$ rpki-client -vvf rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft File: QcEdgay69pPnrWH6EU53uf1PV8M.mft (raw, json) Hash identifier: J+bn7zxvGrul0EatfmuIKqVtSgQrdxgZAkCoW5j+bAY= Subject key identifier: 45:73:BD:2A:92:F7:4D:8D:A4:DF:72:DE:57:62:E0:B4:FB:8A:37:34 Authority key identifier: 41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3 Certificate issuer: /CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3 Certificate serial: 062A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft Manifest number: 0625 Signing time: Wed 02 Jul 2025 23:04:44 +0000 Manifest this update: Wed 02 Jul 2025 23:04:44 +0000 Manifest next update: Wed 09 Jul 2025 23:04:44 +0000 Files and hashes: 1: QcEdgay69pPnrWH6EU53uf1PV8M.crl (hash: b7k718Q7+2OMofekQSpA1RMKZqHWbcuiCIoY/dIuQXQ=) 2: 63F5A844A07211EBB1E80A0BC4F9AE02.roa (hash: I8raS3rzHehCDzjWbyD11Ayxc3LxtxDJxeikCNG+l5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1578 (0x62a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147EA8, serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3 Validity Not Before: Jul 2 23:04:44 2025 GMT Not After : Jul 9 23:04:44 2025 GMT Subject: CN=6865bb0c-44d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:0b:c7:5d:95:27:8a:1d:d0:32:61:d3:46: 5c:87:16:b9:ed:59:e6:4e:25:f7:5c:da:a3:65:bf: d8:ba:3f:aa:51:49:bb:2a:02:1f:5d:94:84:1a:e4: 20:5c:41:12:17:52:c1:fb:76:a1:b5:58:a0:d2:3d: c6:7d:7a:37:4e:60:e5:ee:21:3d:82:73:61:e9:de: a3:2e:29:e7:31:8a:1a:7d:3f:59:76:93:82:44:6c: 9e:9a:ec:99:0b:48:52:24:35:c9:c8:ee:ff:02:88: c7:70:92:5b:84:6e:2c:7f:38:6a:a6:ae:1f:47:ad: 5c:b9:17:51:8a:01:c2:c8:ee:d7:e7:36:e6:db:ce: c3:9f:dd:99:91:82:90:ee:b0:b3:16:10:97:42:5e: fc:d8:69:74:47:b1:81:5f:a9:f6:22:dd:9e:0f:d9: d9:a0:ed:b3:8f:0f:64:81:a9:17:88:ff:27:2d:c0: e0:41:f7:69:49:ee:03:1e:3f:e5:cf:48:c0:f0:3e: 7a:aa:3b:9c:95:a4:1a:35:0b:a9:7b:11:b6:0f:6c: c6:d1:2f:1e:46:b9:e9:f3:85:df:2d:5b:78:f6:d4: f2:98:bb:22:b2:ca:5c:ee:9b:1a:26:d1:cf:d3:3b: 5b:56:a1:c1:94:db:e9:20:a6:8e:bc:77:4e:9c:72: 0f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:73:BD:2A:92:F7:4D:8D:A4:DF:72:DE:57:62:E0:B4:FB:8A:37:34 X509v3 Authority Key Identifier: keyid:41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:93:8c:c5:7f:f6:4f:9b:36:1e:f5:53:59:0d:12:b0:80:e3: de:39:81:54:94:36:8e:0d:0c:c7:6b:32:d7:b3:ea:6e:ed:c2: ac:97:fe:08:98:d7:52:36:27:4d:81:e4:c3:bc:d0:8c:41:b7: 73:41:77:bf:dc:d2:34:2a:72:8d:1a:25:c9:c9:8c:d9:a1:d7: 62:ef:88:46:09:ed:eb:93:bd:9b:ae:eb:01:4e:d2:f8:de:cd: 90:4f:e3:06:58:20:d8:84:41:cd:59:95:ca:ec:38:91:57:28: 88:32:4a:47:96:f0:de:14:d2:84:01:ae:64:cf:1c:54:a1:a7: 6f:9c:75:d8:0b:f7:2b:49:36:4f:93:45:70:71:0c:63:73:48: a5:fb:92:21:1c:8b:d3:26:eb:38:e2:e3:99:36:5e:98:53:1e: 2f:9b:f7:59:02:ee:d3:d5:e6:a7:60:de:83:f0:e8:00:56:3b: 07:fb:73:0c:c8:ee:3d:54:49:59:3a:53:5c:c2:64:22:79:14: 83:e5:8d:f1:16:1c:d8:bf:b2:b6:de:80:68:46:15:b6:64:58: fe:b1:92:1a:72:0c:b9:25:7c:14:ab:cc:e9:cd:a7:a0:f5:9f: 6d:d6:84:3a:38:18:58:fd:e3:cb:3b:e0:6a:f3:c4:7b:79:15: 30:4a:50:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdFQTgxMTAvBgNVBAUTKDQxQzExRDgxQUNCQUY2OTNFN0FENjFGQTExNEU3N0I5 RkQ0RjU3QzMwHhcNMjUwNzAyMjMwNDQ0WhcNMjUwNzA5MjMwNDQ0WjAYMRYwFAYD VQQDEw02ODY1YmIwYy00NGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHsLx12VJ4od0DJh00Zchxa57VnmTiX3XNqjZb/Yuj+qUUm7KgIfXZSEGuQg XEESF1LB+3ahtVig0j3GfXo3TmDl7iE9gnNh6d6jLinnMYoafT9ZdpOCRGyemuyZ C0hSJDXJyO7/AojHcJJbhG4sfzhqpq4fR61cuRdRigHCyO7X5zbm287Dn92ZkYKQ 7rCzFhCXQl782Gl0R7GBX6n2It2eD9nZoO2zjw9kgakXiP8nLcDgQfdpSe4DHj/l z0jA8D56qjuclaQaNQupexG2D2zG0S8eRrnp84XfLVt49tTymLsisspc7psaJtHP 0ztbVqHBlNvpIKaOvHdOnHIPJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVzvSqS 902NpN9y3ldi4LT7ijc0MB8GA1UdIwQYMBaAFEHBHYGsuvaT561h+hFOd7n9T1fD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0VBOC84NDE3NTE1NkEw NzAxMUVCOUFCNkU2NUJDNEY5QUUwMi9RY0VkZ2F5NjlwUG5yV0g2RVU1M3VmMVBW OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FjRWRnYXk2OXBQbnJXSDZFVTUzdWYxUFY4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0VBOC84NDE3NTE1NkEwNzAxMUVCOUFCNkU2NUJDNEY5QUUwMi9RY0VkZ2F5Njlw UG5yV0g2RVU1M3VmMVBWOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUk4zFf/ZPmzYe9VNZDRKwgOPeOYFUlDaODQzHazLXs+pu7cKsl/4I mNdSNidNgeTDvNCMQbdzQXe/3NI0KnKNGiXJyYzZoddi74hGCe3rk72brusBTtL4 3s2QT+MGWCDYhEHNWZXK7DiRVyiIMkpHlvDeFNKEAa5kzxxUoadvnHXYC/crSTZP k0VwcQxjc0il+5IhHIvTJus44uOZNl6YUx4vm/dZAu7T1eanYN6D8OgAVjsH+3MM yO49VElZOlNcwmQieRSD5Y3xFhzYv7K23oBoRhW2ZFj+sZIacgy5JXwUq8zpzaeg 9Z9t1oQ6OBhY/ePLO+Bq88R7eRUwSlBX -----END CERTIFICATE-----Generated at Thu Jul 3 21:54:38 2025 by rpki-client