$ rpki-client -vvf rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft File: QcEdgay69pPnrWH6EU53uf1PV8M.mft (raw, json) Hash identifier: 1s8g+BLnWzIDiKR49z66SptziFbX971naRFIzXzFGBs= Subject key identifier: 3B:D9:48:D4:ED:0A:21:C5:78:00:19:0E:DE:77:BE:4F:45:AC:17:2C Authority key identifier: 41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3 Certificate issuer: /CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3 Certificate serial: 05FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft Manifest number: 05F8 Signing time: Wed 02 Apr 2025 22:55:08 +0000 Manifest this update: Wed 02 Apr 2025 22:55:07 +0000 Manifest next update: Wed 09 Apr 2025 22:55:07 +0000 Files and hashes: 1: QcEdgay69pPnrWH6EU53uf1PV8M.crl (hash: 7FINXgy4HQj6xIPpFf17TKU71La77p06pBXd4Ua1D/Y=) 2: 63F5A844A07211EBB1E80A0BC4F9AE02.roa (hash: I8raS3rzHehCDzjWbyD11Ayxc3LxtxDJxeikCNG+l5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1533 (0x5fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147EA8 Validity Not Before: Apr 2 22:55:07 2025 GMT Not After : Apr 9 22:55:07 2025 GMT Subject: CN=67edc04c-1f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:25:9c:5a:e1:3d:35:c7:73:6d:11:a6:80:cb: 0d:8d:a0:c1:c2:69:e5:a7:42:89:4f:56:55:27:c8: 17:44:40:ed:47:87:5c:d0:d9:08:db:48:2f:8d:d2: fe:ff:8d:58:a6:23:06:3f:40:1f:8c:05:f7:8c:86: 7f:67:47:31:d8:51:c1:61:86:2d:50:a4:e0:50:7f: 12:6b:de:8a:49:35:bb:05:f6:30:45:aa:18:e9:69: 20:c9:38:c7:a3:cf:58:35:b4:7a:87:7c:b9:56:57: ca:e8:6f:53:10:9d:53:12:91:4d:1e:a5:8c:00:ea: 3b:f3:5f:93:39:71:bf:87:c6:1f:39:e4:0b:ae:45: 93:3d:f6:86:19:22:00:c4:74:73:83:93:9e:bf:39: 74:14:1c:92:5c:8a:76:fe:17:31:7d:24:46:b8:88: a6:66:62:0e:12:08:05:70:dc:b0:9d:60:e8:de:6a: 29:35:90:c0:31:6e:5b:a5:78:5c:60:06:56:b4:09: d0:f8:39:b1:b0:fc:72:b0:f1:cf:53:28:ff:f6:23: e9:2f:db:07:f1:dc:b0:88:db:3f:a3:d7:9a:8d:54: 1f:37:05:c7:1e:fc:30:a1:dc:24:de:7a:d2:ab:b3: e4:27:19:d5:3a:20:78:1c:81:91:29:4f:fc:de:b3: 4b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D9:48:D4:ED:0A:21:C5:78:00:19:0E:DE:77:BE:4F:45:AC:17:2C X509v3 Authority Key Identifier: keyid:41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a5:38:5a:4f:4c:93:9c:0d:51:13:b4:e3:03:18:40:7e:c9: c7:94:1b:d6:0d:e1:03:ee:93:cb:12:88:c6:04:d3:00:ea:e1: 77:6e:45:42:d0:b1:14:57:a1:4d:b4:4b:9d:0d:26:6d:06:3a: 8e:57:23:1b:47:09:e9:4a:1a:e4:a1:44:7d:33:a9:4f:3b:a6: a0:8c:1c:4f:00:21:b4:e4:d3:5b:6a:03:d0:59:3d:fb:e8:f3: dd:76:9e:fb:7c:3e:e2:61:5e:f1:fe:27:66:80:d1:c5:d1:58: e7:37:21:ed:c8:e1:bc:11:88:40:27:55:75:ca:60:f2:35:af: dd:2c:85:86:46:18:ce:53:8a:b4:2c:45:8e:74:b9:db:48:32: 45:cc:7d:f8:45:a9:3b:a0:de:a6:95:14:ea:b7:56:21:b7:e4: 27:bd:80:e5:db:7f:89:e6:0b:26:e0:19:14:ec:c8:88:5c:2e: c1:c2:60:b3:e8:f1:89:4d:25:0d:af:a5:d7:d4:13:42:97:54: fb:af:f9:a0:2c:85:90:6a:cc:f3:9f:ad:74:9c:5d:49:81:0f: 93:e7:9b:ca:50:59:87:f3:b3:de:56:a2:13:99:30:e6:3f:55: 26:2f:c7:df:99:b9:82:20:52:01:76:c5:a4:38:3a:85:2d:36: 83:b8:21:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdFQTgxMTAvBgNVBAUTKDQxQzExRDgxQUNCQUY2OTNFN0FENjFGQTExNEU3N0I5 RkQ0RjU3QzMwHhcNMjUwNDAyMjI1NTA3WhcNMjUwNDA5MjI1NTA3WjAYMRYwFAYD VQQDEw02N2VkYzA0Yy0xZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyWcWuE9NcdzbRGmgMsNjaDBwmnlp0KJT1ZVJ8gXREDtR4dc0NkI20gvjdL+ /41YpiMGP0AfjAX3jIZ/Z0cx2FHBYYYtUKTgUH8Sa96KSTW7BfYwRaoY6WkgyTjH o89YNbR6h3y5VlfK6G9TEJ1TEpFNHqWMAOo781+TOXG/h8YfOeQLrkWTPfaGGSIA xHRzg5Oevzl0FBySXIp2/hcxfSRGuIimZmIOEggFcNywnWDo3mopNZDAMW5bpXhc YAZWtAnQ+DmxsPxysPHPUyj/9iPpL9sH8dywiNs/o9eajVQfNwXHHvwwodwk3nrS q7PkJxnVOiB4HIGRKU/83rNLIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvZSNTt CiHFeAAZDt53vk9FrBcsMB8GA1UdIwQYMBaAFEHBHYGsuvaT561h+hFOd7n9T1fD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0VBOC84NDE3NTE1NkEw NzAxMUVCOUFCNkU2NUJDNEY5QUUwMi9RY0VkZ2F5NjlwUG5yV0g2RVU1M3VmMVBW OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FjRWRnYXk2OXBQbnJXSDZFVTUzdWYxUFY4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0VBOC84NDE3NTE1NkEwNzAxMUVCOUFCNkU2NUJDNEY5QUUwMi9RY0VkZ2F5Njlw UG5yV0g2RVU1M3VmMVBWOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAopThaT0yTnA1RE7TjAxhAfsnHlBvWDeED7pPLEojGBNMA6uF3bkVC 0LEUV6FNtEudDSZtBjqOVyMbRwnpShrkoUR9M6lPO6agjBxPACG05NNbagPQWT37 6PPddp77fD7iYV7x/idmgNHF0VjnNyHtyOG8EYhAJ1V1ymDyNa/dLIWGRhjOU4q0 LEWOdLnbSDJFzH34Rak7oN6mlRTqt1Yht+QnvYDl23+J5gsm4BkU7MiIXC7BwmCz 6PGJTSUNr6XX1BNCl1T7r/mgLIWQaszzn610nF1JgQ+T55vKUFmH87PeVqITmTDm P1UmL8ffmbmCIFIBdsWkODqFLTaDuCEA -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:16 2025 by rpki-client