$ rpki-client -vvf rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft File: QcEdgay69pPnrWH6EU53uf1PV8M.mft (raw, json) Hash identifier: 5FyBxsWbDYvsu/HL5Uk8FdkIa1+p1jQrJvQLwQZmzow= Subject key identifier: 4B:27:C2:BC:78:61:79:A8:52:02:F0:D9:C2:C0:D8:12:3E:AC:66:22 Authority key identifier: 41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3 Certificate issuer: /CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3 Certificate serial: 0644 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft Manifest number: 063F Signing time: Fri 22 Aug 2025 22:51:55 +0000 Manifest this update: Fri 22 Aug 2025 22:51:55 +0000 Manifest next update: Fri 29 Aug 2025 22:51:55 +0000 Files and hashes: 1: QcEdgay69pPnrWH6EU53uf1PV8M.crl (hash: 0HDexX4fz60xZiWLSj/SjpgP4HM3crg/7a6DUswYeFA=) 2: 63F5A844A07211EBB1E80A0BC4F9AE02.roa (hash: I8raS3rzHehCDzjWbyD11Ayxc3LxtxDJxeikCNG+l5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1604 (0x644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147EA8, serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3 Validity Not Before: Aug 22 22:51:55 2025 GMT Not After : Aug 29 22:51:55 2025 GMT Subject: CN=68a8f48b-b248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:52:98:c1:a4:ba:77:be:0f:a6:24:a6:1a:32: d3:48:3f:5f:39:07:67:18:16:90:b3:92:1b:54:1c: e8:dc:e3:38:68:41:ae:ee:53:87:f6:d9:86:28:d3: e2:4c:97:b8:ce:1e:5a:f6:b6:98:de:52:74:48:94: 6e:be:28:da:9f:d2:e2:26:79:75:bf:73:6e:5d:f4: 2d:65:2a:bf:2c:d5:52:57:78:d1:9e:3d:86:0b:45: 1b:a7:9f:ad:51:ef:b1:05:0c:0c:a6:1c:46:aa:a4: 40:91:56:05:08:cc:57:93:a4:1d:1a:4d:c1:b3:f5: 94:0b:8f:f2:82:15:aa:03:93:5f:86:e4:95:51:f0: 16:8d:6f:2c:06:6e:f9:6a:4f:28:44:4b:a0:db:03: 2a:96:81:d9:74:f8:86:85:c1:b3:d8:22:67:16:65: da:cc:3e:0d:60:d7:f8:d2:e1:07:c2:47:83:37:74: 64:a2:dd:ca:50:f2:5d:28:7c:1c:68:0e:0a:41:58: 8f:9c:2d:c8:5a:35:4d:5a:43:56:22:72:fe:5c:bd: 22:d8:69:d9:93:ca:7a:00:fb:35:f2:7a:9c:5a:f1: 77:2a:74:af:92:c3:19:76:7a:20:b1:fc:d0:67:d5: 3d:bb:3b:44:52:66:4a:84:26:b3:92:f2:c6:b1:10: 1c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:27:C2:BC:78:61:79:A8:52:02:F0:D9:C2:C0:D8:12:3E:AC:66:22 X509v3 Authority Key Identifier: keyid:41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:97:66:6f:49:74:e0:50:77:4c:ee:ad:85:f4:ce:cd:a2:dd: b8:55:5a:94:98:5f:ea:19:bc:af:6c:40:0c:18:85:5b:31:95: 60:27:14:85:88:2d:13:a1:c7:4d:a9:20:85:81:62:8d:d4:05: 02:26:96:aa:db:ee:64:fe:ba:ce:22:f3:2c:50:e7:54:22:87: 11:85:61:76:88:e6:8e:9d:e0:89:60:c6:44:7d:0c:0a:f2:27: a8:69:7a:92:7c:d6:1f:72:42:02:58:d7:e3:dd:fb:3a:06:dc: 5a:76:9f:4d:e4:3b:43:be:42:9c:b1:01:f5:9c:e4:fb:1f:a6: 7f:b3:88:7a:0d:8f:05:76:8c:38:d3:fc:23:6d:0d:67:62:33: 29:a6:b7:69:70:89:c7:a9:4c:a7:25:62:03:44:0a:65:f6:03: 11:95:2f:a7:97:43:b9:9c:50:bb:b5:b5:20:f9:4d:76:82:24: f6:59:07:a6:c8:06:1b:a3:83:f0:b4:76:48:64:8e:22:30:2b: 10:9a:9f:64:30:5d:18:96:dd:c9:27:5e:ab:fb:e4:5a:87:54: f4:ec:49:b6:25:55:8b:a4:d7:54:f1:ce:a1:4c:42:64:6e:f8: b5:4e:91:27:5d:8c:f3:cb:9c:0b:9a:35:a1:78:4b:2f:15:b2: 39:96:ed:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdFQTgxMTAvBgNVBAUTKDQxQzExRDgxQUNCQUY2OTNFN0FENjFGQTExNEU3N0I5 RkQ0RjU3QzMwHhcNMjUwODIyMjI1MTU1WhcNMjUwODI5MjI1MTU1WjAYMRYwFAYD VQQDEw02OGE4ZjQ4Yi1iMjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVKYwaS6d74PpiSmGjLTSD9fOQdnGBaQs5IbVBzo3OM4aEGu7lOH9tmGKNPi TJe4zh5a9raY3lJ0SJRuvijan9LiJnl1v3NuXfQtZSq/LNVSV3jRnj2GC0Ubp5+t Ue+xBQwMphxGqqRAkVYFCMxXk6QdGk3Bs/WUC4/yghWqA5NfhuSVUfAWjW8sBm75 ak8oREug2wMqloHZdPiGhcGz2CJnFmXazD4NYNf40uEHwkeDN3Rkot3KUPJdKHwc aA4KQViPnC3IWjVNWkNWInL+XL0i2GnZk8p6APs18nqcWvF3KnSvksMZdnogsfzQ Z9U9uztEUmZKhCazkvLGsRAcKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsnwrx4 YXmoUgLw2cLA2BI+rGYiMB8GA1UdIwQYMBaAFEHBHYGsuvaT561h+hFOd7n9T1fD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0VBOC84NDE3NTE1NkEw NzAxMUVCOUFCNkU2NUJDNEY5QUUwMi9RY0VkZ2F5NjlwUG5yV0g2RVU1M3VmMVBW OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FjRWRnYXk2OXBQbnJXSDZFVTUzdWYxUFY4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0VBOC84NDE3NTE1NkEwNzAxMUVCOUFCNkU2NUJDNEY5QUUwMi9RY0VkZ2F5Njlw UG5yV0g2RVU1M3VmMVBWOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWl2ZvSXTgUHdM7q2F9M7Not24VVqUmF/qGbyvbEAMGIVbMZVgJxSF iC0TocdNqSCFgWKN1AUCJpaq2+5k/rrOIvMsUOdUIocRhWF2iOaOneCJYMZEfQwK 8ieoaXqSfNYfckICWNfj3fs6Btxadp9N5DtDvkKcsQH1nOT7H6Z/s4h6DY8Fdow4 0/wjbQ1nYjMpprdpcInHqUynJWIDRApl9gMRlS+nl0O5nFC7tbUg+U12giT2WQem yAYbo4PwtHZIZI4iMCsQmp9kMF0Ylt3JJ16r++Rah1T07Em2JVWLpNdU8c6hTEJk bvi1TpEnXYzzy5wLmjWheEsvFbI5lu1g -----END CERTIFICATE-----Generated at Sat Aug 23 20:36:15 2025 by rpki-client