$ rpki-client -vvf rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft File: QcEdgay69pPnrWH6EU53uf1PV8M.mft (raw, json) Hash identifier: GcLV4cgqrCpU0MapX/h+WRnpATKrwuYqZ2SxKVyVrFA= Subject key identifier: 53:5F:E8:8E:39:21:72:25:4C:CC:25:3C:06:4D:EA:81:91:FB:FA:4A Authority key identifier: 41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3 Certificate issuer: /CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3 Certificate serial: 0608 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft Manifest number: 0603 Signing time: Thu 24 Apr 2025 22:40:12 +0000 Manifest this update: Thu 24 Apr 2025 22:40:12 +0000 Manifest next update: Thu 01 May 2025 22:40:12 +0000 Files and hashes: 1: QcEdgay69pPnrWH6EU53uf1PV8M.crl (hash: ntg7N7solROs3a6WRJcVFBACPicxZacwf3qIAgxkYAk=) 2: 63F5A844A07211EBB1E80A0BC4F9AE02.roa (hash: I8raS3rzHehCDzjWbyD11Ayxc3LxtxDJxeikCNG+l5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1544 (0x608) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147EA8, serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3 Validity Not Before: Apr 24 22:40:12 2025 GMT Not After : May 1 22:40:12 2025 GMT Subject: CN=680abdcc-4905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:76:78:c6:50:34:5a:7a:38:66:3f:20:54:07: 53:c1:df:ae:7c:04:d7:48:21:b2:00:49:26:9a:6b: 93:3a:bd:07:0e:87:ee:6e:44:af:88:fb:3a:c7:d6: b6:d2:18:2d:a3:be:29:be:da:63:a2:2a:5f:62:01: ad:19:69:69:20:c3:e1:be:fd:9f:29:8d:2b:e2:78: 15:8e:2a:e1:0f:5a:e1:a3:ea:b2:2c:b9:53:a4:b3: 0a:21:71:af:77:70:0c:c0:9c:3d:2b:f6:a4:db:46: 21:52:70:47:38:21:f1:2e:b1:dc:db:24:eb:dd:8e: 11:78:d1:64:4c:d0:0c:f1:db:ac:b1:d4:d9:c1:10: 7c:ba:c5:20:d5:99:f9:46:82:7f:a3:8e:34:c8:23: 15:fa:85:53:ab:91:ca:67:64:8f:f2:ec:b7:7d:3b: 6f:c0:e2:0b:f3:cd:9c:9d:76:87:a4:7e:6e:f2:72: ea:47:40:ae:de:55:92:53:71:9d:86:bd:ef:ae:9a: cb:e9:da:22:8c:34:86:26:cc:0a:7e:c5:9b:a9:8c: ec:89:85:c3:cc:6d:d6:df:1b:15:85:60:0d:34:60: de:50:a3:82:56:a2:78:84:7c:5c:4f:d9:4b:1c:e2: 3f:12:86:83:15:76:0b:b2:bd:0c:19:0f:63:6c:73: 3a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5F:E8:8E:39:21:72:25:4C:CC:25:3C:06:4D:EA:81:91:FB:FA:4A X509v3 Authority Key Identifier: keyid:41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:b2:f7:b7:db:a7:32:95:c0:80:64:34:63:69:45:3a:7a:41: 68:01:e3:6c:6a:40:4c:79:47:69:b8:ee:a7:9f:3f:7b:23:b9: c3:1c:97:9a:dd:81:c5:7c:da:30:d3:73:7f:af:13:75:96:a4: be:69:1d:97:82:8e:72:09:8b:50:fe:00:86:55:ae:aa:73:03: 62:4d:26:1f:b6:4a:10:2e:c1:a5:0d:22:62:40:e3:b5:13:1d: a7:2e:66:67:ac:2a:57:ff:f8:6e:08:d0:9a:3b:66:c3:4e:e9: cb:ff:14:36:ee:84:23:3a:ae:d5:5f:71:cb:45:79:a6:6a:59: 6d:1a:ad:05:23:dc:56:a9:c8:f9:8d:57:b1:75:0e:d7:3e:e5: 32:75:8d:e6:33:a7:a4:a1:3a:6f:c4:6a:66:f6:94:d1:96:12: 36:2e:01:d8:f8:97:8b:46:89:28:26:64:d9:e6:61:fa:69:f9: 22:e6:ed:c6:be:c2:49:56:b3:03:26:82:f5:08:79:12:e7:45: 59:61:81:07:02:47:40:8f:18:80:58:b5:45:3b:7e:88:71:89: 25:f3:4f:fe:cf:b8:37:e7:dc:e8:94:3e:55:23:af:9e:25:5f: d0:db:a3:29:7a:b7:9c:01:5b:dc:11:79:f6:b0:0c:c0:5f:3c: fb:ce:d9:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdFQTgxMTAvBgNVBAUTKDQxQzExRDgxQUNCQUY2OTNFN0FENjFGQTExNEU3N0I5 RkQ0RjU3QzMwHhcNMjUwNDI0MjI0MDEyWhcNMjUwNTAxMjI0MDEyWjAYMRYwFAYD VQQDEw02ODBhYmRjYy00OTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHZ4xlA0Wno4Zj8gVAdTwd+ufATXSCGyAEkmmmuTOr0HDofubkSviPs6x9a2 0hgto74pvtpjoipfYgGtGWlpIMPhvv2fKY0r4ngVjirhD1rho+qyLLlTpLMKIXGv d3AMwJw9K/ak20YhUnBHOCHxLrHc2yTr3Y4ReNFkTNAM8dussdTZwRB8usUg1Zn5 RoJ/o440yCMV+oVTq5HKZ2SP8uy3fTtvwOIL882cnXaHpH5u8nLqR0Cu3lWSU3Gd hr3vrprL6doijDSGJswKfsWbqYzsiYXDzG3W3xsVhWANNGDeUKOCVqJ4hHxcT9lL HOI/EoaDFXYLsr0MGQ9jbHM6AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNf6I45 IXIlTMwlPAZN6oGR+/pKMB8GA1UdIwQYMBaAFEHBHYGsuvaT561h+hFOd7n9T1fD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0VBOC84NDE3NTE1NkEw NzAxMUVCOUFCNkU2NUJDNEY5QUUwMi9RY0VkZ2F5NjlwUG5yV0g2RVU1M3VmMVBW OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FjRWRnYXk2OXBQbnJXSDZFVTUzdWYxUFY4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0VBOC84NDE3NTE1NkEwNzAxMUVCOUFCNkU2NUJDNEY5QUUwMi9RY0VkZ2F5Njlw UG5yV0g2RVU1M3VmMVBWOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxsve326cylcCAZDRjaUU6ekFoAeNsakBMeUdpuO6nnz97I7nDHJea 3YHFfNow03N/rxN1lqS+aR2Xgo5yCYtQ/gCGVa6qcwNiTSYftkoQLsGlDSJiQOO1 Ex2nLmZnrCpX//huCNCaO2bDTunL/xQ27oQjOq7VX3HLRXmmalltGq0FI9xWqcj5 jVexdQ7XPuUydY3mM6ekoTpvxGpm9pTRlhI2LgHY+JeLRokoJmTZ5mH6afki5u3G vsJJVrMDJoL1CHkS50VZYYEHAkdAjxiAWLVFO36IcYkl80/+z7g359zolD5VI6+e JV/Q26MperecAVvcEXn2sAzAXzz7ztnj -----END CERTIFICATE-----Generated at Sat Apr 26 15:24:32 2025 by rpki-client