$ rpki-client -vvf rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft File: QcEdgay69pPnrWH6EU53uf1PV8M.mft (raw, json) Hash identifier: DQu6I3OALkEGfCS5HlPc6NdA2Q9yPT50PCi4kLBirCw= Subject key identifier: 25:22:E4:84:9F:9A:45:D3:46:F3:E3:5E:11:37:2E:D0:34:1B:32:0B Authority key identifier: 41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3 Certificate issuer: /CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3 Certificate serial: 0619 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft Manifest number: 0614 Signing time: Fri 30 May 2025 23:01:52 +0000 Manifest this update: Fri 30 May 2025 23:01:51 +0000 Manifest next update: Fri 06 Jun 2025 23:01:51 +0000 Files and hashes: 1: QcEdgay69pPnrWH6EU53uf1PV8M.crl (hash: 7JKZuLfxlrwc1SYW53WeHfw4QN9s/yd18C87/9syuWU=) 2: 63F5A844A07211EBB1E80A0BC4F9AE02.roa (hash: I8raS3rzHehCDzjWbyD11Ayxc3LxtxDJxeikCNG+l5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1561 (0x619) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147EA8, serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3 Validity Not Before: May 30 23:01:51 2025 GMT Not After : Jun 6 23:01:51 2025 GMT Subject: CN=683a38e0-b0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0e:09:dd:cc:6b:ab:c3:12:de:66:9f:fc:5a: d8:9d:1e:35:8a:10:e5:20:61:42:cc:d2:a9:13:34: 02:12:ca:9a:8b:e0:63:da:95:c4:96:c6:3f:c8:ba: 8a:d5:27:95:c9:ab:51:f8:de:cd:d0:c1:db:7f:e5: 12:3e:0c:36:fc:e3:9a:ae:c1:99:e0:a6:1c:8c:5c: 11:65:23:f5:5e:a0:8a:c0:df:10:c7:d2:0b:ce:d1: 84:ac:2c:ad:08:7d:d2:a9:fd:68:6d:49:19:8c:c1: e2:fd:81:b6:d4:2e:c8:ee:a4:c4:af:c0:87:0b:45: 73:ff:2b:c6:7b:64:54:e5:38:50:70:49:60:47:ac: 47:fa:9e:30:cf:88:7b:7a:b4:10:c7:28:76:f4:71: 96:18:99:ab:f5:12:db:5d:1d:38:75:39:10:df:ad: 5a:ad:cf:40:5d:48:54:7d:a1:44:c1:9f:4c:a8:15: 65:9f:ce:16:e8:9c:27:c2:fa:a1:14:42:cb:ef:04: 5b:37:17:16:24:65:7b:69:c7:6c:92:95:bd:e2:cc: e3:a3:0d:1b:7d:8d:f8:d0:76:15:f2:05:66:2d:3f: 7c:be:87:9b:d1:cf:69:e1:06:6e:35:b1:32:5a:e8: 7f:75:82:08:fa:da:8d:e8:74:f9:8b:c7:0a:af:3b: 0c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:22:E4:84:9F:9A:45:D3:46:F3:E3:5E:11:37:2E:D0:34:1B:32:0B X509v3 Authority Key Identifier: keyid:41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e7:b2:86:03:12:61:98:fa:76:35:aa:b3:a1:f8:c0:91:2b: 91:62:9f:6f:ad:dc:4c:bc:eb:21:fb:f8:1a:a6:2e:ba:8c:f1: a7:a7:d6:5f:bc:58:98:0f:6a:b8:79:80:7e:89:f8:a6:94:f6: aa:e1:b7:03:e7:7c:f1:7d:40:e5:64:0a:34:fa:6e:ef:79:d7: b1:82:f2:18:bf:3f:5c:11:53:66:7a:b4:1e:47:69:ce:e8:5b: 61:6d:70:fd:d9:49:f5:7b:fd:c5:06:9c:4c:07:b4:19:19:76: c8:f3:56:e0:0d:26:34:47:f9:9a:3e:d8:30:f2:50:7c:7d:ca: 80:37:b3:c3:de:46:19:48:62:a2:cc:c8:cf:c9:90:a7:76:ce: e5:67:1d:04:a3:0e:79:f2:4f:61:5b:76:60:bf:8f:8e:3b:d3: 3e:d6:b1:fd:6e:fe:06:3d:c2:25:d4:f9:d8:65:41:4a:81:c4: a7:a5:06:79:9f:02:f0:30:4d:6a:bf:ce:8e:27:cf:1d:f8:18: b3:a5:c3:3a:d6:af:c3:cc:81:79:7b:16:8c:62:cd:fe:67:67: ba:9f:b3:00:4f:23:ff:2d:49:14:8a:af:b1:cb:0c:5a:26:0f: 51:c3:38:35:7d:8b:fd:9e:96:44:6d:76:b9:f8:17:5e:3c:4b: 8f:ff:1c:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdFQTgxMTAvBgNVBAUTKDQxQzExRDgxQUNCQUY2OTNFN0FENjFGQTExNEU3N0I5 RkQ0RjU3QzMwHhcNMjUwNTMwMjMwMTUxWhcNMjUwNjA2MjMwMTUxWjAYMRYwFAYD VQQDEw02ODNhMzhlMC1iMGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxw4J3cxrq8MS3maf/FrYnR41ihDlIGFCzNKpEzQCEsqai+Bj2pXElsY/yLqK 1SeVyatR+N7N0MHbf+USPgw2/OOarsGZ4KYcjFwRZSP1XqCKwN8Qx9ILztGErCyt CH3Sqf1obUkZjMHi/YG21C7I7qTEr8CHC0Vz/yvGe2RU5ThQcElgR6xH+p4wz4h7 erQQxyh29HGWGJmr9RLbXR04dTkQ361arc9AXUhUfaFEwZ9MqBVln84W6Jwnwvqh FELL7wRbNxcWJGV7acdskpW94szjow0bfY340HYV8gVmLT98voeb0c9p4QZuNbEy Wuh/dYII+tqN6HT5i8cKrzsM4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUi5ISf mkXTRvPjXhE3LtA0GzILMB8GA1UdIwQYMBaAFEHBHYGsuvaT561h+hFOd7n9T1fD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0VBOC84NDE3NTE1NkEw NzAxMUVCOUFCNkU2NUJDNEY5QUUwMi9RY0VkZ2F5NjlwUG5yV0g2RVU1M3VmMVBW OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FjRWRnYXk2OXBQbnJXSDZFVTUzdWYxUFY4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0VBOC84NDE3NTE1NkEwNzAxMUVCOUFCNkU2NUJDNEY5QUUwMi9RY0VkZ2F5Njlw UG5yV0g2RVU1M3VmMVBWOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt57KGAxJhmPp2NaqzofjAkSuRYp9vrdxMvOsh+/gapi66jPGnp9Zf vFiYD2q4eYB+ifimlPaq4bcD53zxfUDlZAo0+m7vedexgvIYvz9cEVNmerQeR2nO 6FthbXD92Un1e/3FBpxMB7QZGXbI81bgDSY0R/maPtgw8lB8fcqAN7PD3kYZSGKi zMjPyZCnds7lZx0Eow558k9hW3Zgv4+OO9M+1rH9bv4GPcIl1PnYZUFKgcSnpQZ5 nwLwME1qv86OJ88d+BizpcM61q/DzIF5exaMYs3+Z2e6n7MATyP/LUkUiq+xywxa Jg9Rwzg1fYv9npZEbXa5+BdePEuP/xye -----END CERTIFICATE-----Generated at Sat May 31 17:54:49 2025 by rpki-client