:ca:34:a1:33:3b:be: d8:42:2c:1e:36:1f:d5:78:1a:61:6d:d8:cd:5e:89:b6:5c:8b: af:40:fd:d3:92:fd:77:6b:0f:9e:64:5a:31:5e:d0:09:ee:2b: eb:b7:73:3f:5d:32:3e:aa:d9:16:f3:6d:59:99:97:a1:fe:39: 59:45:b6:81:20:3e:f1:5c:65:04:f2:b2:b0:4e:d2:5b:07:b6: 5c:20:06:33:fc:2a:ca:ae:73:8f:34:ee:94:12:65:c0:b1:4e: 2e:92:58:5c:8d:46:33:cb:89:02:e4:26:97:08:e9:0b:57:53: e5:66:d5:1d:51:c1:6d:89:af:0e:40:3a:50:c0:88:27:7e:12: 13:b2:59:ff:90:1a:4f:50:bf:a7:4d:d4:7b:62:cb:71:27:4f: 6c:b4:2d:f5:e7:87:81:57:23:cf:65:fc:51:b7:22:8c:79:e5: 1a:43:a3:e5:10:87:46:be:bf:e2:18:b2:15:e3:9d:68:52:f8: b6:90:eb:e3:04:d9:cd:71:57:d2:70:bd:dd:9d:7e:a6:14:47: b0:6b:e4:d1:55:9d:d7:f4:02:ff:2b:16:e8:a3:78:d2:99:41: c2:03:c6:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDExOTQwQkI1ODM0NEFBMkM3OUM0OTUzOUQ2REY5MTUx OTZFRkU4MjYwHhcNMjUwNDI0MTQ0NTIyWhcNMjUwNTAxMTQ0NTIyWjAYMRYwFAYD VQQDEw02ODBhNGU4Mi03MjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApn2fNBWSdNtXYasNphZHqgIeBgdLLpP5fL0XaVb53bFabaervcuVF0C8RACb dCKWeHaeWX3Hev7IF4rbuWEjiC7Lpa8rloF1OqDOzG1/RUnXMGIHr8AdmGRiyRrz 9t4SuJv6xIm/pMI7d04+/d4fh5iO8kn6KdRae114mygtoKeN87joJwia1rRtdE2q g9cfY536DXKUMGzp3eDYyeTbOvA+AmjTE+LuSAIa59oc8b5jWwlrZCI3Rv+ijzZR ZN8m+w/ChfPhAq6dmpbbLoMR9Phyi9QQ3KAiVDs5C0JBP9Rn8jkIPGbpiQA4Lzn6 dkZJvonwMWT00d+7hb3cNb4kSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxhjgAH y2ntNgjmlwwaKltwHPreMB8GA1UdIwQYMBaAFBGUC7WDRKosecSVOdbfkVGW7+gm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9DMEI1NzQyMjA5 NzUxMUVCOUQ0NjFCMzBDNEY5QUUwMi9FWlFMdFlORXFpeDV4SlU1MXQtUlVaYnY2 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VaUUx0WU5FcWl4NXhKVTUxdC1SVVpidjZDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC9DMEI1NzQyMjA5NzUxMUVCOUQ0NjFCMzBDNEY5QUUwMi9FWlFMdFlORXFp eDV4SlU1MXQtUlVaYnY2Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADK+wQiIcESzrlWxeN0yYMSwAwTgFX1cX4/gdd2FzKNKEzO77YQiwe Nh/VeBphbdjNXom2XIuvQP3Tkv13aw+eZFoxXtAJ7ivrt3M/XTI+qtkW821ZmZeh /jlZRbaBID7xXGUE8rKwTtJbB7ZcIAYz/CrKrnOPNO6UEmXAsU4uklhcjUYzy4kC 5CaXCOkLV1PlZtUdUcFtia8OQDpQwIgnfhITsln/kBpPUL+nTdR7YstxJ09stC31 54eBVyPPZfxRtyKMeeUaQ6PlEIdGvr/iGLIV451oUvi2kOvjBNnNcVfScL3dnX6m FEewa+TRVZ3X9AL/Kxboo3jSmUHCA8af -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:13 2025 by rpki-client