$ rpki-client -vvf rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft File: QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft (raw, json) Hash identifier: zyepyqPCL8p55T+UhVBEpQF/7rakkp5B2b4H0EY7+Ik= Subject key identifier: FA:9E:0D:45:D9:8E:5A:4A:15:00:1E:DE:81:EA:0B:66:A7:7A:64:6D Authority key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E Certificate issuer: /CN=A91144AB/serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Certificate serial: 348C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft Manifest number: 348C Signing time: Sat 14 Jun 2025 14:48:04 +0000 Manifest this update: Sat 14 Jun 2025 14:48:04 +0000 Manifest next update: Sat 21 Jun 2025 14:48:04 +0000 Files and hashes: 1: QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl (hash: ptucTRBY0AiBpkVHvm0FgeCvJChDwdLzIv+kaSxVZek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13452 (0x348c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144AB, serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Validity Not Before: Jun 14 14:48:04 2025 GMT Not After : Jun 21 14:48:04 2025 GMT Subject: CN=684d8ba4-038d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c4:fe:ee:a9:90:07:44:f1:17:c7:43:c1:2a: 14:1b:d6:e2:fc:03:6b:07:37:49:01:f1:8d:40:8b: e0:ef:d2:ef:1b:59:5a:48:e8:ff:86:08:c9:3e:a5: b4:6e:82:7f:74:78:cc:45:1b:c2:f1:e8:8d:c3:7c: a5:e1:0e:f2:3e:72:2e:2e:f3:42:50:46:10:d0:ad: d9:95:b7:71:38:9c:8d:e6:0d:0a:c5:88:e4:20:a2: 1a:91:e4:72:3b:53:b8:58:cf:c5:a2:7c:64:ff:60: 57:0e:e2:5f:6f:e9:cf:e7:05:b2:f2:23:91:0d:46: 3d:03:11:62:37:1f:93:31:af:16:4f:50:ac:58:29: 99:6d:26:e9:ac:2e:46:90:4a:c6:04:8c:85:25:78: 4a:3f:89:e2:44:bf:09:b8:80:95:1d:fb:62:9d:d0: 5b:ab:38:e2:e9:f6:ec:c8:54:43:a1:ba:13:c6:18: 61:c1:b6:69:24:39:e0:d0:ff:23:e3:2a:51:6b:06: c5:81:66:d9:b6:8a:48:2b:05:19:8a:8a:73:4e:5f: bb:11:ae:f6:f7:17:53:6f:e3:61:17:e0:ee:16:12: 14:b3:d6:a9:44:72:f1:74:b9:e9:50:e6:f1:02:0e: 36:67:4d:79:46:a9:19:53:9d:ef:38:bc:62:03:fe: 48:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9E:0D:45:D9:8E:5A:4A:15:00:1E:DE:81:EA:0B:66:A7:7A:64:6D X509v3 Authority Key Identifier: keyid:41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:68:bb:ba:fa:ff:ea:29:fc:0e:b5:b9:6e:9e:ca:0e:1e:83: 21:5e:5c:72:33:09:af:39:06:28:16:cb:0b:1c:c7:a2:2c:5f: 24:f1:0f:15:58:54:71:21:c5:fe:70:04:68:2b:f8:36:9f:92: 98:40:6f:64:4e:2d:e9:57:6c:21:f7:45:27:c4:2d:7c:b3:c0: 95:5f:ae:6a:27:ce:3a:2e:f9:e9:7d:39:c8:25:f9:0a:cf:08: e6:da:f5:29:8e:2a:15:46:c0:ec:ea:15:e1:86:71:47:9c:9a: 58:48:0c:f9:66:20:84:d0:7e:07:b6:e8:ce:f8:ab:19:a5:f5: 5b:51:84:bc:34:07:2c:6b:c2:35:07:c1:04:f8:81:24:ee:cb: ed:35:fc:b2:9d:42:0b:c0:39:89:0b:fa:43:19:90:59:5e:1c: 84:e5:2a:8a:af:7a:b7:e5:75:c7:66:e3:a9:6b:a6:a0:6c:3f: 4c:38:ea:9f:70:7a:4b:21:fb:ae:94:01:ae:e1:85:b9:c6:58: 47:31:16:32:b2:a2:6a:49:53:10:c7:df:67:0f:49:5f:24:dc: 9b:25:54:66:5d:a6:25:c3:1d:db:80:7e:0c:55:64:8e:cd:00: c1:69:aa:45:46:43:83:3c:ba:d6:c3:ee:54:01:3e:59:d5:6a: d7:da:a4:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QUIxMTAvBgNVBAUTKDQxNzZGMTA5MThDOUIxOEQyREVGOEI3QzY2RkM1QTNB NjU4MjIzMUUwHhcNMjUwNjE0MTQ0ODA0WhcNMjUwNjIxMTQ0ODA0WjAYMRYwFAYD VQQDEw02ODRkOGJhNC0wMzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcT+7qmQB0TxF8dDwSoUG9bi/ANrBzdJAfGNQIvg79LvG1laSOj/hgjJPqW0 boJ/dHjMRRvC8eiNw3yl4Q7yPnIuLvNCUEYQ0K3ZlbdxOJyN5g0KxYjkIKIakeRy O1O4WM/Fonxk/2BXDuJfb+nP5wWy8iORDUY9AxFiNx+TMa8WT1CsWCmZbSbprC5G kErGBIyFJXhKP4niRL8JuICVHftindBbqzji6fbsyFRDoboTxhhhwbZpJDng0P8j 4ypRawbFgWbZtopIKwUZiopzTl+7Ea729xdTb+NhF+DuFhIUs9apRHLxdLnpUObx Ag42Z015RqkZU53vOLxiA/5IcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqeDUXZ jlpKFQAe3oHqC2anemRtMB8GA1UdIwQYMBaAFEF28QkYybGNLe+LfGb8WjplgiMe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRBQi81RTBBQTlBMjFE OTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZMHQ3NHQ4WnZ4YU9tV0NJ eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYYnhDUmpKc1kwdDc0dDhadnhhT21XQ0l4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRBQi81RTBBQTlBMjFEOTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZ MHQ3NHQ4WnZ4YU9tV0NJeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGaLu6+v/qKfwOtblunsoOHoMhXlxyMwmvOQYoFssLHMeiLF8k8Q8V WFRxIcX+cARoK/g2n5KYQG9kTi3pV2wh90UnxC18s8CVX65qJ846LvnpfTnIJfkK zwjm2vUpjioVRsDs6hXhhnFHnJpYSAz5ZiCE0H4HtujO+KsZpfVbUYS8NAcsa8I1 B8EE+IEk7svtNfyynUILwDmJC/pDGZBZXhyE5SqKr3q35XXHZuOpa6agbD9MOOqf cHpLIfuulAGu4YW5xlhHMRYysqJqSVMQx99nD0lfJNybJVRmXaYlwx3bgH4MVWSO zQDBaapFRkODPLrWw+5UAT5Z1WrX2qQL -----END CERTIFICATE-----Generated at Sun Jun 15 10:04:01 2025 by rpki-client